Re: [cobalt-users] RaQ4 - have I been hacked?

["Wayne Sagar" <shortfork@xxxxxxxxxxx>]

> FTP appears to be turned on, and connections on port 21 are accepted,
> but it seems that the FTP user authentication is broken. I've created
> a new user and password and even that can't log in to FTP but can via
> SSH.

Since you said you had installed the OS2 update, could this be related to 
the problems that the update has caused some users with a double FTP entry?

I've copied a message I've saved for when I do the update <gulp> soon and 
this may help.

Ralman posted this on the developers list today.

=-=-=-=-=
Looking into the "cannot bind IPADDRESS:21 to server 'ProFTPD', already
bound to 'ProFTPD'"
issue, I came across the following answer to the problem.

Check your /etc/proftd.conf

Scroll down the the <Virtual Host> settings and delete the duplicate entries
for each IP.

Restart your inet processes.  The following command has been recommended by
others.
Not sure of that, since I just rebooted the machine.
/etc/rc.d/init.d/inet hard-restart

Fixed the issue for me.  No more nasty messages in the log files.


Hope this helps.

WS

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com