November 2000 - openSUSE Security - openSUSE Mailing Lists

Is there a software tool to manage safely the bandwidth on Linux 7.0, PPc Edition? Ideally, I'd like to control the transmit/receive (www, ftp, mail) of a given IP address. Thanks for any help
by abarguia＠mail.belgavillage.be 29 Nov '00

29 Nov '00

3 2

Re: [suse-security] How secure is sendmail
by r.maurizzi＠gvs.it 29 Nov '00

29 Nov '00

Stefan Suurmeijer <stefan(a)symbolica.nl> wrote: > I'm getting a little > tired of people who call sendmail insecure without having a valid example > of where postfix or qmail is superior to sendmail IMHO, security-wise the main strength of postfix/exim/qmail is that they are easier to understand and to configure than sendmail: this avoid errors from beginner admins (as I am) that expose their systems to spam or worse. I'd say that if you've been using sendmail for a lot of time and know it well, it is as secure as the others (as in, you know how to secure it if needed). I would not recommend using it before a lot of studying (docs, but also "live" discussion on mailing lists): unless you absolutely need some feature only sm has, go with one of the others, especially if you suspect you won't have the time it takes to know sendmail well. Ciao, Rob!

2 1

Re: [suse-security] suse irc support channel (fwd)
by David Abraham 29 Nov '00

29 Nov '00

There already is a active #SuSE channel on irc.linux.com. There is also a new channel on the same server #susesecurity. See you there. DA On Fri, 24 Nov 2000, vladimir m. bondarev wrote: > Date: Fri, 24 Nov 2000 11:29:37 +0300 > From: vladimir m. bondarev <nrgg(a)aaanet.ru> > To: suse-security(a)suse.com > Subject: [suse-security] suse irc support channel > > Hello. > > some time ago i'd talked with someone about suse irc support and > information channel, but i've lost his email :( so i want to write > here about that. > > i want to make suse irc channel at efnet. i will make all necessary > stuff myself, but i need some help from SuSe. > > <snipped>

3 2

popper
by Rash 29 Nov '00

29 Nov '00

Hello suse-security, I have SuSE 6.1 When somebody trying to get mail from my POP3 server (qpopper v2.53) I see string " Unable to get canninical name of client, err = 0" What is mean? It's working, but i want to make my logs cleaner. POP3 working under Xinetd. --

2 1

Bandwidth control
by abarguia＠mail.belgavillage.be 29 Nov '00

29 Nov '00

Is there a software tool to manage safely the bandwidth on Linux 7.0, PPc Edition? Ideally, I'd like to control the transmit/receive (www, ftp, mail) of a given IP address. Thanks for any help

2 1

Re: [suse-security] Is there a software tool.. oops.
by abarguia＠mail.belgavillage.be 29 Nov '00

29 Nov '00

Sorry, the message was inadvertently put in the title :(

1 0

Re: RE: [suse-security] how to handle attacks by abused systems
by r.maurizzi＠gvs.it 29 Nov '00

29 Nov '00

Not that being ignored in these cases is common, and at least in my (not so big) experience a mail has been more than enough to have the offending computer secured. Anyway, a lot of what you can do in these circumstances depends on the laws of the state(s) where you and your unwillful attacker live: in Italy for example is perfeclty legal/plausible to inform the police authorities of the attack and have them handle the case (and in some universities sysadmins are required to do this). Obviosly doing this isn't very polite ;) , but if an Italian sysadmin continues to ignore my warnings and I continue to get attacked by his computers, then that's another option I have. A question to all listmembers: in your state, are there laws that allow you to sue an attacker, or otherwise allow you to seek police assistance, even when *no damages* have been done to your systems? A cross reference could be useful, since if I know that (for example) in France there are similar laws that disallow the use of computers as intrusion devices, then I could "escalate the problem" to the police even for extranational attacks from there (they should contact their colleagues in the other state, as long as there are collaboration treaties). CIao, Roberto.

5 8

date
by Rash 29 Nov '00

29 Nov '00

Hello suse-security, I have SuSE 6.1 When i'm rebooting my system, the date always changing to GMT-time. I checked my rc.config, there is no "-u" option. What should I touch to change my system time to local time? Tnx. --

2 1

SCSLog
by Olivier Hislaire 29 Nov '00

29 Nov '00

Hi, I have noticed the following data with scslog: # lsmod Module Size Used by nls_iso8859-1 2236 0 (autoclean) rtl8139 12320 2 (autoclean) serial 42932 1 (autoclean) scslog 135613033 # At this stage, kernel logging does not appear anymore - and sometimes one of my eth inerfaces hangs as well. Should I live with that and keep rebooting my (6.3) SuSE box each day or so ? That figure comes from my 'firewall' machine, but the 'proxy' shows the same. Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire(a)msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------

2 1

passive mode ftp
by Lars 29 Nov '00

29 Nov '00

hi, since i've installed suse 7.0 my windows ftp-client is transferring datas only in passive mode. with suse 6.3 the same ftp-client was transfering in normal/active mode. why did suse 7.0 always entering the passive mode? where can i activate the active/normal mode? thx lars

2 1