October 2001 - openSUSE Security - openSUSE Mailing Lists

web Firewall question
by Alan 14 Oct '01

14 Oct '01

Hi all, I have question on design the firewall on the web server My idea is like that Internet --------(firewall 1) --------(Proxy)---------(firewall 2)--------- Web Server I need most secure setting on that. Any suggestion? Thank Alan Au

2 2

Keyboard Configuration
by lonh SENG 14 Oct '01

14 Oct '01

Hi all, I use SySE6.3. I use telnet from w2k professional. I find my keyboard not work well. Some function keys, .... don't work weel. My keyboard property is United States International. Thank you in advance, Regards, lonh

3 3

Nessus
by Richard Ibbotson 14 Oct '01

14 Oct '01

Dear All I thought I'd have a go at starting Nessus on my workstation so that I could examine my own network. After starting it I find that there are no plugins. So, after reading the June issue of Linux Journal and the article by Nick Bauer I tried to do 'nessus-update-plugins' from the command line. It said .... command not found. How do I update the SuSE version of Nessus ? Thanks -- Richard

2 1

Re: Bugs in SuSEfirewall2
by marc＠suse.de 13 Oct '01

13 Oct '01

Hi, > 1. Auf den Server, der als Firewall dient, der aber auch einen Webserver laufen hat, kann vom internen gemasqueradeten Netzwerk nicht zugegriffen werden - wenn man die äußere IP-Adresse verwendet. Dieser Fehler wurde übrigens auch in der Security-Mailingsliste besprochen; dieses Problem hatte offenbar nicht nur ich... > http://lists2.suse.com/archive/suse-security/2001-Aug/0407.html SuSEfirewall does *not* allow any access to to any IP address of the firewall which is not on the incomming side of the packet. from extern you may not access the internal IP of the firewall - and from internal not the external IP of the firewall. > 2. scheint es ein Problem mit der Definition von privaten IP-Adressen zu geben. In der RFC1918 steht: > The Internet Assigned Numbers Authority (IANA) has reserved the > following three blocks of the IP address space for private > internets. > 10.0.0.0 - 10.255.255.255 (10/8 prefix) > 172.16.0.0 - 172.31.255.255 (172.16/12 prefix) > 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) This bug (incorrect detection of 172.x.x.x private addess space) was already reported and is fixed in my development version. however I was on holiday, and will release an update after I went through my 800 emails and check that no other valid bugs were reported :-) Greets, Marc -- E@mail: marc(a)suse.de Function: Security Research and Advisory PGP: "lynx -source http://www.suse.de/~marc/marc.pgp | pgp -fka" Key fingerprint = B5 07 B6 4E 9C EF 27 EE 16 D9 70 D4 87 B5 63 6C Private: http://www.suse.de/~marc SuSE: http://www.suse.de/security

1 0

SuSe
by Paula Andrea Velasco 13 Oct '01

13 Oct '01

3 2

Firewall, how secure is it?
by Marios Marti 12 Oct '01

12 Oct '01

Hi I have just installed SuSE linux 7.1 default installation with office. I have done the online automatic update and all security patches have been applied. Also i have activated the personal firewall and i set it up to reject all incoming requests. I was wondering though whether is this enough or is there more to be done so that my system can't be compromised Thanks Marios _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

3 2

Cron & Crontab
by Ray Dillinger 12 Oct '01

12 Oct '01

As someone who runs linux on a laptop, I'm pretty firmly convinced that cron & crontab need to be rewritten and I'm likely to try my hand at it next year. The immediate problem, for cron & crontab on laptops, is that laptops are usually not running. My laptop is running only about two or three hours most days, so cron jobs, especially those scheduled for execution between midnight and morning, simply don't happen except when I *make* time for them to happen by leaving it running overnight. This keeps file indexes up-to-date, etc. So, we need two new kinds of things we can specify in crontabs: Those that can or should be done next time the machine is turned on provided they're not <time> late (such as mailing reminders), and those that should be done periodically where the period is measured in uptime rather than wall time. This would seem to necessitate changing the age-old crontab file format, and if I wind up doing that, I'll probably add support for truly periodic stuff as well (it's currently very hard to tell cron to do something once every eight days or once every three weeks, for example). However, any monkeying with cron & crontab has substantial security implications. Anybody who manages to edit another user's crontab can run jobs as that user. Anybody who can read the crontabs of daemons or other users can find out things about how and when certain things are done -- possibly discovering windows of vulnerability in the way logs get cycled, when automated security checks run, etc. Anybody who can kill the cron daemon can prevent logs from getting cycled or security checks from happening. I'd really like to see a record of all the security flaws that have ever been found in any version of cron, and how each was dealt with. I don't think such a thing exists, but bits and pieces of it must be here and there, and I think I ought to read them before I start messing with such a fundamental service. Bear

3 2

Fwd: education site cours
by jdd 12 Oct '01

12 Oct '01

---------- Message transmis ---------- Subject: education site cours Date: Fri, 12 Oct 2001 12:45:10 +0200 From: "Yoda" <christophe.vanhoutte(a)libertysurf.fr> To: "jdd" <jdanield(a)dodin.net> yoda wrote: Bonjour, Avez-vous connaissance de sites web ou l'on peut trouver des cours de maths je dois passer un concours bientot et j'ai besoin d'exercices pour m'entrainer. je recherche donc des exercices de math catégorie C: Le niveau est 5 eme voir en dessous, je dois passer d'abord ce concours vu que j'ai pas d'ancienneté (du moins pas encore assez )dans la fonction publique. fraction/pourcentage/ probleme divers etc. geometrie volume / surface. La mairie ou je bose est out pour le moment vu l'explosion azf. Si vous avez des infos merci. à samedi a+ yoda ------------------------------------------------------- -- <http://www.dodin.net> <mailto:jdanield@dodin.net> WHO'S THAT GUY ? Help me found it Russia & South america help needed http://www.dodin.net/serge/index.html

2 2

AW: AW: [suse-security] Doubts about "SuSE-FW-on-CD"
by Hirsch Wolfgang 12 Oct '01

12 Oct '01

> -----Ursprüngliche Nachricht----- > Von: Rainer Link [mailto:link@suse.de] > Gesendet: Freitag, 12. Oktober 2001 11:38 > An: suse-security(a)suse.de > Betreff: Re: AW: [suse-security] Doubts about "SuSE-FW-on-CD" > > > On Fri, 12 Oct 2001, Hirsch Wolfgang wrote: > > > > * Hirsch Wolfgang (hirsch(a)fwf.ac.at) [011011 02:54]: > > > > I also want to know, if there any possibilities to scan > for viruses. > > > > > > That's probably something that's better done on a mail server. > > Sure, but my box is a http-proxy too and three weeks ago, we had the > > nimda-virus on internal workstations . > > Well, a lot of tools for scanning at the SMTP level do exist (see > www.openantivirus.org for a product list). The only > open-source soultion I > know for squid is called "viralator" (with a small patch, it > can be used > for ftp-traffic to if squid works as ftp-proxy, too). viralator needs > squirm and, of course a virus scanner. It works, but don't expect it's > fast or really useable if several hunderts clients are > conencted to your > proxy. > > best regards, > Rainer Link > Do you know something about kasperksy anti-virus? We use it on M$-Boxes and it works fine. thx in advance Wolfgang Hirsch > -- > Rainer Link | SuSE - The Linux Experts > link(a)suse.de | Developer of A Mail Virus Scanner (amavis.org) > www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org) > > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com >

3 2

Firewall, how secure is it?
by Marios Marti 12 Oct '01

12 Oct '01

Hi I have just installed SuSE linux 7.1 default installation with office. I have done the online automatic update and all security patches have been applied. Also i have activated the personal firewall and i set it up to reject all incoming requests. I was wondering though whether is this enough or is there more to be done so that my system can't be compromised Thanks Marios _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

1 0