SMBD, do you mean SAMBA server daemon? This is another interesting point. People should shutdown services they don't use, for example, routed or gateway or NIS or SMBD. Because Linux is intended to be used on a multiuser networks, a lot of these services are installed by default are initiated by default. Learn your OS before you use it! Vic ******* ******* ******* have you thought of visiting Cybertsar's Internet Kingdom? It is still alive! Here is the URL: http://go.to/vtsaran or http://kickme.to/vtsaran ******* ******* ******* ----- Original Message ----- From: "Frank J. Carmickle" <frankiec@xxxxxxxxxxxxxx> To: "Kirk Wood" <cpt.kirk at 1tree.net> Cc: <speakup at braille.uwo.ca> Sent: Monday, October 30, 2000 7:11 AM Subject: Re: security > This is very true. Shawn calls me up at 12:00 am saying that sshd is > running but he can't get any connections on port 22. Tcpdump on port 22 > revealed some trafic. Searching through inetd revealed some crazy service > called smbd2 which spauned a shell as root. This all happened after the > machine misteriously rebooted. > > Fun! > FC > > > On Mon, 30 Oct 2000, Kirk Wood wrote: > > > You should look for any connections from IP addresses you don't > > recognize. While this would be harder for a production system, on a home > > system it shouldn't be too tough. I would pay particular attention to ftp > > connections (if you have the service available. > > > > As for everything you can look for, that fills books and employs > > profesionals all with their own opinion. And just so you know, if you have > > a full time connection and find one day you can't log into your own > > machine. Turn it off. I have a friend who thought somethign had just gone > > wrong and needed fixed. Turns out his system had been compromised. If in > > doubt shut down and remove it from the net. > > > > ======= > > Kirk Wood > > Cpt.Kirk at 1tree.net > > > > > > > > _______________________________________________ > > Speakup mailing list > > Speakup at braille.uwo.ca > > http://speech.braille.uwo.ca/mailman/listinfo/speakup > > > > > _______________________________________________ > Speakup mailing list > Speakup at braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup
