Re: [Rkhunter-users] help me understand errors

I’m not seeing any “Errors" there, just “Warnings.” Every time you update your system, you should run rkhunter to see what has changed (“The file properties have changed”). After you are satisfied that those files were properly updated, run sudo rkhunter —propupd to store the new file propert

Re: [Rkhunter-users] Rkhunter & squid 3

Sorry, I have written Debian 8.1, actually it is Debian 8.6... -- Andrea Boccaccio Il 19/09/16 12:01, Andrea Boccaccio ha scritto: > I have a proxy server, a GNU/Linux Debian 8.1 64bits with installed > Squid 3.4.8-6+deb8u3 and Rkhunter 1.4.2-0.4, both installed via the > packet manager. > >

Re: [Rkhunter-users] Rkhunter & squid 3

Hi there, On Mon, 19 Sep 2016, Andrea Boccaccio wrote: >> As check I run "rkhunter --check --enable all --disable none --rwo", >> sometimes it gives me some warnings about some possible rootkit ... Have you looked at the FAQ? -- 73, Ged. --

[Rkhunter-users] Rkhunter & squid 3

I have a proxy server, a GNU/Linux Debian 8.1 64bits with installed Squid 3.4.8-6+deb8u3 and Rkhunter 1.4.2-0.4, both installed via the packet manager. As check I run "rkhunter --check --enable all --disable none --rwo", sometimes it gives me some warnings about some possible rootkit checking

[Rkhunter-users] (No Subject)

I would like to know if there is a cause for alarm in any of the following: Warning: The command '/usr/bin/lwp-request' has been replaced by a script: /usr/bin/lwp-request: a /usr/bin/perl -w script, ASCII text executable sudo nano /etc/Warning: The following processes are using deleted files: Pro

Re: [Rkhunter-users] (No Subject)

Hi there, On Mon, 19 Sep 2016, Faederwulf wrote: > I would like to know if there is a cause for alarm in any of the following: > Warning: The command '/usr/bin/lwp-request' has been replaced by a script: > /usr/bin/lwp-request: a /usr/bin/perl -w script, ASCII text executable Did you update som

[Rkhunter-users] warnings in daily run report

Hi all, This is my first foray with rkhunter so I'm still learning how it works. I recently built a fresh Centos 7 server with the intention of having it locked down pretty tight. # uname -a Linux ABCDEFG 3.10.0-327.28.3.el7.x86_64 #1 SMP Thu Aug 18 19:05:49 UTC 2016 x86_64 x86_64 x86_64 GNU/Lin

Re: [Rkhunter-users] warnings in daily run report

First please tell us you have read through the rkhunter FAQ’s and searched the list archives for similar questions and then ask again. -Al- On Mon, Sep 19, 201

[Rkhunter-users] RKHunter keeps sending warnings email but no warnings generated

Hi, I've got RKHunter running on three independent servers. Just recently, over the last week or so, I've started receiving email warnings that my servers may be infected. However, when i look in the logs there are no warnings and when I run rkhunter manually from the command line everything see