| Linode Forum https://forum.linode.com/ |
|
| Server Probably Hacked, No Traffic allow in! https://forum.linode.com/viewtopic.php?f=19&t=6701 |
Page 1 of 1 |
| Author: | Wendel [ Sun Feb 13, 2011 2:29 pm ] |
| Post subject: | Server Probably Hacked, No Traffic allow in! |
Sorry that a request for help is my first post. Some background, running CentOs 5.2, usually administrate with with Webmin, and Usermin. Today I was adding a friends domain, when I was unable to log into webmin. I opened up the linode console and rebooted my server, before I did this I was able to open websites(tried two different ones), and https gave me the default apache page, which was normal. Restarted the server, and now I can't access ANYTHING at all, no http, no telnet, no ssh, no ftp. I was on irc and HoopyCat suggested I run a couple commands, here they are.. netstat -ntlp Code: Active Internet connections (only servers) and iptable -F -n Code: Chain INPUT (policy ACCEPT) Hopefully someone can help me, I don't have anything really mission critical, but I would like to get this resolved. Thanks |
|
| Author: | hoopycat [ Sun Feb 13, 2011 3:54 pm ] |
| Post subject: | |
Sorry, I wandered away from the keyboard for a bit there... It looks like everything should be working OK. A couple more things to check: 1) Make sure 'ip addr' or 'ifconfig' shows the correct public IP on eth0 2) Try, while logged in via lish, 'telnet that.ip.address 80'; if it connects, hit enter a few times. There's a few possibilities for what will happen (I'm using three different IPs in this example, for simplicity): Code: $ telnet 192.168.1.103 80 # i do not have a web server running 3) Try the same from your local computer. If #3 is tough (e.g. you're running Windows), catch me on IRC and let me know your IP and I'll try it from here. |
|
| Author: | Wendel [ Sun Feb 13, 2011 4:33 pm ] |
| Post subject: | |
Well, it turns out eth0 wasn't getting a network address because of a small error in the eth0 config file. Removed the line referencing the incorrect mac address, restarted eth0 and we are back online. Thanks for all the help here and in IRC. |
|
| Author: | glg [ Sun Feb 13, 2011 6:35 pm ] |
| Post subject: | |
It's a good idea to at least do ifdown/ifup, if not a reboot after you make network changes (if you can take the downtime). That way you ensure that your config works right away, and don't end up in this situation where it's broken, but that isn't obvious until months later when you finally do reboot. |
|
| Page 1 of 1 | All times are UTC-04:00 |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|