thanks mr nath, but how come this would have been done ? if seems i don't have a choice but to reinstall and resetup. is it possible to reinstall the damaged area as reinstlling and resetup will be big problem for me. i am using this server for NAT/RAS/DNS/DHCP/PROXY/WEB services. i am using ipchains and setted masq on ppp and eth1 ports to allow to use this box as gateway to some users as rest use proxy settings.
only recently we have started using cable internet and got one ip. could this has helped the hackers ? earlier we were using diapup connectivity. if possible please help me and tell as what precautions should i take to keep away the hackers.
i will let u know what u have asked as right now my system is in use by users as rest everything is working except login. and see all details i have to boot it to linux single.
thanks km
----- Original Message ----- From: "Tapeshwar Nath" gtapeshwar@yahoo.com To: linuxers@mm.ilug-bom.org.in Sent: Thursday, March 06, 2003 4:27 PM Subject: Re: [ILUG-BOM] Login Problem Please help
- LUG meet - 4:00 pm 9th March, 2003 @ Ruparel College, Matunga (W). *
Hi,
It seems like your machine has been hacked ... and has been played around with. Can u check what glibc version you are using. and whether it has been changed..., whether your mingetty has been tampered with...Also check where your /bin/sh points to...
There are also standard softwares that come thru which you can check your system integrity. Try google search...
You can do all this in single user mode. except google search... :d
do write back what happened...
--Tapesh
--- postmaster postmaster@matlani.com wrote:
ya, i am able to do linux single but since my m/cs syslog is not working since few days can't check the logs. its the standard RH7.1. no changes done. can u tell me what is things which is responsible for giving login prompts ? since i am unable to login can't check any thing. km
----- Original Message ----- From: "Tapeshwar Nath" gtapeshwar@yahoo.com To: linuxers@mm.ilug-bom.org.in Sent: Thursday, March 06, 2003 9:43 AM Subject: Re: [ILUG-BOM] Login Problem Please help
- LUG meet - 4:00 pm 9th March, 2003 @ Ruparel
College, Matunga (W). *
Hi,
Can u just boot your PC in single user mode and
check
out the logs ,,, what exactly the error is ..
at the lilo prompt type 'linux 1' to go intosingle user mode.. this will not ask for login and
directly
give you shell. then visit the logs and find out what the error is ......
BTW is this your standard RH7.1 that is loaded ,
or
made some changes.......
Do write back.. --Tapesh
=====
It doesn't make a difference what temperature a room is, it's always room temperature.
--Steven Wright
Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/
--