From owner-freebsd-questions Sat Jul 28 14:58:15 2001 Delivered-To: freebsd-questions@freebsd.org Received: from absinthe2.dyndns.org (adsl-63-207-239-50.dsl.chic01.pacbell.net [63.207.239.50]) by hub.freebsd.org (Postfix) with ESMTP id 687E337B401 for ; Sat, 28 Jul 2001 14:58:13 -0700 (PDT) (envelope-from fred@absinthe2.dyndns.org) Received: (from fred@localhost) by absinthe2.dyndns.org (8.11.3/8.11.3) id f6SLwDu40006 for freebsd-questions@FreeBSD.ORG; Sat, 28 Jul 2001 14:58:13 -0700 (PDT) (envelope-from fred) Date: Sat, 28 Jul 2001 14:58:12 -0700 From: Fred Condo To: freebsd-questions@FreeBSD.ORG Subject: Re: URGENT - Seems like i've been hacked... what to do now? Message-ID: <20010728145812.B39952@absinthe.condo.chico.ca.us> References: <20010728051328.83415.qmail@web20104.mail.yahoo.com> <20010728051328.83415.qmail@web20104.mail.yahoo.com> <5.0.2.1.2.20010728131816.01c8e710@icsmx.com> <20010728142816.A29383@acadia.ne.mediaone.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010728142816.A29383@acadia.ne.mediaone.net>; from leblanc+freebsd@acadia.ne.mediaone.net on Sat, Jul 28, 2001 at 02:28:17PM -0400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Jul 28, 2001 at 02:28:17PM -0400, Louis LeBlanc wrote: > > If I were you, I'd disable telnet in /etc/inetd.conf (just comment it > out), block the port in your firewall (deny port 25 - incoming, > anyway), and consider changing all your passwords. You mean 23. 25 is smtp. -- ______________________________________________________ ( fred@condo.chico.ca.us Repeal the DMCA. Free Dmitry. ) ------------------------------------------------------ o ^__^ o (**)\_______ (__)\ )\/\ U ||--WWW | || || To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message