Hi. I have an up-to-date FreeBSD 7.2 box that has been compromised. Someone
aparently got in to an account with certain admin priveleges and has been
sending spam.
I disabled the account, shut off my MTA and used pf to block all traffic to
port 25 out for good measure.
How do i analyse what might have happened and what has been installed?
Andis there anything to do other than rebuild the entire system to ensure that
its clean?
Thanks.
Jen
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"
