Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 12:59:26 RetspaN Code wrote: Hello, Yes I'm still have a root access... that is why i right you a letter for a help regarding to this problem on my server which is running freebsd 8.1 p1 release... i did paste the error that i encounter on the server on my

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 13:24:02 RetspaN Code wrote: Hello, Intruder already block, but my problem is the intruder before they get block they load their exploit file to my machine that cause of my machine /usr/src directory is set to read only i can't upload or put any file on that

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 13:41:24 RetspaN Code wrote: 49129472 drwxr-x--x 20 root tonyx 512 Jun 5 13:00 .. who belongs to this group? 49134586 -rw-r--r--1 root wheel6206 Jun 13 2010 COPYRIGHT 49134587 -rw-r--r--1 root wheel 442 Jun 13 2010 LOCKS 49134588

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
: I have a problem to my server running under FreeBSD 8.1 p-1 release Hi, On Saturday 23 June 2012 13:41:24 RetspaN Code wrote: 49129472 drwxr-x--x 20 root tonyx 512 Jun 5 13:00 .. who belongs to this group? 49134586 -rw-r--r--1 root wheel6206 Jun 13 2010 COPYRIGHT

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 14:44:18 RetspaN Code wrote: I did own now by root:wheel but now i'm under on ddos attack. :( but still not yet done the exploit not yet remove. too lag my server due to ddos attack. the server must be off-line if you want to have the tiniest chance to get

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-23 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 15:33:45 RetspaN Code wrote: also this 14417 ?? Ss 0:00.02 /bin/sh - /usr/sbin/periodic daily 14425 ?? I 0:00.04 /bin/sh - /usr/sbin/periodic daily as long it is online, there is a very, very low chance to get anything done. And even when it is

Re: I have a problem to my server running under FreeBSD 8.1 p-1 release

2012-06-22 Thread Erich Dollansky
Hi, On Saturday 23 June 2012 09:47:35 RetspaN Code wrote: Hello, Since you all the responsible of freebsd source and updates... Is there you are the only one responsible for the break in. So, what was the problem? anyway to fix my server without re install the system? Oh yes, you can

Problem with my server

2006-12-28 Thread Lisa Casey
Hi, I'm running freeradius on FreeBSD 5.3 I noticed a problem in my radius logs a little while ago. In my messages log I saw the following: Dec 28 03:11:42 radius kernel: pid 53251 (cp), uid 0 inumber 8 on /tmp: filesystem full Dec 28 03:11:55 radius kernel: pid 52711 (perl), uid 0 inumber 7

Re: Problem with my server

2006-12-28 Thread Derek Ragona
Check for symlinks into tmp such as /var/tmp - /tmp Often logfiles will fill /tmp -Derek At 02:35 PM 12/28/2006, Lisa Casey wrote: Hi, I'm running freeradius on FreeBSD 5.3 I noticed a problem in my radius logs a little while ago. In my messages log I saw the following: Dec 28

Re: Problem with my server

2006-12-28 Thread Jonathan Chen
On Thu, Dec 28, 2006 at 03:35:32PM -0500, Lisa Casey wrote: [...] I realise this might be a pretty vague question, but what might cause /tmp to get full? This server is used for radius authentication, email for a few (~ 50) users and it runs bind as a slave DNS server. When it starts to