server terror

mijnwebservice

New member
Joined
Jan 31, 2007
Messages
1
My only server with DA running on it.
Something happened last night wich made the server shut out everybody.

you cannot login to anything exept ssh.
rebooting is not possible (unless I press the famous reset button)
accessing the server trough any domainname isn't possible but by IP is.

if i look into the log files, it looks like the system was updating itself of something and gave the next error:

error: "kern.ostype" is an unknown key
after that, it denies permission for everything.

and what does this mean?
===============================

10:56:30 (50.25 KB/s) - `Maildir' saved [20926/20926]

error: "kern.ostype" is an unknown key
==> Fakename: /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/r
un/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d PidNum: 18318
error: "kern.ostype" is an unknown key
error: "kern.ostype" is an unknown key
=========================

this was the last logged message. from here on it;s blank...
anyone some ideas?
 
Last edited:
Run this from root:

netstat -a -v -p -t

You're looking for a connection to an ircd (irc daemon)

Chances are, you've been totally compromised and a reformat is in your immediate future.
 
I agree - sounds like it has been hacked. Hope you have made backups of your sites.
 
Back
Top