what is jabberd/c2s[301]

[northernbaldy]

I'm getting continuous errors since the software update this morning
any idea what it is?

Nov 18 18:21:34 server jabberd/c2s[301]: SASL callback for non-existing host: server.local
Nov 18 18:21:34 server jabberd/c2s[301]: [7] [::ffff:192.168.1.2, port=50495] disconnect jid=unbound, packets: 0
(repeated constantly)

 

[northernbaldy]

hmm, just noticed this too

Nov 18 18:14:25 server sshd[14774]: Failed keyboard-interactive/pam for root from 41.233.107.100 port 3439 ssh2
Nov 18 18:14:30 server sshd[14816]: reverse mapping checking getaddrinfo for host-41.233.107.100.tedata.net [41.233.107.100] failed - POSSIBLE BREAK-IN ATTEMPT!

 

[deconstruct60]

I'm getting continuous errors since the software update this morning
any idea what it is?

Nov 18 18:21:34 server jabberd/c2s[301]: SASL callback for non-existing host: server.local
Nov 18 18:21:34 server jabberd/c2s[301]: [7] [::ffff:192.168.1.2, port=50495] disconnect jid=unbound, packets: 0
(repeated constantly)

If this server is hooked to the internet and not behind a firewall probably someone trying to crack your iChat service. If you don't need or use iChat make sure that service is shutdown on your server and that port remove from your firewall 'exceptions" list.

Likewise on your sshd; i'd bet your on the unfiltered internet. Go to your sshd configuration file and disable root login. Anyone who wants privledge can login as a user and then sudo to get root privledges.


The update may have reset some config files for these two services. It probalby shouldn't but perhaps did. If you do custom configs of your services ( probably should if you harden them after install ) then should copy your config files before an upgrade and then re-harden afterwards as necessary.