> Then you will have to login and leave a nice entry in the log. It is
> "better" to
> rcp /etc/motd you@some.host:/dev/audio
> Panic, dump and reboot. And noone know it was you.
Oh?
Jun 24 02:03:18 bigserver.dom.ain rshd[26327]: connect from guilty@smallbox.dom.ain
This is pretty suspicious when it's the very last entry before a crash.
I'd much rather have a login entry back a ways in the logs, nicely
buried among lots of other logins.
tcp-wrappers and pidentd are your sysadmin's friend. :-)
der Mouse
mouse@rodents.montreal.qc.ca
7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B