From owner-freebsd-questions Sat Oct 26 7:52:42 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 098AE37B401 for ; Sat, 26 Oct 2002 07:52:41 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9B50243E65 for ; Sat, 26 Oct 2002 07:52:39 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.6/8.12.6) with ESMTP id g9QEqTV8019737 for ; Sat, 26 Oct 2002 15:52:29 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.6/8.12.6/Submit) id g9QEqNxX019736 for freebsd-questions@FreeBSD.ORG; Sat, 26 Oct 2002 15:52:23 +0100 (BST) Date: Sat, 26 Oct 2002 15:52:23 +0100 From: Matthew Seaman To: "freebsd-questions@FreeBSD.org" Subject: Re: 4.6.2 spurious reboot, fwiw Message-ID: <20021026145223.GA19530@happy-idiot-talk.infracaninophi> Mail-Followup-To: Matthew Seaman , "freebsd-questions@FreeBSD.org" References: <3DBA9F2A.B53419B@earthlink.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3DBA9F2A.B53419B@earthlink.net> User-Agent: Mutt/1.5.1i X-Spam-Status: No, hits=-7.8 required=5.0 tests=IN_REP_TO,REFERENCES,SPAM_PHRASE_00_01,TO_ADDRESS_EQ_REAL, USER_AGENT,USER_AGENT_MUTT version=2.41 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Oct 26, 2002 at 08:56:58AM -0500, Walter wrote: > As a "newbie" reading the e-mails in the forum, I'd > like to mention that the log (from 'last') shows my > FBSD 4.6.2 system rebooted a little after 2 last night. > I had 'telnet'ed' in and had been playing some games > but had logged off by 10:30 and didn't log in again > until 7ish this morning. Do you have a UPS? Sounds to me like you had a momentary dip in the mains voltage. PC's can be very sensitive to that sort of thing, and will reboot themselves when other equipment (clocks, radios, videos) just carry on reguardless. Usually if someone or something hacks your box, the last thing they want to do is make you aware that they've broken in. Something as noticable as rebooting the machine is usually the result of a mistake, and it's generally some other more subtle sort of traces left behind on the system that will alert the sysadmin. The reason that "they" don't want to be discovered is simple: your compromised box is useful to them as a base from which to attack other machines, and which further muddies the trail back to who they really are. Securing your machine is not just about protecting yourself: it's also about being a good net-citizen and protecting your neighbours. Of course, simply by running FreeBSD you've foxed 99% of the script kiddies and nasty-ware out in the wild. But that's no cause for complacency: any one fancy a dose of the Scalper worm? Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message