May 2001 - openSUSE Security - openSUSE Mailing Lists

SuSEfirewall and Kernel 2.4.0
by Benjamin Grogg 29 May '01

29 May '01

Hi folks I read that SuSEfirewall on SuSE 7.1 (Kernel 2.4.0 (Standard)) is not supported? Is there any script who supported iptables? Or I have to recompile the 2.4.0 Kernel with ipchains support? Thanks Benny

3 2

IP-alias
by Jussi Jääskeläinen 29 May '01

29 May '01

Hi! I'm not sure is this right area for next question but.. I have defined: ifconfig eth0 10.113.1.211 # main address ifconfig eth0:0 10.113.1.210 #alias address so normaly all outgoing trafic have that .211 as source address. Question is.. Is it possible (when it is needed) to open connection to outside so that source address is .210 (alias-address)... Without changing eth0 address.. -- Jussi Jääskeläinen Email: jussi.jaaskelainen(a)audioriders.fi Audio Riders Oy Tel: +358-9-276 6820 direct: +358-9-276 68212 Järvihaantie 4 Mobile: +358-40-554 3689 FIN-01800 KLAUKKALA Fax: +358-9-879 8045 FINLAND WWW: http://www.audioriders.fi

1 0

Antwort: RE: [suse-security] Antwort: [suse-security] configuring firewalls with iptables
by Stefan_Walther＠gehag-dsk.de 29 May '01

29 May '01

Hi Matt, hi Pupeno I haven't disabled SuSEfirewall. I haven't installed it. I tried it a long time ago, but it doesn't work at my dsl-router. As I had to reinstall the Distribution (I switch from ISDN-dialup to DSL), I let SuSEfirewall untouched as rpm on the cd's. First I used IPCHAINS because ISDN doesn't want to work with kernel 2.4.x. As I get DSL I switch from IPCHAINS to IPTABLES. First I had to reconfigure the firewall at my firm, then at home. MfG. Stefan Walther stefan_walther(a)gehag-dsk.de dienst.: +4930/89786448 Funk: +49172/3943961

1 0

PHP, mod_perl, Apache ???
by Bill Jones 29 May '01

29 May '01

Btw: I do not know who the original poster was, but this was recently seen during my studies concerning using both OpenSSL and Apache (SSL/443) on a SuSE 7.1 Ultrasparc (2.4.2) server: http://www.faqts.com/knowledge_base/view.phtml/aid/8223/fid/30 Please forward to original poster if anyone here remembers who. HTH; -Sneex- :] Please see: http://cis4dl.sourceforge.net/ and/or http://sourceforge.net/docman/display_doc.php?docid=4818&group _id=26707 ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

Fwd: RE: [suse-security] Orginal firewall.rc.config file ?
by Faessen-Goden Jean-Paul en Rowena 29 May '01

29 May '01

---------- Forwarded Message ---------- Subject: RE: [suse-security] Orginal firewall.rc.config file ? Date: Sun, 27 May 2001 11:35:06 +0100 From: "Matt" <matt(a)import-it.co.uk> Coul I use http://www.linux-firewall-tools.com/cgi-bin/firewall.cgi Would the config there be ok and does SuSE work on the same process ? Regards Matt -----Original Message----- From: Matt [mailto:matt@import-it.co.uk] Sent: 27 May 2001 10:30 To: suse-security(a)suse.com Subject: [suse-security] Orginal firewall.rc.config file ? Hi, Now that I am having all these problems with firewalls etc and maybe messed up my orginal firewall.rc.config file does any one have an orginal one that I could use as a template please ? Regards Matt -----Original Message----- From: Matt [mailto:matt@import-it.co.uk] Sent: 27 May 2001 02:34 To: suse-security(a)suse.com Subject: [suse-security] SuSEfirewall configuration help SuSEfirewall config... Please could someone send me an example of one with the following settings enabled please.. I use SAMBA, telnet, rlogin, ftp and vnc, ping, traceroute on 3 my machines 192.168.0.2 (SuSE 7.0, 192.168.0.3 (SuSE 6.4) and use my win2000 box to work on (192.168.0.1). these are all on eth0 with win2000 used to dialup on. I would like to set up 192.168.0.2 as my gateway/router but at the moment I have configured my win2000 box. However whilst setting up SuSEfirewall my system hung on the firewall first run initialisation. I can neither login or do anything on reboot. I could login in single user mode but I don't know how to do that ant directions ? Regards Matt --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com ------------------------------------------------------- Matt; Never change your system without taking note of what you did. Look into the SuSE Handbook,provided with SuSE professional. The standard configuration is there. Jean-Paul Faessen

1 0

Re: [Re: [suse-security] [Re: Auth]]
by Bill Jones 29 May '01

29 May '01

Hmmm... Don't know about AUTH, but I know that the file /etc/mail/relay-domains should be empty and the file /etc/mail/access should say something like: # Examples: # #cyberspammer.com ERROR:"550 We don't accept mail from spammers" #sendmail.org OK #192.168 RELAY # # Extensions: # # See /usr/share/sendmail/README for the FEATURE `blacklist_recipients'. # # Default for loop back is RELAY 127 RELAY What does your's say??? -Sneex- :] Sp0oKeR <spooker(a)bol.com.br> wrote: > Many times a day, people are using my mail server to do > spam. With auth e intend to stop this. ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

Auth
by Sp0oKeR 29 May '01

29 May '01

I'm doing problems with spam in my mail server. I'm using sendmail. Trying to resolve this problem, I will try sendmail auth. Does anybody can help? What program i need to use? Regards .... -- #=============================# # Rodrigo Ribeiro Montoro # # Network Services Center # # rodrigo(a)nscenter.com.br # # http://www.nscenter.com.br # # Sao Paulo - SP # #=============================#

1 0

[Re: Auth]
by Bill Jones 29 May '01

29 May '01

Sp0oKeR <spooker(a)bol.com.br> wrote: > I'm doing problems with spam in my mail server. I'm using sendmail. > Trying to resolve this problem, I will try sendmail auth. Does > anybody can help? What program i need to use? > > Regards .... Spam? Do you mean relaying or final delivery? ??? -Sneex- :] ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

Newbies, Lists, and helping ( Was: OT ... Rant :/ )
by Bill Jones 29 May '01

29 May '01

In Cyberspace, two entities spake - > The SuSE mailing list is by far the best I've found. I have > not experienced any real derogatory remarks or comments > from the Linux vets. As for the "what the experience user > won't see", I understand this also. > > Help yourself and others by contributing and not just consuming! I agree, and I apologize for the OT rant earlier. I myself should know better as I am IT professional with 22 yrs experience. I even teach Internet related technologies at a local community college and I am always warning my students about how they should spent more time trying to find the answers themselves BEFORE posting what may amount to FAQs to any list... However, as hard as it may be to believe even I am human and sometimes even I find that I just want it to work :) I guess 22 yrs hasn't turned me into a machine yet, Thank GOD! Best; -Sneex- :] ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1

1 0

self compiled kernel 2.2.19 problems
by Frederik Ferner 28 May '01

28 May '01

Hi All, some time ago I downloaded lx_sus22-2.2.19.SuSE-25.i386.rpm and tried to install it to compile it myself. Everything work fine except that the kernel sometimes freezes my computer completely, ie I have to reset it. There is nothing in the lockfiles, but then it might not be written to the disc :-( This happens on my SuSE 6.3 with all security related updates. I tried to run a precompiled kernel from SuSE (k_i386-2.2.19-12.i386.rpm) and didn't have any problems there so far. But I don't want all the stuff that is in there (like raid, lvm...). I'd really like to have my kernel as small as possible for the machine sitting directly on the web. Any hints how I could get around this problem? Sysrq doesn't seem to work on my computer. At least I haven't managed to get any results with sysrq. Bye, Frederik

2 1