Security!

[Chuck Gadd <cgadd cfxc com>]

I just wanted to send a message for all new linux users out there.

I just finished sending emails to the contacts for 2 linux boxes
which were used to attempt to crack 2 of my linux servers.  A
port scan of the attacking boxes revealed ALL SERVICES running
on both, appearing as a freshly installed RedHat box.  My guess
is that crackers have broken into these other linux boxes, and
the crackers are using them to crack other machines.

Both attempted to use the IMAP exploit to gain access to my
servers.

Please, if you are just setting up a linux box for the first
time and it's connected to the net, PLEASE ask an experienced 
linux admin for some security assistance.

These fresh installs make prime targets, and the crackers seem to
find them within hours of installation.

One of my clients is in discussion with their lawyers about the
possibility of sueing the owner of one of the cracked machines
for negligence.

--
Chuck Gadd
Director of Software Development, Cyber FX Communications
e-mail:cgadd cfxc com  http://www.cfxc.com