<br><br><div class="gmail_quote">On Thu, Feb 12, 2009 at 6:22 PM, Trixter aka Bret McDanel <span dir="ltr"><<a href="mailto:trixter@0xdecafbad.com">trixter@0xdecafbad.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Thu, 2009-02-12 at 17:08 -0500, Jared Geiger wrote:<br>
> I saw multiple attacks from <a href="http://OVH.NET" target="_blank">OVH.NET</a> IP addresses over the last few<br>
> weeks as well. I have used a few of the tips in this article to secure<br>
> PBXs before as well <a href="http://nerdvittles.com/?p=580" target="_blank">http://nerdvittles.com/?p=580</a><br>
> (fail2ban/IPTables).<br>
><br>
> For switchvox the root account seems to have a key, not a password to<br>
> login. You can always boot in single user mode, create a new user and<br>
> add that user to the sudoers file then disable root from being able to<br>
> login via ssh.conf.<br>
><br>
</div>First let me say I have never used switchvox, but if its linux based<br>
then the following should apply.<br>
<br>
can you not just get a shell? If you can you shouldnt have to boot into<br>
single user mode unless they are doing chattr stuff to only allow<br>
editing of the password file on a secure runlevel, and this is rare that<br>
its done.<br>
<br>
/etc/passwd, /etc/shadow, /etc/group, /etc/sudoers are all just text<br>
files and its easy to append a line for new users to those files, just<br>
as its easy to use the useradd/adduser programs to add users. sshd.conf<br>
is also a text file which requires sshd to restart to take effect but<br>
this usually does not drop connections already in process. This can be<br>
as simple as /etc/init.d/sshd restart or something similar.<br>
<div class="Ih2E3d"><br>
<br>
> You should be able to then setup IPTables on Switchvox as well after<br>
> going in and creating the second account.<br>
><br>
<br>
</div>the problem is that you would need it to know to use sudo if it doesnt,<br>
I do not know if its smart enough to say "you arent root so let me sudo<br>
this command".<br>
<font color="#888888"><br>
<br>
--<br>
Trixter <a href="http://www.0xdecafbad.com" target="_blank">http://www.0xdecafbad.com</a> Bret McDanel<br>
pgp key: <a href="http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x8AE5C721" target="_blank">http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x8AE5C721</a><br>
<br>
</font><br></blockquote></div><br clear="all">From experience, you cannot get shell, but you can single user it and install anything you want. <br><br>-- <br>Thanks,<br>Steve Totaro <br>+18887771888 (Toll Free)<br>+12409381212 (Cell)<br>
+12024369784 (Skype)<br>