Re: [cobalt-users] Strange RaQ3 Crash...PHP???

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Bradley Caricofe wrote:

> Oh we're definitely going to reload the entire os, but I'd really like to
> know what happened before we do, so we can hopefully prevent it in the
> future.  The ISP was helpful in that they got the machine back up and
> running, but as is their nature they have answered none of my requests
> since.

I think now, based on what you wrote, that you may have been hacked, and
then when the machine stopped responding (some colo companies monitor
such things) they shutdown and then rebooted the RaQ, and then ran
fsck.  That's a logical scenario, though there are some holes in it as
well, and you won't know what the colo did until/unless they tell you
<frown>.

You may want to consider some system hardening on the rebuild before you
put it back into service.

Contact me offlist if you'd like.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484