Re: machines hacked & newest version of snmp

Li Li wrote:
> One of my redhat Linux box had been hacked. When I
> checked the log file, I found somebody using su to be
> the root. I also found something use chkrootkit. 
> Is it because I had net-snmp running recently and with
> the port opened to all in the iptables? or some reason
> else?

Without you telling us your net-snmp configuration, it'd be impossible 
for us to answer your question. But judging from your vague description, 
it sounds quite unlikely that net-snmp was the root cause of your 
problems. I'd suggest getting a security expert to double-check your 
overall system configuration.


+Thomas

-- 
Thomas Anders (thomas.anders at blue-cable.de)


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users