<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.yshortcuts
{mso-style-name:yshortcuts;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Le forum ou tu aurais plus de réponses c’est AFNOG (</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a
href="http://www.afnog.org"><span lang=FR>www.afnog.org</span></a></span><span
lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>)
Afaf. Alors inscris toi sur leur liste et envoie aussi ta question la bas :<o:p></o:p></span></p>
<p class=MsoNormal>afnog mailing list<br>
<a href="http://afnog.org/mailman/listinfo/afnog" target="_blank"><span
class=yshortcuts>http://afnog.org/mailman/listinfo/afnog</span></a><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>bien a toi.<o:p></o:p></p>
<p class=MsoNormal>ar<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> africann-bounces@afrinic.net
[mailto:africann-bounces@afrinic.net] <b>On Behalf Of </b>EL MAAYATI Afaf<br>
<b>Sent:</b> Monday, May 17, 2010 5:24 PM<br>
<b>To:</b> africann@afrinic.net<br>
<b>Subject:</b> RE: [AfrICANN-discuss] Intrusion Web<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Salut,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> C’est déjà fait, mais y a rien de suspect au niveau des
LOG des accès http :o(<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Et le fichier log du système /var/log/messages
n’existe pas !<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Merci de m’indiquer s’il y a d’autres pistes à explorer.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Merci d’avance pour votre aide.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>De :</span></b><span
lang=FR style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> africann-bounces@afrinic.net
[mailto:africann-bounces@afrinic.net] <b>De la part de</b> Francois Mark<br>
<b>Envoyé :</b> samedi 15 mai 2010 17:42<br>
<b>À :</b> africann@afrinic.net<br>
<b>Objet :</b> Re: [AfrICANN-discuss] Intrusion Web<o:p></o:p></span></p>
</div>
<p class=MsoNormal><span lang=FR><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span lang=FR>Salut,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=FR>Je pense que vous
devez changer votre mot de passe et ensuite voir le LOG.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR>2010/5/14 Leader Lee <<a
href="mailto:swatch97@gmail.com">swatch97@gmail.com</a>><o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal><span lang=FR>Salut,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR> J'ai un serveur web Apache avec MySql
et PHP4, et je crains que j'ai un problème d'intrusion au niveau de mon
serveur.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR>J'ai remarqué que plusieurs fichiers
(documents) sont remplacés ou des fois même supprimés.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR>Mon serveur web n'est accessible qu'en HTTP
(port 80). <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR>Merci de m'indiquer ce que je dois effectuer
comme diagnostic pour connaitre ce qui se passe sur mon serveur, et ce que
je dois appliquer comme action corrective pour sécuriser mon serveur.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span lang=FR>Merci.<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=FR><br>
_______________________________________________<br>
AfrICANN mailing list<br>
<a href="mailto:AfrICANN@afrinic.net">AfrICANN@afrinic.net</a><br>
<a href="https://lists.afrinic.net/mailman/listinfo.cgi/africann"
target="_blank">https://lists.afrinic.net/mailman/listinfo.cgi/africann</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=FR><br>
<br clear=all>
<br>
-- <br>
Kind Regards,<br>
Francois Mark<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR><o:p> </o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span lang=FR>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=FR style='font-size:
7.5pt;font-family:"Arial","sans-serif";color:blue'>Ce message, son contenu et
toutes les pièces jointes sont adressés à l'attention exclusive de leur (s)
destinataire (s) et sont strictement confidentiels : ils relèvent de la
correspondance privée. Toute publication, utilisation ou diffusion, même
partielle, par des personnes autres que les destinataires est interdite et doit
être autorisée par l'Agence Nationale de Règlementation des Télécommunications
(ANRT, Royaume du Maroc). Si vous recevez ce message par erreur, nous vous
prions de le détruire après en avoir informé son expéditeur sans délai. L’ANRT
décline toute responsabilité pour toute altération, déformation ou
falsification subi par le message et ses pièces jointes au cours de leur
transmission.<br>
Retrouvez toutes les informations de l’ANRT sur son site Web à l’adresse
suivante : http://www.anrt.ma.</span><span lang=FR><o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span lang=FR>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=FR style='font-size:
7.5pt;font-family:"Arial","sans-serif";color:blue'>This message, its content
and its attachments are intended for the exclusive use of the named addressee
(s) and are strictly confidential. Any copy or other use of this information by
persons or entities other than the intended recipient is prohibited and should
be authorized by the National Agency of Telecommunications Regulation (ANRT,
Morocco). If you have received this communication in error, please delete the
material and notify the sender. The ANRT accepts no liability for any alteration,
distortion or falsification that may occur during the transmission of this
message. All information about ANRT can be found on our website at the
following address http://www.anrt.ma.</span><span lang=FR><o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span lang=FR>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span lang=FR style='font-size:10.0pt;font-family:"Courier New";
color:blue'>إن هذه الرسالة ومحتواها ومرفقاتها موجهة خصيصا للشخص المرسل إليه
وتعتبر سرية وتصنف ضمن خانة المراسلات ذات طبيعة شخصية. ويمنع منعا كليا نشر أو
استعمال أو بث، ولو بطريقة جزئية، لهذه الرسالة من طرف أشخاص غير المرسل إليهم ما
لم يتم الترخيص بذلك من طرف الوكالة الوطنية لتقنين المواصلات (المملكة المغربية.<br>
في حالة ما إذا توصلتم هذه الرسالة عن طريق الخطأ، يرجى منكم العمل على إتلافها
فورا بعد إخبار الشخص المرسل إليه بذلك. ولا تتحمل الوكالة الوطنية لتقنين
المواصلات أي مسؤولية عن أي تحريف أو تغيير أو تزييف قد يلحق بمحتوى الرسالة أو
بمرفقاتها خلال عملية الإرسال.<br>
للمزيد من المعلومات، يرجى الاطلاع على الموقع الإلكتروني للوكالة الوطنية لتقنين
المواصلات : http://www.anrt.ma.</span><span lang=FR><o:p></o:p></span></p>
</div>
</body>
</html>