RE: [cobalt-users] Hacked - Needs help

["Sean Chester" <seanc@xxxxxxxxxxxxxxxxxxxxxx>]

>I have a Raq3i. It seems it is hacked. I was not able to get into the
>server at all (no FTP, no TELNET, no Emails).

can you use your http GUI ? you can switch on/off services through this.
switch back on the services your require and change your admin password.


>I want to know what files I should change to enable telnet server and to
>get into the system using telnet. Also, after this is done, I want to
>install SSH on the server. Any ideas or suggestions??

switch on telnet in the GUI.
You can install the SSH .pkg from pkg.cobalt.nl its straight forward.

there is also a lot more you might want to do.. install porstsentry and
logcheck for a start.
you should also have a good look round your server for 'suspicious' files.
perhaps download chkrootkit and run that.

read through the archives of this list, im sure it will help you recover
from the hack.