From owner-freebsd-net  Mon Dec 18 10:46:46 2000
From owner-freebsd-net@FreeBSD.ORG  Mon Dec 18 10:46:45 2000
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from pfa0frpk001.panasonicfa.com (unknown [38.248.119.1])
	by hub.freebsd.org (Postfix) with ESMTP id BFF3037B400
	for <net@freebsd.org>; Mon, 18 Dec 2000 10:46:44 -0800 (PST)
Received: by exchange.panasonicfa.com with Internet Mail Service (5.5.2650.21)
	id <Y65754RL>; Mon, 18 Dec 2000 12:46:42 -0600
Message-ID: <054F7DAA9E54D311AD090008C74CE9BD01F1E7CB@exchange.panasonicfa.com>
From: "Zaitsau, Andrei" <AZaitsau@panasonicfa.com>
To: net@freebsd.org
Subject: Hacked computer
Date: Mon, 18 Dec 2000 12:46:40 -0600
Return-Receipt-To: "Zaitsau, Andrei" <AZaitsau@panasonicfa.com>
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hello everyone,
I have a problem, in the morning someone hacked into my computer at home. It
is ADSL Gateway running FreeBSD 3.4 , root password is changed by hacker. 
Can anyone tell where on the system I can find some tracks of a hacker?
What should I check first?
Which log files?
Anyone? Please?
Thanks.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message