roman dissertori wrote:

> Hello anyone,
>
> I'm using the operating System Linux - RedHat9
> I'm totally a newbie in linux-security and that's why I've got a Problem:
> A month ago, I got hacked by someone 3 times!
> I always had to reinstall my distribution for security reasons.
> Poeple in groups.google suggested to do so after a successful hack.
> I changed the _standard known_ portnumbers and I denied the access for all
> incoming internet connections to the ports 0-1024 and mysql per protocol
> tcp and udp in my ipchains.
> Is that enough or - what should else should I do to prevent him/her from
> hacking into my computer again (and it would be nice if i could trace him
> back and do something about it)
> Any suggestions?

Recently, I was sure that I was hacked. I had at least half a dozen signs.
But one by one, they turned out to be "normal." Someone from outside tried
to set up their own user account and failed. This is the only thing I can
regard as a genuine "hack" and the hacker didn't win.

So, listen to the others asking "are you sure?"

HTH,

Doug.
--
Linux: in a world without fences, who needs Gates?