[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Bind Hack
- Subject: Re: [cobalt-security] Bind Hack
- From: "Kevin D" <kdlists@xxxxxxxxxxxxxxx>
- Date: Fri, 9 Feb 2001 14:59:16 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
I have a great freeware perl utitlity called FCheck that does MD5 checksums
of every specified file on your machine... its great for tracking changes to
config files as well as changes to any bin files.
Kevin
> md5sum /usr/sbin/named
>
> If you get 20a8796196848e0e393b2ec50da0aba4
> then you're hacked, if not, then you're o.k.
> Might I also suggest, installing an intrusion detection system, such as
> 'Tripwire' ? This will allow you to check for modified (ie, trojaned)
> system files.
>
> John