Click to See Complete Forum and Search --> : Hacked or crashed?


freddieB
10-16-2000, 12:49 PM
HELP!!!!

Came into work this morning to find our we server not responding.... Upon further review, here's what I found:

1. Only the server's main page (i.e. /home/httpd/html/index/html) won't respond. If you know the URL, everything else comes up great.

2. FTP and Telnet act as though there are no entries in the hosts.allow file, although our class C is allowed through.

Other than those 2 issues, things appear to be fine. The logs show no compromises, although they could have been altered, etc. There were a couple of people looking for HTML files we don't have, but that's normal for us.

Here's what I need to know. Was my security compromised so I need to re-install and tighten the screws a little more, or did something else happen? There was a power outage that could have taken the server down over the weekend, too.

Thanks!

Bane
10-17-2000, 11:40 PM
Do you have some sort of file change analyzer like Tripwire? If not, look into installing it so you can have an easy way of finding out if your files have been changed.