Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[discuss] Follow Up to Security Warnings Help
From: Jerry Weinstein (jeraldweinsteinearthlink.net)
Date: Thu Sep 11 2003 - 18:57:50 CDT
----- Original Message -----
From: Jerry Weinstein
Sent: Thursday, September 11, 2003 3:35 PM
Okay guys, I have no idea WHERE to begin with this reply,
however I'll tell you what I have (can do based on your replies)
with regards to :
grep 501 /etc/passwd
the reply was
"my user accountID:x:508:501:myscreenname:/home/my useraccountID:/bin/bash"
I went into userconf and 501 or 27 were not even listed as users..
The router has a firewall built into it (filtering I don't know)
I am using NAT.
The grep 1484/3632... yielded nothing
I should tell you this,
all of the IP addresses and hosts are MINE!
I know ALL of these, so actually noone but me has
'attacked' this system.
Given this, what is the situation?
I am the sole user and I control all of this systems activity.