Mailinglist Archive: opensuse-security (556 mails)

["istvan" <istvan@xxxxxxxxxx>]

Hi,

Is this string module a standard module delivered with iptables? I wanted to
implement the rule on my SuSE 7.2 masquarading box with kernel 2.4 and
SuSEfirewall2, but the errormessage I got was dat the module for string
could not be found.

Thanks in advance

Stefan van Lieshout.

----- Original Message -----
From: "Togan Muftuoglu" <toganm@xxxxxxxxxxxxxxxxxxxxx>
To: "SuSE-Security" <suse-security@xxxxxxxx>
Sent: Wednesday, September 19, 2001 9:35 AM
Subject: Re: [suse-security] WEB IIS cmd exe requests


> Hi Dove,
>
> I am sending the reply to the list as it was the palce you wanted it to
> go I believe, As sending to me only is probably not what you wanted :-)
>
> Please do not CC me as I am on the list.
> --
> Togan Muftuoglu
>
> * dove; <dove@xxxxxxxxxxxxxxxxxxx> on 19 Sep, 2001 wrote:
> > > * teo@xxxxxxxxxxxxxxxxx; <teo@xxxxxxxxxxxxxxxxx> on 18 Sep, 2001
wrote:
> > > > I have this for the older ones:
> > > > $IPTABLES  -I INPUT -p tcp --dport 80 -m string --string .ida  -m
state
> > > > --state ESTABLISHED -j REJECT --reject-with tcp-reset
> > > >
> > > > I guess we can just add another one for cmd.exe in place of `.ida'.
> > >
>
>  hi,
>
>  could someone please send me the source for the strings module
>  and a question : is this type of filtering allright for production
systems ?
>
>  doVe
>
>
>
>
>
> --
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx
>