From owner-freebsd-questions Sun Dec 20 08:26:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA24700 for freebsd-questions-outgoing; Sun, 20 Dec 1998 08:26:28 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from servidor.exsocom.com.mx (servidor.exsocom.com.mx [200.34.46.130]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA24695; Sun, 20 Dec 1998 08:26:23 -0800 (PST) (envelope-from agalindo@servidor.exsocom.com.mx) Received: from servidor.exsocom.com.mx (servidor.exsocom.com.mx [200.34.46.130]) by servidor.exsocom.com.mx (8.8.8/8.8.8) with SMTP id KAA01186; Sun, 20 Dec 1998 10:32:58 GMT (envelope-from agalindo@servidor.exsocom.com.mx) Date: Sun, 20 Dec 1998 10:32:57 +0000 (GMT) From: Alejandro Galindo Chairez AGALINDO To: freebsd-security@FreeBSD.ORG cc: questions@FreeBSD.ORG Subject: udp security Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG My name is Alejandro and i have some servers in Mexico with FreeBSD 2.2.5, 2.2.6 and 2.2.7 releases (from Walnut Creck CDROM) One mounth ago my servers was been attacked from some hackers, i was monitoring their activities and i only know that they are using the user datagram protocolo, i installed a firewall but this cant stop their activities, iam worried becouse last week they delete the log files from /var/log and last day they access one of my server with a username and a password (they created the username and password, they access the server for 3 minutes and then they delete the user) IAM WORRIED becouse i dont know how they did that, the server violated had the 2.2.5 version and i upgrade it to 2.2.7 release, but this morning the hackers insist in access my servers. i need help, i need to know how to protect my servers, but the most important in my mind is to know how they are accessing the servers, i buyed the Firewalls book from Oreally & associates and i was using the firewall with ipfw, but this dont stop the hackers. thanks for your help Alejandro Galindo To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message