Re: newbie with www user security problem

2005-08-11 Thread Ken Hawkins
that is (almost) exactly what i am going to do. it is going as is till i get another box in place. ken; On Aug 11, 2005, at 12:12 PM, Arne Wörner wrote: --- Ken Hawkins <[EMAIL PROTECTED]> wrote: well here i come port fix hell! This is a production box and can't be taken off line as of

Re: newbie with www user security problem

2005-08-11 Thread Wörner
--- Ken Hawkins <[EMAIL PROTECTED]> wrote: > well here i come port fix hell! This is a production box > and can't be taken off line as of this moment so i am > going to have to attempt on the fly fixing / upgrading > of the ports. i would love to wipe it but it is just > not a possibility right no

Re: newbie with www user security problem

2005-08-11 Thread Yann Golanski
Quoth Ken Hawkins on Thu, Aug 11, 2005 at 11:32:44 -0400 > The box is secure that much i have found out. the only problems have > been with this email spamming. nothing in the tmp dirs out of the > ordinary and no missing files running scripts etc. I have changed > everyone passwords on the b

Re: newbie with www user security problem

2005-08-11 Thread Ken Hawkins
The box is secure that much i have found out. the only problems have been with this email spamming. nothing in the tmp dirs out of the ordinary and no missing files running scripts etc. I have changed everyone passwords on the box. *'d the www password, ensured there is no shell with the ww

Re: newbie with www user security problem

2005-08-11 Thread Stijn Hoop
On Thu, Aug 11, 2005 at 04:54:10PM +0200, [EMAIL PROTECTED] wrote: > If the box in question was local secure, you don't have to worry that much. Correct of course, but seeing as the OP admitted to not knowing a lot about the administration of this machine, I don't think local security was very hig

Re: newbie with www user security problem

2005-08-11 Thread jimmy
Quoting Stijn Hoop <[EMAIL PROTECTED]>: > On Thu, Aug 11, 2005 at 09:32:22AM -0400, Ken Hawkins wrote: > > we have been hacked by a spammer > > [snip] > > > X-AntiAbuse: Board servername - srforum.prosoundweb.com > > Ouch. You appear to be running a phpBB installation from 2002 (version > 2.0.6).

Re: newbie with www user security problem

2005-08-11 Thread Stijn Hoop
On Thu, Aug 11, 2005 at 09:32:22AM -0400, Ken Hawkins wrote: > we have been hacked by a spammer [snip] > X-AntiAbuse: Board servername - srforum.prosoundweb.com Ouch. You appear to be running a phpBB installation from 2002 (version 2.0.6). That's asking for trouble. A lot of exploits have been

newbie with www user security problem

2005-08-11 Thread Ken Hawkins
many, MANY apologies up front if i have sent this to the wrong place! I am inherently a software engineer who now gets to monitor a mail server (don't ask). anyway i get an email message that alerts me from a user that we have been hacked by a spammer and the mail message header is: -