From owner-freebsd-questions Sat Jul 28 11:56:32 2001 Delivered-To: freebsd-questions@freebsd.org Received: from chmls06.mediaone.net (chmls06.mediaone.net [24.147.1.144]) by hub.freebsd.org (Postfix) with ESMTP id 1874137B401 for ; Sat, 28 Jul 2001 11:56:29 -0700 (PDT) (envelope-from leblanc@acadia.ne.mediaone.net) Received: from acadia.ne.mediaone.net (acadia.ne.mediaone.net [65.96.185.189]) by chmls06.mediaone.net (8.11.1/8.11.1) with ESMTP id f6SIuRg14637 for ; Sat, 28 Jul 2001 14:56:27 -0400 (EDT) Received: (from leblanc@localhost) by acadia.ne.mediaone.net (8.9.3/8.9.3) id OAA29469; Sat, 28 Jul 2001 14:36:46 -0400 Date: Sat, 28 Jul 2001 14:36:46 -0400 From: Louis LeBlanc To: freebsd-questions@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG Subject: Re: URGENT - Seems like i've been hacked... what to do now? Message-ID: <20010728143645.C29383@acadia.ne.mediaone.net> Reply-To: freebsd-questions@FreeBSD.ORG Mail-Followup-To: freebsd-questions@FreeBSD.ORG References: <20010728051328.83415.qmail@web20104.mail.yahoo.com> <20010728051328.83415.qmail@web20104.mail.yahoo.com> <5.0.2.1.2.20010728131816.01c8e710@icsmx.com> <20010728142816.A29383@acadia.ne.mediaone.net> <20010728143807.L93953@netrail.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20010728143807.L93953@netrail.net> User-Agent: Mutt/1.3.19i X-bright-idea: Lets abolish HTML mail! Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Doh! You are correct. I'm sorry, but my sendmail woes are starting to affect my thinking :) L On 07/28/01 02:38 PM, Christian S . sat at the `puter and typed: > Well, blocking port 25 will save him from being used as a spam relay, > but I think you meant to recommend him to block port 23.. ;) > > Christian > > On Sat, Jul 28, 2001 at 02:28:17PM -0400, Louis LeBlanc babbled: > > Delivered-To: cschreiber@netrail.net > > Delivered-To: freebsd-questions@freebsd.org > > Date: Sat, 28 Jul 2001 14:28:17 -0400 > > From: Louis LeBlanc > > To: freebsd-questions@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG > > Subject: Re: URGENT - Seems like i've been hacked... what to do now? > > > > If I were you, I'd disable telnet in /etc/inetd.conf (just comment it > > out), block the port in your firewall (deny port 25 - incoming, > > anyway), and consider changing all your passwords. > ---end quoted text--- > > -- > Christian Schreiber, Netrail Network Security Engineer > - Ape will not kill Ape > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > -- Louis LeBlanc leblanc@acadia.ne.mediaone.net Fully Funded Hobbyist, KeySlapper Extrordinaire :) http://acadia.ne.mediaone.net ԿԬ Default, n.: The hardware's, of course. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message