RE: i was hacked,please help

[Drew Hunt]

Sounds like it's time to reinstall.  Try browsing through security files at
linuxdoc.org and linuxsecurity.org to get a better feel on how to keep the
baddies out next time.  Pay particular attention to IPCHAINS and TCP/IP
FILTERING as these are your server's front line against attack.

My condolances,
Drew

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]
> Sent: Thursday, March 08, 2001 12:34 AM
> To: [EMAIL PROTECTED]
> Subject: i was hacked,please help
>
>
>     my redhat server was hijacked and the shell commands
> attributes were changed,for instances:i loged in as root and do:
> #lsattr /usr/bin/ftp
> ----i--- /usr/bin/ftp
> #chattr -i /usr/bin/ftp
> -------- /usr/bin/ftp
> but i still can not delete the shell command,error like this:"rm:
> cannot unlink `ftp': Permission denied
>
>
> ----------------------------------------------
> »¶Ó­Ê¹Óà 21CN µç×ÓÓʼþϵͳ http://www.21cn.com
> Thank you for using 21cn.com Email system
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list