Thanks to all for the suggestions of snort and tripwire. Once I get my
system back up on its feet, I plan on installing both to keep an eye on my
system.
I'm also going to make sure that my FTP server and sshd server are
listening to non-standard ports, to make it harder for someone to find an
access point.
I was checking some things last night, when my system failed outright (it's
been acting up for a couple of weeks now). When looking at my system, the
screen flickered for a second, and then everything was locked up hard.
When I pushed the reset button, it started to reboot, and then switched
itself off. I had to kill power on the power supply itself before pushing
the "on" button would have any effect, and then the fscking thing switched
off again. Since this is an ATX motherboard, I'm pretty sure that the
motherboard is the culprit here.
Drat it all, like I need *this* right now.... :-/ It's a Epox MVP-3G
(Apollo VIA chipset) motherboard with an AMD K6-2 550MHz CPU in it. The
good news is that the motherboard should be really cheap. The bad news is
"if I can find one near where I live."
Sooo, when I get the new motherboard installed (assuming I can find a
Socket 7, AMD compatable motherboard locally) tomorrow, I'm going to do a
nice clean reinstall - because I'm just not feeling all warm and fuzzy
about the possible intrusion. I'll make sure that both the tripwire and
snort RPM packages get installed this time around (again, thanks to those
who mentioned them to me). This brings me to the next topic that I've seen
mentioned: Restore options. Unfortunately, my poor Linux beast does not
currently have any kind of backup media available to it. My Win98SE box
(on the home network) has an internal IDE Travin TR-4 tape drive connected
to *it*. Is there any kind of software that can be used on the Linux
machine to let it use this device for backup and restore purposes? (Note
that I'm not sure that I can set up the device on the Windows machine to be
a "shared" device, so I have no idea if this would be doable.) Does anyone
have any ideas about low-cost (or free :) backup solutions that can be used
with a Linux machine? It *would* be nice to just be able to run a restore
program and let it copy the system back from tape/disk/whatever, rather
than have to do a new install and then go back and configure everything,
*again*, to get the system running the way I want when something like this
happens.... :-)
--Dave
--
David Guntner GEnie: Just say NO!
http://www.akaMail.com/pgpkey/davidg or key server
for PGP Public key
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com