[95142] in RedHat Linux List
Re: port 111
daemon@ATHENA.MIT.EDU (dreamwvr)
Thu Oct 15 12:49:35 1998
Date: Thu, 15 Oct 1998 10:51:05 -0600
To: redhat-list@redhat.com, redhat-list@redhat.com
From: dreamwvr <dreamwvr@dreamwvr.com>
In-Reply-To: <Pine.LNX.3.95.981016000048.29713C-100000@chris.fishwick.so
uthcom.com.au>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
hi Chris,
might want to look @ 'tripwire'
Regards,
dreamwvr@dreamwvr.com
At 12:02 AM 10/16/98 +1100, Chris Fishwick wrote:
>> I think this guy has installed some kind of root-kit on his
>> machine. Does anyone know of such root-kit, how they work, how to fix
>> the damage and how to prevent being hacked throw that port?
>
>I got hacked by Linux RootKit III a few months ago.. the way I 'cleaned
>up' was to check the date stamp on a file I knew was modified, then grep
>the entire directory tree for that date stamp and check any file that was
>listed... I guess this is not the best way to do it, but it fixed the
>problem until I had time to re-install the machine and close the security
>holes properly...
>
>Regards
>
>Chris
>
>
>--
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> http://www.redhat.com http://archive.redhat.com
> To unsubscribe: mail redhat-list-request@redhat.com with
> "unsubscribe" as the Subject.
>
>
Reuters, London, February 29, 1998:
Scientists have announced discovering a meteorite which will strike the
earth in March, 2028. Millions of UNIX coders expressed relief for being
spared the UNIX epoch "crisis" of 2038.
_______________________________________________________________________
DREAMWVR.COM - TOTAL WEB INTEGRATION, DEVELOPMENT, DESIGN SERVICES.
Featuring Website Development and Web Strategies of a TOP Developer
<http://www.dreamwvr.com/dynamicduo.html> <mailto:dreamwvr@dreamwvr.com>
"As Unique as the Company You Keep." "===0 PGP Key Available
________________________________________________________________________
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
