On Fri, Jan 11, 2002 at 05:07:02AM +0100, martin f krafft wrote:
> you've been hacked -> backup -> re-mkfs -> reinstall -> re-config from
> backup very carefully (i.e. file by file) -> restore user data -> do
> some post-mortem with backup -> ensure security -> reopen server to
> public and users -
unsubscribe
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
hi alan
where are you ???
if in silicon valley...
you can be back online within 1hr or so...
( assuming you have data-only backed up prior to the hacker getting
( into your box..
if the [h/cr]acker didnt "rm -rf /" your machine..you're still online..
- maybe just sniffing your passwds ???
- may
also sprach Alan Aldrich <[EMAIL PROTECTED]> [2002.01.11.0502 +0100]:
> Not sure what all it did, but really played havoc with SSH and some other
> networking components and is keeping my aventail authentication server from
> honoring socks requests.
> Can someone help undo whatever it did or point
Not sure what all it did, but really played havoc
with SSH and some other networking components and is keeping my aventail
authentication server from honoring socks requests.
Can someone help undo whatever it did or point me
to a site that covers it? I need to get this server back online
q
On Fri, Jan 11, 2002 at 05:07:02AM +0100, martin f krafft wrote:
> you've been hacked -> backup -> re-mkfs -> reinstall -> re-config from
> backup very carefully (i.e. file by file) -> restore user data -> do
> some post-mortem with backup -> ensure security -> reopen server to
> public and users
hi alan
where are you ???
if in silicon valley...
you can be back online within 1hr or so...
( assuming you have data-only backed up prior to the hacker getting
( into your box..
if the [h/cr]acker didnt "rm -rf /" your machine..you're still online..
- maybe just sniffing your passwds ???
- ma
also sprach Alan Aldrich <[EMAIL PROTECTED]> [2002.01.11.0502 +0100]:
> Not sure what all it did, but really played havoc with SSH and some other
> networking components and is keeping my aventail authentication server from
> honoring socks requests.
> Can someone help undo whatever it did or poin
Not sure what all it did, but really played havoc
with SSH and some other networking components and is keeping my aventail
authentication server from honoring socks requests.
Can someone help undo whatever it did or point me
to a site that covers it? I need to get this server back online
q
Hi,
It was one of the ntp servers.
Many thanks again for your help
best regards,
Balazs
On Thu, Jan 10, 2002 at 02:42:20AM +0100, martin f krafft wrote:
>also sprach Balazs Javor <[EMAIL PROTECTED]> [2002.01.09.2329 +0100]:
>> Anyway just in case I misinterpreted something...
>> I live in Switze
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Jan 10, 2002 at 07:25:48AM +1000, Paul Haesler wrote:
> You'll want to edit /etc/resolv.conf too.
>
> > On Thu, 10 Jan 2002 02:02:00 +1300 (NZDT)
> > Patrick Mackey <[EMAIL PROTECTED]> wrote:
> > > Edit '/etc/hostname' to reflect the change. T
Hi,
It was one of the ntp servers.
Many thanks again for your help
best regards,
Balazs
On Thu, Jan 10, 2002 at 02:42:20AM +0100, martin f krafft wrote:
>also sprach Balazs Javor <[EMAIL PROTECTED]> [2002.01.09.2329 +0100]:
>> Anyway just in case I misinterpreted something...
>> I live in Switz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Jan 10, 2002 at 07:25:48AM +1000, Paul Haesler wrote:
> You'll want to edit /etc/resolv.conf too.
>
> > On Thu, 10 Jan 2002 02:02:00 +1300 (NZDT)
> > Patrick Mackey <[EMAIL PROTECTED]> wrote:
> > > Edit '/etc/hostname' to reflect the change.
You'll want to edit /etc/resolv.conf too.
> On Thu, 10 Jan 2002 02:02:00 +1300 (NZDT)
> Patrick Mackey <[EMAIL PROTECTED]> wrote:
> > Edit '/etc/hostname' to reflect the change. Then run:
> >
> > hostname -F /etc/hostname
> >
> > That should do it.
>
> You might also want to edit /etc/mailname
14 matches
Mail list logo