Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Sep 1998 01:13:12 -0500
From:      Graphic Rezidew <rezidew@rezidew.net>
To:        freebsd-security@FreeBSD.ORG
Subject:   sshd
Message-ID:  <35F8BF78.4C32DBEF@rezidew.net>

next in thread | raw e-mail | index | archive | help
ok, now I am just a little bit concerned about this ( maybe I'm over
looking something 
that's REALLY obvious) . I installed the ssh port from 2.2.5 I had set
up tcp wrappers
and noticed that none of the rules for ssh were working so I took the
line for it out
of /etc/inetd.conf. The next day I noticed that a 'netstat -a' revealed
that sshd was
running on port 22 of my machine. I have done "grep ssh /etc/*" and come
back with only
the entry in /etc/services and the rules in /etc/hosts.deny and
/etc/hosts.allow. I
manually went through the /etc/rc.local and found no entry for anything
called *ssh*.

Until I can get this figured out I have decided to 'chmod 000
/usr/local/sbin/sshd'.
Any help in locating the rogue execution of sshd would be greatly
appreciated.

-- 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Rules for driving in New York:
        (1) Anything done while honking your horn is legal.
        (2) You may park anywhere if you turn your four-way flashers
            on.
        (3) A red light means the next six cars may go through the
            intersection.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Graphic Rezidew
Graphic@rezidew.net
http://Graphic.Rezidew.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35F8BF78.4C32DBEF>