As an additional precaution, you might want to look into getting and using 
chkrootkit.  It searches your system for evidence that you've already been 
hacked, and seems to check for a fairly comprehensive list of trojans, worms, 
etc.  

If you're serious about security, you should also look into Tripwire and AIDE 
(sp?), which will make a database of your key files and can check them for 
alteration on a regular basis.

-Jason


On Thursday 07 November 2002 04:44 pm, James Sparenberg wrote:
> I'd run an nmap scan of my box.  do urpmi nmap --fuzzy to find out all
> the rpms available here (nmap is nmap but there are some different gui's
> available) Run the scan and if you see something open that you don't
> want open, close it.  The biggest reason this is useful is because it's
> the same technique the black hats use to find out where and how to
> attack.
>
> James
>
> On Thu, 2002-11-07 at 04:08, Gonzalo Avaria wrote:
> >  Hi you all, well THANK YOU very much for the answers,
> > i thought that you could not hack a machine with FTP,
> > but when i started to look for the logs, i saw 3 guys
> > trying to get thru the ftp, but only conected for like
> > a second.
> > Now i disabled the FTP and only work on sftp.
> > I would like to ask the last question about this
> > subject:
> >
> > how can i know if there is a hole on my machine?
> > Something i don't know?
> >
> > Thanks again.
> > saludos
> >
> > =====
> > Gonzalo Avaria
> > Alumno de Licenciatura en Fisica
> > Facultad de Cs. Fisicas y Matematicas
> > Universidad de Concepcion
> > CHILE
> >
> > _________________________________________________________
> > Do You Yahoo!?
> > Información de Estados Unidos y América Latina, en Yahoo! Noticias.
> > Visítanos en http://noticias.espanol.yahoo.com
> >
> > ----
> >
> >
> > Want to buy your Pack or Services from MandrakeSoft?
> > Go to http://www.mandrakestore.com

-- 

=========================
Worlds of belief, she [Susan] thought. Just like oysters. A little piece of 
shit gets in and then a pearl grows around it.
(Hogfather)


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to