Hi Kevin This does sound very strange indeed !
Have you checked the /var/log/messages* files ? one approach would be to compare older versions of the messages file before you had the problem to the messages files that you are getting now. If something is seriously afoot on your system , this file will sometimes tell you about it. You can also check the boot.log files just for the heck of it , but I doubt if that will help any. Use the 'find' command to search for files that were modified within a certain time , based on when you started noticing the problem. If there are system files or binaries that you know you did not change , your system could be infected with a worm or a virus of some kind. Curious : are there any unusually named hidden files sitting in your temp directory ? Regards , Jason ----- Original Message ----- From: "Kevin Weslowski" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 28, 2002 5:24 AM Subject: ftpd and sshd services not responding > Hello, > > I've been running my Redhat 7.1 now for about 6 months. I have it configured as my fitewall/router/gateway/WWW server/ftp server/SSHD server. Whenever I needed to do some work on it, I just connected with my ssh client from my Windows machine from inside my home network...ftp also used to work fine. > Just today, I noticed that I couldn't connect via ftp or ssh anymore. I haven't changed any configuration on that system since I was able to connect fine. I've stopped and started all the relevant daemons (sshd, xinetd) to try to correct it but no luck. I assume the system has somehow been compromised. > Also, another weird thing...I'm running Apache 1.3 on it...all http requests from my windows machine only return the page after about 30-60 seconds...but they always return, eventually... > I can ping to the machine fine, if that gives any clues... > the ftp/ssh logs all report timeouts when trying to connect... > > So, I'm down to working at the system console (a drag) until I can get this straightened out...If anyone has any suggestions on what they think might have happened or if I can give further debugging clues (provide logs, give my IP address for testing, etc.), let me know... > > Thanks, > > Kevin > > > > _______________________________________________ > Seawolf-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/seawolf-list _______________________________________________ Seawolf-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/seawolf-list
