March 2002 - openSUSE Security - openSUSE Mailing Lists

permissions
by Christian Lox 04 Mar '02

04 Mar '02

Hi everyone, jsut wondering about the permissions in i.e. /sbin and /etc/init.d I found a lot (in /sbin nearly all) programs do have 755 and root.root The permission in rc.config are set to PERMISSION_SECURITY="secure local" Stumbled over this on a RH system but SuSE seems not to do better. Or is this considered harmless? Christian -- we reject: kings, presidents, religions we accept: working code

3 2

Problem
by Ricardo Romero 03 Mar '02

03 Mar '02

Hi Security[GURUS]. It would like to know if it is possible, the following one: Internet Some Trusted Adresses | | | | | | | | | | | | | | SuSE-Firewall | | (IIS) WebServer | |----- Mail Server | |----- Database Server | Internal LAN How it could make this? Where I have that to modify? TIA. Romero

1 0

php
by Aaron Collins 02 Mar '02

02 Mar '02

Hey when where can I expect to get the new PHP patch? I'm new to the list so if thos was already discussed please direct all flames to /dev/null -- Signed, Aaron Collins Lead Internet Infrastructure Engineer acollins(a)teamgtc.com

4 3

3DES and NAT
by mailinglists＠belfin.ch 02 Mar '02

02 Mar '02

Hi I use this config: me (VPN client) | | Linux Gateway (NAT) | | Internet | | VPN Server The VPN client (me) is trying to establish connection to the VPN server via a linux NATting gateway. I configured a DES encrypted ESP tunnel and, regardless of the fact that DES unsecure, this works wonderfully. I tried the same with 3DES and ESP. I have a connection time out on the linux box. The client send ESP request but there is no answer coming back to the server. I guess, it's the linux box killing or whatever the packets. The VPN server does not even see the connection attempt. The same I tried in a network with official IP addresses. I had no problems connecting to the vpn server using 3DES and ESP. The Linux gateway is a Suse 7.3 kernel 2.4.10 with iptables 1.2.2. Also ipsec, ipip and ip_gre modules are loaded. Firewall on the gateway is down. If anybody has a solution for that problem, please let me know. thank you Philipp

1 0

Re: [suse-security] VPN
by rob＠mediasolution.it 02 Mar '02

02 Mar '02

You have to use pptp-linux-1.0.3 or later. It is not included in SuSE 7.3 afaik, I had to DL it from the net. The "unofficial" page is at http://pptpclient.sourceforge.net and you have to rebuild the src.rpm IIRC. You don't need the mppe package on that page because it already included somewhere else in SuSE (again, IIRC) It doesn't seem to be a robust implememtation, but it works and if you use it only with the modem nobody should be able to abuse it to gain access to your computer. Ciao, Roberto

2 1

VPN
by Riccardo Sama' 02 Mar '02

02 Mar '02

I'm trying to make a vpn connection between my linux box (suse 7.3 kernel 2.4.10GB) and my alcatel speed touch home ethernet adsl modem. The protocol is pptp, can anyone tell me how to proceed? Wich program can i use? is there a pptp client version for suse linux? many thanx Ricky

1 0

VPN
by Riccardo Sama' 02 Mar '02

02 Mar '02

I'm trying to make a vpn connection between my linux box (suse 7.3 kernel 2.4.10GB) and my alcatel speed touch home ethernet adsl modem. The protocol is pptp, can anyone tell me how to proceed? Wich program can i use? is there a pptp client version for suse linux? many thanx Ricky

1 0

Help for SuSEFirewall2
by amiky＠gic.parma.it 01 Mar '02

01 Mar '02

Hi I'm a new subscribed to the mailing-list i'd like to ask you a question about SuSeFirewall2 that i don't configure correctly Thank you for your interest this is the configuration scheme Internet | | Web server Web server | | | SuSE-Firewall------------------ | | | Internal LAN external address example (194.168.2.1 194.168.2.2 194.168.3) external fw interface: eth1 (194.168.2.1) dmz fw interface: eth2 (192.168.1.1) internal fw interface: eth0 (192.168.0.1) internal LAN: 192.168.0.1 netmask 255.255.255.0 ip internal of web sever 192.168.1.2 FW_DEV_EXT="eth1" FW_DEV_INT="eth0" FW_DEV_DMZ="eth2" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="192.168.0.1/24 192.168.1.0/24" FW_PROTECT_FROM_INTERNAL="no" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_TCP="www" FW_SERVICES_EXT_UDP="" FW_SERVICES_EXT_IP="" FW_SERVICES_DMZ_TCP="www" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="" FW_SERVICES_INT_UDP="" FW_SERVICES_INT_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" FW_SERVICE_AUTODETECT="yes" FW_SERVICE_DNS="no" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SQUID="no" FW_SERVICE_SAMBA="no" FW_FORWARD="" FW_FORWARD_MASQ="194.168.1.2,192.168.1.2,tcp,80" FW_REDIRECT="" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="no" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_LOG="--log-level warning --log-tcp-options --log-ip-option --log-prefix SuSE- FW" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="yes" FW_ALLOW_PING_EXT="no"

2 1

RV: [suse-linux-s] Lista iptables-esp
by Carlos Carrera 01 Mar '02

01 Mar '02

Bueno, ya que por nigun lado he podido encontrar una lista de iptables en ESPAÑOL (bueno si alguien lo conoce puede decirme donde) en creado una lista de iptables en español, espero que no sea molestia... Bueno, para subcribirte a la lista solo envia un correo a majordomo(a)linux.lamolina.edu.pe Con el mensaje: subscribe iptables (todo en minuscula y no importa el subject) Envialo Y Listo!! Le llegara un mensaje de bienvenida ... LA PREGUNTA ES SI USTEDES ESTAN DE ACUERDO CON LA CREACION DE ESTA LISTA ............. Saludos cordiales, Carlos -----Mensaje original----- De: Gaston Franco [mailto:gfranco@arcert.gov.ar] Enviado el: Jueves, 28 de Febrero de 2002 03:14 p.m. Para: Carlos Carrera Asunto: Re: question... Hola Carlos . No que yo sepa. te puedo ayudar en algo ? . > Carlos Carrera wrote: > Hay una lista de IPTABLES en SPANISH ...??????? -- Para dar de baja la suscripción, mande un mensaje a: suse-linux-s-unsubscribe(a)suse.com Para obtener el resto de direcciones-comando, mande un mensaje a: suse-linux-s-help(a)suse.com

1 0

2.4.16 kernel for 7.3
by Selcuk Ozturk 01 Mar '02

01 Mar '02

Sometime ago it was said an announcement was due any minute about the kernel upgrade that has been sitting in ftp.suse.com since the end of Jan. It's been more than a month now. Did I miss the announcement? Selcuk --- Selcuk Ozturk VP of Information Technology eMediaMillWorks, Inc. 1100 Mercantile Lane, Ste 119 Largo, MD 20774 Phone: (301) 883-2482 x121 Fax: (301) 883-9120 Email: sozturk(a)eMediaMillWorks.com

1 0