It was bound to happen - suspected hack

[Brian Kelsay]

Brian Kelsay

>>> Frank Wiles <frank at wiles.org> 10/21/04 08:26AM >>>
On Thu, 21 Oct 2004 09:03:19 -0400 (EDT)
"Jon Moss" <jon.moss at cnonline.net> wrote:

> And then my hosts.deny as follows:
> 
> #
> # hosts.deny	This file describes the names of the hosts which are
> #		*not* allowed to use the local INET services, as decided
> #		by the '/usr/sbin/tcpd' server.
> #
> # The portmap line is redundant, but it is left to remind you that
> # the new secure portmap uses hosts.deny and hosts.allow.  In
> # particular you should know that NFS uses portmap!
> ALL : ALL
> 
> However, I don't really have anyway to test this as I allowed access
> from everywhere that I am.  :)
> 
> Any suggestions and advice is still greatly appreciated.

To test, edit the file to remove your range from the allow area.  Obviousman out.