August 2000 - openSUSE Security - openSUSE Mailing Lists

SuSE Security: miscellaneous
by Roman Drahtmueller 03 Aug '00

03 Aug '00

-----BEGIN PGP SIGNED MESSAGE----- August 3rd, 2000 This notice addresses the latest security advisories from various Linux Vendors as well as private contributors. The list of packages: netscape knfsd system user account nobody pam_console gpm openldap mailman cvsweb.cgi kon2 There will be SuSE Security Announcements for the packages where work is in progress as indicated in the respective section below. * jpeg buffer overflows in netscape: The latest version of netscape is currently being tested. SuSE netscape rpms contain efficient workarounds against some "morbid" properties of netscape - it is necessary to provide stable packages. These additions are being reworked right now. _________________________________________________________________________ * rpc.kstatd The SuSE package containing rpc.kstatd (other vendors named it rpc.statd) is called knfsd.rpm. An updated package is currently being tested. _________________________________________________________________________ * user `nobody's HOME directory set to / and misconfigured webservers: SuSE Linux used to have user nobody's HOME directory set to /tmp for years. Starting with SuSE-7.0, it will be set to /var/lib/nobody . Apache, as distributed with SuSE, is configured `UserDir public_html' and is therefore not vulnerable for the http://machine/~nobody/-problem. However, we encourage admins to change this user's home using the commands mkdir -p /var/lib/nobody chown nobody.nogroup /var/lib/nobody usermod -d /var/lib/nobody Make sure that you move files belonging to user nobody from the former location to the new home and that you don't rely on the old absolute path in your scripts. _________________________________________________________________________ * problems around pam_console: SuSE Linux does not contain the said pam-module because it isn't included in the official pam release. The idea of it is intriguing, but we have decided not to include the module into the distribution as a consequence of the problems that accompany its use. See Linux-Mandrake Security Update Advisory ID MDKSA-2000:029. _________________________________________________________________________ * gpm DoS, setgid() return value: We ship a slightly older version of gpm because of some grief with the latest versions. The vulnerabilities in gpm have been addressed to the fully necessary extent back in April 5. As mentioned above, there is no pam_console module that could change the ownerships of the gpm control socket /dev/gpmctl. By consequence, a local denial of service attack against gpm is possible. However, we believe that the most effective measure against this is userdel(8), since hogging disk space/performance, CPU, bandwidth etc is still possible in the wild even with appropriate permissions on the gpm socket. _________________________________________________________________________ * modes of openldap package files: The files are installed 755 or 644. There is no problem with this package in SuSE-Linux. _________________________________________________________________________ * mailman problem cvsweb.cgi (TurboLinux Advisory ID#: TLSA2000016-1): kon2 (Linux-Mandrake Security Update Advisory ID: MDKSA-2000:028) SuSE-Linux either does not contain these packages or the files therein causing the publically announced security vulnerabilities. _________________________________________________________________________ Regards, Roman Drahtmüller. - -- - - | Roman Drahtmüller <draht(a)suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - - Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBOYnpPney5gA9JdPZAQEUOQf8DKKIHhn7oUvTW5Ol7gww2/aIwXmG2e5c 4iKyQgGoU94YZURlGxRRI5Zf1Yydfj8JrKiUvnwxRCcQF2WWWCWkGNqQkJzt+c00 BiEyU16fklxMV17JeI6zmb9rTrne0JftjAycAPubzYeDpheVDbmPtGvotanRwVUn j2zaE3uLIBjie2025q8nZnYeTylXua4ulnTW0+PFDZnWgyxCMXvvu/1Lsf715vi6 1M6L78IlYkng5OV4OTeBVY5gm7sdy3eg/CQ/FiEHmIDgI33ywRVGQhXqhpp3QOrX OA7UoIl6xAhNHBEX9lSPwNpfFaTsQrEAWVbihnzFYSLlBz3kxd1jdQ== =5DM/ -----END PGP SIGNATURE-----

1 0

Re: [suse-security] Problems with YaST / Usermanagement
by Simone Grabstein 03 Aug '00

03 Aug '00

--- Stefan Suurmeijer <stefan(a)symbolica.nl> wrote: > Have you checked the daemon startup script > (/etc/rc.d/nscd)? Mine looks > ok, but maybe in your distribution there is a typo > which causes it to not > check for a START_NSCD=yes. > Just a thought. Good point, but here's what I found in /sbin/init.d/nscd [...] # Force execution if not called by a runlevel directory. test $link = $base && START_NSCD=yes test "$START_NSCD" = yes || exit 0 test -x /usr/sbin/nscd || exit 0 [...] Greetings, Simone ===== ===================== Dr. Simone Grabstein gsimon(a)rocketmail.com ===================== __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

2 1

Re: [suse-security] SuSE security reputation, etc..
by Simone Grabstein 03 Aug '00

03 Aug '00

--- rhoerbe(a)netpromote.co.at wrote: > A very common setup for a system with remote > maintenance is to use SSH for > shell access. However, this is insecure, if you keep > using ftp and pop for > the same account with the same password. My setup > is, to use separate > accounts for different services. Quite inconvenient, > unless you configure > different password-dbs for ftp/pop/samba. Actually, while remote telnet should probably be disabled completely, I find that in most cases it is not so inconvenient to have separate accounts for those users who need ftp (GUEST/chroot'd accounts, of course!). Besides, one might also use scp. A partial solution to the pop database problem is switching to APOP: the only real inconvenience i found is having users adopt a client which supports this authentication method (for Windows, I know Eudora - but NOT Outlook...). As for Samba, well, this is easy: it already has a separate password database (/etc/smbpasswd). One should only remember to enable encrypted password support and add users with "smbpasswd -a". Greetings, Simon. ===== ===================== Dr. Simone Grabstein gsimon(a)rocketmail.com ===================== __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

1 0

Re: [suse-security] Problems with YaST / Usermanagement
by Simone Grabstein 03 Aug '00

03 Aug '00

> The problem that you encounter is most likely caused > by incoherent caching > of the nscd. You could change some settings in > /etc/nscd.conf, or you > disable it completely (since you don't use NIS(+) or > alike) in > /etc/rc.config. What about NSCD starting up AUTONOMOUSLY?! I have it explicitly disabled in the /etc/rc.config of a 24/7 server of mine, and after a while I find 7 (SEVEN) instances of /usr/sbin/nscd up and happily running! I've no idea about who or what invokes it. :-( ===== ===================== Dr. Simone Grabstein gsimon(a)rocketmail.com ===================== __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

4 3

Fwd: Re: [suse-security] Problems with YaST / Usermanagement
by Matthias Krawen 03 Aug '00

03 Aug '00

Moin, > > A cd '~test' or cd '~test2' ends with following error-message: > > x:/webroots # cd ~test2 > > bash: cd: ~test2: No such file or directory >The problem that you encounter is most likely caused by incoherent caching Isn't it just the wrong path ? Try ~ or ~/test2 sorry, but three times misstyped... ? MfG Matthias Compositiv EDV- und Kommunikationslösungen, PC-Service Matthias Krawen Peiffersweg 9 22307 Hamburg Tel: 040 / 611 673 - 40 EMail: info(a)compositiv.de Fax: 040 / 611 673 - 41 http://www.compositiv.de

1 0

Sendmail Port 587
by Harald Scharf 03 Aug '00

03 Aug '00

Hello, to all.. does anybody know, why sendmail (8.10.x) needs this line in /etc/sendmail.cf DaemonPortOptions=Port=587, Name =MSA, M=E with a < telnet hostip 587 > i get a a connection to the estmp service, but why. I think it only has to run on port 50 ? Harald Scharf Softpoint electronic Netzwerksysteme / Firewalls Windows NT/Windows 2000/Linux/Netware/Unix mailto:h.scharf@softpoint.at www.softpoint.at www.simplex.at

2 2

natd
by ksemat＠wawa.eahd.or.ug 02 Aug '00

02 Aug '00

I know that this must probably be in the archives somewhere but could someone just help me. I have been using ipchains and masquerading to let the users on my LAN using MS windows(ouch!) connect to the net. Now I would like to change to using NAT can someone point me to a few readme's which are especially suse oriented? Two, where can I get the 2.4 kernels and a readme on the new iptables system? Noah ksemat(a)eahd.or.ug

2 2

Re: [suse-security] harden_suse & gdm
by Stephen nyc 02 Aug '00

02 Aug '00

Roman - Continuing along, I inserted strace as you suggested. Lo and behold, it worked, on tty2? It also created a giantic strace file. I removed the strace, and it no longer works. changing gdm to suid root does not solve the problem. commenting out line 29 in xdm changed nothing as well. I did notice the following in the gdm log - the last line reads: System: `/usr/X11R6/lib/X11/xkb/xkbcomp -w 1 -R/usr/X11R6/lib/X11/xkb -xkm -m us -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" keymap/xfree86 compiled/xfree86.xkm' I figure I'll include this since the keyboard is what appears to not be working... - Steve --- Stephen nyc <stephennyny(a)yahoo.com> wrote: > Roman - > > Thanks for the insight - xdm and kdm run fine. > Neither > of them run as suid root.t > > I'm looking into the strace now. > > - Steve > > --- Roman Drahtmueller <draht(a)suse.de> wrote: > > Stephen, > > > > It would be useful to know if the system is > > accessible if you run xdm or > > kdm instead of gdm. > > Unfortunately, I can't reproduce your problem > right > > now. > > > > Most liklely, the origin of the failure comes out > of > > one or two corners: > > > > 1) a permission problem. You would have to strace > or > > ltrace the binary to > > get more details (maybe the process changes euid > and > > runs into a closed > > device file). Insert `strace -f -o /strace.gdm� > > before the "startproc" in > > /sbin/init.d/xdm. (kill the process with an atjob > or > > alike to regain > > control again!) > > > > 2) a locale problem, or a mixture with 1). Since > the > > thing works with gdm > > ran as root, the profile settings in one or more > of > > /etc/rc.status, > > /etc/rc.config, /etc/SuSEconfig/profile may be the > > culprit. > > > > If nothing helps, comment out line 29 in > > /sbin/init.d/xdm (which reads > > like "export $var") and see what it does. > > > > Thanks, > > Roman. > > -- > > - > > > - > > | Roman Drahtm�ller <draht(a)suse.de> "Caution: > > Cape does not | > > SuSE GmbH - Security enable > user > > to fly." > > | N�rnberg, Germany (Batman > > Costume warning label) | > > - > > > - > > > > > > > > > > > > > Folks - > > > > > > I ran the harden suse scripts today and have run > > into > > > a little problem with gdm. > > > > > > System is clean suse 6.4 install, clean > > helix-gnome > > > 1.2 install. run level 3 booted to gdm login > > window. > > > > > > Before running the harden script (options y y y > y > > n n > > > y n y y - modified workstation) on startup I > would > > get > > > the gdm login window. I could switch back to > > console > > > 1, and log in either way. > > > > > > Now I boot to the gdm login window - it accepts > no > > > keyboard inputs, making it impossible to login > or > > > change consoles. > > > > > > Interestingly enough, now that it is disabled, I > > can > > > run gdm fine from a root login and behavior is > as > > > expected. > > > > > > This probably has something to do with some of > the > > > permission resets and that gdm can access the > > keyboard > > > - can someone point me in the right direction > for > > > repairing this, or help me understand the > benefit > > of > > > this behavior. > > > > > > Thanks. > > > > > > - Steve > > > > > > > > > > > > > __________________________________________________ > Do You Yahoo!? > Kick off your party with Yahoo! Invites. > http://invites.yahoo.com/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: > suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: > suse-security-help(a)suse.com > __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

1 0

Re: security
by ksemat＠wawa.eahd.or.ug 02 Aug '00

02 Aug '00

> I think most of us should take time to read this article I found it quite > interesting. Especially the analysis on SuSE's responses to security problems. > http://securityportal.com/cover/coverstory20000724.html > > Noah > ksemat(a)eahd.or.ug > >  > > > ------------------------------------------------- > This mail sent through IMP: webmail.eahd.or.ug > Noah ksemat(a)eahd.or.ug

1 0

Sendmail noetrn?
by Nick Zentena 02 Aug '00

02 Aug '00

Hi, I noticed that the new sendmail.cf that suse installed included a noetrn setting. It didn't take me very long to change it but am I missing something? I can't see how having etrn on can hurt anything? Nick -- ----------------------------- Anybody got plans for an ark? -----------------------------

3 3

Re: [suse-security] /var/log/{messages,firewall,warn}
by Ralph Weichert 02 Aug '00

02 Aug '00

Steffen Dettmer <steffen(a)dett.de> writes: > I would suggest to name this file "kernel" and not firewall, > since IMHO "firewall" is misleading here. In a file firewall I > wouldn't expect Harddisk I/O errors and so on. It's a pitty that > syslog is to silly to sort by the tag field, but you could make a > little (i.e. perl-) Script or some program doing this. Syslogd is > able to write down to a named pipe, that could be read out be > such a script. What do you think? You could also have a look at syslog-ng, which can filter messages by various criteria (e. g. the message text itself). You can find it at http://www.balabit.hu/products/syslog-ng/ Regards, Ralph

1 0

Re: [suse-security] harden_suse & gdm
by Stephen nyc 02 Aug '00

02 Aug '00

Roman - Thanks for the insight - xdm and kdm run fine. Neither of them run as suid root.t I'm looking into the strace now. - Steve --- Roman Drahtmueller <draht(a)suse.de> wrote: > Stephen, > > It would be useful to know if the system is > accessible if you run xdm or > kdm instead of gdm. > Unfortunately, I can't reproduce your problem right > now. > > Most liklely, the origin of the failure comes out of > one or two corners: > > 1) a permission problem. You would have to strace or > ltrace the binary to > get more details (maybe the process changes euid and > runs into a closed > device file). Insert `strace -f -o /strace.gdm� > before the "startproc" in > /sbin/init.d/xdm. (kill the process with an atjob or > alike to regain > control again!) > > 2) a locale problem, or a mixture with 1). Since the > thing works with gdm > ran as root, the profile settings in one or more of > /etc/rc.status, > /etc/rc.config, /etc/SuSEconfig/profile may be the > culprit. > > If nothing helps, comment out line 29 in > /sbin/init.d/xdm (which reads > like "export $var") and see what it does. > > Thanks, > Roman. > -- > - > - > | Roman Drahtm�ller <draht(a)suse.de> "Caution: > Cape does not | > SuSE GmbH - Security enable user > to fly." > | N�rnberg, Germany (Batman > Costume warning label) | > - > - > > > > > > > Folks - > > > > I ran the harden suse scripts today and have run > into > > a little problem with gdm. > > > > System is clean suse 6.4 install, clean > helix-gnome > > 1.2 install. run level 3 booted to gdm login > window. > > > > Before running the harden script (options y y y y > n n > > y n y y - modified workstation) on startup I would > get > > the gdm login window. I could switch back to > console > > 1, and log in either way. > > > > Now I boot to the gdm login window - it accepts no > > keyboard inputs, making it impossible to login or > > change consoles. > > > > Interestingly enough, now that it is disabled, I > can > > run gdm fine from a root login and behavior is as > > expected. > > > > This probably has something to do with some of the > > permission resets and that gdm can access the > keyboard > > - can someone point me in the right direction for > > repairing this, or help me understand the benefit > of > > this behavior. > > > > Thanks. > > > > - Steve > > > > > __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

1 0

Problems with YaST / Usermanagement
by Boris Kantwerk 02 Aug '00

02 Aug '00

Hi *, while creating new users the systemdefault for the userid is always 505. Setting it by hand to perhaps 510 doesn't work too. The homedirectories looks like this: drwxr-xr-x 3 505 users 1024 Aug 2 00:19 test drwxr-xr-x 3 510 users 1024 Aug 2 00:19 test2 A cd '~test' or cd '~test2' ends with following error-message: x:/webroots # cd ~test2 bash: cd: ~test2: No such file or directory Rebooting the system for reinit all daemons doesn't work too. System is SuSE 6.2 with Kernel 2.2.10. Reinstalled security fixes: x:~/new_rpms # ls . mdomo.rpm .. mysqclnt.rpm aaa_base-2000.5.2-0.i386.rpm mysql.rpm bind8.rpm mysqldev.rpm bindutil.rpm pine.rpm cpio.rpm pop-2000.6.8-0.i386.rpm cron.rpm syslogd.rpm lynx.rpm Any ideas? Boris.

2 1

Correction
by Harald Scharf 02 Aug '00

02 Aug '00

Of course i mean SMTP PORT 25 (not 50 as i wrote in the Mail before) Harald Scharf Softpoint electronic Netzwerksysteme / Firewalls Windows NT/Windows 2000/Linux/Netware/Unix mailto:h.scharf@softpoint.at www.softpoint.at www.simplex.at

1 0

Re: [suse-security] Problems with /var/log/messages -Reply
by Geert-Jan.Laat-de＠dsm-group.com 02 Aug '00

02 Aug '00

Hi, >> I'm having the following problem: >> >> Whenever cron gzip's my messages file, all logging to the "new" >> messages file >> is stopped, no information is entered. The only solution I found sofar is >> rebooting the machine, there has to be a simpler solution ! > > Yes, there was a bug in the log rotating scripts in SuSE 6.4, IIRC. > Please update aaa_base.rpm from our ftp site. I'm running SuSE 6.3, can I still use that package ??? Best regards, Geert-Jan de Laat

1 0

/var/log/{messages,firewall,warn}
by Jason P. Stanford 02 Aug '00

02 Aug '00

On my SuSE 6.4 system, I am using the firewal and scanlogd packages. While familiarizing myself with the system, I'd at one point removed those packages, then re-installed them. Now the log files in /var/log don't seem quite what I recall them being originally, but I could be mistaken. I get identical loggings from firewall in /var/log/firewall and /var/log/messages. This results in /var/log/messages getting VERY big, especially due to web traffic to the machine (a lot of ALLOW's). Can I change a config to prevent firewall from making duplicate entries to /var/log/messages? Also, scanlogd does not seem to log any scannings except for those from localhost (127.0.0.1). I've been playing with it, and running nmap on another machine on my local subnet, but these scans (not in any "stealth" mode) never get logged and scanlogd is most definitely running. I don't see any config files for scanlogd, and I didn't see any references to one in the man page. Any help is greatly apprecitated. Thanks! __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

4 4

again ftp-logging
by OKDesign oHG Security Webmaster 02 Aug '00

02 Aug '00

Hi, okay, I got it thanks to Romans hint. But now I have the next problem: Can I exclude special users from being logged that detailed ? I've configured "real" to be command-logged, as anonymous login is not possible on our system. Second, is there a way to have these command-logs being written to a different file ? At the moment this is written to /var/log/messages, can I have it in f.ex. /var/log/ftp.command or something like this ? Third, is there a way NOT to have these annoying messages "[date] [host]: popper: connect from [anywhere]" in my /var/log/messages ? Some clients have configured their systems to check their account on our server every ten minutes, some check it every 30 minutes and so on. Due to this the messages-file is growing rapidly with this stuff. Is there a way to stop this ? Thanks in advance. --- Stephan

1 0

ftpd-logging
by OKDesign oHG Security Webmaster 02 Aug '00

02 Aug '00

Hi, it seemed as if my syslog is only logging when a user sends data to the server via ftp, but not if he is receiving data from the server. I tried it out, and whoops, my logfile /var/log/xferlog only logs incoming transfers. Well, in /etc/ftpaccess there is configured logging inbound as well as outbound. Any ideas what could be the reason ? And is it possible, to log ANY activities when connecting via ftp ? I mean, when the user is just looking around in his tree, without downloading or uploading anything? Thank you in advance. --- Stephan

2 1

RE: [suse-security] ftpd-logging
by Peter Nixon 02 Aug '00

02 Aug '00

I highly recomend that you take a look at ProFTPD. It is very configurable and will allow logging of EVERYTHING. even "ls" ProFTPD comes as a suse package or you can grab it from http://www.proftpd.net/ Cheers _______________________________________________________________ Peter Nixon Systems Engineer Jigsaw Technology Pty Ltd URL: http://www.jigsaw.com.au Address: 21 Boomerang Place Seven Hills NSW 2147 Australia Phone: 02 9672 4222 Fax: 02 9672 4211 Email: peter(a)jigsaw.com.au _______________________________________________________________ > -----Original Message----- > From: OKDesign oHG Security Webmaster [mailto:security@okdesign.de] > Sent: Wednesday, 2 August 2000 5:06 > To: SuSE-Security-List > Subject: [suse-security] ftpd-logging > > > Hi, > it seemed as if my syslog is only logging when a user sends > data to the > server via ftp, but not if he is receiving data from the server. > I tried it out, and whoops, my logfile /var/log/xferlog only > logs incoming > transfers. > Well, in /etc/ftpaccess there is configured logging inbound as well as > outbound. > Any ideas what could be the reason ? > And is it possible, to log ANY activities when connecting via > ftp ? I mean, > when the user is just looking around in his tree, without > downloading or > uploading anything? > Thank you in advance. > > --- Stephan > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com >

1 0

IPChains file? Where is it?
by Waldack, Jesse (CAP, CARD) 01 Aug '00

01 Aug '00

I am trying to set up a Masq environment on my LAN with my cable modem. I have a DHCP server running and successfully giving IP addresses to new computers on the LAN through 'eth1'. I have internet access working through 'eth0'. But I've noticed on boot that it says /sbin/ipchains is missing. (Which I hope explains why I cannot get outside internet access from 'eth1'. Which package needs to be installed to get ipchains on my system, or where can I download it? Thanks in advance for your assistance.

2 1

/sbin/init.d/masquerade in suse 6.3 / 6.4
by W.Schlich 01 Aug '00

01 Aug '00

hi group! sorry for this "lame" question, perhaps ot: where has the script for masquerading gone in 6.3 / 6.4?! am I too blind to find it?! :) regards | Wolfram Schlich ------------------------------------------------------------------ | E-Mail: wolfram(a)schlich.org * ICQ #: 35713642 | Postal: Berghof * 56626 Andernach * Germany | Tel.: +49-(0)2636-941194 * Fax: -941193

2 2