FYI </var/log/secure> log entries

[LesD]

Just looked at this log file for the first time and it is basically full of entries like

Jan  6 16:17:08 pbx sshd[10634]: Did not receive identification string from ::1

They appear every 30 seconds with occasional gaps in the timing.

Is this normal? Can I stop it?

 

[rossiv]

That :1) is IPv6 for localhost. It appears it's trying to SSH to itself or something. Don't know what it it, sorry.

 

[LesD]

Thanks. I got the name of the log file from the fail2ban jail.conf file. (I want to increase the ban time from 1800 to 86400 (24 hours))

Does that help?

 

[voipRookie]

For what it is worth, if you tail -f /var/log/secure and then click on the "FreePBX Administration" icon on the main "PBX in a Flash" web page you'll see one of these messages generated. I don't believe it is anything to worry about.

 

[LesD]

Indeed it is so! Now that must be a clue....

..... It is the FreePBX System Status page that is generating it, with possibly some other pages also.

I normally have quite a few pages open. I shut down my browser and the messages stopped. Then tried various pages and so far only the Status page seems to generate the lines at 30/31 second intervals.

Just before shutting down the browser I was getting these messages at random times as frequently as 3 seconds.

Is this likely to be a FreePBX issue or has that page been modified by the PIAF team?

Meanwhile I will keep the status screen closed.