[Mongrel] server firewall logs

Filipe filipe at icewall.org
Thu Feb 7 06:24:34 EST 2008


On Thu, 7 Feb 2008, Neil Na wrote:

> ...
> means, is it an issue, can it be ignored?
>
> Sun Feb  3 05:01:06 2008 lfd: *Suspicious Process* PID:9658 User:barton
> Uptime:232873 secs EXE:/usr/bin/ruby CMD:/usr/bin/ruby
> /usr/bin/mongrel_rails start -p 12001 -d -e production -P
> log/mongrel.pid
> Sun Feb 3 05:01:06 2008 lfd: *User Processing* PID:9658 Kill:0
> User:barton Time:232873 EXE:/usr/bin/ruby CMD:/usr/bin/ruby
> /usr/bin/mongrel_rails start -p 12001 -d -e production -P
> log/mongrel.pid
>

It can be ignored. The firewall is barking at mongrel because it is
listening in a high port (12001) - many backdoors like to
listen at high ports like this. Just give some bones to your firewall, so
it will stop barking at your mongrel.

Cheers,

filipe {
  @              icewall.org
  GPG         1024D/A6BA423E
  http://filipe.icewall.org/
}




More information about the Mongrel-users mailing list