From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261362AbTDQN2T (ORCPT ); Thu, 17 Apr 2003 09:28:19 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261364AbTDQN2T (ORCPT ); Thu, 17 Apr 2003 09:28:19 -0400 Received: from pc2-cwma1-4-cust86.swan.cable.ntl.com ([213.105.254.86]:11974 "EHLO lxorguk.ukuu.org.uk") by vger.kernel.org with ESMTP id S261362AbTDQN2T (ORCPT ); Thu, 17 Apr 2003 09:28:19 -0400 Subject: Re: Help with virus/hackers From: Alan Cox To: joe briggs Cc: "'linux-kernel@vger.kernel.org'" In-Reply-To: <200304171015.13474.jbriggs@briggsmedia.com> References: <200304171015.13474.jbriggs@briggsmedia.com> Content-Type: text/plain Content-Transfer-Encoding: 7bit Organization: Message-Id: <1050583322.31412.1.camel@dhcp22.swansea.linux.org.uk> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 (1.2.2-5) Date: 17 Apr 2003 13:42:03 +0100 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org > Can anyone offer any advice or insight? Without knowing what services were publically accessible, and internally accessible (since you dont know if someone used something like a windows worm to attack from the inside) no. cert have good general faq's on cleaning up after attackers and also track attacks for patterns so do notify them.