advice-- a friend claims he's under attack
Hi, sorry for the dramatic subject; a guy with a server in my colo
called me saying his site and mail is down and he had trouble reaching
the box. He's sshed in now and says netstat -n shows lots of
established connections. I told him to kill them and set ip chain rule
to deny all from that ip. What other advice can I give him immediately?
Thanks, Justin
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: