my server was cracked; now what?

[Zbigniew Koziol]

You should rather reinstall the system. And try to do that in a more secure 
way. Firewall. Improving security might be a solution but do not trust that. 
Once the system has been compromised it should be reinstalled. You never know 
what was done there.

Heh, I saw similar cases even on production servers of companies who would 
wish to be considered respectfull ;)

zb.

On Monday 17 July 2006 23:03, Aaron Vegh wrote:
> Thanks for all the advice.
>
> My first step was to eliminate two user accounts created by the
> attacker, and I've been watching the server all day for any further
> Cheers,
> Aaron.
>
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml