Re: [cobalt-users] Deterring Hackers

["Roger Dunk" <roger@xxxxxxxxx>]

G'day,

I was hacked a few days ago and the hackers replaced the 'init' daemon with
one that contains the Trinoo DoS server. If you have a Raq3 with a clean
copy of 'init', do you think you'd be able to attach it to an e-mail? There
doesn't seem to be any other way of getting a clean copy.

Thanks,
Roger

----- Original Message -----
From: "Compagnon, Jean-Charles" <jccompagnon@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Cc: <jcordeiro@xxxxxxxxxxxxxxx>
Sent: Thursday, February 15, 2001 9:20 AM
Subject: RE: [cobalt-users] Deterring Hackers


> you can also install "logcheck" which go through your log as a cron job
and
> email you any problems !
> Jc
>
> > -----Original Message-----
> > From: John Cordeiro [SMTP:jcordeiro@xxxxxxxxxxxxxxx]
> > Sent: Wednesday, February 14, 2001 4:18 PM
> > To: cobalt-users@xxxxxxxxxxxxxxx
> > Subject: RE: [cobalt-users] Deterring Hackers
> >
> > >I have successfully installed PortSentry 1.0 on my Raq4i, Works like a
> > >Champ. So far it has added 28 IP's to my hosts.deny since Monday.
> > >Unfortunately I didn't install it on my RAQ3i and it got hacked.
> > >
> > >If you can't get PortSentry installed, I am offering, Cause it seems
> > >everyone here is vulnerable and not as experienced as some of the
others
> > on
> > >this list, and Cobalt isn't doing anything to stop this attack, I will
> > >install Portsentry 1.0 on your RAQ3 or 4 for $15.00 US.....
> > >
> > >Please reply off list and I will be glad to help you out. This is being
> > >offered as a way to stop the ongoing attacks.
> >
> > Sorry you can find Portsentry at http://www.psionic.com
> >
> > John Cordeiro
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To Subscribe or Unsubscribe, please go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>