botnet hacked..

[Tex]

well..looks like he owned my shell..bot stopped logging..i guess because of chmode 500 eggdrop.log..added himself to the userlist..used the .netpart command..and f..... up my channels..
however..can I do anything to stop that in future?
and yeah..sorry for my bad english..

[egghead]

well..looks like he owned my shell.

How was he able to get access to your shell? He cracked your password?

[j0n]

don`t let the hub bot accept changes from leaf bots.
meaning, the hub bot can ignore any global flags that have been added to the leafs. you need global owner to netpart

remove dcc/ctcp chat from leafs, remove user port, and have the hub offline.

don't stick bots on unsecure shells.

could try to use the CNT script, it uses encryption on all files and it is simple to set up

[Tex]

emm..my hub ignores any flag changes..but he cleared one owners pass and added new host..so the hub didn't ignore anything..
hub is offline..hmm..all bots have acces thru telnet and dcc..but i don't see solution in that..
CNT script?will look at it..
thnx..

[Tex]

CNT..where can I find that?emm..if I add some tcl on leaf bot..he can edit the .conf file and remove that tcl..it would be good to have a tcl on hub..like it would't let the bot link if the bot reject the userlist dowload..because he can also change and remove the +p flag from the hub..than the bot links..it doesn't share..bot the user still has acces to .netpart ...

[arcane]

well..looks like he owned my shell.

How was he able to get access to your shell? He cracked your password?

i think this is your main problem... if he has got access to your shell, then you can forget all your security concepts...

[Tex]

yeah..I know..if we'd live in a perfect world..
ok..thnx for all posts..
enjoy..