loggin incoming ftp connections in syslog


 
Thread Tools Search this Thread
Operating Systems AIX loggin incoming ftp connections in syslog
# 1  
Old 05-26-2006
loggin incoming ftp connections in syslog

Hello, we recently configured syslog on one of our machines with the following line in /etc/syslog.conf

*.info /audit/syslog.log rotate time 1d compress

However it does not seem to be logging incoming ftp connections, only outgoing ftp connections? Is there a way to log incoming ftp connections via syslog? Thanks in advance.
# 2  
Old 05-27-2006
Don't know if AIX supports TCP Wrappers, if so, you could create a new rule in /etc/hosts.allow and using spawn action, you could launch /usr/bin/logger with the appropiate parameters to log the action.

See this example taken from FreeBSD:
Code:
ALL : 192.168.0.2 \
    : spawn (/usr/bin/logger %a from %h attempted to access %d) \
    : allow

As this can have very complex rules, I suggest you to take a look to tcp wrappers manual pages.

Salut
# 3  
Old 05-31-2006
Are you using the -l option with ftpd. This should log to your syslog file if set.

Check in inetd.conf and add the -l as an option to ftpd

Smilie
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. IP Networking

All incoming connections ips LOG

How to make a log that will log all ips that connect to the server or send packets? And how to block an ip that make packets flood and try to DDoS? Thanks. (1 Reply)
Discussion started by: [xEF]Danger
1 Replies

2. UNIX for Advanced & Expert Users

Not logging ftp connections in /var/adm/wtmpx file (in last command output)

Hi all, I have F5 load balancer on my system and checking service status by opening an ftp session in every 30 seconds. These ftp sessions are being logged in /var/adm/wtmpx and filling up the file. when i run the last command most of the output is this ftp session. I was wondering if there is a... (1 Reply)
Discussion started by: cepxat
1 Replies

3. AIX

How to list the current ftp connections?

Hello, I need to know How to list the ""current"" ftp connections? the machine is AIX 6.1 Regards Ahmed Amer Cairo,Egypt (5 Replies)
Discussion started by: ahmedamer12
5 Replies

4. UNIX for Dummies Questions & Answers

Need to know if there are ftp connections in my machine

Hello, I need to know if there are ftp connections in my machine. How can I find out that?any commands to use? PS: i know how to find which users are on my machine now by using #who -r regards (2 Replies)
Discussion started by: ahmedamer12
2 Replies

5. Programming

FTP - reusing data connections

Hi there, This may be a stupid question, but... Is it possible to use one data connection channel initiated on a FTP server for sending multiple commands (LIST, NLST, MLSD)? Thanks in advance! (1 Reply)
Discussion started by: Yezu
1 Replies

6. Solaris

logging incoming connections on solaris 10

i've been able to log incoming telnet and ssh connections on solaris 9 using the following lines in /etc/syslog.conf # Telnet connections are logged to auth.notice auth.notice /var/adm/authlog # An entry in /etc/profile logs all telnet connections... (2 Replies)
Discussion started by: soliberus
2 Replies

7. Shell Programming and Scripting

Block incoming traffic FTP from internet using iptables

Hi everybody. I have the next scenary: eth0: WAN eth1: DMZ eth2: LAN I need to block all incoming trafic from the internet through my network LAN using iptables. I have squid but i need to do this using ipatbles. I have been listening about iptables -A FORDAWARD but I am stuck right... (0 Replies)
Discussion started by: edeamat
0 Replies

8. Solaris

NIS - Client Not loggin in

Friends n Gurus I am creating an NIS farm(Solaris only) in my office. I have successfully configured the NIS master and slave servers and a few NIS clients. However i am not able to log into a few of my NIS clients. The commands "ypcat passwd" is displaying the NIS user. However when i try to... (5 Replies)
Discussion started by: Renjesh
5 Replies

9. BSD

ipfw slow ssh and ftp connections

just as the title says. thanks. #General Rule Sets /sbin/ipfw add 0300 check-state /sbin/ipfw add 0301 deny tcp from any to any in established /sbin/ipfw add 0302 pass tcp from any to any out setup keep-state /sbin/ipfw add 0303 pass udp from any to any out #SSH FTP /sbin/ipfw add 0400... (11 Replies)
Discussion started by: dwildgoose
11 Replies

10. UNIX for Dummies Questions & Answers

Loggin mail transfer

Hi Folks, I'm trying to log incoming and outgoing messages on my Solaris box. I thought I could use 'mail.info /var/log/maillog' in my syslog.conf but it doesn't give any output. mail.debug does but only seems to log client connections to the server and the odd message ID. Is there a way... (4 Replies)
Discussion started by: Ben
4 Replies
Login or Register to Ask a Question