If you look in /etc/hosts.allow, you'll find something like this:
# The rest of the daemons are protected. Backfinger and log by email.
ALL : ALL \
: severity auth.info : spawn (/usr/bin/finger -l @%h | \
/usr/bin/mail -s "tcpd\: %u@%h[%a] tried to use %d (denied)" root) & \
: twist /bin/echo "You are not welcome to use %d from %h."
Just comment out these lines and the email will stop. It will also block incoming
finger requests. The attempts will be logged into your /var/log/messages file but
you should verify this by conducting a few simple tests. Here are the lines
commented out:
# The rest of the daemons are protected. Backfinger and log by email.
# ALL : ALL \
# : severity auth.info : spawn (/usr/bin/finger -l @%h | \
#/usr/bin/mail -s "tcpd\: %u@%h[%a] tried to use %d (denied)" root) & \
# : twist /bin/echo "You are not welcome to use %d from %h."
Or, if you were so inclined, you could do something like this:
# The rest of the daemons are protected. Backfinger and log by email.
ALL : ALL \
: severity auth.info : spawn (/usr/bin/finger -l @%h | \
#/usr/bin/mail -s "tcpd\: %u@%h[%a] tried to use %d (denied)" root) & \
: twist /bin/echo "You are not welcome to use %d from %h."
This would return a message to the user, log the attempt, but not mail you. |
