hack attempt on my server...What do you do about this?

[Craig White]

On Sat, 2004-07-17 at 17:41, John Dangler wrote:
> Clifford~
> Thanks for the reply.
> rpm-qa|grep logwatch reveals:
> logwatch-5.1.3
> 
> I haven't started looking at the 'root' mail yet, since I haven't figured a
> way to get the email client to read the root from the local system.
> I did find the man page on logwatch and am reading up on it.
> 
> Thanks for the tip!
----
edit /etc/aliases

put in an alias for root to forward email to any address you want.

Craig