I have seen recently a few exploits against the linux kernel - even 2.4.18
was vulnernable. SSH is not as secure as it could be - best to limit where
you can connect to it from via iptables or something like that - and of
course keep it up to date. Also make sure there are no scripts on your
websites that might cause problems - also seen some people with fairly
intelligent scanners looking for things like that.

dave

----- Original Message -----
From: "Dan Banyard" <[EMAIL PROTECTED]>

> I never surfed the net as root....and thought I had the box locked down -
> only open ports were the normal ones (80, 21, 22) etc.  I have no idea how
> they got in but maybe it was through SSH (I might have a older version
that
> could be hacked).  There was no telnet or anything like that.


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to