On Tue, Oct 08, 2002 at 04:09:33AM +1000, Howard Lowndes wrote: > Why would my externally publicly accessible web/mail server be trying to > establish an http connection to a site somewhere at waseda.ac.jp? As far
What version of apache are you running? And PHP? mailman? ssl? etc? > There is nothing in any of the cron files at this time and the process > table doesn't show anything odd running. (Thinks - check ps) If you've been hacked, don't expect to see anything with normal tools like ps, netstat; they've probably been compromised as well. Matt -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
