What to look for ?

From: charly (kanarispam666_at_yahoo.fr)
Date: 12/19/03

Date: Fri, 19 Dec 2003 21:49:05 +0100


I've setup a firewall script, got an external router which only maps
port 20,21,22,80 to my machine and all is ok :)

But, being prudent (or paranoid :)), what are the standard tools I can
use to check that my machine has not been hacked or hosting a troyan ?

I'm checking /var/log/messages, run netstat to look at the open ports of
my machine.

What can be checked that I forgot :) ?

than you very much for your input :)