Re: [OT] Off topic question a little worried

[lembark]

Assuming the content isn't updated too often, burning
the site from a test area and mounting it as a CDROM
makes it pretty hard for outsiders to udpate.

--
Steven Lembark  2930 W. Palmer
Workhorse Computing  Chicago, IL 60647
   +1 800 762 1582

Re: [OT] Off topic question a little worried

[wsheldah]

This link offers some general guidelines for recovering from a compromised
server:
http://www.cert.org/tech_tips/win-UNIX-system_compromise.html

Hope it helps, and good luck.

Wes




Perrin Harkins [EMAIL PROTECTED] on 03/21/2002 03:42:55 PM

To:   John Michael [EMAIL PROTECTED]
cc:   [EMAIL PROTECTED] (bcc: Wesley
  Sheldahl/Lex/Lexmark)
Subject:  Re: Off topic question  a little worried


John Michael wrote:
 Any idea as to how it got on my server.

Someone found a serious security hole in something you're running.  You
have to assume that your server has been completely compromised and that
the entire world now has root access to it through a hundred backdoors
they installed.  Take it off-line now, before you find out it sent
millions of porn spam messages.  You can study it later to try and find
the problem.

- Perrin