Re: [cobalt-users] Recent Hacks (resolution in sight)

[Chris Mason <chris@xxxxxx>]

Gerald Waugh wrote:

> "Chris Mason" <chris@xxxxxx>  wrote
> > You think you have problems! I got so paranoid with all this talk of
> cracked
> > machines that I rushed this morning to install ipchains, pmfirewall,
> > portsentry, and logcheck. I only use SSH, I've disabled telnet.
> > Unfortunately I was a little careless in my installation and I have now
> > totally locked myself out of the machine. I can't ssh, there's no telnet,
> > the gui is not available as I installed a certificate, I don't know what
> > next to do. Even tech support at the hosting location may not be able to
> get
> > in!
>
> If PortSentry locked you out go to a different system (IP) and login and
> remove
> your IP from /etc/hosts.deny and
> /usr/local/psionic/portsentry/portsentry.blocked.tcp
> Hope this helps, I never used it, but sounds reasonable.
> Geald
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

It would be reasonable except that I think portsentry has treated port 22 as a
trigger. Either way I can't get any ssh service.