Re: Re: Is my system compromised

2006-02-04 Thread Ben Meijering
Hi,   I am running a server inside of my LAN which is protected by a firewall (my dsl router). Ports for dns,ftp ssh,http and https are forwarded to my debian machine.   Yesterday I found a script distwatch in cron.daily which was a script to put the rootkit back if an admin has remove

Is my system compromised

2006-02-03 Thread Ben Meijering
Hi,   I am kindy new to using Debian and was wondering if anyone could help me. I was looking in my /etc/rc2.d directory to see what kind of services were installed on my server.   The contents of my rc2.d directory is as follows   S10distwatchd  S20courier-authdaemon  S20nfs-kerne