Well, that'll learn ya. :) Back in '97 I got rooted. Someone did bad things to my box, and replaced the default page on the webserver to a picture of Samuel L Jackson from Pulp Fiction saying his "... and I will strike down upon thee with great vengeance and fuuuuurious anger.." Anyway, ever since then, I'm a security nazi. Everyone needs to be rooted at least once. :) > -----Original Message----- > From: Sam MacDonald [mailto:smac at visi.com] > Sent: Thursday, August 21, 2003 9:16 AM > To: tclug-list at mn-linux.org > Subject: Re: [TCLUG] My linux has died > > > This is why trimming is not always a good thing. > I was replying to another persons post. > I neither connect to my computers over the internet nor let > anyone make > more then a port 80 connection > > Munir Nassar wrote: > > >On Thu, 21 Aug 2003, Sam MacDonald wrote: > > > > > > > >>Wow that is nasty. > >>I have DSL and I use a Linksys router. I hid behind the > router using > >>only the ports necessary to achieve my needs. Everyone in > the house has > >>access to the internet but only the ports I need are > enabled to receive > >>or send data. I've run several port scanners against my > system form > >>other locations and have had very good results. > >> > >> > > > >indeed, but did you check for vulnerabilities? > > > >you said you were using redhat 6.2, which did not include > openssh, so you > >probably had to connect to it using telnet. telnet sends > your password > >over the wire in plain text and anyone can sniff it. Same > goes for ftp. > > > >additionally, redhat 6.2 has been out of support for a > while, so even if > >you installed all the latest patches from redhat, you would > still have > >vulnerabilities. > > > >redhat 6.2 also used wu-ftpd. nuff said. > > > >was this system behind the firewall? if so then i would > consider each and > >every one of your other systems suspect as well. > > > >Munir Nassar > >RedConcepts.NET > >http://redconcepts.net/ > > > >_______________________________________________ > >TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > >http://www.mn-linux.org tclug-list at mn-linux.org > >https://mailman.real-time.com/mailman/listinfo/tclug-list > > > > > > > > > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list > _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list