RE: [cobalt-users] HaQ'd? Or not? Lion tracks...

["Jay Jennings" <jennings@xxxxxxxxxx>]

> Does your machine handle mail for any other domain? It may have gotten
> forwarded....Data Format Error happens with some spam tricks too, so it
> may well be forged...

Yes, I have a couple dozen domains on the server.

> try chkrootkit too , just in case it's one thing pretending to be another

I ran chkroot and it didn't find anything.

> try to telnet to port 53 on your machine and see if it connects....

As I headed for telnet to give that a shot, a little tiny voice in the back
of my head said, "Should you do that if you're running Portsentry?"
Unfortunately, that little tiny voice just wasn't assertive enough -- and I
locked myself out of my own server. Doh! But I reset my DSL connection to
get a new IP and got back in.

So, the answer to the question is no, I can't connect to port 53 via telnet.
(I took that as a sign and turned off telnet and am using SSH now.)

Anything else I should check that will tell me if I'm hacked? Or do I just
wait and see? :(

Thanks.

 ..jj..