January 2001 - openSUSE Security - openSUSE Mailing Lists

The NSA's version of Linux. Open source at that!
by Jacks, Charles 08 Jan '01

08 Jan '01

Linux security via the nsa. http://www.nsa.gov/selinux/ Charles Jacks

1 0

link for ssl-documentation
by Philipp Snizek 08 Jan '01

08 Jan '01

Hi all has anybody got good howto links for how to encrypt www sites with ssl? TIA Philipp

3 2

Re: Re: [suse-security] SuSE/Linux advocacy
by r.maurizzi＠gvs.it 08 Jan '01

08 Jan '01

> As the person who first made the suggestion and unwittingly released the > advocacy hounds my main concern is that people should not be starting > network services by mistake. So I would accept START_SSHD=no as a > compromise. The point Roman makes about being able to ssh/scp to freshly installed machines is a good one. What about a rule in the tcpwrappers (host.allow/host.deny) to accept connections only from the local network? Or maybe, use START_SSHD=no in the default package, and have an additional, non default rpm that only changes START_SSHD to 'yes', so that I can add this rpm to the "installation list" of computers I want to be able to ssh to. Ciao, Roberto.

1 0

Intrusion detection?
by Stefan Hoffmeister 08 Jan '01

08 Jan '01

Hi, what are the recommended tools to add to a (dial-up) NAT gateway to detect attacks on that gateway? I am not (yet :->) looking for tools how to detect things after the deed is done, but for some kind of an early warning system (and I am not particularly interested in reading the raw logs emitted by ipchains). http://www.securityfocus.com/ lists a couple of things, but this seems to be just an *unreviewed* long list of tools, with rather unknown quality. TIA Stefan

7 17

Mail filter on firewall?
by Stefan Hoffmeister 08 Jan '01

08 Jan '01

Is there a way to filter mail (for viruses / content / attachments) on a masquerading firewall without a server on the gateway? I currently have SuSE 7.0 running here, providing NAT for a few clients on the LAN; SuSEfirewall 4.2 protects the gateway. In order to protect some clients, I would like check the emails that are flowing in and filter or modify the content in case some criteria are matched (".EXE file attached? Kill. Now." etc). ZoneAlarm (http://www.zonealarm.com/) on Windows has functionality for clients that does this to some extent (rename .VBS scripts). At the same time, I would like to allow connections to any standard mail server out there (freemailers, for instance). I am under the impression that having a port redirector on the firewall which looks at the POP3 traffic might be effective? Is there such a thing at all? I looked around and only found setups where a (gateway) "local" mail server was around that did all the processing, with clients connecting to the *local* gateway. TIA, Stefan

2 1

RE: [suse-security] Mail filter on firewall?
by Martin Mielke 08 Jan '01

08 Jan '01

> Is there a way to filter mail (for viruses / content / > attachments) on a > masquerading firewall without a server on the gateway? > Hello, take a look at http://amavis.sourceforge.net/ HTH, Martin

1 0

Re: [suse-security] SuSE "?"
by Nix 08 Jan '01

08 Jan '01

At 12:01 AM 8/01/2001 +0100, you wrote: > > > > > > Easy setup for cable and ASDL connection. I'm not sure that it's possible to make it any easier. the rp_ppoe package already included with SuSE requires that you edit 2 lines in the config file (username and password) and away you go. For DHCP based cable modems like Optus@Home (in Australia) you simply have to edit dhcpcd.conf an put your username in there as the computer name. for Cable networks (Like Telstra Bigpond) that require a login client, you have to download and install this separately, however this is always going to be the case, as it will vary from cable provider to cable provider. So to sumarise, SuSE has complete support for Cable, DSL, Modem, ISDN, Ethernet, and Ham (wireless) based internet access? This only this SuSE doesn't have support for atm that I can think of is IR support for my Nokia phone, but it's a simple matter to download and compile gnokii. For god's sake, how much easier do you need it? Next think we'll have that fucking dancing paper clip!!! -Nix -- Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking

1 0

SuSE "?"
by Faessen Jean-Paul 08 Jan '01

08 Jan '01

Now that the new 2.4 is out,can SuSE tell us when it will be integrated in the new SuSE? The commercial SuSE is full of soft,but is it possible to do a little bit of clean-up? I agree with the people writing that we don't need 1000 packages of fe intrusionsoftware but that we want the soft that really works. Here are my suggestions. Easy setup for cable and ASDL connection. Easy setup for allowing the users to connect the internet.So not only root. I did not yet find out how to do this. Soft for IDE-CDburners... integration in the softpackages of PMFirewall,portsentry and Licq.Would Bastille for SuSE be a bad idea?It's included in Red Hat only,but it seems to be good. I wish the SuSE-team good luck... Jean-Paul Faessen

5 4

SuSE 2.4 Kernel and ReiserFS ?
by Eduardo J. Vega Arguedas 08 Jan '01

08 Jan '01

hi ! Yesterday I download and try to install the Kernel 2.4 from the SuSE FTP site. What was my surprise when I try to set the options for my new kernel That the ReiserFS support can't be enabled !! so many other thinks ! ? Why ? How can I enable the ReiserFS Support ? and many other things that where enabled on Kernel 2.2.16 ??? Why are can't be choose Also From where I can find information about the new features and improvements on this new Kernel Release ? Also is there any web page or information from comparations between the Kernel versions ? Thanks --ed

2 1

applix axnet crash caused by telnet connect
by Stefan A. Tichy 07 Jan '01

07 Jan '01

Hi, ApplixWare Office 4.4.1 is installed on SuSE 7.0. At port 5492 there is axnet listening. Just telnet to this port and typing anyting does crash axnet. strace shows and old_mmap ENOMEM error. Is it possible to start axnet without binding to non-local addresses? -- Stefan Tichy <sat(a)pi4tel.de>

1 0