[TriLUG] Help diagnosing a hijacked mail server?

Phillip Rhodes motley.crue.fan at gmail.com
Tue Oct 9 11:37:15 EDT 2012


On Tue, Oct 9, 2012 at 4:45 AM, Matt Flyer <matt at noway2.thruhere.net> wrote:
> Yes, I can help you.  I am one of the incident responders (compromise investigators) for linuxquestions.org.  We have developed a process to handle situations like this.  I will send more instructions shortly (it will take me a little bit to type it out).  Right now, don't alter the system, don't try to cclean it.  Don't install or remove anything.

Thanks Matt, that's very helpful. I'll get started on going through
all of that shortly!


Phil



More information about the TriLUG mailing list