January 2001 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] Web Based e-mail servers
by Nix 18 Jan '01

18 Jan '01

At 09:43 PM 18/01/2001 +0100, you wrote: >What do you want to log? Just senders and receivers? Almost any mailer >will do that. If you mean log the entire mail, as in message text, you >might want to look at dug songs dsniff and get a real good lawyer. ;-) This is very simple to do. You don't need dsniff, just use Obtuse SMTPD as a wrapper in front of Sendmail. If this is indeed what you are trying to do, and you need some help, email me privately... --- Nix - nix(a)susesecurity.com SuSE-Security FAQ Maintainer http://www.susesecurity.com

1 0

sudo for local users
by thunder7＠xs4all.nl 18 Jan '01

18 Jan '01

Mine is (mostly) a single-user workstation. I want to have the comfort of sudo and yet a bit of security. Is it possible to tell sudo to work without a password IF it is being called by a bash-programm that is a child of login that is a child of init? And would that be secure or not? Are there other ways to have a comfortable (password-less) sudo in safety? Greetings, Jurriaan -- Never before have I encountered such corrupt and foul-minded perversity! Have you ever considered a career in the Church? Black Adder II GNU/Linux 2.2.19pre7 SMP 2x1402 bogomips load av: 0.05 0.14 0.09

2 1

[suse-security] POP3 (fwd)
by Luis José Fabbiani B. (SOPORTE) 18 Jan '01

18 Jan '01

Hi all, How my server can register all popper entries? I have the following option on my server: pop3 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/popper -s but, this option don`t registry users pop account, only IP number. Thanks a lot. Luis. --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

2 1

New Key for SSHD
by Peter Lange 18 Jan '01

18 Jan '01

Hello, I build up 5 Firewalls, as they have the same konfiguration, Ibuild up one and did 4 clones with the Raid. Work perfekt but, now I have five times the same Key for the SSHD which I use to manage this boxes remote. I'm sorry but I can't find how to create a new key for the Host and where to put it into. Thanks for all hints Peter -- Gravity never sleeps :-)

3 2

Re: [suse-security] FreeS/WAN setup on SuSE 7.0
by Rainer.Frohne＠t-online.de 18 Jan '01

18 Jan '01

Hello Davi, thanks for your help! I'll try it! regards Rainer ----- Original Message ----- From: "Davi" <davi(a)avati.com.br> To: "Rainer Frohne" <rainer.frohne(a)t-online.de> Sent: Wednesday, January 17, 2001 10:34 PM Subject: Re: [suse-security] FreeS/WAN setup on SuSE 7.0 > Just untar freeswan in /usr/src and do make insert to apply necessary patches > to kernel. I did it to a clean 2.2.18 (not so cause it had lids, stealth, > pptp and otras cosas mas). > > Freeswan is also a bit hard to understand and configure, but results are > cool.The only problem is the lack of adequate free clients for windows. > > []s > Davi > > On Monday 15 January 2001 13:27, you wrote: > > Hello, > > > > trying to configure FreeS/WAN 1.4 on SuSE 7.0 with kernel 2.2.16 > > (SuSE-Sources) I'm wondering that I do not find something about IPSEC when > > I did a 'make xconfig'. On 2.0.x Kernel one has to select IPSEC when > > building a knew kernel. Do I have to patch the Kernel first? Or is it not > > nessesary to do anything with the kernel on 2.2.x Kernels? I do have the > > module, and when I start it, it runs without error. > > > > I hope anyone understood my broken English! > > > > Thanks in advance! > > > > Rainer > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > > For additional commands, e-mail: suse-security-help(a)suse.com

1 0

inetd on a specified network interface
by Jan Räther 18 Jan '01

18 Jan '01

Hi all, is there a possibilty to tell the inetd to listen only on a specified network interface / IP-Adress. e.g. listen only on eth0 with the adress 192.168.1.1 ? thx Jan [?][!] newtention technologies gmbh // rathausallee 72-76 // 22846 norderstedt mailto: jan(a)newtention.de // http://www.newtention.de phone: 040-5 54 45 89 - 3 // mobil: 0178-4777948 // fax: 040-5 54 45 89 - 9 ----- /* Binary compatibility is good American knowhow fuckin' up. */ 2.2.16 /usr/src/linux/arch/sparc/kernel/sunos_ioctl.c

3 6

Mail with arbitrary senderaddress
by Raffy 18 Jan '01

18 Jan '01

I need your help... I just received an email which claimed to be out of a domain which I own. (someguy(a)mydomain.com) BUT this is not possible, because I don't have any other users except me. I then found that this mail came from www.sueddeutsche.de and complained there that somebody was using their relay to send mail with the sender someguy(a)mydomain.com. They replied that they had a form on the web where users can specify the sender address and send emails to anyone. What do you guys think about this? I dont' like that! Especially people who are not too internet literate will not understand that a mail is not coming from the sender which is provided. ... Thanks Raffy

5 4

RE: [suse-security] Mail with arbitrary senderaddress
by Raffy 17 Jan '01

17 Jan '01

> this is very possile due to anonymous mailers. They strip the header from > mail files and replace them with fake ones, > > check out http://www.andrebacard.com/remail.html I know that. My question was more towards the fact that companies start to provide such things on the web ... They should indicate that the sender could be wrong! Thanks Raffy

1 0

DOJ claims breakup needed to rein in Microsoft
by Fred A. Miller 17 Jan '01

17 Jan '01

http://computerworld.com/cwi/story/0,1199,NAV47_STO56289_NLTos,00.html -- Fred A. Miller Systems Admin. Cornell Univ. Press Services fm(a)cupserv.org

2 1

AW: [suse-security] Why does sendmail deny relaying?]
by Garry Smith 17 Jan '01

17 Jan '01

Garry Smith wrote: > > Hi, > > uname -a : Linux homer 2.2.16-SMP #1 SMP Wed Aug 2 20:01:21 GMT 2000 > i686 unknown > sendmail version: starting daemon (8.10.2): SMTP+queueing@00:30:00 > (from mail log) > > I also have a problem with relaying in sendmail. > I would like machines from domain a, b and c to be able to use my mail > server (SuSE Linux 7.0 Pro) to send mails to any other domain. > > Initially I inserted domains a, b,and c into /etc/mail/relay-domains. > This allowed me to pass on mails from remote clients to one of the > listed domains. > > Sending a mail to a domain not listed causes the following error to > appear in the sender's mail client: > > An error occurred while sending mail > The mail server responded: > 5.7.1 <Garry.Smith(a)computer.org>... Relaying denied. IP name lookup > failed [x.x.x.x] Please check the message recipients and try again. > > My log mail log file shows: > Jan 17 12:40:08 homer sendmail[18328]: starting daemon (8.10.2): > SMTP+queueing@0 > 0:30:00 > Jan 17 12:40:08 homer sendmail[18328]: daemon could not open control > socket /var > /run/sendmail.control: Group writable directory > Jan 17 12:41:23 homer sendmail[18347]: f0HCfML18347: ruleset=check_rcpt, > arg1=<G > arry.Smith(a)computer.org>, relay=[x.x.x.x], reject=550 5.7.1 > <Garry.Smith@ > computer.org>... Relaying denied. IP name lookup failed [x.x.x.x] > Jan 17 12:41:23 homer sendmail[18347]: f0HCfML18347: > from=<Garry.Smith@computer. > org>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, > relay=[x.x.x.x] > > I have since removed the entries for /etc/mail/relay-domains. > I have also commented out the sendmail.cf authentification warning entry > as described in one on the recent related mails on this. > # privacy flags > > > O PrivacyOptions=needmailhelo,novrfy,noexpn,noetrn,noverb > > > > and restarted sendmail > > I followed the instructions below and added domains A,B and C to > access.db ie: > a-sub-domain.a-domain ACCEPT > > I then ran the Makefile and restarted sendmail. > I still get the relay error listed above. The only way I can seem to > get round this is if I add domains A,B and C back into > /etc/mail/relay-domains file. > > However, while I can then use my mail server to relay mail to those > domains, I cannot relay to other un-listed domains. > > How can I specify that domains A,B and C are allowed to use my mail > server to relay messages to any other domain on the Internet? > I must be missing something fundamental here, but can't think what? > > Many thanks in advance > regards > > Garry > > > > Roman Drahtmueller wrote: > > > > > > > > If you put in access.db > > > 212.121.144.197 ACCEPT > > > > > > it will work. > > > > Yes, and don't forget to hash the plaintextfile. Use the Makefile that > > I've put in the attachment. Place it in /etc/mail, go there and type make. > > Little gift from the 7.1 sendmail package... > > > > > > > > Philipp > > > > Thanks, > > Roman. > > -- > > - - > > | Roman Drahtmüller <draht(a)suse.de> // "Caution: Cape does | > > SuSE GmbH - Security Phone: // not enable user to fly." > > | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | > > - - > > > > ------------------------------------------------------------------------ > > Name: Makefile > > Makefile Type: Plain Text (TEXT/PLAIN) > > Encoding: BASE64 > > Description: Makefile for /etc/mail > > > > ------------------------------------------------------------------------ > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > > For additional commands, e-mail: suse-security-help(a)suse.com

1 0