Re: password help

[tanvir <antitanvir yahoo co uk>]

At 11:06 AM 10/21/2002 -0400, you wrote:
> On Mon, 21 Oct 2002, Gregory Malsack wrote:
> How do you suppose to "fix" this machine? Someone already did that. I
> suggest a complete new install after a disk format of all partitions, new
> "hard" passwrods and more security on the ftp server in the future.

I would also agree to have strong passwords. For example, use 
upper+lower-case, some numbers and alphanumeric characters. Your password 
should at least be 12 characters but better to have 16-20 characters. Also, 
change password often e.g. twice each month at least.

Also, try to think of something other than ftp or wu_ftpd. You might use 
SSH/ SCP. Try to use something that'd provide end-to-end secure (encrypted) 
connection.

Also, stick to some loyal tools like: PAM, Tcp_Wrapper, Portsentry, 
tripwire, snort etc.

If you want to catch the crackers, it will help installing a honey-pot.

If you have more specific questions come back with them.

Security is not a product, it's a process.

HTH, Tanvir.

"Basically, if you know how to browse the web, you know how to hack a IIS 
server."

__________________________________________________
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com