This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hacked by a pro

It seems that my ASL 6.001 box has been hacked from the external interface (the internet). I have some evidence of a rather well-known hacker [not an oxymoron - just a moron] sniffing my network. Then today all network functions were running afoul and the source of the trouble was ASL. Reloading the configuration from backup seemed to do the trick in getting basic network function back, but this does not solve the problem of the integrity of the machien itself. It appears that there is no feature/function that one can use to determine which files have been altered on the system. This I find hard to believe so I'd like to be proven wrong.

Can anyone help?
Basically I'm looking for Astaro forensic tools.
Tripwire might do the trick.

Thanks

This thread was automatically locked due to age.

0 NimmdirKeks over 20 years ago in reply to ReD-MaN

Hi,

there are many ways to get a Virus past the Astaro.

For example, password protected attachments, services that dont go trough virus engine of the proxies (like MSN), users that hook up their home notebook to the corp network, or the ones who use usb-stick to transfer data ect. ect.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 SalishSwede over 20 years ago in reply to NimmdirKeks

Yes I have DNS NATed throught the firewall.
I'm running a DNS server and thus need external servers to be able to connect to mine.
Cancel
Vote Up 0 Vote Down

Cancel
0 dayne1432 over 20 years ago in reply to SalishSwede

If the DNS server that is accessible from the internet is not on the DMZ, you are just asking to get hacked.
Cancel
Vote Up 0 Vote Down

Cancel
0 SalishSwede over 20 years ago in reply to dayne1432

Hmmmmm perhaps a reconfiguration is in order.
I've been playing around with Microsoft's Small Business Server and they incorporate a potpourrie of "services" in the one server. Putting this beast out in the real world would be a disaster: Microsoft can't handle the storm. Perhaps a secondary linux DNS server placed out in the DMZ is indeed the answer.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel