December 2002 - openSUSE Security - openSUSE Mailing Lists

Isos
by Fabio Sena 17 Dec '02

17 Dec '02

Hello All, It would like to know, where I can obtain the ISOS of SuSE 8.1, it has in some ftp Server? Regards Fabio Sena Brasil-PE

2 1

Re: [suse-security] Security in server
by GentooRulez 17 Dec '02

17 Dec '02

try google: no job control in this shell seems to be a common problem Michael

1 0

Susefirewall2-rmmod problem
by Peter Jevoš 17 Dec '02

17 Dec '02

Hi folks , I've got the problem with SuSEfirewall2-2.1 in SuSE7.3. When I stopped a firewall, process "rmmod ipt_TCPMSS ipt_TOS ipt_MASQUERADE ipt_LOG ipt_stateipt_MARKipt_MIRROR ipt_REDIRECT ipt_limit ipt_mac ipt_mark ipt_multiport ipt_owner ipt_tcpmss ipt_tos ipt_ unclean ip_queue ip_nat_ftp ip_conntrack_ftp ipt_REJECT iptable_mangle iptable_nat iptable_filter ip_queue ip_ conntrack iptable_filter ip_tables" don't stop till the infinity. It takes 93 % CPU, and SuSEfirewall2 freezed. In the lsmod is "ip_conntrack 12848 0 (deleted)" and it cannot by removed Now i must reboot Is there any solutions thanx a lot -- peter

1 0

AW: [suse-security] procmail and kmail problems
by Ulrich Roth 17 Dec '02

17 Dec '02

> The mails will be written in my local > postbox but if I check my mails > form kmail ther are no mail in my > kmail-inbox. > > please help me with this problem. Sorry that I can't help you with that, but the funny thing is that we have the same problem here under SuSE 6.2. Maybe it's a kmail configuration problem. Maybe you just have to tell kmail to use /var/spool/mail/<username> as its inbox somewhere in the conf file. As we don't use kmail, I didn't try to solve the problem. BTW: This is OT here. Good luck! Uli

1 0

SuSEfirewall2 ACCEPT Meldungen in Messages
by Andreas Dietl 17 Dec '02

17 Dec '02

Hallo, ich habe in der SuSEfirewall2 folgendes eingetragen: FW_SERVICES_EXT_TCP="ftp-data ftp ssh telnet 25 80 110 143 443" damit von aussen auf den Server zugegriffen werden kann. In der /var/log/messages wir zu hauf folgendes protokolliert: Dec 17 07:01:35 server1 kernel: SuSE-FW-ACCEPT IN=eth0 OUT= MAC=00:04:76:a0:3c:a7:00:b0:64:87:3d:00:08:00 SRC=193.7.255.244 DST=222.222.222.222 LEN=48 TOS=0x00 PREC=0x00 TTL=53 ID=50941 PROTO=TCP SPT=48254 DPT=80 WINDOW=61440 RES=0x00 SYN URGP=0 OPT (020405B401030300) Dec 17 07:03:55 server1 kernel: SuSE-FW-ACCEPT IN=eth0 OUT= MAC=00:04:76:a0:3c:a7:00:b0:64:87:3d:00:08:00 SRC=156.34.154.58 DST=222.222.222.222 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=12441 DF PROTO=TCP SPT=3758 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405A001010402) wie kann ich das unterdrücken? Mich interssieren ja nur die Drops. -- Mit freundlichen Grüssen Andreas Dietl ------------------------ Andreas Dietl Angermannstraße 2a 95643 Tirschenreuth Tel.: +49 9631 4974 Fax.: +49 9631 79477 ------------------------

2 1

SuSEfirewall2 masq in pers-fw legacy mode
by Lars Ellenberg 16 Dec '02

16 Dec '02

I just now setup a router for some small home lan, and was suprised that going the easy way with REJECT_ALL_INCOMING_CONNECTIONS="ippp0 masq" did NOT work. as it turned out the outgoing packages where masq'ed, but the reponding ones did not get through the FORWARD chain: iptables -L -nv # [edited to make the lines fit] Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * * 0/0 0/0 [options] 0 0 reject_func all -- ippp0 * 0/0 0/0 0 0 ACCEPT all -- * ippp0 0/0 0/0 I miss a rule similar to Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * * 0/0 0/0 [options] ### this one: 0 0 ACCEPT all -- ippp0 * 0/0 0/0 \ state RELATED,ESTABLISHED ### before rejecting everything comming in on DEV_EXT 0 0 reject_func all -- ippp0 * 0/0 0/0 0 0 ACCEPT all -- * ippp0 0/0 0/0 this might be by design, but then it should be stated somewhere. at least it renders the last rule above useless. looking at the code, this diff [against SuSEfirewall2-3.1-26] just after masqerading part 1 in the FW_QUICKMODE section would do the trick: ----%<---- --- /sbin/SuSEfirewall2.orig 2002-12-16 18:12:30.000000000 +0100 +++ /sbin/SuSEfirewall2 2002-12-16 18:35:16.000000000 +0100 @@ -514,8 +514,10 @@ $IPTABLES -A input_ext -j "$REJECT" # now reject everything which is entering through insecure interfaces + # unless it belongs to an established connection for i in $FW_DEV_EXT; do $IPTABLES -A INPUT -i $i -j input_ext + $IPTABLES -A FORWARD -i $i -j "$ACCEPT" -m state --state ESTABLISHED,RELATED $IPTABLES -A FORWARD -i $i -j "$REJECT" done ----%<---- Comments? Lars

1 0

[UPDATE]SuSEfirewall2 The missing manual version 0.9
by Togan Muftuoglu 16 Dec '02

16 Dec '02

Hi, As the subjects says "SuSEfirewall2 The missing manual" is a 110 page PDF document trying to explain the missing parts of information of SuSEfirewall2. This version also covers the GUI configuration of SuSEfirewall2 and is available as both A4 and USLetter sizes configured for doublesided. The file is available at Sourceforge so for faster downloads you may http://sourceforge.net/project/showfiles.php?group_id=42064&release_id=1278… This is version 0.9 Draft. I think I have covered almost all of it (sometimes two eyes is not enough). Before I release version 1.0 FINAL, I would like to receive input from people. It's not good if it is only my point of view as the document is trying to help anyone to configure SuSEfirewall2. So please use the Sourceforge Tracker for submitting comments, patches, bugs etc http://sourceforge.net/tracker/?atid=509170&group_id=42064&func=browse Thanks -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer http://dinamizm.ath.cx

1 0

Network goes down in flames
by S.T.Ryder 14 Dec '02

14 Dec '02

Hi, I have a network set up with a SuSE 7.3 and a SuSE 8.1 machine. Nothing special out of the box stuff connected by Ethernet. I am using the 8.1 machine as a print server. The 7.3 machine is printing to a Laserprinter connected to the 8.1 machine. Printer is called remote on the 7.1 machine. I am printing using samba. I used YaST to set everything up. Problem is, when I print over the network, the 8.1 machine crashes and reboots. Any clues? Thanks. +-------------------------------+-------------------------------------+

1 0

RE: [suse-security] Introduction/Documentation tp Socks and or Pr oxies?
by mailinglists＠belfin.ch 14 Dec '02

14 Dec '02

Hi The best documentation about socks 4/5 proxy (Dante) I found was the config file itself. It's self explanatory. Philipp > -----Original Message----- > From: Markus Feilner [mailto:mfeilner@feilner-it.net] > Sent: Saturday, December 14, 2002 12:49 PM > To: suse-security(a)suse.com > Subject: [suse-security] Introduction/Documentation tp Socks and or > Proxies? > > > Hello List, > what basic information and/or Docmuntation about Proxies like > Socks and others > can you recommend? > Or are there better proxies? > Thanks! > -- > Mit freundlichen Grüßen > Markus Feilner > > May you always grok in fullness! > > Beachten Sie bitte unsere neue Email-Adresse! > > -------------------------------------------------------------- > ----------------------------------- > Feilner IT Linux & GIS Erlangerstr. 2 93059 Regensburg > fon: +49 941 70 65 23 - mobil: +49 170 302 709 2 > web: http://feilner-it.net mail: mfeilner(a)feilner-it.net > > > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here >

2 1

Introduction/Documentation tp Socks and or Proxies?
by Markus Feilner 14 Dec '02

14 Dec '02

Hello List, what basic information and/or Docmuntation about Proxies like Socks and others can you recommend? Or are there better proxies? Thanks! -- Mit freundlichen Grüßen Markus Feilner May you always grok in fullness! Beachten Sie bitte unsere neue Email-Adresse! ------------------------------------------------------------------------------------------------- Feilner IT Linux & GIS Erlangerstr. 2 93059 Regensburg fon: +49 941 70 65 23 - mobil: +49 170 302 709 2 web: http://feilner-it.net mail: mfeilner(a)feilner-it.net

1 0