LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-14-2006, 07:18 PM   #1
PipeDreams
Member
 
Registered: Dec 2005
Distribution: Mandriva 2006 x64
Posts: 161

Rep: Reputation: 30
I Crashed A Server Via Email?


I just got my cable internet turned back on.

I got a call at work today from my isp security dept.They shut my cable off this morning.Apparently my computer emailed 34 virus laden emails to a small local college campus and crashed their server.

After a major hardware change(athlon xp to athlon 64,cheap mobo to msi k8n neo4 platinum)all of my distros and winxp freaked out and would not boot so I formatted both hds sunday and the only os I have in my box now is mandriva 2006 x64.

The strange thing is I've never emailed anyone with an @college campus addy.Ever.

Evidently linux isnt as secure out of the box as I thought.

I am a noob to linux.I run shorewall on auto blacklist.What other AV software/firewall should I get?

I really dont think it was my computer that did that but my isp seemed pretty sure of it?Anybody have any theories?I would love to hear them.

Thanks
 
Old 02-14-2006, 08:39 PM   #2
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
It is highly unlikely that it was your computer sending this emails, unless you were running an open SMTP relay. Is sendmail running on your box?
 
Old 02-14-2006, 09:23 PM   #3
PipeDreams
Member
 
Registered: Dec 2005
Distribution: Mandriva 2006 x64
Posts: 161

Original Poster
Rep: Reputation: 30
I dont think its running.Where do I look to see?
 
Old 02-14-2006, 09:46 PM   #4
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
Use 'ps -ef' to see what processes are running.
 
Old 02-14-2006, 10:16 PM   #5
PipeDreams
Member
 
Registered: Dec 2005
Distribution: Mandriva 2006 x64
Posts: 161

Original Poster
Rep: Reputation: 30
No its not running.

Is a virus scanner or rtkhunter necessary with linux?
 
Old 02-14-2006, 10:22 PM   #6
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
rkhunter or chkrootkit can be useful to help make sure you do not have a rootkit on your system, but I doubt that you do.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Server Crashed, what to check? stefaandk Linux - Newbie 2 08-08-2005 07:38 PM
What email program can work with email header on pop3 server TruongAn Linux - Software 0 01-13-2005 11:48 AM
How do I configure postfix master to forward all email to an email server ? hello321_1999 Linux - Software 1 11-18-2004 04:43 AM
my server crashed inteltechs Linux - General 8 11-02-2003 08:58 AM
server crashed Gex Linux - Software 2 12-04-2002 09:10 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:23 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration