One of my customers is down...

[Mike Schwartz]

     One of my agricultural customers thinks somebody was trying to hack
into their Linux (filepro version 5.6.??) server last night.  Their firewall
paged their systems guy at 2:00 AM this morning, telling him that there were
thousands of login attempts going on, so he shut down their servers.  Of
course, they changed all their passwords this morning and so forth before
bringing the system back up, and the system is off of their network right
now, so I can't log into it and see what is going on.

 

     This morning, whenever they go into a filepro file using an index, they
are immediately kicked back to the filepro main menu.  They select #4, Index
Selection, then index "A", or "1", and then type in a value to search for.
As soon as they press "Esc", they get kicked back to the main menu.

 

     I had them remove the indexes from one of their files, run a freechain,
then rebuild just one automatic index, but they still get kicked out.  I had
them remove the automatic index and build just one demand index, but they
still get kicked out.  

 

     I had them look through a whole file using record number, browsing all
the way to the end, but they couldn't see any obvious corruption.   

 

     I also had them run "setperms".  I don't know if IUA requires a /tmp
directory or some other thing that's no longer there.  The index rebuilding
process seems to run normally.

 

     They say that all of their filepro files act doing this.

 

     Unless any of you have a suggestion, I am going to try to talk them
through:  1) reinstalling filepro and, if that fails, 2) restoring their
whole server from their BRU backups.  

 

Thanks!

 

Mike Schwartz    

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.celestial.com/pipermail/filepro-list/attachments/20070914/675047cd/attachment.html