Hi,
Assuming access to dnews was gained remotely, the following settings are
most likely not set correctly -
tellnews_pass_mask 127.0.0.1,your.LAN.ip
dmgrsvc_access 127.0.0.1,your.LAN.ip
These are both recommended settings.
You should also consider the possibility that access to your system has
taken place via other means, and that changes to the dnews configuration are
as a result of that. Ensure you are not running DAdmin on an insecure system
which would also permit access to the server configuration, and that your
login details are not saved on systems where access to the Web interface is
used.
If you suspect changes to the configuration are still possible with the
above settings, please get back to us with details.
- Roydon L.
----- Original Message -----
From: <[EMAIL PROTECTED]>
Newsgroups: netwin.dnews
To: <[EMAIL PROTECTED]>
Sent: Monday, June 24, 2002 2:18 AM
Subject: I find someone can hack in dnews to kill post and edit conf....
> any setting can prevent this risk?
>
>
>
