From owner-freebsd-security Mon Mar 5 14:17:29 2001 Delivered-To: freebsd-security@freebsd.org Received: from awww.jeah.net (awww.jeah.net [216.111.239.130]) by hub.freebsd.org (Postfix) with ESMTP id 9279C37B71B for ; Mon, 5 Mar 2001 14:17:22 -0800 (PST) (envelope-from chris@jeah.net) Received: from localhost (chris@localhost) by awww.jeah.net (8.11.1/8.11.0) with ESMTP id f25MGuH46030; Mon, 5 Mar 2001 16:16:57 -0600 (CST) (envelope-from chris@jeah.net) Date: Mon, 5 Mar 2001 16:16:56 -0600 (CST) From: Chris Byrnes To: Evren Yurtesen Cc: Dag-Erling Smorgrav , dce , Subject: Re: 31337 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Heh, yeah, exactly. Sometimes people jump to conclusions too fast. It's just an IRCD. + Chris Byrnes, chris@JEAH.net + JEAH Communications + 1-866-AWW-JEAH (Toll-Free) On Mon, 5 Mar 2001, Evren Yurtesen wrote: > cant it be a person who has a shell and execute some daemons etc ? like > ircd? > > why does he need to reinstall his system? > > Evren > > > dce writes: > > > I have noticed the following ports open on my FreeBSD 4.2-STABLE machine > > > > > > 31337/tcp open Elite > > > 6667/tcp open irc > > > > You're owned. Take your box off the net, take a backup, reinstall from > > trusted media (preferably original CD-ROMs from BSDI), transfer data > > (*no* executables, scripts or configuration files!) from backup. And > > get some security clue; the security(7) man page is a good place to > > start, though far from complete. > > > > DES > > -- > > Dag-Erling Smorgrav - des@ofug.org > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message