From owner-freebsd-questions  Mon Aug  3 16:11:53 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA27796
          for freebsd-questions-outgoing; Mon, 3 Aug 1998 16:11:53 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from shaka.initium.com ([207.76.106.82])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA27779
          for <freebsd-questions@FreeBSD.ORG>; Mon, 3 Aug 1998 16:11:46 -0700 (PDT)
          (envelope-from frankd@initium.com)
Received: from tenagra.initium.com (tenagra.initium.com [207.76.106.85])
	by shaka.initium.com (8.8.5/8.8.5) with SMTP id TAA00722;
	Mon, 3 Aug 1998 19:12:49 -0400 (EDT)
Message-ID: <35C642B5.4CA9@initium.com>
Date: Mon, 03 Aug 1998 19:07:33 -0400
From: Frank DiPrete <frankd@initium.com>
X-Mailer: Mozilla 3.04 (Win95; I)
MIME-Version: 1.0
To: freebsd-questions@FreeBSD.ORG
Subject: hacker attack
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

well, I got hacked.
Said hacker put down smurf.c and flooded my server.
They used a user shell account that is not used to do it.

Is there any info available on how to find out where the attack came
form and how to plug it?

frankd@initium.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message