[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-wizards
Subject:    [fw-wiz] OS2 breakin
From:       hermit1 <hermits () mac ! com>
Date:       2001-02-20 19:54:30
[Download RAW message or body]

This morning I found out that someone somewhere apparently broke into an 
OS2 machine, created a user, started sendmail, and who knows what 
else.  There isn't anybody left here who knows about OS2, so I have a 
couple of questions.

Are there logs of system activity so I can find out how long ago the 
breakin happened?  Is there some way to find out when sendmail was started?

I am probably going to have the system owners format the disks, but I would 
like to know how the machine was compromised.

Any suggestions?

Thanks,
hermit1 
_______________________________________________
firewall-wizards mailing list
firewall-wizards@nfr.com
http://www.nfr.com/mailman/listinfo/firewall-wizards

[prev in list] [next in list] [prev in thread] [next in thread]