March 2002 - openSUSE Security - openSUSE Mailing Lists

new SSH xploit
by Michael Appeldorn 01 Mar '02

01 Mar '02

Hi list According to some entrys in BugTraq and statements here, there is an sshex binary out the, to attack sshd up 3.x. Where to get attackers weapon - to play with it and unter- stand their game. Michael Appeldorn

3 2

SuSEfirewall2.0 and licq
by tilman 01 Mar '02

01 Mar '02

hello, as my pc is online nearly all day, i installed the suse firewall. nevertheless i'd like to continue using licq, which doesn't work any more since i started the firewall. can sombody give me some hints, which parameters have to be changed to get this to work? i tried making accessible the icq ports, udp 4000 and tcp 2000-2020, without success. thanks a lot tilman

2 1

squid
by Dietmar Strasdat 01 Mar '02

01 Mar '02

Hello suse-security, http://cert.uni-stuttgart.de/archive/bugtraq/2002/02/msg00294.html Are SuSE squid packages affected? -- Best regards, Dietmar mailto:earthmate@gmx.net

7 9

security below osi level 3
by Olivier Hislaire 01 Mar '02

01 Mar '02

Hi, I've heard about possible attacks between osi levels 2 and 3, i.e. againts the network card driver and the HW or something like that. Does anybody know something about ? Is there somewhere specific documentation / information / tools to document and address that kind of vulnerability ? Is this under the scope of the O.S. capabilities ? Any information appreciated, Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire(a)msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------

1 0

Re: [suse-security] Iptables: matching packets on MAC address lev
by Christoph Egger 01 Mar '02

01 Mar '02

On Friday, 1. March 2002 10:14, daniele(a)infra.de wrote: > Hi Christoph, > > On Fri, Mar 01, 2002 at 09:53:49AM +0100, Christoph Egger wrote: > > I know, that iptables allows to filter packets on the MAC address level > > using the MAC module. > > > > How can I use the module? Is there anywhere a full documentation > > available? > > iptables -m mac --help > > You can get help to each module, with typing: > iptables -m module --help (if it's a matching module) > > If it's a JUMP-Module (aka target) you can get help with: > iptables -j target --help > > e.g.: iptables -j LOG --help > > But realize, that it's easy to fake mac-addresses... Ah! TNX a lot. -- CU, Christoph

1 0

Iptables: matching packets on MAC address level
by Christoph Egger 01 Mar '02

01 Mar '02

Hi! I know, that iptables allows to filter packets on the MAC address level using the MAC module. How can I use the module? Is there anywhere a full documentation available? -- CU, Christoph

1 0

RE: [suse-security] DNAT with Virtual IF
by Rossell, Roger 01 Mar '02

01 Mar '02

be sure you've removed ipchains mod, otherwise virtual ip addresses will not work -----Mensaje original----- De: Matthias Krauss [mailto:MKrauss@hitchhiker.com] Enviado el: jueves, 21 de febrero de 2002 18:37 Para: 'suse-security(a)suse.com' Asunto: [suse-security] DNAT with Virtual IF Hi folks, i'm looking for a nice workaround for the following prob: I've 3 IF's, user lan, dmz and an external inet link, now i'd like to dnat incomming requests like: $IPTABLES -A FORWARD -i $EXT -o $DMZ -d 10.0.10.2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A FORWARD -i $DMZ -o $EXT -s 10.0.10.2 -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -t nat -A PREROUTING -i eth0 -j DNAT --to 10.0.10.2 the above sample works fine, $EXT represent eth0 which is the outside IF, in addition i created a virtual if named eth0:1 which i can't address in iptables (wierd character : ) . I;m not getting any ruleset to work unless i'm using "-i eth0", the workaround like eth0+ doesnt help , did anybody dealed with this prob before ???? Many thanks Matthias Krauss -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0