From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gray_post@mail.ru>
Date: Thu, 9 Mar 2006 09:44:44 +0200
From: Sergiy Guminilovych <gray_post@mail.ru>
X-Mailer: The Bat! (v3.71.04) Professional
X-Priority: 3 (Normal)
Message-ID: <15410453182.20060309094444@mail.ru>
To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
In-Reply-To: <m3bqwhf6dv.fsf@evg.krasnoyarsk.ru>
References: <20060308120445.2E41A5492@smtp.umc.ua>
	<m3bqwhf6dv.fsf@evg.krasnoyarsk.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: quoted-printable
Subject: Re: [Sysadmins] Snort rules
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.6
Precedence: list
Reply-To: Sergiy Guminilovych <gray_post@mail.ru>,
	ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Mar 2006 07:44:49 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/15410453182.20060309094444@mail.ru/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

>> =EE=D5 =C1 =C5=D3=CC=C9 =CE=C5 =F3=CE=CF=D2=D4, =D4=CF =CB=C1=CB =CD=CE=
=C5 =D2=D4=D2=C5=C1=C7=C9=D2=CF=D7=C1=D4=D8 =CE=C1 =CD=CE=CF=D6=C5=D3=D4=D7=
=C5=CE=CE=D9=C5 =CF=DB=C9=C2=CB=C9
>> =C1=D7=D4=CF=D2=C9=DA=C1=C3=C9=C9?
>> =E4=CC=D1 =D3=D0=D2=C1=D7=CF=CB, =CF=CE=C9 =D7=D3=C5 =D0=C9=DB=D5=D4=D3=
=D1 =D7 /var/log/auth/all...

=EB=D3=D4=C1=D4=C9 =D5 =CD=C5=CE=D1 =D7 =DC=D4=CF=CD =CC=CF=C7=C5 =CF=D4=CF=
=C2=D2=C1=D6=C1=C5=D4=D3=D1 =D4=CF=CC=D8=CB=CF =C9=CE=C6=CF =CF =CE=C5=D5=
=C4=C1=DE=CE=CF=CA =D0=CF=D0=D9=D4=CB=C5,
=C1 =C8=CF=D3=D4 - =CE=C5=D4=D5. Mar  5 12:20:35 cloud pam_tcb[21797]: logi=
n: Authentication failed for UNKNOWN USER from LOGIN(uid=3D0)
=E7=C4=C5 =DC=D4=CF =CD=CF=D6=CE=CF =D0=CF=D0=D2=C1=D7=C9=D4=D8?
=E9 =C5=DD=C5 =D7=CF=D0=D2=CF=D3. =F0=CF=CD=CE=C9=D4=D3=D1 =D7 RH 7.x =C2=
=D9=CC=C1 =CF=DE=C5=CE=D8 =D0=CF=CC=C5=DA=CE=C1=D1 =D5=D4=C9=CC=C9=D4=C1, =
=CF=CE=C1
=CB=C1=D6=C4=D9=CA =C4=C5=CE=D8 =DA=C1=D0=D5=D3=CB=C1=CC=C1=D3=D8 =D0=CF =
=CB=D2=CF=CE=D5, =C1=CE=C1=CC=C9=DA=C9=D2=CF=D7=C1=CC=C1 =CC=CF=C7=C9 =CE=
=C1 =D0=D2=C5=C4=CD=C5=D4
=CE=C5=D5=C4=C1=DE=CE=D9=C8 =C1=D7=D4=CF=D2=C9=DA=C1=C3=C9=CA, =D3=CF=CF=C2=
=DD=C5=CE=C9=CA =CF=D4 =C6=C1=C5=D2=D7=CF=CC=C1 =C9 =D4.=D0. =F2=C5=DA=D5=
=CC=D8=D4=C1=D4=D9 =D2=C1=C2=CF=D4=D9
=CF=D4=D0=D2=C1=D7=CC=D1=CC=C9=D3=D8 =C1=C4=CD=C9=CE=C9=D3=D4=D2=C1=D4=CF=
=D2=D5 =CE=C1 =D0=CF=DE=D4=D5. =EB =D3=CF=D6=C1=CC=C5=CE=C9=C0 =CE=C5 =D0=
=CF=CD=CE=C0 =C5=C5 =CE=C1=DA=D7=C1=CE=C9=D1 :(
=F7 =C1=CC=D8=D4=C5 =C5=D3=D4=D8 =DE=D4=CF-=CE=C9=C2=D5=C4=D8 =D0=CF=C4=CF=
=C2=CE=CF=C5?

--=20
Best regards,
 Sergiy                            mailto:gray_post@mail.ru