Re: Was my system cracked? (retry 2)

To: Ron Hale-Evans <rwhe@ludism.org>
Cc: debian-user@lists.debian.org
Subject: Re: Was my system cracked? (retry 2)
From: Osamu Aoki <debian@aokiconsulting.com>
Date: Sun, 1 Oct 2000 14:36:40 -0700
Message-id: <20001001143640.A10352@gateway.aokiconsulting.com>
In-reply-to: <a0500190ab5fd3832fe79@[63.225.161.89]>; from rwhe@ludism.org on Sun, Oct 01, 2000 at 11:52:43AM -0700
References: <a0500190ab5fd3832fe79@[63.225.161.89]>

Hi,

Looks like funny thing might have happened.

Next time you install system, make sure to plug all services to the
Internet.

Edit /etc/inetd
Check /etc/init.d/*

Also, I set up packet firewall by "ipchains" plugging all ports 1-1023
and allowing only needed ones.  This way no buffer over flow attacks 
reach my services.

I have at least few per month log of funny access try but all are 
rejected outright.

Usually, sunrpc, linuxconf, ftp, http, netbios are targets.

Good luck.

-- 
+  Osamu Aoki <debian@aokiconsulting.com>, GnuPG-key: 1024D/D5DE453D  +
+   Fingerprint: 814E BD64 3288 40E7 E88E  3D92 C3F8 EA94 D5DE 453D   +
+   === http://www.aokiconsulting.com ======= Cupertino, CA USA ===   +

Reply to:

References:
- Was my system cracked? (retry 2)
  - From: Ron Hale-Evans <rwhe@ludism.org>

Prev by Date: Re: mounting /home?
Next by Date: Re: firewall (fwd)
Previous by thread: Re: Was my system cracked? (retry 2)
Next by thread: RE: Was my system cracked? (retry 2)
Index(es):
- Date
- Thread