Scan that machine with a portscanner, try connecting to one of the high ports if there is one. for example: you have the server setup with ftp http and squid and you scanthe host and find ports like 21, 80, 3128 then it is ok. but if you find something on 6000 or 6660 or whateva try connecting to tis port with telnet or ssh. if you have a rootshell, your server is cracked!
>>> identity file /root/.ssh/identity type 0 >>>debug1: unknown identity file /root/.ssh/id_rsa >>>debug1: identity file /root/.ssh/id_rsa type -1 >>>debug1: unknown identity file /root/.ssh/id_dsa >>>debug1: identity file /root/.ssh/id_dsa type -1 sounds like somebody deleted the files to disable root to enter.... I woul'd say it ist cracked... possible?? Mit freundlichen Grüßen/ sincerely yours Bernhard Fuchs Junior System-Engineer IT-Infrastruktur/IT-Security ITELLIUM Systems & Services GmbH Fürther Straße 205 90429 Nürnberg Tel.: +49-911-14-27321 Fax: +49-911-14-22016 mailto:[EMAIL PROTECTED] http://www.itellium.com This email is confidential. If you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this mail in error, please tell us immediately by return email and delete the document. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. The contents of this email are those of the individual and do not necessarily represent the views of the company. The company accepts no responsibility once an e-mail and any attachments is sent. -----Ursprüngliche Nachricht----- Von: Rudik A.A. [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 12. März 2003 22:22 An: [EMAIL PROTECTED] Betreff: SSH Connection Hello All, I am facing problem to login to my RH 7.1 server by SSH. After typing passwd for root it gets "Connection closed" I mast say that it was working good and today we could not login not only as root, but any other users also can not login by ssh. And also telnet is disabled. Any idias ? Thanks in advance. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
