Re: [AMaViS-user] possible hack attempt via user amavis

2006-11-08 Thread Mark Martinec
Mark Richards, This afternoon (4pm EST) I was doing some maintenance work on our server and suddenly my ssh telnet session dropped. Attempts at reconnecting yielded a certificate missing error. FTP, HTTP, and our email services (dovecot with amavisd/clamd/spamassassin and postfix with

Re: [AMaViS-user] possible hack attempt via user amavis

2006-11-08 Thread Jakob Curdes
.. but that is not really amavis-related. You might have other users that have guessable passwords as well. Running an unrestricted sshd is a big hole per se; The least everybody should do is to restrict the allowed users and disallow direct root login. Furthermore the user list should

[AMaViS-user] possible hack attempt via user amavis

2006-11-07 Thread Mark Richards
This afternoon (4pm EST) I was doing some maintenance work on our server and suddenly my ssh telnet session dropped. Attempts at reconnecting yielded a certificate missing error. FTP, HTTP, and our email services (dovecot with amavisd/clamd/spamassassin and postfix with secure ldap) were