[TriLUG] Help diagnosing a hijacked mail server?

[Phillip Rhodes]

On Tue, Oct 9, 2012 at 4:45 AM, Matt Flyer <matt at noway2.thruhere.net> wrote:
> Yes, I can help you.  I am one of the incident responders (compromise investigators) for linuxquestions.org.  We have developed a process to handle situations like this.  I will send more instructions shortly (it will take me a little bit to type it out).  Right now, don't alter the system, don't try to cclean it.  Don't install or remove anything.

Thanks Matt, that's very helpful. I'll get started on going through
all of that shortly!


Phil