sendmail hacked

Manuel Aróstegui manuel at todo-linux.com
Mon May 25 12:28:10 UTC 2009


On Mon, 2009-05-25 at 13:42 +0200, Tosh wrote:
> check the log files, both the sshd and the sendmail logs
> only root users can change anything in the /etc/mail folder
> so look out for any root access and check whether it was you or anybody else
> 

If I were the guy who broke into, I'd have deleted all the logs :-)

Manuel.




More information about the redhat-list mailing list