November 2000 - openSUSE Security - openSUSE Mailing Lists

Re[2]: [suse-security] count traffic
by vladimir m. bondarev 24 Nov '00

24 Nov '00

Hello, MaD. Friday, November 24, 2000, 10:49:36, you wrote to me: Md> as far as i know, ipchains has a facility to use counters which you Md> could work into a monitoring process... can you explain me how to use ipchains for this? and how to make traffic logs every month? Friday, November 24, 2000 -- vladimir m. bondarev, icq uin: 62393277 paradox team web: http://scene.org.ru

2 1

AW: [suse-security] count traffic
by Battisti Markus 24 Nov '00

24 Nov '00

there is a package in the suse dist who counts all the traffic it named netacct he writes a logfile the problem is he logs ALL the traffic so you need a script who filter this pay attention to the size of the logfile it grows fast ,,, /'^'\ ( o o ) oOOO--(_)--OOOo---------------------- Mit Freundlichen Grüssen/Best Regards proTask Consulting Battisti Markus ICQ:42524700 http://www.protask.at mailto:markus.battisti@protask.at PGP key available on request This message was sent using 100% recyclable electrons Hello, suse-security. i'm sorry to bother you with this question, but i've spent much time with this problem and haven't solved it yet. so, the situation: eth0 is connected to local network (vlan-29) (10.51.29.x) eth1 is connected to internet eth2 is connected to local network (vlan-30, vlan-31) (10.51.30.x and 10.51.31.x) there is a very big lan and just one server connects it to internet. i need to count traffic for all ips in lan (vlan-29,30,31) that goes from server (10.51.29.50 for vlan-29, 10.51.30.10 for vlans-30,31) to users. i count web traffic with squid, but i also need to count icq (we're using socks for it) and mail (everybody have mailboxes on server) traffic. masq enabled only for chosen users (not so many), so i don't need to count ftp, irc traffic. can anyone help me to solve this problem? thanks in advance. Friday, November 24, 2000 -- vladimir m. bondarev, icq uin: 62393277 paradox team web: http://scene.org.ru --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

OT: Happy Thanksgiving Day
by Ralph De Witt 23 Nov '00

23 Nov '00

Hi: To one and all Happy Thanksgiving Day. May you have as many blessing as I have to be thankful for. May God Bless you my friends one and all. -- Ralph F. De Witt ----------------------------------------------------------------------------- PROUD USER OF SuSE LINUX 7.0 It said uses Windows 98 or better so I installed SuSE 7.0 Register Linux User 168814 ICQ #49993234 "Beer is proof that God loves us and wants us to be happy" -Benjamin Franklin -----------------------------------------------------------------------------

1 0

two questions
by Philipp Snizek 23 Nov '00

23 Nov '00

Hi list-users Please can somebody tell me where to find a bugtraq mailinglist that only deals with linux security bugs? and, according to the ip_always_defrag kernel option question I would like to ask you what other kernel options are recommended to install to have improved security on an ipchains paketfilter box. Thank you all, Philipp

4 3

Re: [suse-security] Kernel Option : IP: always defragment
by christian.burri＠synecta.ch 23 Nov '00

23 Nov '00

I'd be interested in this one too :) greets Chris .-. /v\ L I N U X // \\ >Phear the Penguin< /( )\ ^^-^^ "Andreas Rittershofer" To: suse-security(a)suse.com <andreas@ritter cc: shofer.de> Subject: Re: [suse-security] Kernel Option : IP: always defragment 23.11.2000 14:54 Please respond to andreas > No, this is a runtime option and must be enabled everytime you boot, > so stick it in a startup script. > > Cheers > > Nix > > At 02:17 PM 23/11/2000 +0100, you wrote: > >Hi, > > > > > echo 1 > /proc/sys/net/ipv4/ip_always_defrag Where can I find a list of all options in /proc/sys/net/ipv4, what to send to them to activate them and what they are doing exactly? mfg ar -- mailto:andreas@rittershofer.de http://www.rittershofer.de PGP-Public-Key http://www.rittershofer.de/ari.htm --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

2 1

Kernel Option : IP: always defragment
by dgolesny 23 Nov '00

23 Nov '00

Hi, I want to activate the Option "IP:always defragment" in mein Kernel-Konfiguration to make my Firewall more secure but I didnt find this OPtion in menuconfig or in the file .config Is this Option in a SuSE7 Kernel active or not ? Or where can I activate it ? Or how can I force the kernel to reassemble IP-Fragments before Forwarding ? Thanx Daniel Golesny

6 6

sshd2 start at boot
by webmaster 23 Nov '00

23 Nov '00

I followed steps in Readme Somehow I am not sure of proper connection Log shows this Nov 23 10:00:45 mand sshd[144]: fatal: Bind to port 22 failed: Transport endpoint is not connected. /-------------------------/ Antal Leisen webmaster(a)kreorg.hu Kreorg Educational Center Budapest, Hungary

1 0

sshd2 start at boot
by webmaster 23 Nov '00

23 Nov '00

Thankx for all the help especially to semat(a)wawa.eahd.or.ug for the script Although it turned out to have a similar boot.startup script among manuals, semat`s version worked also fine I am using ssh from remote as well as from intranet machines to server. On intranet machines the ssh client is an SSH-1.5-PenguiNet windows shareware How can I check that sshd2 is in compatibility with ssh1? Is simple work enough? /-------------------------/ Antal Leisen webmaster(a)kreorg.hu Kreorg Educational Center Budapest, Hungary

2 1

Wierd sendmail access file problem
by Nick Zentena 23 Nov '00

23 Nov '00

Hi, If I put this line in my /etc/mail/access file sinamail.com 550 Unknown user I get makemap: /etc/mail/access: line 153: key sinamail.com: put error: Operation not permitted Now I can put anything else in the file and things work like they should but this causes things to choke. Is sinamail.com some sort of code word??? Thanks Nick

3 2

RE: [suse-security] Securid for suse
by Di Lisi, Giancarlo 23 Nov '00

23 Nov '00

hi RSA itself has a "old" ACE Linux Client, but it is very difficult to become... ask your vendor for it. regards ,giancarlo > -----Original Message----- > From: Peter Lange [mailto:peter.lange@antaris.de] > Sent: Mittwoch, 22. November 2000 11:19 > To: suse-security(a)suse.com > Subject: [suse-security] Securid for suse > > > Hello all, > > anyone knows about a ACE-Agent for Securid authentication > available for > SuSe? > > Thanks > -- > Mit freundlichem Gruß > > i.A. Peter Lange > PROFI Engineering Systems AG > Geschäftsbereich Antaris > > Systemtechnik > Moosbürger Str.20 > D-92637 Weiden > Tel. 0 961/89-502 > Fax 0 961/89-579 > eMail: plange(a)antaris.de > > --------------------------------------------------------------------- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com >

2 1