"roman dissertori" <r.dissertori@ecom-it.at> writes:

]Hello anyone,

]I'm using the operating System Linux - RedHat9
]I'm totally a newbie in linux-security and that's why I've got a Problem:
]A month ago, I got hacked by someone 3 times!
]I always had to reinstall my distribution for security reasons.

Yes. Was it a complete reinstall?
If not you also need to use the new find to search through the stuff you
did not reinstall for suid files.
Also you have to change all passwords.
And install allof the security updates.
And make sure that things you do not use (ftp, http,etc) are not enabled
in xinetd of /etc/rc?.d


]Poeple in groups.google suggested to do so after a successful hack.
]I changed the _standard known_ portnumbers and I denied the access for all
]incoming internet connections to the ports 0-1024 and mysql per protocol tcp
]and udp in my ipchains.
]Is that enough or - what should else should I do to prevent him/her from
]hacking into my computer again (and it would be nice if i could trace him
]back and do something about it)
]Any suggestions?