Re:[cobalt-users] RaQ3 Telnet Login Not Working

[RaQ3 <cobalt@xxxxxxxxxxx>]

Wayne Sagar <wsagar@xxxxxxxx> wrote on 18.02.01 19:40:05:
>
>I hope I do this right, it's my first question. I've searched the 
>archives here and found most of the answers to any questions I've had 
>in the past, this one seems a mystery. 
>
>Problem: Actually there are two, my active monitor is telling me that 
>my DNS server is not working, but all sites and email are working and 
>I can FTP in with no problem. This could be more of an annoyance than 
>a problem. The real problem and it may or may not be related, I can 
>not get Telnet to accept my user name and password. It hooks to the 
>server, I very carefully type the username/password combo and it just 
>comes up with "login incorrect." Certainly worked last time I went in, 
>which with the help of some of the great people here off-line and 
>messages dug from the archive, allowed me to solve some other sticky 
>problems (short time out in ftp sessions etc) 

Hi Wayne !

That doesn't sound very good. Probably a hack through bind or FTP.
The fact that your sites are still working is most probably a result of
the second DNS which is on another machine.

First I would get a ssh client from www.openssh.com, install it on your
client machine (linux, windoze) and then try to get into your server.
I think by standard the server ssh is running.
If you get a connection but the password is not excepted then go 
into the GUI, change the password and ssh in.

Then have a look around. One sure sign you'd been hacked is a 
directory: /lib/security/.config

If you find this directory then you will have to spend some time to
search the last posts and the archive ...

Good luck !
Thomas

--
InternAd.de
Internet Advertising
Thomas Prosi
tp@xxxxxxxxxxx