From: n2lbt <n2...@n2...> - 2002-03-21 16:13:00
|
I've been running an aprsd machine for almost 2 years. The fun is comming to an end I believe. Whether is just script kiddies or the real deal, I believe I'm the target of some type of attack. I've been getting hundreds of SYN_RECV on port 80. I've had to shut down httpd, but I am fearful that it's just a symptom of the problem, not the culprit. It's tying up my dsl line and taking up cpu time. I've been running AE5PL's javAPRS and some other basic boring web pages. I run sendmail-8.9.3-15 ftp-0.15-1 apache-1.3.9-4 I've had trouble finding RPMs for RH6.1 to bring these things up to date. I've been checking rpmfind.net and the versions I see listed for 6.1 show similar versions to what I have installed. Is 6.1 dead at this point, should I give up and go to RH 6.2 or 7.2 or something else? Will aprsd run on 7.2? Another thing I noticed, should aprsd be running as root in my "ps -auxw" listing? Someone recently told me that 6.1 would be hacked sooner or later. It looks it is sooner. |