Re: strange connection on port 111.. more question

From: Hugo van der Kooij (hvdkooij@vanderkooij.org)
Date: 08/16/01


Date: Thu, 16 Aug 2001 02:37:41 +0200 (CEST)
From: Hugo van der Kooij <hvdkooij@vanderkooij.org>
To: Focus on Linux Mailing List <focus-linux@securityfocus.com>
Subject: Re: strange connection on port 111.. more question
Message-ID: <Pine.LNX.4.33.0108160236050.6409-100000@hvdkooij.xs4all.nl>

On Thu, 16 Aug 2001, xyros wrote:

> thx for kind replies.. it's helpful for me :)
>
> i know system reconstruction is the best way.. but that's not allowed to me yet *sniff*
>
> I'm trying find the hacking proof..

If you can't determine for sure you have cleaned out all backdoor's and
such you are not able to bring the server back online.

Hugo.

-- 
All email send to me is bound to the rules described on my homepage.
    hvdkooij@vanderkooij.org		http://hvdkooij.xs4all.nl/
	    Don't meddle in the affairs of sysadmins,
	    for they are subtle and quick to anger.