Re: hacked server

2006-03-18 Thread Tony Godshall
No not as a mirror. No not as raid. Just online/available but not in $PATH, not booted from. BIOS boots from typically CDROM first, IDE0 primary second. If your drive is on IDE1 (or SATA1), BIOS shouldn't load it's boot sector, and Linux shouldn't mount it or run anything off it unless you tell

Re: hacked server

2006-03-18 Thread Alvin Oga
On Sat, 18 Mar 2006, Jon Miller wrote: > I have a hacked server that has a few rootkits installed. I'm going to > rebuild this using the following procedure: > 1) backup data files > 2) copy /etc/*.conf > 3) either make an image of the system and then blow it away or get new drives. > > Have