Re: We've been compromised, now what...

From: Axel Hammer (alpha01@dt-intra.de)
Date: 05/28/02


From: Axel Hammer <alpha01@dt-intra.de>
Date: Tue, 28 May 2002 22:15:10 +0200

Nameless User schrieb:

> Hello,
>
> Our organization has a small network with fewer than 30 clients, one pdc,
> and one bdc. There are about 20 accounts. The pdc running WinNT 4 Server
> is also a web server (iis 4) and the bdc running WinNT 4 Server is also an
> exchange 5.5 server. I am trying to lock everything down, what can I do at
> this point (aside
> from starting everything from scratch).

Turn off the Network or at least the internetconnection.
Then go and read lots on security. The topic of 'Firewall' and 'demilitarized
zones' will help you best.
Try to use a 'real' OS für server-thingies on the internet.

Best of what you can do is, get some security-professionals to clean up your
mess and to re-structure your network.

Axel

--
de:
Daten-Treuhand.de

Michael-Imhof-Str. 17 86609 Donauwörth Tel.: +49 (0)906-70570621 Fax: +49 (0)906-70570622

info@daten-treuhand.de http://www.daten-treuhand.de



Relevant Pages

  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: << SBS News of the week - Sept 26 >>
    ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)
  • Re: << SBS News of the week - Sept 26 >>
    ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
    (microsoft.public.windows.server.sbs)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)