March 2001 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] Dynamic routgin
by Björn Engels 13 Mar '01

13 Mar '01

Give this a try (I'm not good in scripting, but it works for me): #!/bin/bash GW1="192.168.10.4" GW2="19.18.31.18" TEST=$GW1 echo "Setting default gw to $GW1" route add default gw $GW1 route -n echo Starting gateway test ... while true ; do echo "GW1: $GW1, GW2: $GW2, testing $TEST" ping $TEST -c 1 > /dev/null 2>&1 # $? returns 1 if host if [ $? = 1 ] ; then echo Gateway is down, resetting routes ... route del default gw $GW1 route add default gw $GW2 route -n if [ $TEST=$GW1 ] ; then TEST=$GW2 else TEST=$GW1 fi echo "Now testing $TEST" fi done

3 2

who are logged in ?
by omicron 12 Mar '01

12 Mar '01

hi all w, who, finger commands tell me who are all logged in _and_ alloted tty's. if a person uses ssh -T , or rsh, then i cannot find out on the fly without examining the logs. same goes for ftp too. If i want to watch the users logged in then , there really are few options to me ... closely examine the log files ( i put "*.* /dev/tty12" in my syslog.conf), checking the ps tree often but they dont help much. In short, i want the wtmp record to be written if there is logins in the below given categories. i think it might be to do with pam, but i really dont know much of pam usage, and i'm at a loss. So is there any single tool which tells the logins in the foll protocols.. 1> telnet / ssh logins with pty allocation as in normal who 2> ssh, rsh logins without pty allocation 3> ftp , preferably with the files being transferred 4> pop3 or is this too much to ask ? i dont mind if such a tool is su-only ,or requires priv mode. anything will do as long as i get the above ... regards omicron -- ****** omicron Mail:omicron@omicron.dyndns.org (Sridhar N) www:omicron.symonds.net pubkeys:omicron.symonds.net/pubkeys C O G I T O E R G O S U M ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

5 4

Personal Firwall vs. SuSEfirewall
by Ernst Koch 12 Mar '01

12 Mar '01

Do I need both Personal Firewall and SuSEfirewall or is Personal Firewall enough for a single box only connected to the internet? Regards Ernst -- Sent through GMX FreeMail - http://www.gmx.net

2 1

Why apache-1.3.17 ... leads to probs with .htaccess
by Gerd Aschemann 12 Mar '01

12 Mar '01

What is the reason to upgrade to Apache-1.3.17 with SuSE 7.0? I have been looking into the page with current fixes for SuSE 7.0 http://www.suse.de/de/support/download/updates/70_i386.html recently and found that Apache needs to be fixed. So I applied the recommended rpms (besides Apache some of the modules: - mod_php4-4.0.4pl1-19 - mod_perl-1.24-74 - modcontr-1.0.7-154 ) and all went ok. But today one of my users claimed that pages with .htaccess are no longer accessible. I investigated the problem and found that the respective Apache child process aborts with a segmentation fault ... Any ideas? I could not find a reason why to upgrade to 1.3.17 (I do not read the Apache mailing lists). Regards, -- Gerd Aschemann --- Veröffentlichen heißt Verändern (Carmen Thomas)

4 6

compartment and bind8
by Björn Engels 11 Mar '01

11 Mar '01

Hi ! I am running the latest bind8 rpm package from SuSE and I want to put it into a chrooted environment with Marc's "compartment". I am wondering if it is safer if I run bind as user root, but chrooted, or if I run it normally, but as user named. Removing the caps option and adding --user named --group named does not work, because the server isn't allowed to bind to ports < 1024. So what to do ? Björn

4 3

Dynamic routgin
by SUSE Mailing list 11 Mar '01

11 Mar '01

Does anyone know how to config route tables for dynamic routing. I would like to set 2 default gateways and if nobmer 1 is unavalible, system would use second one. Thanx, Tic Pavlin Neosystems Slovenia

2 1

Mail-Attachments
by Christian Erpelding 11 Mar '01

11 Mar '01

Hi there, I want to filter out some mail-attachments on our mailserver for security reasons. Any attachments ending with .vbs, .exe, .com and so on should be bounced when they come from a remote host and are addressed to a local user. We use SuSE 7.1 (Kernel 2.2.18), Sendmail 8.11 and Amavis 0.1.2 with avplinux as virusscanner. The incoming mails are fetched by fetchmail using pop3 as protocol. (Fetchmail is running as root and fetches all incoming mails for our domain) Any ideas how to create such filter rules? Thanks in advance, Christian --- MfG, Chr. Erpelding ce-data datentechnik erpelding(a)ce-data.de

4 3

firewall rule for talk
by Marco Ahrendt 09 Mar '01

09 Mar '01

hi list, is it possible to accept the "talk" application in any way? I tried to -j ACCEPT the udp port but talk isn't really using these ports for chatting. only the first packets are over udp 518 for example. then the client (remote) sends a new packet (syn) with totally different ports. does anyone has a solve? marco -- Marco Ahrendt phone : +49-341-98-474-0 adconsys AG fax : +49-341-98-474-59 Karl-Liebknecht-Str. 19 email : marco.ahrendt(a)adconsys.de 04107 Leipzig/Germany gnupg key at www.aktex.net/marco_work.asc

2 4

AW: [suse-security] Mail-Attachments
by Payreder Roman 09 Mar '01

09 Mar '01

Hi, i just use Postfix and the procmail-security script (html-trap.procmail) which can rename such files, so that the arent executable anymore. It works fine for me. Besides, it also filters rename the javascript,... tags in HTML Mails: http://www.impsec.org/email-tools/procmail-security.html br, Roman

1 0

Secumod
by Richard 09 Mar '01

09 Mar '01

Dear All Just out of curiosity I've installed secumod 1.6a from the 7.0 RPMs under sec1 on the CDs. The docs tell me to do 'insmod secumod.o' to start secumod but when I do that I get "secumod.o: No such file or directory" printing out on the screen on my SuSE 7.0 system. I can also see that there's a list of options such as "insmod secumod.o [OPTION]=[OPTION]". They don't work either. I think there might be a newer version but the problem is the lack of documents to give more detail about what to do with this package. Marc's done some really nice work with this but it's hard to figure it out without some help. Thanks Richard

6 12