Praetor2000
Programmer
Hi!
Some time ago there was a hack into my network. I don't know, what was done (except: changed permissions on /usr and /etc to 777 !), but now my dns doesn't work. I checked all the configs on my server - they haven't been changed. The guys who provide secondary dns also say they're ok with it. But the fact is: all remote requests to my domain name result in the obvious "dns error: unable to resolve name...". So, neither my http page or the email work. (Apache and Sendmail configs are also untouched).
I've got Altlinux Master on my server.
What can the problem be?
ps: here's an extraction from the log, when the attack took place:
Feb 3 11:36:46 iemrams portmap[12469]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:37:46 iemrams portmap[12500]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:38:46 iemrams portmap[12531]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:39:46 iemrams portmap[12562]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:40:46 iemrams portmap[12595]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:41:39 iemrams init: Switching to runlevel: 6
Feb 3 11:41:46 iemrams portmap[12652]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Regards,
Praetor Mortis King
Leading programmer
Wanamingo Mine inc.
Dominican Republic
Some time ago there was a hack into my network. I don't know, what was done (except: changed permissions on /usr and /etc to 777 !), but now my dns doesn't work. I checked all the configs on my server - they haven't been changed. The guys who provide secondary dns also say they're ok with it. But the fact is: all remote requests to my domain name result in the obvious "dns error: unable to resolve name...". So, neither my http page or the email work. (Apache and Sendmail configs are also untouched).
I've got Altlinux Master on my server.
What can the problem be?
ps: here's an extraction from the log, when the attack took place:
Feb 3 11:36:46 iemrams portmap[12469]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:37:46 iemrams portmap[12500]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:38:46 iemrams portmap[12531]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:39:46 iemrams portmap[12562]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:40:46 iemrams portmap[12595]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Feb 3 11:41:39 iemrams init: Switching to runlevel: 6
Feb 3 11:41:46 iemrams portmap[12652]: connect from 211.53.213.144 to getport(status): request from unauthorized host
Regards,
Praetor Mortis King
Leading programmer
Wanamingo Mine inc.
Dominican Republic