RE: help i've been hacked. :(

From: Eris Caffee (eris-redhat-list_at_eldalin.com)
Date: 08/21/05

  • Next message: kmail: "ASP on Linux" 
    Date: Sun, 21 Aug 2005 15:20:31 -0000 (UTC)
To: "General Red Hat Linux discussion list" <redhat-list@redhat.com>

    > Okay, so I looked into the /tmp directory and found ./shell.pl and ./.x.
    [snip - lots of investigation goodness]
    > I also plan to segment the network so that even if the webserver is
    > compromised the perp cannot sniff the rest of the network traffic and
    > steal passwords/data. At least, that's how I think it would work.

    It sounds like you have an excellent handle on things now.

    One other thing I would suggest would be that if you install cacti on the
    new server you should edit your httpd.conf and restrict access to it and
    it's subdirectories to add another layer of protection. Really, anything
    that isn't for the general public ought to be restricted, of course.

    Eris Caffee 

    -- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: kmail: "ASP on Linux"

    Relevant Pages

    • Re: Cant find list of servers for a workgroup
      ... Make sure the computer is not using a personal firewall or other application ... that may restrict access. ... Verify that it is using the same network address ... > the workgroup. ...
      (microsoft.public.win2000.networking)
    • Permission on share folder xp pro
      ... to restrict access to unwanted users, for instance, ... but I am unable to grant a single network user ... permission on a peer to peer network. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Allocating IP addresses to Active directory accounts.
      ... possible and provide a solution via proxy by group, ... >> IP address in the intenal network should be given to physical network ... ask your customer, what he is trying to achive? ... > They want to restrict access to the network and the internet for students ...
      (microsoft.public.windows.server.active_directory)
    • Re: Restricting VPN access
      ... If you are logged into your network with User ID A; ... outside of the internal network; Connect into the internal network using ... Going to a shared drive which we want to restrict access to. ... users(even adding deny access to the account we want to restrict). ...
      (microsoft.public.isa.vpn)
    • Re: Restricting IP Address
      ... If you are the Network Admin, ... intranet connection in the Network Connections section of your control ... > I'd like to restrict access to part of my web application based on IP ... > IIS Manager has a security feature to restrict access based on IP ...
      (microsoft.public.dotnet.framework.aspnet.security)