> I got a call from my ISP saying my server is attempting to connect to
> other computers on their network. They wouldn't give me any information
> on what computers my server was attempting to connect to, but I got an
> email from one of the people whos computer was getting attempted
> connections to from my computer. In the email he included this from a
> log file:
> As I look through the log file, there are a lot of different FTP
> sessions opened by something called ftpd. I did a search on yahoo.com
> and redhat.com for in.ftpd and each search that came up involved WU-FTP.
> I do have WU-FTP running. Is there a setting in WU-FTP to attempt to
> connect to various computers on the network or something? Is so is
> there a way I can stop it form doing it?
You seem to be confusing your ftp server, wu-ftpd, with an ftp client.
wu-ftpd only allows incoming connections into your server and has no ability
at all to initiate connections to anybody else.
What you need to determine is what else is running on your system. Do you
allow incoming telnet or ssh connections? Could you have been hacked? Did
you patch your wu-ftpd server as soon as the patches were released last
year? If not, a hacker could easily have penetrated you that way.
Do at last and see if the information looks normal. run rpmverify and see
what has all changed.
Cheers,
.../Ed
Ed Wilts
Mounds View, MN, USA
mailto:[EMAIL PROTECTED]
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
