I've been hacked too :(

Jerry Feldman gaf at blu.org
Mon Apr 30 07:20:24 EDT 2001


Just because there are a few sendmail processes running does not 
necessarily mean that you've been hacked. Check your log 
files:/var/log/mail. You may have been receiving some email at the time. 
However, port 25 is one which is used by hackers. Also, check the logs on 
your firewall.
"Paris valdespino" wrote:
> Hi !
> 
> 
> Yesterday  I was  checking  my linux  box  and I notice  that  there  were
> some  sendmail  processes  runing ?
> I was  the only one  working on my  box.... and  i was)B´t sending  anything ,
> so as  far as  I know  I have  been  hacked.
> I know that I)B´ll have to install  all my stuff again  but   I have a
> question:
> 
> my configurations  is  as follows:
> 
> cisco router -----------linux  -------------my server
>                                    firewall
> 
> 
> How  can  I know  if  my firewall or  my router haven)B´t  been  hacked?
-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix user group
http://www.blu.org


-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).



More information about the Discuss mailing list