Re: I've been hacked!! (was Re: [mhvlug] One more question.....(yeah,sure))

[Jim Doherty]

Wayne wrote:

----- Original Message ----- 
From: "Jim Doherty" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 14, 2003 8:51 PM
Subject: Re: [mhvlug] One more question.....(yeah, sure)

 

Wayne wrote:

   

OK, I got my Linux Mandrake 9.1 router/firewall system up and running on
Optimum online. I'm using Firestarter for firewall/nat gui. All my
     

Windows
 

systems (two WinME's, one W2K and one XP home) all connect up to net
     

through
 

the router sys with no problem (I just tell them to connect to the
     

Gateway
 

at 192.168.0.1(eth1 ip )(cable modem is dhcp on eth0) and get DNS from
same). I'm trying to set up a second linux box running RH 9 as a web and
game server (Team Fort Classic) but to start with I can't get it to
     

connect
 

through the linux router. I've told it the gateway is at 192.168.0.1 same
     

as
 

the windows boxes and the DNS is at the same (also tried not specifying
     

DNS)
 

but it wont connect. I can ping the router though. Am I forgetting /
     

missing
 

something stupid here?

     

What kind of firewall rules are you running?   Are you logging rejected
packets?   Can you show the output a an ifconfig -a and a netstat -r?
Jim

   

Well...I think I was hacked last night (two systems involved were the router
sys and a game sys that I use to download (all the other systems were shut
down)). I shut them down and disconnected from the network, I'm going to
hose them down and re install their os's (win 98 se and Mandrake 9.1) so I
can't really give you the outputs. One of my problems is I don't really know
what rules Firestarter loads by default. I was trusting to faith that they
were "good enough", was having another issue that I was addressing via the
ng comp.os.linux.security and had a couple of other people ask "what rules
are you running?" at which point I realized I better find out.....but not in
time.
So...I'm back to running a W2K sys (the one that was supposed to be my web
and game server :-(   ) with Norton's Internet Security (I actually loaded
it on ALL my windows systems) until I have more knowledge of setting up a
secure firewall on Linux.
Sooooo!!!! Can anyone point me to a good website or a good book (iptables
for dummies maybe....) to better understand what I need to do to set up a
secure firewall?
Well Porkchop's presentation on iptables was very good,  and is available at:  

http://www.nic.com/~mkaegler/lectures/

And for the long winded 500  page tomb on the subject I would recommend 
Red Hat Linux Firewalls
Publisher   redhat press,  written by Bill McCarthy    list $50.00 
according to my copy,  $40.00 list
according to bookpool,   their disconted price  $24.50.   If you want to 
take a look at it let me know
and I could bring it to the next meeting.

Jim Doherty

(oh well...back to reloading software....AAARRRRRGGGGHHHHH!!!!!)

_______________________________________________
mhvlug mailing list - http://mhvlug.org
[EMAIL PROTECTED]
http://lists.dague.net/mailman/listinfo/mhvlug
 



_______________________________________________
mhvlug mailing list - http://mhvlug.org
[EMAIL PROTECTED]
http://lists.dague.net/mailman/listinfo/mhvlug