RE: Help. My system cracked and used to spam
Best thing to do is run checkrootkit.
See if you were rooted.
If not, go though your logs and try and find
anything that resembles a breach... Find out what
service/way this person got in.
More than likely, it was through an exploit of
some sort.
Switch to qmail.
-----Original Message-----
From: David Teague [mailto:dbt@cs.wcu.edu]
Sent: Thursday, August 08, 2002 11:30 PM
To: debian-user@lists.debian.org
Cc: teague@jackson.main.nc.us
Subject: Help. My system cracked and used to spam
Hi
Please CC: response to teague@jackson.main.nc.us
The Subject line says it all. One of my machines was
cracked and A spam forwarder was installed on it.
It is an old 486 running Debian 2.0.
I disconnected it from the net, since stopping
the spam forwarding is very important.
Please, will someone give me pointers to FAQs,
HOWTOs and books on how to find what was done
to the mailer (Exim?) to make it behave so, and
how to find how to fix it..
Thanks.
David Teague
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002
Reply to: