Mailinglist Archive: opensuse (3666 mails)

< Previous Next >
Re: [SLE] My server got hacked? Anyoen seem this?
  • From: Henry Tang <henry@xxxxxxxxxxxxxx>
  • Date: Sat, 12 Mar 2005 00:55:35 -0600
  • Message-id: <42329267.8080501@xxxxxxxxxxxxxx>
Nope, i don't think i am. I am running 7.3 which is a discontinued product. I am working on SuSE 9.2 now ^.^ I think it'll be much more secure than 7.3.

Allen wrote:

On Fri, Mar 11, 2005 at 12:57:14AM -0600, Henry Tang wrote:

What i need to know now is what else can i do to find how this person hacked into my system. I checked message logs and mail logs and i found the date and time the email was sent out, but I dunno if the log files got cleaned or not. What other logs can i look into?

If you're rooted they can not only delete logs but forge them. Meaning the
holes where the log has been deleted can be forged so that it appears
nothing happened.

Again, were you updated with alls ecurity patches?

< Previous Next >
Follow Ups