fre, 2002-02-15 kl. 23:58 skrev James Werkowski: > The client is syslogd -- does anyone happen to know why syslogd on my > firewall wants to set an IRC link to a host I never heard of? Or is that a > question for another list?
Why should it be? I should do a search of www.cert.org, under 'syslogd', advisories, if I were you. You'll find a reference (references), amongst mmuch helpful config. advice, to: "a rootkit being called 't0rnkit', or 'tornkit'". It just possibly be that you've been compromised. Tony Tony Earnshaw e-post: [EMAIL PROTECTED] www: http://www.billy.demon.nl www: http://tony_earnshaw.freelancers.net Telefoon: (+31) (0)172 530428 Mobiel: (+31) (0)6 51153356 GPG/PGP Fingerprint: 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
signature.asc
Description: Dette er en digitalt signert meldingsdel
