[cobalt-users] HaQ'd? Or not? Lion tracks...

["Jay Jennings" <jennings@xxxxxxxxxx>]

I got home tonight and found two bounced pieces of email -- one was a Local
Configuration Error and the other was a Data Format Error. Attached to those
error messages was an email from Lion that said my server (a RaQ3) was
hacked. The letter also gave "instructions" on un-hacking the server (I
didn't try that).

My first stop was the archives where I found out about Lionfind. I ran it
and it says, "To the best of my knowledge the Lion worm is NOT on this
filesystem."

So, how do I know if I was hacked or not? I'm not doing my own DNS, but I
got to thinking that I have no idea whether BIND is still active on my box
(newbies, sheesh!), so I guess it's possible, but since Lionfind says no...

Any advice? Thanks.

 ..jj..