November 2000 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] gs read shared libraries from working directory ??
by dproc＠dol.net 07 Nov '00

07 Nov '00

My SuSE 6.3 (intel) is ok " libc.so.6 => /lib/libc.so.6 (0x401e2000) " The rpm I have installed is gs_both-5.10-69 On Fri, 03 Nov 2000, alex medvedev wrote: > fyi > same on my 6.4 and redhat 6.2 with > /usr/bin/gs > /usr/bin/gs_both > /usr/bin/gs_x11

1 0

dialin-problem
by Daniel Quappe 06 Nov '00

06 Nov '00

hi, in the last days i've got warnings like Nov 2 14:58:15 server ipppd[1682]: demuxprotrej: Unrecognized Protocol-Reject for protocol 0x43 in my dialin-server-warn-log. since i'm reading this list i am a little bit nervous about those topics :-) does anybody know something about the warning and can tranquilize my mind ?! thanks and greets, daniel

1 0

Centralized logs
by RoMaN SoFt / LLFB!! 06 Nov '00

06 Nov '00

Hi susesec! I want to do remote-loggins, I mean, a centralized system which involves a machine getting logs via syslogd using remote funcionality. I've been reading some little info and it seems that this method is very insecure (at least via standard syslogd -the one which comes which current Linux distros, Suse included-). I need to implement it in a secure way. Any ideas? Has somebody tried the SecureSyslog from Core SDI? Any other program?? I'd like to read from all of you :-) =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman(a)madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

quake3 dedicated server + susefirewall (4.0), broadcast
by Wolfram Schlich 05 Nov '00

05 Nov '00

hello list! when I try to get the list of local q3-servers, nothing appears. but when I specify the server, I can connect and play without problems. I inserted port 27960 into the *_SERVICES_* lists. any ideas?! thanks in advance. -- Mit freundlichen Grüssen | Wolfram Schlich ------------------------------------------------------------------ | E-Mail: wolfram(a)schlich.org * ICQ #: 35713642 | Postal: Berghof * 56626 Andernach * Germany | Tel.: +49-(0)2636-941194

3 4

Re: [suse-security] same ip for two interfaces
by Kurt Seifried 05 Nov '00

05 Nov '00

>that would cause more configuration issues on the servers in the dmz, right >??? Nope. Just set the default gateway to 10.0.0.1 and everything would work. My ISP for example uses 192.168.* and 10.* for basically all of it's routers/etc/etc, they all have a "Real" IP on the "external" interface (i.e. connection point), and clients like me have a "real" IP for our machines. Guess what? You're reading email sent from a server in this network =). >i mean default gw and ip-address of the server are supposed to be on the >same net. so i had to add one more route to the default gateway ??? huh? not at all. No reason you can't have server with 1.2.3.4, 1.2.3.5, etc talking to 10.0.0.1 as their default gateway. Just make sure they know where 10.0.0.1 is, i.e.: route add -net 10.0.0.0 netmask 255.255.255.0 eth0 or route add -host 10.0.0.1 eth0 Another note: if your ISP was willing to play ball your firewall could use "non routed internal" IP's on all interfaces, the advantage would be you save a "Real" IP, and no external people can talk directly to the firewall. Prolly another strong reason my ISP does it on all the stuff (hard to attack something you can't route packets directly to). >am i right, not really sure !! On an unrelated note: if I receive an out of office reply or annoying bounce from you (like volvo's full mailbox guy for example, or the broken mail account at a certain company) I will block your domain from my mailserver until a) I flush my rules in a few months or b) you contact me from another host and can show you've fixed it. I'm sick of getting bounces from security mailing lists. -Kurt

9 11

Last sendmail question
by Kai Seefeldt 04 Nov '00

04 Nov '00

Hi, i have an final sendmail question: If I enter "abuse.net 550 We don't accept mail from spammers" in the /etc/mail/acces.db, relaying from abuse.net is rejected, and it works. But how can I reject relaying fom ANY Domain excluded one, something like: "mydomain.com OK" "ALL_OHERS 550 We don't accept mail from spammers" Thanks a lot for your help (I am a bloody beginner) Kai Seefeldt

4 7

Re: [suse-security] mail relaying, SuSE 7.0
by Volker Kuhlmann 04 Nov '00

04 Nov '00

> I don't use SuSE's default configuration, so in part I'm guessing > here. Anyway DM is for masquerading, i.e. every mail (except for exposed > users) to leave your machine is masqued to look like it came from > username(a)elec.canterbury.ac.nz. If this is your machine name, it shouldn't > be neccessary though. > I am guessing that elec.canterbury.ac.nz is your machine? No way! Somehow I think I stuffed it up. When I have the machine at university, its name is xxx.elec.canterbury.ac.nz. I don't need it for email there. When I take it home, I didn't change its name. With xxx.elec.canterbury.ac.nz, a lot of hosts won't accept email from me as the name does not resolve outside uni. This is one reason I set the FROM_HEADER to elec.canterbury.ac.nz - it's incorrect, but it resolves. But then I can't send email to university :-(. Perhaps the better question to ask is: what host name does one set for dial-up networking? Where? Is it ok to change the host name in ip-up.local? Does a masquerading host always relay? Perhaps I'm thick, but SuSE asks the question as "What From header to put into mail and news postings", which is inconspicious enough, but when that leads to open relays I have to ask myself whether that is a bug in SuSE's setup. Volker

2 1

firewall on an old 386-laptop?
by udo.siebigteroth＠de.abb.com 04 Nov '00

04 Nov '00

Hi all, i've got an old 386-laptop with 6MB memory and 60 MB HD. Do i have any chance to use this box as a firewall? How much memory/HD is needed at least for a firewall? Regards, Udo

2 1

Sendmail Hash, all but my domain
by Kai Seefeldt 03 Nov '00

03 Nov '00

Hi, some people still relay by using my server, though it should be forbidden by default in sendmail 8.9.3 Dow I wanted to change the "/etc/mail/access.db" and I edited the "/etc/mail/access" file and made: "makemap -hash /etc/mail/access.db < /etc/mail/access", but makemap did not work in Suse6.4, i think there is another command that does the same job, what is it? How can I definde the all mails are rejected BUT mails that come from mydomain.de. Is this enough? >If anybody knows how to stop relaying in Sendmail 8.9.3 ,PLEACE TELL MY, I also would pay you if you fix this problem.< Thanks for your attention, Kai Seefeldt

5 4

Proxy-Suite
by Ulf Ziemann 03 Nov '00

03 Nov '00

Hello ! I'm using SuSE Linux 6.4 and fwproxy-1.7-38. I have "AllowMagicUser" enabled. If I make an outbound ftp- connection with ein ip-number(dummy(a)123.456.789.1) everything works. But if i use a name (dummy(a)ftp.server.de) I get following error USER-WRN bad 'USER@' dest 'ftp.exemplar.com:(nil)' from 192.168.30.20 The nameserver is working without problems. Any hint ?? Ulf -- Dipl.-Ing. Ulf Ziemann Hochheimer Straße 47 - 99094 Erfurt FON : 0361 / 78930-70 FAX : 0361 / 78930-80 E-MAIL : ulf.ziemann(a)prodesigncad.de

1 0