Do you mean you have samba open to the internet? Why / What for?
I have three computers that are all connected via a switch, and the switch is connected to the net, so all the machine had a direct internet connection. I wanted to transfer files between the one win2k machine and the linux box. :-( so I set up samba to do that.
So all your boxes are open to the 'net. That's bad. Really bad. You've already seen in the logs the battering the thing has taken from script kiddies and automated cracking programs. It's only the fact it's not a Windows box running IIS which let it go as long as it did.
Given this information, I'd reassess my position: it's quite likely a cracker has been in there. I'm still not convinced that's the source of your problems, but it's defnitely possible.
Given this now realistic possibility, there's only one to to do: get
Thanks all for the help.
Can I ask one really dumb question? How can I check where the other
machines on the network (win2k machines) have been cracked?
Regards from Denmark,
Dan
----- Original Message -----
From: "Derek Fountain"
off it, taking *nothing executable* as you do so, and do a complete reformat and reinstall. Don't reconnect to the 'net until you have a firewall solution of some sort in place. Oh, and you might want to check the other machines on your network - if one has been cracked it's likely the rest have too.
-- "...our desktop is falling behind stability-wise and feature wise to KDE ...when I went to Mexico in December to the facility where we launched gnome, they had all switched to KDE3." - Miguel de Icaza, March 2003
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com