From owner-freebsd-questions  Thu Aug  9  6:21:13 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mufasa.swistgroup.com (mufasa.swistgroup.com [64.245.10.163])
	by hub.freebsd.org (Postfix) with ESMTP id 8534C37B406
	for <freebsd-questions@freebsd.org>; Thu,  9 Aug 2001 06:21:05 -0700 (PDT)
	(envelope-from max.clements@swistgroup.com)
Received: from timon.swistgroup.com ([172.16.1.30])
	by mufasa.swistgroup.com with esmtp (Exim 3.22 #1)
	id 15UpjY-0000LQ-00; Thu, 09 Aug 2001 15:20:20 +0200
Received: from steinmail.swistgroup.com ([192.168.200.112])
	by timon.swistgroup.com with esmtp (Exim 3.22 #4)
	id 15Upjt-000CyO-00; Thu, 09 Aug 2001 15:20:41 +0200
Content-Class: urn:content-classes:message
Subject: RE: Ive been hacked-is sshd enabled by default in 4.3-release?
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 9 Aug 2001 15:20:51 +0200
Disposition-Notification-To: "Max Clements" <max.clements@swistgroup.com>
Message-ID: <DEC925D2FB9081448C3D6EC26E85868C11857B@steinmail.swistgroup.com>
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Ive been hacked-is sshd enabled by default in 4.3-release?
Thread-Index: AcEgc+n/ROfRa+OGRRGSbvGnMbGjvwAYfr/Q
From: "Max Clements" <max.clements@swistgroup.com>
To: "Keith Spencer" <bsd2000au@yahoo.com.au>
Cc: <freebsd-questions@freebsd.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi Keith,

Hard advice, but Re-install from scratch! =20

There is no way you are going to be able to tell what the hacker did or =
did
not do, or find all possible back-doors that he may have installed.

Cheers

Max

> -----Original Message-----
> From: Keith Spencer [mailto:bsd2000au@yahoo.com.au]
> Sent: 09 August 2001 03:36
> To: fbsd
> Subject: Ive been hacked-is sshd enabled by default in 4.3-release?
>=20
>=20
> Hi all,
> trying to seal up cracks in my system (got web site
> hacked)
> I notice ps-ax shows sshd enabled.
> Is it default or has someone done it?
> How do I check if SSH has been inserted into a user?
> Any other tips?
> Thanks=20
> Keith
>=20
> =20
>=20
> ______________________________________________________________
> _______________
> http://messenger.yahoo.com.au - Yahoo! Messenger
> - Voice chat, mail alerts, stock quotes and favourite news=20
> and lots more!
>=20
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>=20

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message