December 2004 - openSUSE Security - openSUSE Mailing Lists

Trend ChipAWay Virus Detection and SuSE Linux 9.1
by Philip B Cook 19 Dec '04

19 Dec '04

I have just replaced my existing SuSE Linux 8.2 system with SuSE Linux 9.1 (I installed from scratch.. not an upgrade) on some existing hardware. After the installation I now have my BIOS Virus Detection (Trend ChipAway) telling me I have a boot sector virus. It never compained before. Since I am a clean installation I consider this unlikely, but before I silence the virus detection in the BIOS can anyone re-assure me that I am OK. The changes to my installation have been to add another hard drive and configure the two drives via LVM2. I have a small EXT3 partition mounted as /boot and the remainder of the first drive plus all the second drive is managed via LVM formatted with Reiser and mounted as / Is there anything in this that the BIOS may regard as suspicious. Thanks in advance. Philip

3 2

'ax25' module is loaded while doing nothing special...
by Peli 19 Dec '04

19 Dec '04

Hi, I use SUSE 9.1 with KDE 3.3.1, and check my comp quite frequently with rkhunter. I think it's not related to real security issues, but please could one tell me, why the machine loads invisibly the ax25 kernel-module while I work, and actually do nothing special?! I saw this kind of messages in my log, in that exact timepoints I was peacefully surfing as a common user, but sometimes working also in a terminal with a root-session: Dec 12 16:51:49 khazad-dum su: pam_unix2: session finished for user root, service su Dec 12 16:54:08 khazad-dum kernel: NET: Registered protocol family 4 Dec 12 16:54:08 khazad-dum kernel: ax25: unsupported module, tainting kernel. Dec 12 16:54:08 khazad-dum kernel: NET: Registered protocol family 3 Dec 12 16:54:08 khazad-dum kernel: NET: Registered protocol family 5 or Dec 15 19:58:18 khazad-dum su: pam_unix2: session finished for user root, service su Dec 15 19:58:46 khazad-dum kernel: NET: Registered protocol family 4 Dec 15 19:58:46 khazad-dum kernel: ax25: unsupported module, tainting kernel. Dec 15 19:58:46 khazad-dum kernel: NET: Registered protocol family 3 Dec 15 19:58:46 khazad-dum kernel: NET: Registered protocol family 5 Thank you for any ideas, Peli

1 0

Remote Login to SuSE 9.1 via PuTTY / SSH
by Philip B Cook 19 Dec '04

19 Dec '04

I have previously had a successful installation of SuSE 8.2, to which I could connect from a Windows machine running PuTTY using SSH. I could logon as root and administer the Linux machine from elsewhere on the network. I have rebuilt the Linux machine and installed SuSE 9.1. (I did not upgrade, but installed new). My windows machine can still establish a connection via PuTTY/ SSH but I get the following. login as: root Sent username "root" root@linux's password: Access denied I have obvioulsy missed some setting to permit remote logins using SSH. I cannot login remotely as any of the users either. Changes I made when installing were to use LVM to manage my hard disk volumes. I also changed the password encryption technique from the default since my previous password was stated to be too long for the default encryption method. Can anyone suggest where to look. Philip

4 4

RE: [suse-security] Suse PAM issues
by GarUlbricht7＠netscape.net 18 Dec '04

18 Dec '04

"Jason Monroe \"JC\"" wrote on Fri Dec 17 2004 - 00:04:28 CET : > > Hello All, > > I'm curious to know where I might send questions related to > PAM configuration issues on SUSE? > Hi JC: Assuming you read the help SuSE provides: file:/usr/share/doc/packages/pam/html/index.html And did a google search on "SuSE + PAM" which yields things like: <http://www.dslreports.com/forum/remark,12034052~mode=flat> and other interesting links, I can't help -- but I suspect it is not this list unless your PAM issues relate directly to security, and not just curiosity. HTH, (P.S. It is always a good idea to say what version of SuSE you are running when asking a question -- I got the "file" reference listed above from "pin PAM" on SuSE 8.2. It might be slightly different on 9.1 or whatever... ) -- __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp

1 0

sasl-auth
by Philippe Vogel 17 Dec '04

17 Dec '04

Hello! I was wondering why my saslauth did not work and the reason was my chroot (setup over SuSEconfig with /etc/sysconfig) didn't update /usr/sbin/saslauthd to /var/spool/postfix/usr/sbin/saslauthd. Please fix that in your packages. Before giving us a patch test it or don't give it to the public! Philippe P.S.: The novell webpages suck! Where have the old and fine SuSE-pages gone?

4 3

Suse PAM issues
by Jason Monroe "JC" 16 Dec '04

16 Dec '04

Hello All, I'm curious to know where I might send questions related to PAM configuration issues on SUSE? Thanks, JC

1 0

email after loggin
by Markus Maria Miedaner 16 Dec '04

16 Dec '04

Hi list, that's a pretty good idea. the only thing I am worried about because of my old pc ( ;-( ) is that these log-watchers may slow done the system a little bit. What about the following: edit /ect/hosts.allow and invoke a scirpt everytime the ssh deamon, or what ever protocoll you like, gets acitve to check (eg.: with who or last -n 2 or ....) to see if the loggin was successfull. should look like: sshd: IP : spawn script-whos-there and the script-whos-there should include the mail -s user-XXXX-logged-in I know this may take a few if-then loops but should work... The major drawback currently is that I do not know if hosts.allow allows the use of=20 wildcards for the ip's.=20 This solution worked quiet fine at home-net.... anyway, let me know if that solved your problem / how you solved it.... cu, markus __________________________________________________________ Mit WEB.DE FreePhone mit hoechster Qualitaet ab 0 Ct./Min. weltweit telefonieren! http://freephone.web.de/?mc=021201

1 0

pending vulnerabilities ( Squirrelmail )
by Cleo 13 Dec '04

13 Dec '04

hi, in the last SUSE Security Summary Report SUSE-SR:2004:003 I don't see squirrelmail in the pending vulnerabilities or in the list of solved security vulnerabilities When the patch for this vulnerability http://article.gmane.org/gmane.mail.squirrelmail.user/21169 is envisaged ? Thanks. Cleo

1 0

Email after Console-Login
by Kai Pfeiffer 12 Dec '04

12 Dec '04

Hello list, I have a rootserver with remote-console. After I have recognised, that my provider stores the password for the remote-console in plain-text, I'm worried about security. - The bootloader password is set and active. - Singleusermode is not allowed Can someone describe me a simple solution to send me an email after a login-attempt (failed or succeded). The destination of this email should be an account of my email-provider. Thanx Kai Pfeiffer

3 2

What firewall for LAN with ipcop like interface ?
by Robert Rozman 12 Dec '04

12 Dec '04

Hi, I have ipcop (www.ipcop.org) acting as firewall/nat router in my home LAN. I like its easy interface and setup. But would like to add some other things to my EPIA PC running ipcop (video surveillance, VOIP) - and I thought using more general distro would be easier way. I'm Suse fan so I'm curious what app would let me do similar Firewall/NAT router system with easy web interface or other interface under Suse ? Thanks in advance, regards, Rob.

1 0

Best tool to check security ?
by Robert Rozman 12 Dec '04

12 Dec '04

Hi, I wonder what security check up package would you recommend ? Is Nessus the right one, or should I pick something else ? Regards, Rob.

3 2

Re: Where to Deploy Trend Micro viruswall?
by Invalid Addr3ss 11 Dec '04

11 Dec '04

Replying to "Nuno Ferreira" <negocios_online(a)netcabo.pt> The (umm.. NETGEAR 8 Port 10/100 Mbps Ethernet) switch is something I bought 7 years ago when I first started to network my SOHO. Win 95 and 98. So I have always felt compelled to keep it. Ethernet switches allow your Ethernet cards to operate in Full Duplex mode. It's mainly a hub, bridge. I use it as a uplink for others devices, workstations, servers. Keep the work-horse off of the firewall/router, if and when I share *LARGE* files on my LAN. Sending and receiving data at the same time, gets dedicated bandwidth instead of shared bandwidth. Separating systems that have sensitive data from the rest of the network decreases the chances that people will gain access to information they are not authorized to see. There is something about this that eliminates the need for other workstations attached, to examine each packet broadcast on the netwok, I think. For a boring read: http://www.microsoft.com/technet/security/guidance/secmod40.mspx See Figure 2. It's like my basic SOHO. This computer duty is E-mail and Chat only. invalid@addr3ss:~> su - Password: addr3ss:~ # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface link-local * 255.255.0.0 U 0 0 0 eth1 10.0.0.0 * 255.0.0.0 U 0 0 0 eth1 loopback * 255.0.0.0 U 0 0 0 lo default 10.10.2.16 0.0.0.0 UG 0 0 0 eth1 Genmask The netmask for the destination net; '255.255.255.255' for a host destination and '0.0.0.0' for the default route. Flags Possible flags include U (route is up) H (target is a host) G (use gateway) R (reinstate route for dynamic routing) D (dynamically installed by daemon or redirect) M (modified from routing daemon or redirect) A (installed by addrconf) C (cache entry) ! (reject route) Firewall/Router | | Switch / \ / \ Linux XP Don't feel bad, I'm a newbie also. Happy Holidays to all. Invalid Addr3ss On Friday 10 December 2004 03:30, Nuno Ferreira wrote: > Hi. > > I am a newbie in this area, and I found intriging your using of a switch > after the router...can you tell me what´s the use of it? > > Regards > Nuno > > -----Original Message----- > From: Invalid Addr3ss [mailto:invalid_addr3ss@excite.com] > Sent: domingo, 5 de Dezembro de 2004 7:53 > To: suse-security(a)suse.com; focus-virus(a)securityfocus.com > Subject: Where to Deploy Trend Micro viruswall? > > Hello All > > I was wondering where to put a Trend Micro Viruswall in my network. > My basic setup follows below. SOHO > > Internet > > > Cable Modem > > > Firewall/Router > > > Switch > / | \ > / | \ > Linux | XP > > Print Server > > > Printer > > Thanks > > Invalid Addr3ss > -- > Q) What do you get when you mix a spammer with a hacker? > > A) A Spacker

1 0

9.1 ---> 9.2 ???
by Dick Davis 10 Dec '04

10 Dec '04

Hello List, We are contemplating upgrading 9.1 Prof. ----> 9.2 Prof. We had/have several problems with the current 9.1 version, YaST broke after on-line Update, YaST Repair did not really repair, After on-line update the properties for sound files changed form File Type Sound file to File Type Text file. Since this is not a complaint forum I'll restrict myself to mentioning just these but there are many more issues. In short, not a real pleasant experience. Any of these and/or other problems known in version 9.2? How is the security level? Thanks for your response(s) Dick Davis

3 2

KDM howto display last login and logout
by Daniel Wirth 10 Dec '04

10 Dec '04

Dear list, to confirm to customer's security policies, we require to setup kdm to display a users last sucessfull / non-sucessfull login _and_ logout-times. Can anyone provide me with a better idea than posting "last | grep $USER | xmessage" ? Thanks in advance Daniel

1 0

Security Boot X server Issues
by Rodney Wishart Jr. 09 Dec '04

09 Dec '04

Several strange problems have recently appeared when booting my SuSE 9.0 system. The first and most strange is that when typing my password the "*******" no longer appear in the password box, it just remains blank and the cursor does not move. After pulling my hair out for several hours, I realized that if I typed the password in the box anyway and clicked OK everything booted as normal. I can live with this quirk (I'm sure its some new security feature), but where did It come from and how can I change it back so my ******** appear as I type. Additionally, I can no longer shut down my system directly from a user logon session. I can only log off and must shut down from the kde boot screen. Again I would like to change things back to the way they used to be, if I can. Finally, I know this is becoming a long post, I can no longer log on to KDE as root. The screen flashes and I am dumped back to the KDE logon screen and I must logon as a normal user. I know its not advisable to do this but I noticed this after the following problem appeared. Trying "sux -" logged on as a normal user in an xterminal will not alow me to run any x related programs. I continue to get "Xlib: connection to ":0.0" refused by server, Xlib: Protocol not supported by server, "programx": cannot connect to X server :0.0 errors. I know the xhost +local:root workaround, however I would like to get everything back the way it was before this mess started. I believe this was caused by SuSE watcher automatically updating my system with "new and improved" security fixes. I have since disabled automatic updates. Sorry for the long post I would really appreciate any help I could get. Thanks, Rodney

2 2

AW: [suse-security] Default Squirrelmail installation not safe
by Thorsten Hahn 09 Dec '04

09 Dec '04

> the default installation of Squirrelmail in SuSE 9.1 (others versions > ?) is not safe. SuSE 8.2, Squirrel from Web and not SuSE-Packagsystem says: Forbidden You don't have permission to access /squirrelmail/data/ on this server. ------------------------------------------------------------------------ -------- Apache/1.3.27 Server at mail.example.com Port 80 So I think there is no problem. Greetings Thorsten

1 0

Default Squirrelmail installation not safe
by Cleo 08 Dec '04

08 Dec '04

hi, the default installation of Squirrelmail in SuSE 9.1 (others versions ?) is not safe. path installation ---------------- /srv/www/htdocs/squirrelmail/ /srv/www/htdocs/squirrelmail/config/ /srv/www/htdocs/squirrelmail/data/ /srv/www/htdocs/squirrelmail/plugins/ ... The data directory is under the squirrelmail directory and accessible from a navigator for example, if you have un login test, you can view the test.pref in http://www.example.com/squirrelmail/data/test.pref also the address book ( test.abook ) in the README.SuSE or INSTALL files, no information to secure the installation. Solution ( for example ) -------- data directory must be in /var/lib/squirrelmail/data and in config.php $data_dir = /var/lib/squirrelmail/data/'; the directory permissions drwxrwx--- 2 root apache /var/lib/squirrelmail/data Secure others directories ( place config.php and config_local.php file in /etc/squirrelmail for example and create links ) ? Others solutions ? Cleo.

3 3

martian sources and faked ip/mac addresses?
by Kai Schaetzl 08 Dec '04

08 Dec '04

I have some questions regarding the "martian source" iptables messages. I'm getting a lot of messages like this: Dec 7 20:17:44 nx02 kernel: martian source 212.112.233.242 from 127.0.0.1, on dev eth0 Dec 7 20:17:44 nx02 kernel: ll header: 00:01:80:35:86:44:00:02:7e:b0:6f:fc:08:00 in the IP tables log 00:02:7e:b0:6f:fc seems to be the offending remote network card, grepping for that in the log reveals hundreds of different IP no.s sending packets to port 135 (where else ;-) I wonder if the IP no is faked or the MAC? Probability would have it that the IP no.s are faked, I think and it's always the same host? How to find out where that card is? On the other hand it could also be a widespread virus which sends the packets with alway the same faked MAC address. I googled for that address, but it's not mentioned anywhere. That "martian source" warning happens *much* less than those many connects from this MAC address, so I assume there might actually be no connection between the two things. What could be the cause for this? It happens only for two IPs which were added later to the machine and are not from the same subnet. There are actually IP no.s from three subnets on that machine. They seem to work just fine, though. Kai -- Kai Schätzl, Berlin, Germany

2 2

AW: [suse-security] DSL line and local network - is it necessary to use 2 nics ?
by Thorsten Hahn 06 Dec '04

06 Dec '04

> What is the difference between 2 nics setup (one to ADSL modem and other to local network) or 1 nic setup (one to ADSL > modem over PPP and gateway at the same time for connection sharing) from security standpoint ? Rob, it is always better to have physical interfaces, not only for performance, it is easier to configure and if your setup is not perfect, the "whole" may not compromise both sides. With 2 NICs, no one from the inside LAN can reach your Modem, because there is no physical connection. Modems often can be reached via http/telnet from inside. Thorsten

1 0

AW: [suse-security] ssh-Attack?
by Gottschalch Christian 06 Dec '04

06 Dec '04

Use puplic-key only, and the sick feeling is gone ;-D Thers also an other Thread in this List with same Topic "SSH password attacks" enJoY dA SuN haVe fUn > -----Ursprüngliche Nachricht----- > Von: joao marka [mailto:joao@kildare.com.br] > Gesendet: Donnerstag, 2. Dezember 2004 13:09 > An: Kai Pfeiffer; suse-security(a)suse.com > Betreff: Re: [suse-security] ssh-Attack? > > > howdy! > > I´ve seen the same ssh tryes in one server´s log in wich i´ve > got better > luck than others... > it seems to be a password list used by scriptkiddies... > it is probably available for download... > even the timing match with the logs i´ve seen! > > take it back! give him some fun. > > > > Hello list, > > > > in my logs I found the appended entries. My question is, > what is the > > intention > > of this guy. I don't understand, why he uses a few > loginnames many times > > and > > others only one time. There is no account on my box which > matches to one > > of > > the tested loginnames. > > > > Another thing. I get this userlist (exactly the same names > in the same > > order) > > from many different IPs. > > > > Any hints? > > > > regards > > > > Kai Pfeiffer > > > > > > Dec 1 11:02:54 mybox sshd[14251]: Illegal user patrick from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:55 mybox sshd[14253]: Illegal user patrick from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:55 mybox sshd[14265]: Illegal user rolo from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:56 mybox sshd[14267]: Illegal user iceuser from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:56 mybox sshd[14269]: Illegal user horde from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:56 mybox sshd[14271]: Illegal user cyrus from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:56 mybox sshd[14273]: Illegal user www from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:56 mybox sshd[14277]: Illegal user matt from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14279]: Illegal user test from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14281]: Illegal user test from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14283]: Illegal user test from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14285]: Illegal user test from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14287]: Illegal user www-data from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14291]: Illegal user operator from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:57 mybox sshd[14293]: Illegal user adm from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14295]: Illegal user apache from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14297]: Illegal user irc from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14299]: Illegal user irc from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14301]: Illegal user adm from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14309]: Illegal user jane from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:58 mybox sshd[14311]: Illegal user pamela from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:02:59 mybox sshd[14323]: Illegal user cosmin from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:04 mybox sshd[14397]: Illegal user cip52 from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:04 mybox sshd[14399]: Illegal user cip51 from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:05 mybox sshd[14403]: Illegal user noc from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:05 mybox sshd[14413]: Illegal user webmaster from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:05 mybox sshd[14415]: Illegal user data from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14417]: Illegal user user from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14419]: Illegal user user from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14421]: Illegal user user from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14423]: Illegal user web from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14425]: Illegal user web from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14427]: Illegal user oracle from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14429]: Illegal user sybase from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:06 mybox sshd[14431]: Illegal user master from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14433]: Illegal user account from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14435]: Illegal user backup from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14437]: Illegal user server from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14439]: Illegal user adam from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14441]: Illegal user alan from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:07 mybox sshd[14443]: Illegal user frank from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:08 mybox sshd[14445]: Illegal user george from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:08 mybox sshd[14447]: Illegal user henry from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:08 mybox sshd[14449]: Illegal user john from > > ::ffff:xxx.xxx.xxx.xxx > > Dec 1 11:03:09 mybox sshd[14461]: Illegal user test from > > ::ffff:xxx.xxx.xxx.xxx > > > > -- > > Check the headers for your unsubscription address > > For additional commands, e-mail: suse-security-help(a)suse.com > > Security-related bug reports go to security(a)suse.de, not here > > > > > > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here >

2 1

AW: [suse-security] Where to Deploy Trend Micro viruswall?
by Thorsten Hahn 06 Dec '04

06 Dec '04

> I was wondering where to put a Trend Micro Viruswall in my network. > My basic setup follows below. SOHO Dear Invalid Addr3ss, I think this is a realname-list, no name - no answer. I don´t know what you want exactly, but I think it´s ok to put the Viruswall between "Firewall"/Router and your LAN, so you have to use the proxy. Internet | | Cable Modem | | Firewall/Router | | Viruswall Proxy (http, ftp) Viruswall Mailscanner | | Switch / | \ / | \ Linux | XP | Print Server | | Printer Sincerly, Thorsten Hahn --- Satori ITcom GmbH t.hahn_remove_(a)satori-itcom.net

2 1

Firewall Run Level?
by Invalid Addr3ss 06 Dec '04

06 Dec '04

Hey All I was wondering which run level to run a firewall/router? Run level 2 or 4. This will be a internet connected, (practice box). tksysv or ntsysv? Should I use the SuSEfirewall2, or write my own iptables? All advise will help. Thanks, Invalind Addr3ss -- Q) What do you get when you mix a spammer with a hacker? A) A Spacker

3 2

DSL line and local network - is it necessary to use 2 nics ?
by Robert Rozman 06 Dec '04

06 Dec '04

Hi, sorry for dummy security question... What is the difference between 2 nics setup (one to ADSL modem and other to local network) or 1 nic setup (one to ADSL modem over PPP and gateway at the same time for connection sharing) from security standpoint ? Regards, Rob.

2 1

Boot failure after Kernel update
by Stefan Proels 05 Dec '04

05 Dec '04

Dear list, I've installed the latest kernel patches (announced last Wednesday) today on several machines and one of them fails to boot now. We probably won't have physical access to this machine until Monday so I currently have no idea what happened or where the boot process stops. The machine in questions is running SuSE 9.0. Another SuSE 9.0 machine, one SuSE 9.1 and three SuSE 9.2 machines did not show this problem and booted up fine after the update. The working 9.0 machine is basically identically configured as the failing one but has different hardware. The working machine has a single P4 CPU, 1 GB RAM and a single 160 GB parallel ATA disk. The failing machine has 2 Xeons, 4 GB RAM and 4 S-ATA disks, 160 GB each, in a RAID 0+1 attached to a 3ware Escalade RAID Controller. Both machines are running reiserfs and a SMP kernel. In case anybody else has experienced this problem any information about it would be appreciated so that we can get up the machine again as quickly as possible on Monday. Best regards, Stefan

4 5

Where to Deploy Trend Micro viruswall?
by Invalid Addr3ss 05 Dec '04

05 Dec '04

2 1