> How can I find where the logins came from. For now I have disabled telnet,
> except locally as I will use ssh to check my mail remotely.
/var/log/messages
/var/log/secure
and just about anything else in /var/log is good reading :)
> Any ideas how they may have got in, or what should I look for to get more
> info on this.
Make sure /etc/inetd.conf doesn't have unused services enabled.. and that
you aren't using things you don't need to be.
What are some services that you are running?
-Statux
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
