Copy/Paste in Shell

[OCMaximus]

Check to see what it says in the log.

Which log?

 

[gpsguy]

/var/log/auth.log

 

[OCMaximus]

/var/log/auth.log

[root@freenas ~]# /var/log/auth.log
bash: /var/log/auth.log: Permission denied

 

[gpsguy]

Could you post a screenshot of the contents of the log file.

From the shell:

Code:

cd /var/log

cat auth.log

 

[OCMaximus]

Could you post a screenshot of the contents of the log file.

From the shell:

Code:

cd /var/log

cat auth.log

Code:

Apr 22 01:01:42 freenas newsyslog[1453]: logfile first created                  
Apr 22 01:01:50 freenas sshd[2275]: Server listening on :: port 22.             
Apr 22 01:01:50 freenas sshd[2275]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:02:42 freenas sshd[2275]: Received signal 15; terminating.            
Apr 22 01:03:45 freenas sshd[3066]: Server listening on :: port 22.             
Apr 22 01:03:45 freenas sshd[3066]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:04:00 freenas sshd[3073]: Invalid user root/su from 192.168.1.3       
Apr 22 01:04:00 freenas sshd[3073]: Failed none for invalid user root/su from 19
2.168.1.3 port 52143 ssh2                                                       
Apr 22 01:04:07 freenas sshd[3073]: Failed password for invalid user root/su fro
m 192.168.1.3 port 52143 ssh2                                                   
Apr 22 01:04:12 freenas last message repeated 3 times                           
Apr 22 01:05:00 freenas sshd[3086]: Failed password for root from 192.168.1.3 po
rt 52144 ssh2                                                                   
Apr 22 01:09:31 freenas sshd[3169]: Invalid user root/su from 192.168.1.3       
Apr 22 01:09:31 freenas sshd[3169]: Failed none for invalid user root/su from 19
2.168.1.3 port 52172 ssh2                                                       
Apr 22 01:10:13 freenas sshd[3196]: Failed password for root from 192.168.1.3 po
rt 52174 ssh2                                                                   
Apr 22 02:09:44 freenas sshd[5206]: Failed password for root from 192.168.1.3 po
rt 54353 ssh2                                                                   
Apr 22 02:09:48 freenas last message repeated 2 times                           
[root@freenas /var/log]#   

Looks like last nights session of beating my face into the keyboard, lol.

- - - Updated - - -

Code:

Apr 22 01:01:42 freenas newsyslog[1453]: logfile first created 
Apr 22 01:01:50 freenas sshd[2275]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:02:42 freenas sshd[2275]: Received signal 15; terminating.            
Apr 22 01:03:45 freenas sshd[3066]: Server listening on :: port 22.             
Apr 22 01:03:45 freenas sshd[3066]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:04:00 freenas sshd[3073]: Invalid user root/su from 192.168.1.3       
Apr 22 01:04:00 freenas sshd[3073]: Failed none for invalid user root/su from 19
2.168.1.3 port 52143 ssh2                                                       
Apr 22 01:04:07 freenas sshd[3073]: Failed password for invalid user root/su fro
m 192.168.1.3 port 52143 ssh2                                                   
Apr 22 01:04:12 freenas last message repeated 3 times                           
Apr 22 01:05:00 freenas sshd[3086]: Failed password for root from 192.168.1.3 po
rt 52144 ssh2                                                                   
Apr 22 01:09:31 freenas sshd[3169]: Invalid user root/su from 192.168.1.3       
Apr 22 01:09:31 freenas sshd[3169]: Failed none for invalid user root/su from 19
2.168.1.3 port 52172 ssh2                                                       
Apr 22 01:10:13 freenas sshd[3196]: Failed password for root from 192.168.1.3 po
rt 52174 ssh2                                                                   
Apr 22 02:09:44 freenas sshd[5206]: Failed password for root from 192.168.1.3 po
rt 54353 ssh2                                                                   
Apr 22 02:09:48 freenas last message repeated 2 times                           
Apr 22 16:44:48 freenas sshd[20041]: Failed password for root from 192.168.1.3 p
ort 64124 ssh2                                                                  
Apr 22 16:44:56 freenas last message repeated 5 times                           
[root@freenas /var/log]#

And another attempt at 16:44

 

[gpsguy]

Try changing your root password to something else, retest, and check the log again.

As you can see, it doesn't like the password for root.

 

[OCMaximus]

Try changing your root password to something else, retest, and check the log again.

As you can see, it doesn't like the password for root.

Changed root password to gpsguy and hoped for the best.

Code:

Apr 22 01:01:42 freenas newsyslog[1453]: logfile first created                  
Apr 22 01:01:50 freenas sshd[2275]: Server listening on :: port 22.             
Apr 22 01:01:50 freenas sshd[2275]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:02:42 freenas sshd[2275]: Received signal 15; terminating.            
Apr 22 01:03:45 freenas sshd[3066]: Server listening on :: port 22.             
Apr 22 01:03:45 freenas sshd[3066]: Server listening on 0.0.0.0 port 22.        
Apr 22 01:04:00 freenas sshd[3073]: Invalid user root/su from 192.168.1.3       
Apr 22 01:04:00 freenas sshd[3073]: Failed none for invalid user root/su from 19
2.168.1.3 port 52143 ssh2                                                       
Apr 22 01:04:07 freenas sshd[3073]: Failed password for invalid user root/su fro
m 192.168.1.3 port 52143 ssh2                                                   
Apr 22 01:04:12 freenas last message repeated 3 times                           
Apr 22 01:05:00 freenas sshd[3086]: Failed password for root from 192.168.1.3 po
rt 52144 ssh2                                                                   
Apr 22 01:09:31 freenas sshd[3169]: Invalid user root/su from 192.168.1.3       
Apr 22 01:09:31 freenas sshd[3169]: Failed none for invalid user root/su from 19
2.168.1.3 port 52172 ssh2                                                       
Apr 22 01:10:13 freenas sshd[3196]: Failed password for root from 192.168.1.3 po
rt 52174 ssh2                                                                   
Apr 22 02:09:44 freenas sshd[5206]: Failed password for root from 192.168.1.3 po
rt 54353 ssh2                                                                   
Apr 22 02:09:48 freenas last message repeated 2 times                           
Apr 22 16:44:48 freenas sshd[20041]: Failed password for root from 192.168.1.3 p
ort 64124 ssh2                                                                  
Apr 22 16:44:56 freenas last message repeated 5 times                           
Apr 22 17:05:02 freenas sshd[20914]: Invalid user root  from 192.168.1.3        
Apr 22 17:05:02 freenas sshd[20914]: Failed none for invalid user root  from 192
.168.1.3 port 64526 ssh2                                                        
Apr 22 17:05:06 freenas sshd[20914]: Failed password for invalid user root  from
 192.168.1.3 port 64526 ssh2                                                    
Apr 22 17:05:18 freenas last message repeated 3 times

 

[gpsguy]

It looks like you might have added a space after typing "root" this time. Type it slowly, one character at a time.

 

[OCMaximus]

It looks like you might have added a space after typing "root" this time. Type it slowly, one character at a time.

That didn't help either.....

 

[OCMaximus]

Here is the latest email I got from my NAS Box.

Checking for uids of 0:
root 0

Checking for passwordless accounts:

Checking login.conf permissions:

Checking for ports with mismatched checksums:

freenas.local login failures:
Apr 22 01:04:00 freenas sshd[3073]: Invalid user root/su from 192.168.1.3
Apr 22 01:04:00 freenas sshd[3073]: Failed none for invalid user root/su from 192.168.1.3 port 52143 ssh2
Apr 22 01:04:07 freenas sshd[3073]: Failed password for invalid user root/su from 192.168.1.3 port 52143 ssh2
Apr 22 01:05:00 freenas sshd[3086]: Failed password for root from 192.168.1.3 port 52144 ssh2
Apr 22 01:09:31 freenas sshd[3169]: Invalid user root/su from 192.168.1.3
Apr 22 01:09:31 freenas sshd[3169]: Failed none for invalid user root/su from 192.168.1.3 port 52172 ssh2
Apr 22 01:10:13 freenas sshd[3196]: Failed password for root from 192.168.1.3 port 52174 ssh2
Apr 22 02:09:44 freenas sshd[5206]: Failed password for root from 192.168.1.3 port 54353 ssh2
Apr 22 16:44:48 freenas sshd[20041]: Failed password for root from 192.168.1.3 port 64124 ssh2
Apr 22 17:05:02 freenas sshd[20914]: Invalid user root from 192.168.1.3
Apr 22 17:05:02 freenas sshd[20914]: Failed none for invalid user root from 192.168.1.3 port 64526 ssh2
Apr 22 17:05:06 freenas sshd[20914]: Failed password for invalid user root from 192.168.1.3 port 64526 ssh2
Apr 22 18:12:11 freenas sshd[22045]: Failed password for root from 192.168.1.3 port 64891 ssh2
Apr 22 18:12:16 freenas sshd[22045]: Failed password for root from 192.168.1.3 port 64891 ssh2
Apr 22 18:12:52 freenas sshd[22047]: Failed password for root from 192.168.1.3 port 64894 ssh2
Apr 22 20:09:02 freenas sshd[23175]: Failed password for root from 192.168.1.3 port 49484 ssh2
Apr 22 23:22:32 freenas sshd[24993]: Failed password for root from 192.168.1.3 port 51305 ssh2

freenas.local refused connections:

-- End of security output --

 

[gpsguy]

We already knew about the failed logins, by reading the log. In real use, seeing this, might tip you that someone's trying to hack into your box.

At this point, I think we're at a point where it should work, I just don't know why it doesn't.

 

[OCMaximus]

We already knew about the failed logins, by reading the log? In real use, seeing this, might tip you that someone's trying to hack into your box.

At this point, I think we're at a point where it should work, I just don't know why it doesn't.

Could it be the windows firewall or an advanced setting somewhere. I'm also using AVG.