Date: Sun, 29 Apr 2012 14:09:56 -0400 From: Alejandro Imass <ait@p2ee.org> To: jb <jb.1234abcd@gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: UFS Crash and directories now missing Message-ID: <CAHieY7TD=M-UR4kv_EJAYiZUQBEEGL2rMUKSnMRw%2B0nBBtQGxA@mail.gmail.com> In-Reply-To: <loom.20120429T190931-325@post.gmane.org> References: <201204281731.q3SHVaiM061997@mail.r-bonomi.com> <CAHieY7Tcv%2Bo-KbmLtPVHWXSphJX7b5f0QMO46yM-DOju4S9S7Q@mail.gmail.com> <20120428200116.b2f5820e.freebsd@edvax.de> <CAHieY7TpWsCbm8LZFMboWHgXJ2M79TbcK7Jse3=MoVUR2XB5Ow@mail.gmail.com> <4f9ced3a.f7WBDlsMkhxvy%2BeF%perryh@pluto.rain.com> <20120429103740.aa7df743.freebsd@edvax.de> <CAHieY7QCpV0Tz-mJHyNuObnF%2BN%2BnAXGpnxr4D1f8s_2E_No%2BHw@mail.gmail.com> <loom.20120429T190931-325@post.gmane.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Apr 29, 2012 at 1:15 PM, jb <jb.1234abcd@gmail.com> wrote: > Alejandro Imass <ait <at> p2ee.org> writes: > >> ... >> And there was a log of a couple of ftp connections the same day this >> happened, the ONLY 3 messages before the reboot at about 6 pm and they >> were NOT from any of our customers. Here are the log entries: >> >> Apr 27 05:54:37 nune ftp.proxy[2726]: connected to client: >> host-46-50-183-5.bbcustomer.zsttk.net, interface= 207.158.52.74:21 >> Apr 27 05:54:37 nune ftp.proxy[2726]: info: monitor mode: off, ccp: <unset> >> Apr 27 05:54:38 nune ftp.proxy[2726]: -ERR: missing hostname >> Apr 27 18:55:42 nune syslogd: kernel boot file is /boot/kernel/kernel >> ... > > What you should do right now is to get some recent general or security cd/dvd > with chkrootkit and rkhunter and run them from that external read-only media. > I would also suggest that you look over config files of all packages involved. > jb > Thanks! Will do, but I don't know of any FreeBSD and/or derived distros for security. Or can I use any Linux security distro? I remember reading about some trouble of Linux chkrootkit on FBSD.... Thanks, -- Alejandro > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAHieY7TD=M-UR4kv_EJAYiZUQBEEGL2rMUKSnMRw%2B0nBBtQGxA>