[ale] Linux Firewall

[mark at gwsi.com (Mark Bedish)]

Due to the overwhelming recommendations we'll be reinstalling everything ASAP.
We have an old P133 collecting dust that should be up to the task. I feared that
they may have installed some sort of sniffer, is there anyway to search for it.
I have noticed that root logs in and out at 1:01am every morning, but that
seemed to be happening prior to the break-in. Is that normal behavior?

Thanks for the help!

Mark