<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Yeap, drop out box is normal idea. But it's strongly wired what type
of hack was. If it was only traffic leak without any footsteps in
your system (shell history, files modification time, logs) I don't
think that box couldn't be used any longer. Try to use port knocking
( <a class="moz-txt-link-freetext" href="http://www.portknocking.org/">http://www.portknocking.org/</a> ) for opening SSH ports for more
secure access. <br>
And if you have enough time, box could be reinstalled. Malvin Rito
is right. Attacker could place rootkit on your system that couldn't
easily detected.<br>
<br>
On 21.07.2011 10:31, Steve Edwards wrote:
<blockquote
cite="mid:alpine.DEB.2.00.1107202323420.5590@localhost.localdomain"
type="cite">
<blockquote type="cite">On 21.07.2011 09:29, Malvin Rito wrote:
<br>
</blockquote>
<br>
<blockquote type="cite">
<blockquote type="cite">My asterisk box was hacked!
<br>
</blockquote>
</blockquote>
<br>
On Thu, 21 Jul 2011, Захаров Антон wrote:
<br>
<br>
<blockquote type="cite">First of all, you should disable unused
VoIP protocols.
<br>
</blockquote>
<br>
Once a box has been hacked you cannot trust anything.
<br>
<br>
Disconnect the box from the network, save whatever DATA ONLY you
cannot live without, DBAN the disk and start over.
<br>
<br>
Before you re-install the OS, read up on what you should have done
the first time.
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by <a class="moz-txt-link-freetext" href="http://www.api-digital.com">http://www.api-digital.com</a> --
New to Asterisk? Join us for a live introductory webinar every Thurs:
<a class="moz-txt-link-freetext" href="http://www.asterisk.org/hello">http://www.asterisk.org/hello</a>
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
<a class="moz-txt-link-freetext" href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a></pre>
</blockquote>
<br>
</body>
</html>