LinuxSA Mailing list archives

  From: Andrew Pullin <andrew@hotspurbgc.com.au>
  To  : Mark Newton <newton@atdot.dotat.org>
  Date: Sun, 4 Feb 2001 15:18:36 +1100

Re: I've been spammed! And Violated! and Compromised!

Hi Mark,
    No, they definitely have been in. There are mysterious
password changes and files accessed and changed and all
that. I think the spamming was a cover up for it. When I
checked, all relaying was off, and yet it was still
happening. I am looking into logs at the moment.
    Cheers!
        Andrew.


----- Original Message -----
From: Mark Newton <newton@atdot.dotat.org>
To: Andrew Pullin <andrew@hotspurbgc.com.au>
Cc: <linuxsa@linuxsa.org.au>; <luv@luv.asn.au>
Sent: Sunday, February 04, 2001 3:08 PM
Subject: Re: I've been spammed! And Violated! and
Compromised!


> On Sun, Feb 04, 2001 at 01:16:54PM +1100, Andrew Pullin
wrote:
>
>  >     Well I suppose it was just a matter of time, but
someone
>  > broke into my system and used me to spam yesterday. I
think
>  > that I have blocked the immediate holes, but I plan on
>  > reinstalling the server again in case they left behind
any
>  > nasties to try again later.
>
> Umm - Spammers don't usually break into systems (they
aren't that smart).
> Are you sure you haven't just been an open relay?
>
>    - mark
>
> ----------------------------------------------------------
----------
> I tried an internal modem,
newton@atdot.dotat.org
>      but it hurt when I walked.
Mark Newton
> ----- Voice: +61-4-1620-2223 ------------- Fax:
+61-8-82231777 -----

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject