From owner-freebsd-questions Mon Dec 18 13:44:53 2000 From owner-freebsd-questions@FreeBSD.ORG Mon Dec 18 13:44:52 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from marlo.eagle.ca (marlo.eagle.ca [209.167.16.10]) by hub.freebsd.org (Postfix) with ESMTP id B27D137B400 for ; Mon, 18 Dec 2000 13:44:51 -0800 (PST) Received: from phantom (phantom.eagle.ca [209.167.16.15]) by marlo.eagle.ca (8.11.0/8.11.0) with SMTP id eBILetm23293; Mon, 18 Dec 2000 16:40:55 -0500 (EST) (envelope-from freymann@eagle.ca) Reply-To: From: "Gerald T. Freymann" To: "Alexander V P" Cc: "Questions" Subject: RE: Hacker history file - OUCH - FIXED Date: Mon, 18 Dec 2000 16:44:39 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.3018.1300 In-Reply-To: Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG |O|> let me ask a stupid question, i'm curious. you have same box since than |O|> w/o rebuilding FreeBSD on the box or it's just a history that |O|> you cp to new install? There was somebody running BitchX or teardrop. They did not hide the directory very well (it was in /tmp/something) and was actually telnetting to the box as user amanda. Changed passwords, removed files, shut off some stuff in inetd.conf, verified the integrity of system binaries, problem went away. -Gerry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message