Restart logging ->
Check /etc/syslog.conf...
man syslog
> -----Original Message-----
> From: Kerry Miller [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, September 19, 2000 12:49 PM
> To: '[EMAIL PROTECTED]'
> Subject: No log entries in /var/log/messages or secure
>
> Ok, I've taken several of your suggestions about looking at this hacked
> server. Somehow, they've turned off the logging and there are no entries
> in anything under /var/log where you would normally check out the logs.
> How can I restart the logging? I saw syslog in the rc3.d directory but
> haven't gotten past that yet. It looks like they are using his database
> server as a porn web server, and it's getting a LOT of use!
>
> Also, I'll have to plead guilty for 2 things yesterday:
> 1. Asking a question which was answered earlier
> 2. Posting to the list with a blank subject line
>
> I'll start my pennance now... I forgot I was on the digest and it didn't
> put the subject line up there for me. In the mean time, can this stupid
> hacked server be my good deed for the day?
>
> Thanks for the help, if you can tell me how to get the logging back I'll
> see if we can catch this sucker. Whoever set up the machine left the
> hosts.allow and hosts.deny files empty and every service in the world is
> running whether they need it or not.
>
> Thanks,
> Kerry
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list