Frage zu stunnel-logs

L

lixx

New Member
Hallo!

Ich habe eine Frage bezüglich stunnel. In der secure-Log habe ich folgende Einträge:
Code: 
Feb 20 11:19:07 uhweb18184 stunnel[24020]: stunnel 4.08 on i386-redhat-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7f 22 Mar 2005
Feb 20 11:19:07 uhweb18184 stunnel[24020]: stunnel connected from 127.0.0.1:53102
Feb 20 11:19:07 uhweb18184 stunnel[24020]: Connection closed: 87 bytes sent to SSL, 6 bytes sent to socket
Feb 20 11:19:07 uhweb18184 stunnel[24023]: stunnel 4.08 on i386-redhat-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7f 22 Mar 2005
Feb 20 11:19:07 uhweb18184 stunnel[24023]: stunnel connected from 127.0.0.1:53106
Feb 20 11:19:07 uhweb18184 stunnel[24023]: Connection closed: 299 bytes sent to SSL, 12 bytes sent to socket
Und nachdem ich in den stunnel-conf-Dateien die Log aktiviert habe habe ich für die zwei oben vorkommenden Einträge die Logs von stunnel für imap und pop3:
Code: 
2007.02.20 11:29:15 LOG5[1700:3083097792]: stunnel 4.08 on i386-redhat-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7f 22 Mar 2005
2007.02.20 11:29:15 LOG7[1700:3083097792]: Snagged 64 random bytes from /dev/urandom
2007.02.20 11:29:15 LOG7[1700:3083097792]: RAND_status claims sufficient entropy for the PRNG
2007.02.20 11:29:15 LOG6[1700:3083097792]: PRNG seeded successfully
2007.02.20 11:29:15 LOG7[1700:3083097792]: Certificate: /usr/share/courier-imap/imapd.pem
2007.02.20 11:29:15 LOG7[1700:3083097792]: Key file: /usr/share/courier-imap/imapd.pem
2007.02.20 11:29:15 LOG7[1700:3083097792]: stunnel started
2007.02.20 11:29:15 LOG5[1700:3083097792]: stunnel connected from 127.0.0.1:54364
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): before/accept initialization
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 read client hello A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 write server hello A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 write certificate A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 write server done A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 flush data
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 read client key exchange A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 read finished A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 write change cipher spec A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 write finished A
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL state (accept): SSLv3 flush data
2007.02.20 11:29:15 LOG7[1700:3083097792]:    1 items in the session cache
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 client connects (SSL_connect())
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 client connects that finished
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 client renegotiatations requested
2007.02.20 11:29:15 LOG7[1700:3083097792]:    1 server connects (SSL_accept())
2007.02.20 11:29:15 LOG7[1700:3083097792]:    1 server connects that finished
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 server renegotiatiations requested
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 session cache hits
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 session cache misses
2007.02.20 11:29:15 LOG7[1700:3083097792]:    0 session cache timeouts
2007.02.20 11:29:15 LOG6[1700:3083097792]: SSL accepted: new session negotiated
2007.02.20 11:29:15 LOG6[1700:3083097792]: Negotiated ciphers: AES256-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
2007.02.20 11:29:15 LOG6[1700:3083097792]: Local mode child started (PID=1701)
2007.02.20 11:29:15 LOG7[1700:3083097792]: Remote FD=6 initialized
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL alert (read): warning: close notify
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL closed on SSL_read
2007.02.20 11:29:15 LOG7[1700:3083097792]: Socket write shutdown
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL write shutdown
2007.02.20 11:29:15 LOG7[1700:3083097792]: SSL alert (write): warning: close notify
2007.02.20 11:29:15 LOG6[1700:3083097792]: SSL_shutdown successfully sent close_notify
2007.02.20 11:29:15 LOG5[1700:3083097792]: Connection closed: 299 bytes sent to SSL, 12 bytes sent to socket
2007.02.20 11:29:15 LOG7[1700:3083097792]: stunnel finished (0 left)
Code: 
2007.02.20 11:29:14 LOG5[1694:3083097792]: stunnel 4.08 on i386-redhat-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7f 22 Mar 2005
2007.02.20 11:29:14 LOG7[1694:3083097792]: Snagged 64 random bytes from /dev/urandom
2007.02.20 11:29:14 LOG7[1694:3083097792]: RAND_status claims sufficient entropy for the PRNG
2007.02.20 11:29:14 LOG6[1694:3083097792]: PRNG seeded successfully
2007.02.20 11:29:14 LOG7[1694:3083097792]: Certificate: /usr/share/courier-imap/pop3d.pem
2007.02.20 11:29:14 LOG7[1694:3083097792]: Key file: /usr/share/courier-imap/pop3d.pem
2007.02.20 11:29:14 LOG7[1694:3083097792]: stunnel started
2007.02.20 11:29:14 LOG5[1694:3083097792]: stunnel connected from 127.0.0.1:54360
2007.02.20 11:29:14 LOG7[1694:3083097792]: SSL state (accept): before/accept initialization
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 read client hello A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 write server hello A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 write certificate A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 write server done A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 flush data
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 read client key exchange A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 read finished A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 write change cipher spec A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 write finished A
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL state (accept): SSLv3 flush data
2007.02.20 11:29:15 LOG7[1694:3083097792]:    1 items in the session cache
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 client connects (SSL_connect())
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 client connects that finished
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 client renegotiatations requested
2007.02.20 11:29:15 LOG7[1694:3083097792]:    1 server connects (SSL_accept())
2007.02.20 11:29:15 LOG7[1694:3083097792]:    1 server connects that finished
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 server renegotiatiations requested
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 session cache hits
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 session cache misses
2007.02.20 11:29:15 LOG7[1694:3083097792]:    0 session cache timeouts
2007.02.20 11:29:15 LOG6[1694:3083097792]: SSL accepted: new session negotiated
2007.02.20 11:29:15 LOG6[1694:3083097792]: Negotiated ciphers: AES256-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
2007.02.20 11:29:15 LOG6[1694:3083097792]: Local mode child started (PID=1698)
2007.02.20 11:29:15 LOG7[1694:3083097792]: Remote FD=6 initialized
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL alert (read): warning: close notify
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL closed on SSL_read
2007.02.20 11:29:15 LOG7[1694:3083097792]: Socket write shutdown
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL write shutdown
2007.02.20 11:29:15 LOG7[1694:3083097792]: SSL alert (write): warning: close notify
2007.02.20 11:29:15 LOG6[1694:3083097792]: SSL_shutdown successfully sent close_notify
2007.02.20 11:29:15 LOG5[1694:3083097792]: Connection closed: 86 bytes sent to SSL, 6 bytes sent to socket
2007.02.20 11:29:15 LOG7[1694:3083097792]: stunnel finished (0 left)
Meine Frage ist nun, da ich noch nicht so firn bin mit diesen Sachen, ob ich mich über die Meldungen "Connection closed", "SSL write shutdown" oder "stunnel finished" sorgen machen muß?

Oder soll stunnel ein laufendes Programm sein oder eines, das wie aus den Logs zu ersehen ist, alle paar Minuten aufgerufen wird?

lg lixx
 
You must log in or register to reply here.
Back
Top