Re: Re: the port 41430?I was cracked :-(

["Huter.Liu" <huter xtu edu cn>]

hi,Hal Burgiss!
	I know how to fix a damaged system,I'll install rh7.3 and use vsftpd to do ftp server,and I'll change ftp port to 2323,just open ftp to internal networks(use ipchains)....I'm not the manager of this damaged system,my friend manage it,just a few days ago he found the ps and netstat command can't use,so he found his system is cracked,now we want found out the cracker,my friend is good at programming,now he've write a programme to record the attempt quest to port 21 and 23,but I want  gather more information from system log or other relate things......
    Thank you very much,hehe.
>The reason being someone else seems to have root access on your
>machine, and may have multiple backdoors that are well concealed, and
>you many never find them all.

　　　　　　　　huter xtu edu cn
　　　　　　　　　　2002-06-02