<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1528" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 10pt Arial; MARGIN-LEFT: 2px">
<DIV>Looks like the server has been compromised, I've discovered a few rootkits
installed.</DIV>
<DIV>
<DIV>I'm going to rebuild this using the following procedure:</DIV>
<DIV>1) backup data files</DIV>
<DIV>2) copy /etc/*.conf</DIV>
<DIV>3) either make an image of the system and then blow it away or get new
drives.</DIV>
<DIV> </DIV>
<DIV>Have I missed out on anything?</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks</DIV><BR><BR>>>> mike.benjamin@clarinet.com.au 4:47:10 pm
17/03/2006 >>><BR><BR>Could be right also.<BR><BR>Cables/connectors
too. Always worth swapping out.<BR><BR><BR>-----Original Message-----<BR>From:
plug-bounces@plug.org.au [<A
href="mailto:plug-bounces@plug.org.au]">mailto:plug-bounces@plug.org.au]</A>
On<BR>Behalf Of Ben Jensz<BR>Sent: Friday, March 17, 2006 09:29 AM<BR>To:
plug@plug.org.au<BR>Subject: Re: [plug] server problem; possible faulty
controller card.<BR><BR>Have you considered that it may in fact be a dodgy hard
disk causing the<BR>issues?<BR><BR>I've seen on several occasions when an IDE
hard disk dies, that it spews<BR>random crap down the IDE channel preventing
proper communication with<BR>other drive(s) on the same channel and/or on the
same controller.<BR><BR>This can obviously cause all sorts of erratic
behaviour...<BR><BR><BR>/ Ben<BR><BR><BR>Jon Miller wrote:<BR><BR>>Has anyone
run into the following error messages? I posted this before<BR>and checked
everything everyone suggested:<BR>>I've checked memory (replace them); fans
are okay, system is not<BR>overheating, etc.<BR>>When the server boots there
are error messages associated with the<BR>Promise Fast track S150 TX2 Plus SATA
Controller. A series of IOCTRL<BR>errors appears. I've noticed that
certain commands do not work but only<BR>the basic ones do (mainly alias
commands do not work).<BR>>Users cannot get e-mail as the postfix/mailmonitor
will not load. This<BR>has been going on for 10 days and I need to get
this fixed.<BR>>
<BR>><BR><BR>_______________________________________________<BR>PLUG
discussion list: plug@plug.org.au<BR><A
href="http://www.plug.org.au/mailman/listinfo/plug">http://www.plug.org.au/mailman/listinfo/plug</A><BR>Committee
e-mail:
committee@plug.linux.org.au<BR>_______________________________________________<BR>PLUG
discussion list: plug@plug.org.au<BR><A
href="http://www.plug.org.au/mailman/listinfo/plug">http://www.plug.org.au/mailman/listinfo/plug</A><BR>Committee
e-mail: committee@plug.linux.org.au<BR></DIV></BODY></HTML>