[YLUG] Security problem

chl501 at york.ac.uk chl501 at york.ac.uk
Mon Apr 9 15:53:50 BST 2007


I think my box currently should be safe. I just want to learn and have 
ability to detect (or at least to describe my doubt to others) if something 
goes wrong.

The information provided is useful. I appreciate all your advice. Thanks 
you: )

On Apr 7 2007, Alex Smith wrote:

>Most people check for "trojans" (or rather, rootkits in Lunix) with
>chkrootkit. This is available through apt, or from
>http://www.chkrootkit.org
>
> The likelihood of your box being compromised is variable depending upon
>your circumcstance. If, for instance, your box is behind NAT and using
>only apt-get to install software (which you keep up to date) you're
>almost guaranteed to be safe - (pending port forwardings).
>
>Is there any reason you have to believe that you've been infected by a
>trojan? I don't mean to sound rude or accusatory, but it does seems an
>odd concern! :)
>
>With regard to your iptable rules, I'm clueless with it, so I'll have to
>leave that to someone else to comment on.
>
> I hope I've answered some of your questions, but must apologise for any 
> lack of sense/omissions, as I've been up (mostly) since Thursday in and 
> out of York Hospital visiting.. :)
>
>On Fri, Apr 06, 2007 at 10:02:05PM +0100, chl501 at york.ac.uk wrote:
>> <snip>
>>
>>
>Alex Smith
>



More information about the York mailing list