Re: [cobalt-security] Bind Hack

["Kevin D" <kdlists@xxxxxxxxxxxxxxx>]

I have a great freeware perl utitlity called FCheck that does MD5 checksums
of every specified file on your machine... its great for tracking changes to
config files as well as changes to any bin files.

Kevin

> md5sum /usr/sbin/named
>
> If you get 20a8796196848e0e393b2ec50da0aba4
> then you're hacked, if not, then you're o.k.

> Might I also suggest, installing an intrusion detection system, such as
> 'Tripwire' ?  This will allow you to check for modified (ie, trojaned)
> system files.
>
> John