Jonatan Kallus's questions

I am trying to set up a vpn server to get a virtual LAN with some friends. The vpn will not be used to route traffic to the internet.

The server is configured to hand out IP addresses x.y.z.* with:

server x.y.z.0 255.255.255.0

and it tells clients to use the vpn to access addresses in the vpn by pushing a route:

push "route x.y.z.0 255.255.255.0"

We also configure clients to "Use this connection only for resources on its network".

This works as intended from a Debian computer but it does not work from a Ubuntu computer. It cannot ping the server x.y.z.1 and I assume it is caused by the subnet mask being 255.255.255.255. The pushed route seems to be ignored. When trying to change the subnet mask manually from the client side, it cannot even connect to the vpn.

Am I understanding this correctly? Any hints on how to troubleshoot?

I have a home server running a desktop ubuntu distribution. I found this in my crontab

* * * * * /home/username/ /.access.log/y2kupdate >/dev/null 2>&1

and when looking in that directory (the space after username/ is a directory name) I found a lot of scripts which are obviously doing something they shouldn't.

Before I wipe that computer and reinstall stuff, I would like to find out what caused the security breach and when it was done. So I don't open the same hole again.

What log files should I look in? The only servers that I am aware of that are running on the computer is sshd and lighttpd.

What should I do to detect if things like this happens again?