Date: Sun, 21 Apr 2002 12:25:47 -0400 From: "Christopher J. Umina" <FJU@Fritzilldo.com> To: "Alson van der Meulen" <freebsd@alm.xs4all.nl> Cc: <questions@freebsd.org> Subject: Re: no /bin/login?!?! Message-ID: <006101c1e951$3217d510$0301a8c0@fritz> References: <001201c1e94a$2b550b50$0301a8c0@fritz> <20020421174337.B82499@mars.thuis> <004001c1e94c$20984180$0301a8c0@fritz> <20020421155617.GA7999@alm.xs4all.nl> <005001c1e94d$a2fd56f0$0301a8c0@fritz> <20020421161017.GB7999@alm.xs4all.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
I need some help with the fixit disks, I don't know how to mount my filesystems, I do what I normally do, but it tells me they're not devices. (if you don't hear from me I had to run a few erronds, I'll be back) ----- Original Message ----- From: "Alson van der Meulen" <freebsd@alm.xs4all.nl> To: "Christopher J. Umina" <FJU@Fritzilldo.com> Cc: <questions@freebsd.org> Sent: Sunday, April 21, 2002 12:10 PM Subject: Re: no /bin/login?!?! > Christopher J. Umina(FJU@Fritzilldo.com)@2002.04.21 12:00:17 +0000: > > Thanks, I think I'm going to do that, but how can I backup my stuff? I need > > some sort of shell to do that... > > I just don't know how to do it. > You might be able to ssh in (ssh username@hostname). Keep in mind that > binaries like ps, ls and netstat could be trojaned to hide the files of > the intruder. > > You really need to get physical access to that box, since complete > reinstall (wiping out all existing filesystems) isn't something you can > do remotely easily. > > If you have physical access, you could boot using the boot and fixit > floppies, and mount some kind of backup medium. > > The safest way I think is to backup to some local NFS server. > > I would try to get this box disconnected from the internet ASAP. As soon > it is disconnected, it can not be abused for DDoS attacks or like. For > backup purposes you could connect it to an other box using a crosslink > cable or local hub/switch. > > Alson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?006101c1e951$3217d510$0301a8c0>