February 2021 - openSUSE Users - openSUSE Mailing Lists

Apache worries
by Carlos E. R. 23 Feb '21

23 Feb '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I was playing some time ago with a little server, running Apache, in a dynamic home address. And using a very high port, to avoid scans. I forgot about it. Then the other day, I wanted to share a file using my server, and noticed that Apache was being hit, with "stupid" requests. Well, not stupid, they are probably probing vulnerabilities. What it surprises me is that they hit such a high port, they have to be probing every port. (The router is set to redirect incoming tcp on that high port to the inside server at the same high port) My IP address changed on the 7 and 8 of February, the hits increase on the 10th. It is possible that the previous user of that IP had a known domain. Should I worry? Should I try to implement something in the firewall that blocks IPs that attempt on vulnerabilities, somehow? If there is such a tool. Can I know if they are attempting to access the URL by domain name or by IP address? Ie, what do they write exactly on the "browser". Or script. Excerpt from /var/log/apache2/access_log: 167.248.133.54 - - [15/Feb/2021:17:20:14 +0100] "GET / HTTP/1.1" 403 972 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 193.27.228.23 - - [15/Feb/2021:21:13:58 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [15/Feb/2021:21:43:39 +0100] "\x03" 400 911 "-" "-" 185.156.72.7 - - [15/Feb/2021:21:59:50 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [15/Feb/2021:23:00:41 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [16/Feb/2021:01:49:38 +0100] "\x03" 400 911 "-" "-" 185.176.220.106 - - [16/Feb/2021:05:00:32 +0100] "\x03" 400 911 "-" "-" 194.61.55.248 - - [16/Feb/2021:05:10:43 +0100] "\x03" 400 911 "-" "-" 94.102.49.193 - - [16/Feb/2021:09:28:17 +0100] "GET / HTTP/1.1" 403 972 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 94.102.49.193 - - [16/Feb/2021:09:28:17 +0100] "GET /favicon.ico HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0" 72.251.228.107 - - [16/Feb/2021:11:39:07 +0100] "GET //admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:07 +0100] "GET //ippbx/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:08 +0100] "GET //apps/ippbx/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:08 +0100] "GET //admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:09 +0100] "GET //freepbx/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:09 +0100] "GET //html/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:10 +0100] "GET //fpbx/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:10 +0100] "GET //www/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:10 +0100] "GET //asterisk/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:11 +0100] "GET //myasterisk/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:11 +0100] "GET //pbx/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:12 +0100] "GET //html/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:12 +0100] "GET //fpbx/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:12 +0100] "GET //www/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:13 +0100] "GET //asterisk/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:13 +0100] "GET //myasterisk/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:13 +0100] "GET //pbx/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:14 +0100] "GET //recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:14 +0100] "GET //freepbx/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:15 +0100] "GET //html/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:15 +0100] "GET //fpbx/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:15 +0100] "GET //www/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:16 +0100] "GET //asterisk/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:16 +0100] "GET //myasterisk/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:17 +0100] "GET //pbx/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:17 +0100] "GET //admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:18 +0100] "GET //freepbx/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:18 +0100] "GET //html/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:19 +0100] "GET //fpbx/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:19 +0100] "GET //www/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:20 +0100] "GET //asterisk/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:20 +0100] "GET //myasterisk/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:21 +0100] "GET //pbx/admin/modules/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:21 +0100] "GET //user/admin/images/ HTTP/1.1" 403 972 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:21 +0100] "GET //user/admin/config.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:22 +0100] "GET //user/recordings/index.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 72.251.228.107 - - [16/Feb/2021:11:39:22 +0100] "GET //user/recordings.php HTTP/1.1" 403 958 "-" "python-requests/2.25.1" 122.228.19.79 - - [16/Feb/2021:12:17:06 +0100] "-" 408 - "-" "-" 122.228.19.79 - - [16/Feb/2021:12:17:52 +0100] "GET / HTTP/1.1" 403 972 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 122.228.19.79 - - [16/Feb/2021:12:18:58 +0100] "GET / HTTP/1.1" 403 972 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 122.228.19.79 - - [16/Feb/2021:12:18:58 +0100] "GET /favicon.ico HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 194.61.55.248 - - [16/Feb/2021:14:45:02 +0100] "\x03" 400 911 "-" "-" 117.157.71.16 - - [16/Feb/2021:16:11:56 +0100] "-" 408 - "-" "-" 72.251.228.107 - - [16/Feb/2021:19:23:13 +0100] "\x16\x03\x01" 400 911 "-" "-" 78.128.112.14 - - [17/Feb/2021:10:20:15 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [17/Feb/2021:18:13:10 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [17/Feb/2021:22:20:23 +0100] "\x03" 400 911 "-" "-" 94.232.47.170 - - [17/Feb/2021:22:54:01 +0100] "\x03" 400 911 "-" "-" 185.202.2.149 - - [17/Feb/2021:23:36:37 +0100] "\x03" 400 911 "-" "-" 94.232.47.170 - - [18/Feb/2021:06:31:02 +0100] "\x03" 400 911 "-" "-" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "HEAD / HTTP/1.0\n" 400 911 "-" "-" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /system_api.php HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /system_api.php HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /c/version.js HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /streaming/clients_live.php HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /stalker_portal/c/version.js HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /client_area/ HTTP/1.1" 403 972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /stalker_portal/c/ HTTP/1.1" 403 972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.99.129.160 - - [18/Feb/2021:09:38:58 +0100] "GET /stream/rtmp.php HTTP/1.1" 403 958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 167.248.133.37 - - [18/Feb/2021:19:44:05 +0100] "GET / HTTP/1.1" 403 972 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 185.202.2.149 - - [18/Feb/2021:23:26:24 +0100] "\x03" 400 911 "-" "-" 185.176.220.106 - - [19/Feb/2021:07:51:23 +0100] "\x03" 400 911 "-" "-" - -- Cheers Carlos E. R. (from 15.2 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCYDFkexwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfV3YIAn3Pm3hBMPaVD91DnnVAG lldoQ6rzAJ9VaZstpPUvRkD9Vr5fUZHjy1IOJA== =VXHj -----END PGP SIGNATURE-----

9 21

ranting on this list's management
by mauro 23 Feb '21

23 Feb '21

Hi All I was trying to unsub from this list from another address of mine, which didn't work properly, so I tested the present provider, which in turn works fine I couldn't unsubscribe from the list's site (https://lists.opensuse.org) because I haven't got an account and getting a new one was not available. So I sent an unsub mail to users-leave(a)opensuse.org, it seems this is the correct procedure now, but I wasn't able to unsubscribe, I got a "delivery notification", which I sent to the list's owner. He said "I'll look into it", but after a couple of weeks I tried again to unsubscribe and it failed as before. I reported the issue to the owner, but this time I didn't even get a reply, so I had to filter the list as "spam" to not get it double downloaded. What's up with "users"? Is it gonna be eliminated perhaps? Cheers,

6 15

12-bit jpeg
by Roger Oberholtzer 23 Feb '21

23 Feb '21

We have had a request for 12-bit color jpeg images. Sigh. Anyway, isn't it the case that the jpeg library must be compiled for 12-bit instead of 8-bit support? I would imagine that one could not then replace the system jpeg library with this version. Has anyone tried 12-bit jpeg support in openSUSE? What was involved? -- Roger Oberholtzer

5 7

Re: I've upgraded to KDE 5.79.0 / Plasma 5.21.0
by Carlos E.R. 23 Feb '21

23 Feb '21

On 23/02/2021 17.21, Stevens wrote: Er... did you intend to reply privately, or was that a mistake? > On 2/23/21 5:34 AM, Carlos E.R. wrote: >> On 22/02/2021 14.52, mauro wrote: >>> through our four KDE repos >>> it's even nicer than bfore, >>> htop says cpu usage < 5%, RAM 1,2GB with 5 open programs, on a machine >>> 10+yrs old >>> >>> I always wonder why there are people who use a different DE (among those >>> who do use a DE) and which be their reasons...I couldn't think of >>> anything better, I only miss sometimes the mouse wheel scrolling speed >>> setting, I'm looking forward for it to be re-implemented >>> >>> So, why don't you use KDE? And why do you use (not-KDE)? >> >> Too many features, too much bloat, too many differences, too many >> complications. >> >> I use XFCE. The desktop is not important. >> >> I use some KDE apps, though. >> > > Carlos: > > I understand but I built a box that has so much capacity that even > Windows would have problems clogging it. Plus the fact that I am lazy > and KDE fits into there ;-) My current box is not a problem. It is new and with power to spare. -- Cheers / Saludos, Carlos E. R. (from 15.2 x86_64 at Telcontar)

1 0

None
by Werner LEMBERG 23 Feb '21

23 Feb '21

Folks, I've recently done an update from 15.1 to 15.2 using `zypper dup`. Since then I see an annoying message on the middle of my KDE desktop screen: Erstellung des Ein-/Ausgabemoduls nicht möglich. Socket für Ein-/Ausgabemodul für „desktop“ kann nicht gestartet werden. I guess an English translation is roughly Can't create in/out module. Socket for in/out module for 'desktop' can't be started. My next step was to switch to the newest KDE version following the instructions from https://en.opensuse.org/SDB:KDE_repositories However, I still get this message. For testing purposes, I called dbus-launch dolphin and get the following output on the console – dolphin shows no files in its window. kf.kio.core: KIO Connection server not listening, could not connect kf.kio.core: couldn't create slave: "Socket für Ein-/Ausgabemodul für „tags“ kann nicht gestartet werden." kf.kio.core: "Erstellung des Ein-/Ausgabemoduls nicht möglich. Socket für Ein-/Ausgabemodul für „tags“ kann nicht gestartet werden." kf.kio.core: "Erstellung des Ein-/Ausgabemoduls nicht möglich. Socket für Ein-/Ausgabemodul für „tags“ kann nicht gestartet werden." kf.kio.core: KIO Connection server not listening, could not connect kf.kio.core: couldn't create slave: "Socket für Ein-/Ausgabemodul für „trash“ kann nicht gestartet werden." kf.kio.core: "Erstellung des Ein-/Ausgabemoduls nicht möglich. Socket für Ein-/Ausgabemodul für „trash“ kann nicht gestartet werden." kf.kio.core: KIO Connection server not listening, could not connect kf.kio.core: couldn't create slave: "Socket für Ein-/Ausgabemodul für „file“ kann nicht gestartet werden." ... Do you have any idea how I could fix this? Werner

2 1

ACER E5-575
by Carl Spitzer {L Juno} 22 Feb '21

22 Feb '21

now three installs later new errors. First install Leap 15.2 worked for a year then suddenly ethernet stopped working. File systems ext4. Some creative workarounds fixed it temporarily then failed. So second install fixed that used btrfs for root and xfs for home then suddenly / became read only so with Knoppix I got my files and settings off. through all this one strange persistant error indicator: platform mgs10101:00 failed to claim resource 1: mcm oxfed 40000 Even when working correctly this last error persisted. now i will try again with new partitions Is all this a general error of Leap or is it ACER specific? ____________________________________________________________ Sponsored by https://www.newser.com/?utm_source=part&utm_medium=uol&utm_campaign=rss_tag… 'He Was the DB Cooper of Nebraska' http://thirdpartyoffers.juno.com/TGL3131/6031ce5ee41734e5e20c8st03duc1 Abbott Calls Biden's Move 'Partial Approval' http://thirdpartyoffers.juno.com/TGL3131/6031ce5f142cc4e5e20c8st03duc2 Metal Panel Found in 1991 Could Hold Earhart Clues http://thirdpartyoffers.juno.com/TGL3131/6031ce5f3783e4e5e20c8st03duc3

2 3

wicked: support route type table
by Samuel Bernardo 21 Feb '21

21 Feb '21

Hello, I'm trying for some years to change from network scripts into wicked, but it seems wicked lack the support for routing tables. From available documentation I don't see that feature available[1][2]. The support for the following seems not to be available in wicked: > 192.168.0/24 - - - - src 192.168.0.12 table mylocalnet where ifrule have the following > 4: from 192.168.0.12 lookup mylocalnet I require different routing tables for each network device. Is there any way to achieve the same behavior with wicked? Regards, Samuel [1] https://github.com/openSUSE/wicked/blob/master/man/ifroute.5.in [2] https://github.com/openSUSE/wicked/blob/master/man/ifrule.5.in

2 1

hplip
by Michael Spartana 20 Feb '21

20 Feb '21

Hi, I believe there is a problem with the latest tumbleweed version of hplip (hplip-3.20.11-1.4.x86_64 ) I am unable to install the plugin and am getting the error: Error importing HPLIP modules. Is HPLIP installed? I checked on google and this type of error has been seen before. Probably no one else has seen it on tumbleweed as most tumbleweed users probably don't keep reinstalling the OS. I'm not on factory so could someone look into this.....Thanks, mike

7 16

Freezing Skype after TW 20210212 & 20210215
by Vojtěch Zeisek 19 Feb '21

19 Feb '21

Hi, since I yesterday upgraded 2 TW installs with KDE to latest TW snapshots, both 20210212 as well as 20210215, and since then Skype (latest version from its own repo) seems to be running in background well, i.e. it notifies me about new message and so on, but the window doesn't render at all, it contains basically background, so it's not usable at all. I wonder if this could be related to possible sandboxing issue mentioned by Dominique at Tuesday, but I have 64bit systems, and I have libqt5-qtwebengine 5.15.2-6.1 from tw-update. Any idea what could be wrong? -- Vojtěch Zeisek https://trapa.cz/ Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/

2 2

Plasma Mouse wheel scrolling speed?
by Alex Bihlmaier 19 Feb '21

19 Feb '21

Where can i set this? "System settings -> Input -> Mouse" is not helpful. Anyone? thanks!

3 3