[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

about chroot wu-ftpd; was->Re: Re: the port 41430?I was cracked :-(



talking about wu-ftpd, I know that anonymous user in wuftpd release by red hat using chroot env,
is this meant that, even I ran wu-ftpd in chroot, still can't protect your system.

so what the chroot really used for?? 
I have read Securing Red Hat by Gerhard, in his book he still using
wu-ftpd in chroot environment

need for explanation, please
I'm really confusing :(


On Sun, Jun 02, 2002 at 10:41:36AM +0800, Huter.Liu wrote:
> hi,Hal Burgiss!
> 	I know how to fix a damaged system,I'll install rh7.3 and use vsftpd to do ftp server,and I'll change ftp port to 2323,just open ftp to internal networks(use ipchains)....I'm not the manager of this damaged system,my friend manage it,just a few days ago he found the ps and netstat command can't use,so he found his system is cracked,now we want found out the cracker,my friend is good at programming,now he've write a programme to record the attempt quest to port 21 and 23,but I want  gather more information from system log or other relate things......
>     Thank you very much,hehe.
> >The reason being someone else seems to have root access on your
> >machine, and may have multiple backdoors that are well concealed, and
> >you many never find them all.
> 
> ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡huter xtu edu cn
> ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡2002-06-02
> 
> 
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> Redhat-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-list

-- 
ichtus
------
Lewi Supranata .K
ICQ: 50643061
Homepage :  http://mercury7.petra.ac.id/~ichtus 
       ---> http://www.petra.ac.id:8080/~ichtus/ <---
GnuPG Public Key :  http://mercury7.petra.ac.id/~ichtus/ichtus-keys

Attachment: pgp00000.pgp
Description: PGP signature


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]