Make sure you get the new installation patched ASAP.  In particular, the
latest favorite exploit makes use of a hole in the bind packages.  Visit
the Redhat errata regularly to find the securitiy holes before the
crackers do.  I know from experience.  I got the patch religion when one
of my servers got cracked a couple of months ago.

Don't feel bad about being had.  It's part of the learning experience.

Goot Luck

Fred


Scott Skrogstad wrote:
> 
> OK my primary name server look like it got hacked.  Wonderful!!!!  I am
> building another machine to install RH on it and get stuff moved over.
> Damn don't these hackers have anything better to do!!
> 
> Scott Skrogstad
> Computer Integration Inc,
> [EMAIL PROTECTED]
> 800-522-3475 Phone
> 
> On Tue, 21 Mar 2000, Scott Skrogstad wrote:
> 
> > I looked at /bin/login and it has a date of sept 9, 1999.  What should I
> > look for in the logs?
> >
> > Scott Skrogstad
> > Computer Integration Inc,
> > [EMAIL PROTECTED]
> > 800-522-3475 Phone
> >
> > On Tue, 21 Mar 2000, Frederic Herman wrote:
> >
> > > One possibility.  Your server was cracked.  I'd look there first.  Look
> > > at your log files, see if files like /bin/login have been changed.  If
> > > you can rule this out, next thing to check is DNS.
> > >
> > > Fred
> > >
> > >
> > > Scott Skrogstad wrote:
> > > >
> > > > Today I tried to telnet to one of my servers that is normaly very fast.
> > > > And it took forever to get a login prompt.  What could be the problem?
> > > >
> > > > Scott Skrogstad
> > > > Computer Integration Inc,
> > > > [EMAIL PROTECTED]
> > > > 800-522-3475 Phone
> > > >
> > > > --
> > > > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> > > > as the Subject.
> > >
> > >
> > > --
> > > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> > > as the Subject.
> > >
> >
> >
> > --
> > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> > as the Subject.
> >
> 
> --
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to