>
> Dear friends.
>
> I think my server has been hacked. [Redhat 6.2].
Just because some info gets flashed doesn't mean that
you were hacked. And just because things seem to be
working fine doesn't mean that you were *not* hacked.
As suggested elsewhere, re-install. Anyway 6.2 is bad
news and not worth reconstructing. Also, checking logs
will most probably prove futile, since clearing
his/her tracks is the first thing a cracker would do.
After upgrading, take a look at http://www.lids.org
and http://www.snort.org LIDS used to be a bit buggy
but it_will_prevent_tampering.
Cheers,
Vivek.
__________________________________________________
Terrorist Attacks on U.S. - How can you help?
Donate cash, emergency relief information
http://dailynews.yahoo.com/fc/US/Emergency_Information/
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help