Constant security emails?

[maraach]

Hi guys,

Just built my first freenas box and am enjoying it. Have used other distro's of NAS software before so have a little bit of knowledge but very unfamiliar with freenas so still fumbling around.

I keep getting security emails each night which is concerning me (as i dont really understand them).

I have searched the forum and found references to port forwarding attacks but i don't have any port forwarding turned on? The only service enabled is rsync to my other NAS.

example security email elow

freenas.local changes in mounted filesystems:
18c18
< freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503071634 / zfs rw,noatime,nfsv4acls 0 0
---
> freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503150158 / zfs rw,noatime,nfsv4acls 0 0

freenas.local kernel log messages:
> FreeBSD 9.3-RELEASE-p10 #0 r275790+c9242cc: Sat Mar 14 19:00:55 PDT 2015
> root@build3.ixsystems.com:/tank/home/jkh/freenas/objs/os-base/amd64/tank/home/jkh/freenas/FreeBSD/src/sys/FREENAS.amd64 amd64
> CPU: Intel(R) Atom(TM) CPU C2550 @ 2.40GHz (2400.57-MHz K8-class CPU)
> Timecounter "TSC-low" frequency 1200283740 Hz quality 1000
> Trying to mount root from zfs:freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503150158 []...
> vboxdrv: fAsync=0 offMin=0x5e8 offMax=0x1200

-- End of security output --

 

[dlavigne]

How often does the system reboot?

 

[maraach]

As far as im aware so far it has only been when I have applied updates (which does not align with the times the emails are being sent).

 

[Ericloewe]

Hi guys,

Just built my first freenas box and am enjoying it. Have used other distro's of NAS software before so have a little bit of knowledge but very unfamiliar with freenas so still fumbling around.

I keep getting security emails each night which is concerning me (as i dont really understand them).

I have searched the forum and found references to port forwarding attacks but i don't have any port forwarding turned on? The only service enabled is rsync to my other NAS.

example security email elow

freenas.local changes in mounted filesystems:
18c18
< freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503071634 / zfs rw,noatime,nfsv4acls 0 0
---
> freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503150158 / zfs rw,noatime,nfsv4acls 0 0

freenas.local kernel log messages:
> FreeBSD 9.3-RELEASE-p10 #0 r275790+c9242cc: Sat Mar 14 19:00:55 PDT 2015
> root@build3.ixsystems.com:/tank/home/jkh/freenas/objs/os-base/amd64/tank/home/jkh/freenas/FreeBSD/src/sys/FREENAS.amd64 amd64
> CPU: Intel(R) Atom(TM) CPU C2550 @ 2.40GHz (2400.57-MHz K8-class CPU)
> Timecounter "TSC-low" frequency 1200283740 Hz quality 1000
> Trying to mount root from zfs:freenas-boot/ROOT/FreeNAS-9.3-STABLE-201503150158 []...
> vboxdrv: fAsync=0 offMin=0x5e8 offMax=0x1200

-- End of security output --

FreeNAS sends a daily security report if something "unusual" happened. This includes reboots and updates.

 

[dlavigne]

Emails are sent at 3am, the day after the reboot. The snippets you provided indicate reboot messages. If you get one the day after you didn't apply an update, you should look closer to see why the system rebooted.

 

[maraach]

Ahhh apologies for my ignorance. thank you so much.