October 2001 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] T-DSL IPTABLES
by Stefan_Walther＠gehag-dsk.de 16 Oct '01

16 Oct '01

Hi, i got it work without problems. How can I help you??? MfG. Stefan Walther stefan_walther(a)gehag-dsk.de dienst.: +4930/89786448 Funk: +49172/3943961 Nils Wunsch <nils.wunsch(a)gmx.net> 16.10.01 16:53 To: suse-security(a)suse.com cc: Subject: [suse-security] T-DSL IPTABLES Hello municipality a question who has iptables and tsdl already to run gotten without problme with mail www etc.. I need little assistance Nils -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

Sendmail
by spiekey 16 Oct '01

16 Oct '01

Hello! I set up my sendmail as desciped at http://doc.thepenguin.de/sendmail/index_dr.htm i have the pop and smtp enabeled in /etc/services /etc/inetd.conf when i do a nmap onto my box i can see that smtp is open, but no pop, how come? Sendmail is running and i restarted it each time i changes something (as i did with suseconfig) I get this error: The connection to the server has failed. Account: '192.168.10.53', Server: '192.168.10.53', Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error: 10061, Error Number: 0x800CCC0E Can someone help me? Thank you Spiekey

4 3

rule set problems
by stefan.wurz 16 Oct '01

16 Oct '01

hi list ! many thx for your help it´s very nice from you all i have os = suse7.1 eth0 = internet 195.112 eth1 = internal 10.1.1.0/24 db-host = 10.1.1.10 firewall = ipchains i have following problems : i conf. a firewall who forward the 1521 port to the db-host the database regonized the client connect and opens a port >1024 on the same port that the client call to the database ! but the oracle client get a ora-12560 protocol adapter error what shuld i do ? to work this configuration ? see log file: Oct 16 17:53:38 vpn kernel: Packet log: input ACCEPT eth1 PROTO=6 10.1.1.10:1521 client_ip:1470 L=40 S=0x00 I=1251 F=0x4000 T=128 (#9) Oct 16 17:53:38 vpn kernel: Packet log: input ACCEPT eth0 PROTO=6 194.112.213.69:1470 fw_ip:1521 L=40 S=0x00 I=2637 F=0x4000 T=128 (#23) Oct 16 17:53:38 vpn kernel: Packet log: input ACCEPT eth0 PROTO=6 194.112.213.69:1470 fw_ip:1521 L=40 S=0x00 I=2638 F=0x4000 T=128 (#23) Oct 16 17:53:38 vpn kernel: Packet log: input ACCEPT eth1 PROTO=6 10.1.1.10:1521 client_ip:1470 L=40 S=0x00 I=1507 F=0x4000 T=128 (#9) my rule set vpn:/etc/rc.config.d # cat /etc/rc.config.d/firewall.rc.config FW_DEV_WORLD="eth0" FW_DEV_INT="eth1" FW_DEV_DMZ="" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_NETS="10.1.1.0/24" FW_MASQ_DEV="$FW_DEV_WORLD" FW_PROTECT_FROM_INTERNAL="no" FW_AUTOPROTECT_GLOBAL_SERVICES="yes" FW_SERVICES_EXTERNAL_TCP="ssh" FW_SERVICES_EXTERNAL_UDP="" FW_SERVICES_EXTERNAL_IP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INTERNAL_TCP="ssh" FW_SERVICES_INTERNAL_UDP="" FW_SERVICES_INTERNAL_IP="" #Hier die Ip addressen eintragen FW_TRUSTED_NETS="10.1.1.0/24 194.112.xxx.xxx 62.52.xxx.xxx" # FW_SERVICES_TRUSTED_TCP="ssh 1:65000" FW_SERVICES_TRUSTED_UDP="" FW_SERVICES_TRUSTED_IP="" FW_SERVICES_TRUSTED_ACL="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" FW_SERVICE_DNS="no" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SAMBA="no" FW_FORWARD_TCP="" FW_FORWARD_UDP="" FW_FORWARD_IP="" FW_FORWARD_MASQ_TCP="194.112.xxx.x/24,10.1.1.10,1521" FW_FORWARD_MASQ_UDP="" FW_REDIRECT_TCP="" FW_REDIRECT_UDP="" FW_LOG_DENY_CRIT="yes" FW_LOG_DENY_ALL="yes" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="yes" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="yes" FW_ALLOW_FW_TRACEROUTE="yes" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_MASQ_MODULES="autofw cuseeme ftp irc mfw portfw quake raudio user vdolive" #FW_CUSTOMRULES="/etc/rc.config.d/firewall-custom.rc.config" vpn:/etc/rc.config.d #

1 0

T-DSL IPTABLES
by Nils Wunsch 16 Oct '01

16 Oct '01

Hello municipality a question who has iptables and tsdl already to run gotten without problme with mail www etc.. I need little assistance Nils -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

2 1

port security
by Marios Marti 16 Oct '01

16 Oct '01

Hi I have cut down the number of ports open to 3 22 SSH 1024 kdm (when a user is logged on) 6000 X11 I was wondering if these ports are secure enough and if not if there is anyway to secure them. As far as the kdm open port that would be closed most of the time. Also if there is anything else i should be thinking about except port security i.e remote exploitation of the system Thanks _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

1 0

AW: [suse-security] ssh forwarding !
by stefan.wurz 16 Oct '01

16 Oct '01

i use ipchains ! i hope this not a problem ! lg stefan -----Ursprüngliche Nachricht----- Von: Stefan_Walther(a)gehag-dsk.de [mailto:Stefan_Walther@gehag-dsk.de] Gesendet: Dienstag, 16. Oktober 2001 14:19 An: stefan.wurz Betreff: Re: [suse-security] ssh forwarding ! Hi, first what implementation do you use??? iptables or ipchains. If you are using iptables it is really easy, just use a NAT-function. This is also working with dynamic IP's. MfG. Stefan Walther stefan_walther(a)gehag-dsk.de dienst.: +4930/89786448 Funk: +49172/3943961 "stefan.wurz" <stefan(a)wurz.at> 16.10.2001 14:03 To: <suse-security(a)suse.com> cc: Subject: [suse-security] ssh forwarding ! hi list ! firewall suse7.1 oracle host nt4 sp4 i have a problem with a oracle 7 database ! i will forward the 1521 port to a database host behind a firewall ! the databse open´s a port >1024 and the connection to the firewall established ! but i get no response from the database ! can i forward from the server the ports to me ? lg stefan -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

ssh forwarding !
by stefan.wurz 16 Oct '01

16 Oct '01

hi list ! firewall suse7.1 oracle host nt4 sp4 i have a problem with a oracle 7 database ! i will forward the 1521 port to a database host behind a firewall ! the databse open´s a port >1024 and the connection to the firewall established ! but i get no response from the database ! can i forward from the server the ports to me ? lg stefan

1 0

SQL net PROXY
by stefan.wurz 16 Oct '01

16 Oct '01

hi list i need a sql net proxy for a linux suse firewall ! ca n anybody help me ! thx !

1 0

devfs
by Bitzer,Gerd 16 Oct '01

16 Oct '01

Hallo Allerseits, da gibts ne Meldung http://cert.uni-stuttgart.de/ticker/article.php?mid=506, Schwachstelle im devfs. Betrifft das auch Suse Linux ? Welche Kernels ?

2 1

SASL and Sendmail
by Keith Hopkins 16 Oct '01

16 Oct '01

Hi all, Does any version of SuSE (i386) come with SASL pre-configured for Sendmail? (Or is it Sendmail preconfigured with SASL?) Lost in Tokyo, Keith

2 1