August 2000 - openSUSE Security - openSUSE Mailing Lists

Problem compiling qmail/portsentry under SuSE 6.4
by jan 15 Aug '00

15 Aug '00

Hi list, maybe a little off topic? but I have problems compiling qmail under SuSE 6.4, the command "setup check" brings the following output: -------------------------------------------------------------------------- ( cat warn-auto.sh; \ echo CC=\'`head -1 conf-cc`\'; \ echo LD=\'`head -1 conf-ld`\' \ ) > auto-ccld.sh cat auto-ccld.sh make-load.sh > make-load chmod 755 make-load cat auto-ccld.sh find-systype.sh > find-systype chmod 755 find-systype ./find-systype > systype ( cat warn-auto.sh; ./make-load "`cat systype`" ) > load chmod 755 load cat auto-ccld.sh make-compile.sh > make-compile chmod 755 make-compile ( cat warn-auto.sh; ./make-compile "`cat systype`" ) > \ compile chmod 755 compile ( ( ./compile tryvfork.c && ./load tryvfork ) >/dev/null \ 2>&1 \ && cat fork.h2 || cat fork.h1 ) > fork.h rm -f tryvfork.o tryvfork ./compile qmail-local.c qmail-local.c: In function `main': qmail-local.c:448: warning: return type of `main' is not `int' ./compile qmail.c ./compile quote.c ./compile now.c ./compile gfrom.c ./compile myctime.c ./compile slurpclose.c cat auto-ccld.sh make-makelib.sh > make-makelib chmod 755 make-makelib ( cat warn-auto.sh; ./make-makelib "`cat systype`" ) > \ makelib chmod 755 makelib ./compile case_diffb.c ./compile case_diffs.c ./compile case_lowerb.c ./compile case_lowers.c ./compile case_starts.c ./makelib case.a case_diffb.o case_diffs.o case_lowerb.o \ case_lowers.o case_starts.o ./compile getln.c ./compile getln2.c ./makelib getln.a getln.o getln2.o ./compile subgetopt.c ./compile sgetopt.c ./makelib getopt.a subgetopt.o sgetopt.o ./compile sig_alarm.c In file included from /usr/include/signal.h:300, from sig_alarm.c:1: /usr/include/bits/sigcontext.h:28: asm/sigcontext.h: No such file or directory make: *** [sig_alarm.o] Error 1 ------------------------------------------------------------------------------ I assume it's due to the SuSE Kernel Includes ? (I've installed the latest SuSE-Kernel 2.2.14, which is a modified 2.2.16 as rpm-update from SuSE) BTW. I get the same error on compiling portsentry Any help would be appreciated. jan.meyer

3 3

Re: [suse-security] autorpm and latest secure files
by Volker Kuhlmann 15 Aug '00

15 Aug '00

> I used autorpm to update all flies it could come up with for my 6.2 > installation. As pointed out this thread is off-topic, but there is one security-related aspect to it. For the autorpm-user to think about: How do you ensure what you update on your system is genuine, and not trojaned? Whether the update actually works is of secondary importance. Volker

15 19

[suse-security] NT-ftp through linux machine suggestions
by De Loe, Maurits 15 Aug '00

15 Aug '00

Dear all, At one of the projects I'm working on I have the following configuration problem. I have a NT-box connected with a linux-box which server as a http-proxy. I'm running squid, SuSE64 and SuSE firewall. I'm using dreamweaver (web-dev program) on NT to create web-sites. The problem I have is that I can't get my ftp-forwarding to work. If I use ftp through the browser it works but if I try to use ftp directly it doesn't, not from the NT-machine or from an other linux-box hooked up to my server. It is probably "just" a squid problem but I'm not very familiar with squid and need to get this to work. I'm aware that allowing ftp-forwarding is a potential security risk but there is no other way to do this...I think. Please help me out with this. Cheers, Maurits de Loë linux-administrator Zürich Switzerland ps: If someone has a better way of getting this setup to work I'm also VERY interested.

3 2

telnet to fixed port
by omicron＠symonds.net 15 Aug '00

15 Aug '00

hi how can i restrict remote users to telnet,rlogin,ssh only to the specified port. i mean, i dont want anyone to telnet to #25 or #80. is it possible ? regards cheedu -- ***** cogito cogito ergo cogito sum: i think that i think, therefore i think that i am. --Devils Dictionary --

3 2

RE: [suse-security] Secure Mail Server suggestions
by Matthias Pigulla 15 Aug '00

15 Aug '00

I can really really recommend qmail. http://www.qmail.org Although it might take some time to get familiar with it, you will find it very easy to configure. It performs very well, we managed lists with 100K+ deliveries a day on a simple Pentium/singe HDD box. Concerning security, qmail is my first choice. As someone said on this list, the qmail author (Dan Bernstein) "is so paranoid that he even avoids linking against the standard C libraries" :-). You will also like its modular architecture, which allows a lot of setups. For example, you can use "lightweight" qmail setups on several machines in order to tunnel all kind of mail to a central mail server. POP3: Check out the vmailmgr package; it is designed to work with qmail's maildirs. I have to admit that I am not actively reading the mailing list, but vmailmgr seems to be actively supported and extended. I think there were some postings on the list concerning IMAP with vmailmgr/qmail/?. http://www.vmailmgr.org/ Also don't miss to check ezmlm for mailing list management. Web based mail: Hm, forgot about that... I think I saw some stuff at freshmeat, but I don't have any experience with it. Hope this helps, Matthias -- w e b f a c t o r y G m b H Matthias Pigulla <mp(a)webfactory.de> - Geschaeftsfuehrer Lessingstr. 60 - D-53113 Bonn - Germany - www.webfactory.de Fon +49(0)228-9114455 - Fax +49(0)228-9114499 - ICQ 49185492

1 0

Logging
by Gerd Bitzer 15 Aug '00

15 Aug '00

Hi all, a question to all of you regarding system logging. I have a server with Suse 6.2 which should serve as a logging host. It's behind a firewall and is publically reachable, the logs are delivered from devices which are in the Internet. The standard syslogd seems to have security issues, according to http://www.securityportal.com/lasg/logging/index.html#General log security There are some suggestions of alternative syslogd's on Kurt's site, but what are the experiences with the listed alternative syslogd's, which one can you recommend (under security and stability viewpoints of course ;-). Which one could be used as secure dropin replacement for the standard syslogd ? TIA for your replies

2 1

ITS ALIVE! however theres one missing limb!
by Stuart Hodgkinson 15 Aug '00

15 Aug '00

hello again ;), Ok thanks to all you guys who have help as i've got the masqurading working now with the DNS resolution. What I need now is to be able to force the local network users to use the squid proxy and not access the net directly. I tried adding this:- FW_REDIRECT_TCP="192.168.0.0/24,0/0,80,3128" but when i restarted the script i got:- ipchains: No target by that name (Maybe this kernel doesn't support transparent proxying?) the script doesn't return any error when restarted but if I try accessing the net i have no problems but it doesn't go through the proxy (which i need for extra secuirty). im using 6.4 with a 2.2.14 kernel staright outta the box do i need to recompile the kernel or is it another setting i've missed, screwed up or not prayed to properly ;) -- Stuart Hodgkinson Software Engineer "When bashing the keyboard into your forehead just isn't enough."

3 2

mailing list
by nic 15 Aug '00

15 Aug '00

unsubscribe

1 0

Re: [suse-security] Secure Mail Server suggestions
by Jason Warr 14 Aug '00

14 Aug '00

In order to use courier you need to convert to maildirs(here is the man page http://www.qmail.org/man/man5/maildir.html ). Migrating can be quite interesting if you have a large user base. I would imagine Mailbox-Maildir could be done fairly easily with some good scripts and proper planning/testing. If you want to stay with Mailbox files you can use UW-IMAP. TWIG only depends on having an IMAP server present. Infact the install documentation for TWIG references UW-IMAP, but says that you can use any IMAP server. I personally am not a big fan of the UW-IMAP server. I have never gotten it to work right. If you follow instructions Courier-IMAP is very easy to get working correctly. I am not that familiar with the security history of UW-IMAP, but I have not had or heard of any problems Courier-IMAP. Keep in mind also that the web server dose not have to be the same machine as the mail server. This is because most webmail programs use the same connection the the IMAP server as any other client program would. There are endless possibilities when you use qmail with Maildirs. Jason max wrote: > Hi, I am currently using qmail as well, and myself was wondering about > posibilities for imap and web mail retrieval. My qmail currently works > with Mailbox file, where all the mail gets stored. Maildir is not > used. Will I have to migrate to Maildir to use Courier and TWIG or can it > all still run with Mailbox? Or do I sound as confused as I feel? > > Max Gribov > System Administrator > > On Mon, 14 Aug 2000, Jason Warr wrote: > > > I use qmail in combination with Courier-IMAP. Qmail is extremly easy to > > > > configure and has been very reliable for me. Your first install may > > take > > a couple of hours, but once you have done it and know better how qmail > > works it is a breeze. If you look on the qmail site (www.qmail.org) > > under user documentation you will find a HOW-TO written by Adam Mckenna. > > > > If you follow it you will quickly have qmail up and running. For POP3 I > > > > just use the qmail-pop3d that is part of qmail. You will find > > instructions for using it in the qmail FAQ found at the top of the main > > page on the qmail site. For IMAP I use Courier-IMAP. It can run over > > SSL if you want. You can find it at http://www.inter7.com/courierimap/ > > > > > > > > Fro web mail you can find a variety of different packages based on PHP > > at > > www.php.net under projects. I personally like TWIG, but it is a bit > > combersome to set up with all of the features. > > > > > > If you are going to use qmail and courier you need to use Maildirs. > > There is documentation included with qmail on how to do this. I would > > also look over the qmail site well because there is aditional software > > and doc's that you may find usefull. > > > > Good luck. > > > > Jason > > > > > > Selcuk Ozturk wrote: > > > > > I want to replace our ailing mail server with a new one. It should > > > have an smtp server (of course), pop and imap servers and also > > > a webmail solution. Can you suggest a combination of programs > > > for all of the above that are scalable and most importantly secure? > > > > > > For smtp server, I have only used sendmail until now but I like what > > > I have read about qmail and would prefer to use it if I can find > > > secure and stable imap and webmail solutions that would work with it. > > > > > > Thanks, > > > Selcuk > > > > > > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> > > > < Selcuk Ozturk <+> Email: > > > > < MIS Deputy Director <+> sozturk(a)eMediaMillWorks.com > > > > <=============================<#>===================================> > > > < <+> eMediaMillWorks > > > > < Fax : (301)883-2482 x121 <+> 1100 Mercantile Lane, Ste 119 > > > > < Fax : (301)883-9754 <+> Largo, MD 20774 > > > > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > > > For additional commands, e-mail: suse-security-help(a)suse.com > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > > For additional commands, e-mail: suse-security-help(a)suse.com > > > >

1 1

Re: [suse-security] Secure Mail Server suggestions
by Jason Warr 14 Aug '00

14 Aug '00

I use qmail in combination with Courier-IMAP. Qmail is extremly easy to configure and has been very reliable for me. Your first install may take a couple of hours, but once you have done it and know better how qmail works it is a breeze. If you look on the qmail site (www.qmail.org) under user documentation you will find a HOW-TO written by Adam Mckenna. If you follow it you will quickly have qmail up and running. For POP3 I just use the qmail-pop3d that is part of qmail. You will find instructions for using it in the qmail FAQ found at the top of the main page on the qmail site. For IMAP I use Courier-IMAP. It can run over SSL if you want. You can find it at http://www.inter7.com/courierimap/ Fro web mail you can find a variety of different packages based on PHP at www.php.net under projects. I personally like TWIG, but it is a bit combersome to set up with all of the features. If you are going to use qmail and courier you need to use Maildirs. There is documentation included with qmail on how to do this. I would also look over the qmail site well because there is aditional software and doc's that you may find usefull. Good luck. Jason Selcuk Ozturk wrote: > I want to replace our ailing mail server with a new one. It should > have an smtp server (of course), pop and imap servers and also > a webmail solution. Can you suggest a combination of programs > for all of the above that are scalable and most importantly secure? > > For smtp server, I have only used sendmail until now but I like what > I have read about qmail and would prefer to use it if I can find > secure and stable imap and webmail solutions that would work with it. > > Thanks, > Selcuk > > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> > < Selcuk Ozturk <+> Email: > > < MIS Deputy Director <+> sozturk(a)eMediaMillWorks.com > > <=============================<#>===================================> > < <+> eMediaMillWorks > > < Fax : (301)883-2482 x121 <+> 1100 Mercantile Lane, Ste 119 > > < Fax : (301)883-9754 <+> Largo, MD 20774 > > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com

1 0