[Slackit.org] 2 domande sulla sicurezza

[Paolo Marzo]

Linux Slack10 2.4.26 su workstation casalinga

Ciao a tutti,

Due domande:

Durante le connessioni (dial-up) generalmente ogni tanto controllo
i log del sistema. Non ho grandi nozioni circa sicurezza e l'altro giorno 
in /var/log/messages ho trovato questo:

May  8 17:10:36 Slack10 chat[995]: CONNECT
May  8 17:10:36 Slack10 chat[995]:  -- got it 
May  8 17:10:36 Slack10 pppd[992]: Serial connection established.
May  8 17:10:36 Slack10 pppd[992]: Using interface ppp0
May  8 17:10:36 Slack10 pppd[992]: Connect: ppp0 <--> /dev/ttyS0
May  8 17:10:41 Slack10 pppd[992]: PAP authentication succeeded
May  8 17:10:41 Slack10 kernel: PPP BSD Compression module registered
May  8 17:10:41 Slack10 kernel: PPP Deflate Compression module registered
May  8 17:10:41 Slack10 pppd[992]: local  IP address 62.98.205.47
May  8 17:10:41 Slack10 pppd[992]: remote IP address 151.6.146.44
May  8 17:22:49 Slack10 -- MARK --
May  8 17:29:16 Slack10 sshd[1110]: Illegal user test from 211.111.166.91
May  8 17:29:16 Slack10 sshd[1110]: Failed password for illegal user test from 
211.111.166.91 port 45311 ssh2
May  8 17:29:20 Slack10 sshd[1112]: Illegal user guest from 211.111.166.91
May  8 17:29:20 Slack10 sshd[1112]: Failed password for illegal user guest from 
211.111.166.91 port 45316 ssh2
May  8 17:29:30 Slack10 sshd[1115]: Illegal user admin from 211.111.166.91
May  8 17:29:30 Slack10 sshd[1115]: Failed password for illegal user admin from 
211.111.166.91 port 45321 ssh2
May  8 17:29:39 Slack10 sshd[1117]: Illegal user admin from 211.111.166.91
May  8 17:29:39 Slack10 sshd[1117]: Failed password for illegal user admin from 
211.111.166.91 port 45330 ssh2
May  8 17:42:49 Slack10 -- MARK --
May  8 17:55:36 Slack10 pppd[992]: Terminating on signal 2.
May  8 17:55:36 Slack10 pppd[992]: Connection terminated.
May  8 17:55:36 Slack10 pppd[992]: Connect time 45.0 minutes.
May  8 17:55:36 Slack10 pppd[992]: Sent 699507 bytes, received 4754300 bytes.
May  8 17:55:37 Slack10 pppd[992]: Connect time 45.0 minutes.
May  8 17:55:37 Slack10 pppd[992]: Sent 699507 bytes, received 4754300 bytes.
May  8 17:55:37 Slack10 pppd[992]: Exit.

Che ne pensate?

Seconda domanda: 
Con le connessioni che si ottengono collegando direttamente la scheda di rete 
al server (IP statico?) quali accorgimenti è utile adottare in fatto si 
sicurezza?.
C'è documentazione specifica da leggere?

Grazie
Paolo