Nilesh wrote:
Hello All,
Some one trying to Hack My System I have checked the
/var/log/messages but could found the entries for
which remote systems are trying to connect to my
system
Which logs should I check?
or is there good software for real time alerts
Regards
Nilesh.
--- Mad Unix <madunix@xxxxxxxxx> wrote:
chkrootkit is a good one for looking to see if your system is exploited,
but I'm personally quite pleased with OSSEC (www.ossec.net) it's an IDS
that will allow you to actively respond to particular threats. I have
mine set to automatically block IPs who are scanning my system's sshd or
http.
--
Ita erat quando hic adveni.
Mark Haney
Sr. Systems Administrator
ERC Broadband
(828) 350-2415
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
