January 2002 - openSUSE Security - openSUSE Mailing Lists

how to keep nimda and code red from filling apache logs
by Mathias Homann 25 Sep '03

25 Sep '03

Hi all, here's a bit of a step-by-step description on how to keep nimda and codered from filling your apache logs. Parts used: - SuSE 7.2 Professional - SuSEfirewall2 - iptables 1.2.3 - linux kernel 2.4.13-pre5 steps: 1. install kernel sources for a kernel >> 2.4.9, running 2.4.13- pre5 here, works fine so far 2. get the sources for iptables 1.2.3 from http://netfilter.samba.org 3. unpack sources somewhere 4. export KERNEL_DIR=$(where you put the kernel tree) 5. cd into unpacked iptables sources, there's a subdirectory named patch-o-matic there 6. apply wanted patches by running ./runme $(name.of.patch)patch for this here You'll want the string patch You can also apply other patches, like the irc-conntrack patch 7. now there's a little bug in this patch... here's a diff: --- linux/net/ipv4/netfilter/ipt_string.c~ Sun Oct 21 00:16:29 2001 +++ linux/net/ipv4/netfilter/ipt_string.c Sun Oct 21 16:54:45 2001 @@ -62,7 +62,7 @@ sk = skip[haystack[right_end - i]]; sh = shift[i]; - right_end = max(int, right_end - i + sk, right_end + sh); + right_end = max(right_end - i + sk, right_end + sh); } return NULL; 8. now, make config/menuconfig/xconfig... as usual. You can import your running kernel's config first. 9. enable the experimental stuff 10. go to networking options->netfilter, there's an option there to enable string matching; set that to M 11. compile and install kernel as usual; remember to uncomment the export INSTALL_PATH=/boot in the main makefile. 12. now build a rpm file for the new iptables stuff by installing the source rpm which comes with suse, then edit the spec file, put the iptables source in /usr/src/packages/SOURCE and rebuild. 13. now there are some small changes to the firewall config files. a) uncomment the last line in /etc/rc.config.d/firewall2.rc.config: FW_CUSTOMRULES="/etc/rc.config.d/firewall2-custom.rc.config" b) edit that file, I got the following stuff in mine: for forbidden_string in root.exe cmd.exe .ida; do iptables -I input_ext -p tcp --dport http -m string \ --string $forbidden_string -m state \ --state ESTABLISHED -j REJECT --reject-with tcp-reset done put that in the last supfunction defined in the custom rc file. c) change the FW_LOG setting in firewall2.rc.config from reading -log-level warning to -log-level kernel.warning 14. last: some small changes to /sbin/SuSEfirewall2 search in the script for the parts where the modules are loaded and unloaded; be sure to add ipt_string (and the other new modules you created by patching the kernel and enabling them in make config) to the modules loading/unloading code there. 15. reboot 16. if you try now to access (from outside, of course) one of the nimda or codered URLS, all you get is a 'connection reset by peer', and the request doesn't show in apache log files. btw, no guarantees, and the usual YMMV :) bye [L]

7 7

suse samba server
by jonathan 23 Jan '03

23 Jan '03

Hello I have basically a suse samba server setup. Eth0 is for the internet connection (cable). Eth1 is my internal network. I use eth1 for my samba server. When i have the shares/ drive letters mapped, whatever, Ill goto access them and that computer will just lockup or timeout for about 1 minute, then it will resume operation normally. I have approx. 5 comptuers on the suse server, and they all do this from windows xp to windows 98se. I am using set up addresses of 192.168.0.x, where is greater than 2. My question is have or is there something Ive setup wrong to cause this pause to occur. ? Its becomming very annoying..and frustrating. Im using kernel 2.4.18-64GB-SMP with a dual processor setup. If anyone has any ideas please let me know. Every package installed is orginal versions from the suse install cdroms. (no updates done). Anything come to mind. btw, ive replaced the switch, with a new netgear one, and all the networks at startech ST100 Realtek 8139 chipsets on 100Tx. Anyone... !

4 5

Urgggggg!!! SuSEFirewall2 is getting on my nerves!!!!!
by Chris Bek 08 Jan '03

08 Jan '03

Hi there SuSErs... Well I must be doing something really wrong because everything that I do with SuSEFirewall2 is just not working! I have a small network with 5 PCs (all Win9X) and a Linux box (Currently SuSE 7.3) acting as a server. The server is a DHCP server and a Samba server for the entire network. So far everything is working perfect!!! Users log on the network, logon script executes etc.... Then a new task came up: let's input the internet into the network. Configured a 56Kbps modem on the server with YAST. Manged to get my account setup and running. Made a test connection and netscape works great on the server as well as e-mail (pop3). I tried configuring SuSEfirewall to manage all incoming requests from the PCs of the network. The firewall warned me about masquerading etc. so I downloaded the latest version of SuSEfirewall2 from the internet and installed it. Since I only need direct masquerading to be done (no proxies are currently working on the net) I made all the necessary changes as outlined in the examples supplied with the software. Since I needed to have Samba to keep working on the network, I opened (among others) 139 port for samba to work. Double checked all the changes that I have made and run rcSuSEfirewall2 to see what happens. Strange enough when wvdial executes it tells me that DNS is not functioning properly since www.suse.com cannot be found (or something like that please forgive me I am away from the Linux station now). Further on, when I open mIRC or other like programs (winmx etc) from a station, I look at the activity of IPtraf (I check this to see what happens) and I see no connections being created whatsoever.... mIRC prompts me that there was an error trying to find the host.... I have made no changes to the Win9X PCs. Is there something that I am forgeting to do?? I undestand that it is impossible for all of you to react to this since I have no output of the SuSEfirewall.conf file being published to this message.... I understand. Can someone please send me their configuration file so I can see what you have done, on a system that currently is working fine?? In addition, is there something that I have to do regarding route or routing?? What about the Win9X PCs?? Is there something that I have to do there?? I thank you so very much for all your help is advance!!!! I am killing myself trying to figure this one out for about 2 weeks now and managed nothing more than thin air!!!!! Chris

11 10

SSH Authentication
by Joao Reis 18 Nov '02

18 Nov '02

Hi! I implemented a ssh conection from the outside to my intranet. This ssh requires a username and a password. In terms of security what is more secure: require authentication (username and password) or having the public key of each user that connects to our intranet in the authorized public key lists (in this case there is no need for username and password)? In the second case there is no need of authentication and only the users wich have the public keys in the list are allowed to enter in my intranet. This second solution is a good solution or that brings other security problems ? Thanks. -- Farewell. "Keep your friends close, but your enemies closer." "Do or do not. There is no try" - Yoda João Reis -------------------------------------------------------

2 1

VPN masquerading
by Joost van der Lugt 06 May '02

06 May '02

Hi all, I am trying to set up VPN masquerading, for a Windows box, and just wondered if there was an easy way to do this, using just the firewall.rc.config script, or do both that plus the custom config script have to be used? I have seen the VPN how-to, however just wondered about a how to aply this with SuSE's scripts. Thanks for any suggestions, (PS if there is someone familiar with setting upo VPN on the SuSe box itself, I would be very interested as well..., of course) - Cheers, Joost

4 4

postfix regexp in body_checks
by Philipp Snizek 25 Apr '02

25 Apr '02

Hi, I hope I hit the right list with my request. I'm trying to set up a filter for postfix to filter malicious stuff like all windows executables. For MIME encoded headers I had no problem, this works fine. But if the header is uuencode, the attachment is only visible in the e-mail's body. I tried a regexp like /.*\.(bat|exe|cmd|vbs|vba)/ REJECT in /etc/postfix/body_checks which should filter all *.bat|and so on. But nothing at all happens. Mails go thru as if there wasn't an obstacle. If there is some postfix & regexp pro on this list, please tell me what I am doing wrong. Thanx, Philipp

9 16

Firewall
by xcomb 05 Feb '02

05 Feb '02

the one i have firewall which also gateway and awesome web interface port forwarding and intrusion detections works greate even on 75mhz computer has 32 mem and 500meg hhd go to download it for free it installs redhat 7.2 just get old box that's not in use and install it takes at least 10 min with cable connenction depends on your speed http://clarkconnenct.org read the manual easy to install

2 1

T-DSL 'routing' through a network - is it unsafe ?!
by Michael Paarmann 04 Feb '02

04 Feb '02

Dear List members, Does anyone know, if it is a security risk when i connect a DSL modem by the TELEKOM with a switch and the computer with the pppoed demon is connected via a switch to the modem and not directly? At the moment the situation is, that the T-DSL-Modem is connected to a linux router pc with pppoed, squid, and iptables. With the second network device the pc is connected to the local network. Due different reasons it would be nice, if the modem is directly connected to a switch and the linux router is somewhere else. I'm not sure, if somebody can hack or modify different packets, so that they don't reach the pc with the pppoed demon but another local workstation. The T-DSL modem is not a real router (Modem by SIEMENS) and it can only be connected by one single pc, but is real safe ? Has anybody a hint ? Thanx a lot in advance. Michael

2 1

MD5 passwords
by Boris Kimel 02 Feb '02

02 Feb '02

Hi All, Just another dummy question: how do I switch to using MD5 passwords on SuSE 7.3 provided there are plenty users' accounts already? Thanks, Boris.

3 4

Root access via ssh??
by Praise 01 Feb '02

01 Feb '02

Hi all, After a fresh install of Suse 7.1 I have noticed that ssh allows root remote access. I have tried to disable it via pam /etc/security/access.conf but it does not work. How do I do it? Praise

7 6

yast2 updates security related
by Roger Larsson 31 Jan '02

31 Jan '02

Hi, I occasionally check for updates this time there were several. Some for things that I have installed - but those were NOT autoselected... package installed new ---------- --------- ----- openssh 2.9p2-39 2.9.9p2-73 really suspect glibc/-devel 2.2.4-21 2.2-17 backed?? java2 1.3.1-47 1.3-69 really suspect timezone 2.2.4-21 2.2-17 backed?? xli 1.16-385 1.16-351 backed?? at 3.1.8-382 3.1.8-458 was correctly selected I am updating via ftp.gwdg.de /RogerL -- Roger Larsson Skellefteå Sweden

2 1

Concerned about possible crack, ssh warning message
by JW 31 Jan '02

31 Jan '02

Ok, there's the thing. Take everything from here down with a large grain of salt because right now I'm paranoid and apt to jump to conclusions hastily. I have a few test servers that we use for all kinds of misc. hacking and testing. I was just looking at one and noticed some things I'm not happy with that make me conclude this box is at least _possibly_ cracked. However, remember we use this as a do-anything-to-it-it-doesn't-matter test box - unstable software and the works, it's a throw-away-install on our LAN. Because of this I can't be sure one of the other guys that have root haven't done the things I'm eying suspiciously Anyway I'm currently alarmed because the box I'm eyeing is testbox2, and I just tried to ssh from testbox1 to testbox2 and got the following message: jw@suse1:~ > ssh jw@suse2 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA1 host key has just been changed. The fingerprint for the RSA1 key sent by the remote host is 73:40:ed:40:fd:65:0a:bb:77:a9:2f:f7:9a:2e:54:62. Please contact your system administrator. Add correct host key in /home/jw/.ssh/known_hosts to get rid of this message. Offending key in /home/jw/.ssh/known_hosts:5 RSA1 host key for emerald has changed and you have requested strict checking. jw@suse1:~ > The last time I ssh'd from 1 to 2 was about 5 hours ago and I received no such message. box2 has _not_ been rebooted, I know because my VNC session was running with my apps open just the way I set them up. I really, really doubt any of the other admins restarted sshd, but *maybe*. Also, I've seen messages in /var/log/* before about ssh regenerating the key but there are none today. What do you think? ---------------------------------------------------- Jonathan Wilson System Administrator Cedar Creek Software http://www.cedarcreeksoftware.com Central Texas IT http://www.centraltexasit.com

3 2

SuSEFirewall2 redirect question
by Robert Rottscholl 31 Jan '02

31 Jan '02

Dear List, do I have to add Port 80 to FW_SERVICES_INT_TCP if I've already configured FW_REDIRECT="IP_INT_NET,IP_SERVER,80,3128"? Ciao ;-) Robert Rottscholl - DE

1 0

Re: [suse-security] Concerned about possible crack, ssh warning message
by JW 31 Jan '02

31 Jan '02

At 11:34 PM 1/30/2002 -0600, you wrote: >Ok, there's the thing. Take everything from here down with a large grain of salt because right now I'm paranoid and apt to jump to conclusions hastily. Ok, I'm really sorry about this post last night, it was totally unnecessary. The weird things I mentioned (like the new shell account) were indeed the actions of another "admin". And the ssh warning I mentioned.... I have to even admit this, but I accidently type the host name of a 3rd un-related box instead of the other one I was messing with. The warning scared me since I was already paranoid and I didn't even realize what I'd done until I scrolled back up my console. Duh. So nothing's wrong. Sorry to cause trouble - I was really tired, somewhat alarmed and not thinking too clearly when I sent that in. I guess that's what I get for working @ 01:00 in the morning.... Sorry to waste ya'lls time....... ---------------------------------------------------- Jonathan Wilson System Administrator Cedar Creek Software http://www.cedarcreeksoftware.com Central Texas IT http://www.centraltexasit.com

1 0

Re: Re: [suse-security] proxy server
by Dimitri Melnikowitsch 31 Jan '02

31 Jan '02

Hi Robert, Robert Rottscholl <lv426(a)rinx.de> schrieb am 31.01.02: > Hi Dimitri, > > i think you should use different proxy for example: yes, was not going to use circuit-gateway-proxies or would it be a better method ? > HTTP : squid > FTP : proxy-suite i thought the same > SMTP : use a stor and forward proxy i thought of smtpd ? Thanks Dimitri Melnikowitsch ________________________________________________________________ Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13

2 1

Re: [suse-security] SuSE-Firewall Question
by Robert Rottscholl 31 Jan '02

31 Jan '02

Hi Marc, thanks a lot. Is 2.1 the current release? And if yes, where can i find it?(I use 1.7) Ciao ;-) Robert Marc Mutsaers wrote: >Download SuSEfirewall2 (2.1) from the SuSE FTP site or 7.3 CD-ROM's > >SuSEfirewall (5.1) is only compatible with ipchains. > >Gtx, > >Marc > >-----Original Message----- >From: Robert Rottscholl [mailto:lv426@rinx.de] >Sent: donderdag 31 januari 2002 17:48 >To: suse-security(a)suse.com >Subject: [suse-security] SuSE-Firewall Question > > >Dear List, > >does SuSE-Firewall support iptables? >My problem is that I designed a firewall myself and I now want to change >to SuSEFirewall because I think I'm not perfect in designing a firewall. > >Ciao ;-) > >Robert Rottscholl - DE > >

3 2

firewall2: routing between DMZ and INT
by Andreas Marbet 31 Jan '02

31 Jan '02

Hello all, SuSE firewall2 on SuSE 7.3 with external, internal and DMZ-interface EXT: statical (official) IP-Address (a.b.c.d) DMZ: statical (official) IP-Address (w.x.y.z) with the appropriate subnet attached to it INT: 192.168.1.1 (masqueraded on DEV_EXT) Almost everything is working: routing between the subnets as far as allowed in FW_FORWARD and FW_FORWARD_MASQ is working properly (almost too good) masquerading is working as well as squid in transparent mode now I have two problems with using the rules for the DMZ: I'd like to allow the machines in the DMZ unrestricted access (for beginning) to the internet (in front of EXT). For that reason I put the following rules in FW_FORWARD: "DMZ-net,0/0 0/0,DMZ-net" #DMZ-net is of course written as w.x.y.0/24 well, everything works now for the DMZ, but the DMZ can also reach the internal hosts (192.168.1.0/24) directly and thats absolutely not what I want. Does anybody know how I could prevent this? the second problem is that I'd like to access the DMZ from the internal network but without allowing the DMZ to connect to the internal LAN. How can I tell the firewall to allow only connections from the DMZ to the INT that have been initiated from internal? In the DMZ all internal machines appear with their proper IPs (e.g. 192.168.1.50). Is this a question of FW_MASQ_DEV? probably the two problems are of the same kind and perhaps I could do this in firewall2-custom.rc.config? But because I'm rather a beginner, I don't want to do something very stupid that would open my firewall. If anybody has any advice or experience on this topic, please let me know. any help very welcome, Andreas slightly censored firewall2.rc.config: FW_DEV_EXT="eth1" FW_DEV_INT="eth0" FW_DEV_DMZ="eth2" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="192.168.0.0/16" FW_PROTECT_FROM_INTERNAL="yes" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_TCP="ssh domain" FW_SERVICES_EXT_UDP="domain" FW_SERVICES_EXT_IP="" FW_SERVICES_DMZ_TCP="domain ssh 3128" FW_SERVICES_DMZ_UDP="domain" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="ssh domain 3128" FW_SERVICES_INT_UDP="domain" FW_SERVICES_INT_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="ftp-data" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" FW_SERVICE_AUTODETECT="yes" FW_SERVICE_DNS="yes" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SQUID="yes" FW_SERVICE_SAMBA="no" FW_FORWARD="192.168.1.0/24,DMZ" FW_FORWARD_MASQ="" FW_REDIRECT="192.168.100.0/24,0/0,tcp,80,3128" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="no" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_LOG="--log-level warning --log-tcp-options --log-ip-option --log-prefix SuSE-FW" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="yes" FW_ALLOW_PING_EXT="yes" FW_ALLOW_FW_TRACEROUTE="yes" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_ALLOW_FW_BROADCAST="no" FW_IGNORE_FW_BROADCAST="yes" FW_ALLOW_CLASS_ROUTING="no"

1 0

SuSE-Firewall Question
by Robert Rottscholl 31 Jan '02

31 Jan '02

Dear List, does SuSE-Firewall support iptables? My problem is that I designed a firewall myself and I now want to change to SuSEFirewall because I think I'm not perfect in designing a firewall. Ciao ;-) Robert Rottscholl - DE

2 1

proxy server
by Dimitri Melnikowitsch 31 Jan '02

31 Jan '02

Hi folks, im going to set up an proxyserver for HTTP/FTP/SMTP/POP3 and maybe ssh(i don't know how, yet) in my mind the network construction is looking like this: $I-Net$ <---> $Outdoor router$ <---> $proxy/fw$ <---> $web-server/smtp$ Some words towards the "grafic": I'm going to proxy the services for the internet users. The proxy is not a router. I think it might be more securer than a firewall. May be you have some idea which proxy server will be the best choice? I request comments for this idea. Wich advantage and disadvantage brings this method with it ? thanks Dimitri Melnikowitsch _______________________________________________________________________ 1.000.000 DM gewinnen - kostenlos tippen - http://millionenklick.web.de IhrName(a)web.de, 8MB Speicher, Verschluesselung - http://freemail.web.de _______________________________________________________________________ Das WEB.DE Zertifikat zur Pruefung digitaler Unterschriften gibts bei: http://trust.web.de/root.sql

2 1

SuSE-FW-OUTPUT-ERRORIN log
by mario libraro 31 Jan '02

31 Jan '02

Hi to all listmates, I found these lines in /var/log/messages: Jan 31 11:51:20 goemon kernel: SuSE-FW-OUTPUT-ERRORIN= OUT=eth0 SRC=<my ip!> DST=<external ip 1> LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=19546 PROTO=TCP SPT=45274 DPT=21 WINDOW=3072 RES=0x00 URGP=0 OPT (03030A0102040109080A3F3F3F3F000000000000) Jan 31 12:01:53 goemon kernel: SuSE-FW-OUTPUT-ERRORIN= OUT=eth0 SRC=<my ip!> DST=<external ip 2> LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=49052 PROTO=TCP SPT=54417 DPT=139 WINDOW=4096 RES=0x00 URGP=0 OPT (03030A0102040109080A3F3F3F3F000000000000) <external ip 1> and <external ip 2> are from the same subnet but are different. Is this a spoofing attack or what? -- Mario Libraro Web Applications Developer Fulltrading S.p.A. 00148 Roma - Via Di Affogalasino, 105 tel. +39 06 65 73 170 fax +39 06 65 73 529 mob. +39 347 5205 752 email: m.libraro(a)fulltrading.it m.libraro(a)tiresia.it web: www.fulltrading.it -- "I worry about my child and the Internet all the time, even though she's too young to have logged on yet. I worry that 10 or 15 years from now, she will come to me and say 'Daddy, where were you when they took freedom of the press away from the Internet?'" Mike Godwin, Electronic Frontier Foundation

3 2

AW: [suse-security] harden_suse-3.5 and SuSE 7.3
by K.J.Mueller＠EnBW.com 31 Jan '02

31 Jan '02

Hi Togan, my personal interpretation of this is something like SuSE saying: "...in case you think, you need something that is "harder" than standard SuSE, you should consider using something different, like 'SuSE Linux Firewall on CD'..." Otherwise it would be a strange coincidence that the moment, when this product became available was about the same time harden_suse disappeared from the SuSE-distro. ...just guessing. Please correct me, if you think I'm wrong. Regards, K. > -----Ursprüngliche Nachricht----- > Von: Togan Muftuoglu [mailto:toganm@users.sourceforge.net] > Gesendet am: Montag, 28. Januar 2002 08:23 > An: Suse-Security > Betreff: [suse-security] harden_suse-3.5 and SuSE 7.3 > > Hi, > > harden_suse version 3.5 looks like max_version supported is 7.2. What > are the problem possiblities when I run this with a 7.3 machine >

1 0

SSl php and imap
by CIVITA ALAN 31 Jan '02

31 Jan '02

suse-security(a)suse.com Hi all, I'm try to install the php 4.1.1 on an 7.3 SUSE with imap support. First at the configure i must take --with-imap-ssl cause the skript says that i must take this option too. So i do this and now it works So i do make At the make progress he stops with the following warning -ldl -lmysqlclient -lcrypt -lcrypt -lresolv -lm -ldl -lnsl -lresolv -lcrypt /usr/i486-suse-linux/bin/ld: cannot find -lcrypto collect2: ld returned 1 exit status make[1]: *** [libphp4.la] Error 1 make[1]: Leaving directory `/usr/local/etc/php-4.1.0' make: *** [all-recursive] Error 1 what have I do wrong or what must i install that it works? Thank for helping

1 0

SuSEfirewall2 blocks all external network traffic to or from any computer on my nework, including the firewall-machine itself
by Sebastian J. Bronner 31 Jan '02

31 Jan '02

I have a problem that I haven't seen addressed in the archives. I have configured my gateway computer according to the Scenario 3 (a small university wants to use masquerading to provide internet access to its internal network) in the EXAMPLES file with the following settings: FW_DEV_EXT="eth0:0" FW_DEV_INT="eth0" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_NETS="192.168.0.0/24" Of course, I also set START_FW2="yes" in /etc/rc.config. Whenever I start the firewall, I am unable to ping the outside world from the gateway machine itself or any machine configured to use it as a gateway. This configuration worked with SuSEfirewall(1), but now that I'm using kernel 2.4.16, I really think I aught to use SuSEfirewall2. -- Sebastian J. Bronner waschtl(a)sbronner.com

5 9

Is necesary the portmapper?
by Juan Carlos S.C 31 Jan '02

31 Jan '02

Hi list: I have an email server runnig sendmail and I ask myself if portmapper is necesary. I don't use any rpc service so... is safe to stop it or is used for something else? Thanks.

2 1

german, RADIUS ?
by Dörfler Andreas 31 Jan '02

31 Jan '02

hi, sorry for german but my englisch is terrible ;) (zudem sprechen 90% hier eh deutsch ;)) falls das ot ist bitte ich das zu entschuldigen aber nachdem es doch in einem gewissen grad im sicherheit geht denke ich das es hier paßt. nachdem wir bei uns langsam aber sicher für ras die authentifizierung von einem radiusserver vornehmen lassen wollen stellt sich jetzt die frage welchen man nun nimmt. die cistron/livingston radiusserver sind ja auch schon in die tage gekommen und strotzen nur mit veralteten standards und sicherheitslöchern. die einzigen alternativen (die nichts kosten) die ich so gefunden habe sind der freeradius (freeradius.org) und der openradius (openradius.com). welches projekt würdet ihr so empfehlen ? hat jemand gute erfahrungen mit einem der beiden gemacht ? mfg / best regards doerfler UNIX is like an indian tipi: no windows, no gates and apache inside wenn windows die antwort ist, wie dumm war dann die frage ?

2 1