lkml.org 
[lkml]   [1998]   [Mar]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: 2.0.33 attacked!
Date
> I picked this up from a friend who's computer was attacked, the attacker
> would only reveal that this is a big in 2.0.33.

No bug there

> Feb 22 15:04:36 nasa in.rshd[442]: connect from 200.231.198.213

Bozo tries to connect from an invalid port
> Feb 22 15:04:36 nasa rshd[442]: Connection from 200.231.198.213 on illegal
> port

Rsh kicks him off

> 5:04:38 nasa inetd[63]: shell/tcp server failing (looping), service
> terminated
> 5:07:35 nasa inetd[63]: auth/tcp server failing (looping), service
> terminated

Your machine is defending itself by shutting services off for a couple of
minutes. If they dont come back your inetd is old. If you dont want that
to occur change them to "wait.10000" in /etc/inetd.conf


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:41    [W:0.023 / U:0.200 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site