From owner-freebsd-questions Sun May 19 10:33: 2 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mail.macconnect.com (mail.macconnect.com [204.68.168.11]) by hub.freebsd.org (Postfix) with SMTP id 0D45A37B409 for ; Sun, 19 May 2002 10:32:59 -0700 (PDT) Received: (qmail 80349 invoked by uid 0); 19 May 2002 17:39:14 -0000 Received: from unknown (HELO ?10.0.1.2?) (24.168.28.19) by mail.macconnect.com with SMTP; 19 May 2002 17:39:14 -0000 User-Agent: Microsoft-Entourage/10.0.0.1331 Date: Sun, 19 May 2002 13:34:17 -0400 Subject: Step by step hacking recovery guide? From: Brendan McAlpine To: Message-ID: Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hey all A couple of my BSD boxes have been hacked into recently and I was wondering is there was a guide out there that listed the things to look for when you've been hacked and how to completely lock down the box. The compromised boxes have since been secured, but I thought a reference guide on how to recover from a hack would be very helpful. Does it exist? TIA Brendan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message