Re: about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked:-(

2002-06-03 Thread Gordon Messmer
On Mon, 2002-06-03 at 01:09, Lewi wrote: > oh, ic > in what I'm thinking now it's clear now that running proftpd is better than wu-ftpd > because I see that proftpd ran as non-root user Only the root user can chroot(). If proftpd is run as non-root, you lose that capability.

RE: about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked :-(

2002-06-03 Thread Chapman, Matt
Or give vsftpd a try. It is fast and more secure IMHO than wu-ftpd. Pro-FTPD is good as well. -matt chapman -Original Message- From: Lewi [mailto:[EMAIL PROTECTED]] Sent: Monday, June 03, 2002 4:10 AM To: [EMAIL PROTECTED] Subject: Re: about chroot wu-ftpd; was->Re: Re: the port 41

Re: about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked :-(

2002-06-03 Thread Lewi
oh, ic in what I'm thinking now it's clear now that running proftpd is better than wu-ftpd because I see that proftpd ran as non-root user thank you very much On Sun, Jun 02, 2002 at 10:59:10PM +1000, Greg Wright wrote: > > > *** REPLY SEPARATOR *** > > On 2/06/2002 at 1:18 P

Re: Re: the port 41430?I was cracked :-(

2002-06-02 Thread Michael H. Warfield
On Sun, Jun 02, 2002 at 10:41:36AM +0800, Huter.Liu wrote: > hi,Hal Burgiss! > I know how to fix a damaged system,I'll install rh7.3 and use vsftpd to do ftp server,and I'll change ftp port to 2323, just open ftp to internal networks(use ipchains)I'm not the manag

Re: about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked :-(

2002-06-02 Thread Greg Wright
*** REPLY SEPARATOR *** On 2/06/2002 at 1:18 PM Lewi [EMAIL PROTECTED] [gregausit/redhat-list] wrote: >talking about wu-ftpd, I know that anonymous user in wuftpd release by >red hat using chroot env, >is this meant that, even I ran wu-ftpd in chroot, still can't protect your

about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked :-(

2002-06-01 Thread Lewi
talking about wu-ftpd, I know that anonymous user in wuftpd release by red hat using chroot env, is this meant that, even I ran wu-ftpd in chroot, still can't protect your system. so what the chroot really used for?? I have read Securing Red Hat by Gerhard, in his book he still using wu-ftpd in

Re: Re: the port 41430?I was cracked :-(

2002-06-01 Thread Huter.Liu
hi,Hal Burgiss! I know how to fix a damaged system,I'll install rh7.3 and use vsftpd to do ftp server,and I'll change ftp port to 2323,just open ftp to internal networks(use ipchains)I'm not the manager of this damaged system,my friend manage it,just a few days ago he found the ps a

Re: the port 41430?I was cracked :-(

2002-06-01 Thread Muhammad Faisal Rauf Danka
Looks like there is a bot/bnc connected to Undernet IRC network through your box. *** Resolved 205.252.46.98 to babble-on.systems.cais.net and *** Resolved McLean.VA.us.undernet.org to 205.252.46.98 I suggest you unplug your server from network Immediately, then Replace the server with another

Re: the port 41430?I was cracked :-(

2002-06-01 Thread Hal Burgiss
On Sun, Jun 02, 2002 at 09:25:01AM +0800, Huter.Liu wrote: > hi,everyone! >I'm using rh7.2,but my machine is hackered recently,I open wu-ftpd >and www server only,I really don't know how the hacker cracked in,I >guess maybe is from wu-ftpd,the ftp server,now I found there is a tcp >link: Proto Rec

the port 41430?I was cracked :-(

2002-06-01 Thread Huter.Liu
hi,everyone! I'm using rh7.2,but my machine is hackered recently,I open wu-ftpd and www server only,I really don't know how the hacker cracked in,I guess maybe is from wu-ftpd,the ftp server,now I found there is a tcp link: Proto Recv-Q Send-Q Local Address Foreign Address