Posts: 719
Threads: 42
Joined: Oct 2005
Hopefully everything will be fixed tomorrow. Right now, the server's pretty secure but Fantastico is still broken...I've sent a ticket to ev1 to have it fixed. Once that's fixed, I'll have a security expert look the system over one last time for vulnerabilities. Because of our new business, we cannot afford to have any security holes on our server, so I'm willing to put forth the cash to make sure the sucker's as airtight as possible.
\__/)
(='.'=) Copy bunny into your signature to
(")_(") help him gain world domination.
Posts: 719
Threads: 42
Joined: Oct 2005
Tracked down the problem and destroyed it. One of our clients was using a horribly insecure canned script that was exploited seven ways till Sunday. Still updating the server, as I have little time lately. Anyways...
2.6.9-22.EL
This is the version number of the kernel we're using, it came precompiled with the server. However, does anyone know what the ".EL" means? I'd like to update the kernel to the latest version and have grsecurity compiled in but I'm not sure if I can just build the generic 2.16.17.11 kernel.
\__/)
(='.'=) Copy bunny into your signature to
(")_(") help him gain world domination.
Posts: 1,439
Threads: 15
Joined: Apr 2003
I'm guessing you're using Red Hat Enterprise Linux, hence the EL. You should certainly be able to build your own kernel, but maybe do a bit of looking first to see if you can find the current kernel config file so you don't have to reinvent the wheel when you configure the new one.
Posts: 719
Threads: 42
Joined: Oct 2005
I figured the EL stood for Enterprise Linux but I didn't know for sure and google was no help, as usual. I'm not exactly sure where the config file is, as I didn't build the original one but I'll poke around and see what I can find. Thanks.
Btw anarky...the server is quite secure at this point...only the most well-funded of hackers will be able to get in at all, and right now I'm not hosting anything on that particular server to make it worth anyone's while to hack into.
\__/)
(='.'=) Copy bunny into your signature to
(")_(") help him gain world domination.
Posts: 961
Threads: 81
Joined: Apr 2005
Thanks. I'll get online again this weekend. (Monday Tuesday for me.)
Screwing with your reality since 1998.
Posts: 1,439
Threads: 15
Joined: Apr 2003
If you can't find the original config, it's no biggie - just make sure you select at least your hardware when configuring the new kernel. It usually doesn't hurt to select things you don't have, so be liberal.
BTW, the "EL" part of the version string is just a user-specifiable string when the kernel is configured - it is only used for humans to differentiate between configurations.
Posts: 719
Threads: 42
Joined: Oct 2005
I found the kernel config and will compile the new kernel when I get the chance.
On the subject of lameasses, I got two messages from the server, indicating two brute force login attempts. One attack was from somewhere in China, attempting to gain access as "tester" (invalid user), the other was from somewhere in Korea, attempting to gain root access (impossible to accomplish now). Both were attempting ssh2 access. Both failed. Both were banned from the server.
\__/)
(='.'=) Copy bunny into your signature to
(")_(") help him gain world domination.
Posts: 961
Threads: 81
Joined: Apr 2005
Great! Give me a week or so to recover from the busiest night shift week I've ever done and I'll see if I can't get a half decent site back up.
I have been thinking of expanding the Stuff section. What do you think?
Screwing with your reality since 1998.
Posts: 719
Threads: 42
Joined: Oct 2005
Another brute force attempt and another ban, this time from Hong Kong. These guys don't know when to quit, I guess. :rotfl:
I don't remember the original "Stuff"...anyone else?
\__/)
(='.'=) Copy bunny into your signature to
(")_(") help him gain world domination.
Posts: 961
Threads: 81
Joined: Apr 2005
It was more or less a place where I put some cool stuff to download. I never really advertised it. Don't stress. I'm just playing with an idea of expanding server space...
Screwing with your reality since 1998.
