July 2001 - openSUSE Security - openSUSE Mailing Lists

router and firewall
by kaldewey 06 Jul '01

06 Jul '01

Hi :) is it possible to build a firewall and a router in one linux box ? Frank

2 1

raw devices
by Michael.Semling＠swisscom.com 06 Jul '01

06 Jul '01

Hi group, when I do "netstat -anp" I see also two raw devices: Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name raw 0 0 0.0.0.0:1 0.0.0.0:* 7 - raw 0 0 0.0.0.0:6 0.0.0.0:* 7 - Port 1 is a Port Service Multiplexer. What is the port 6? What means state 7? How can I find out, which socket uses this raw device. Thank you. Michael

2 1

RE: [suse-security] raw devices
by Michael.Semling＠swisscom.com 06 Jul '01

06 Jul '01

Hi all, I switched off as much as I can. PS shows: kswapd mdrecoveryd sshd syslogd cron mingetty bash regards, Michael -----Original Message----- From: Appeldorn [mailto:appeldorn@codixx.de] Sent: Freitag, 6. Juli 2001 09:51 To: Semling Michael, CT-SSM Subject: RE: [suse-security] raw devices May it be that you run tools that uses raw sockets as iptraf. After running you can see thoose bindings with netstat! Michael -----Original Message----- From: Michael.Semling(a)swisscom.com [mailto:Michael.Semling@swisscom.com] Sent: Friday, July 06, 2001 9:36 AM To: suse-security(a)suse.de Subject: [suse-security] raw devices Hi group, when I do "netstat -anp" I see also two raw devices: Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name raw 0 0 0.0.0.0:1 0.0.0.0:* 7 - raw 0 0 0.0.0.0:6 0.0.0.0:* 7 - Port 1 is a Port Service Multiplexer. What is the port 6? What means state 7? How can I find out, which socket uses this raw device. Thank you. Michael -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

Re: [suse-security] router and firewall
by Sven Michels 06 Jul '01

06 Jul '01

> Hi :) > is it possible to build a firewall and a router in one linux box ? most of the time it is all in one :) You've a routing linuxbox with maybe 3 interfaces, so you setup the firewall there to restrict all connections from these 3 interfaces. Greets, Sven

1 0

Where can I find SuSEfirewall2?
by Oliver Kant 06 Jul '01

06 Jul '01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, maybe I've got blind... I'm using SuSE7.2 and have some little probs with SuSEfirewall (Realplay doesn't work and so on...). That's why I wanted to use SuSEfirewall2, but I can't find it... where is it??? Thanks in advance! Oliver - -- CNE for NetWare 5 - MCP for Windows NT Server 4.0 (sorry...) Registered Linux User #181546 Orchideenweg 10 - 53123 Bonn phone: +49 228 641062 - cellular: +49 170 2056664 mailto:oliver.kant@gmx.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE7QqFpNFkNgmTcca8RApAtAJ4mAkSIfxPDpgNMcJviB1WP2FdiAQCeLWeI hIviNhQbypVZyjePYF0vqcc= =73ei -----END PGP SIGNATURE-----

3 3

LinuxTag Saturday
by Roman Drahtmueller 05 Jul '01

05 Jul '01

Hi folks, so far, 10 persons meet at the SuSE booth (left corner) at the Linux Tag in Stuttgart on Saturday at 12:30 to go to some fancy Italian restaurant to have a yummy pizza. If there are more people who want to come, please let Thorsten Wolf <t.wolf(a)webstudio.de> know how many people you will be. He was kind enough to care for the reservations. 'Till then! Thanks, Roman. -- - - | Roman Drahtmüller <draht(a)suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -

1 0

Problem with FW_FORWARD_TCP
by Thorsten Marquardt 05 Jul '01

05 Jul '01

I need to connect from one specific host to server inside my internal network. The internal network is 192.168.1.0/24 (192.168.1.1 is the server). The gateway is a linunx (Kernel 2.2.18)-Box. From the masqueraded Network I have full access to the outside world. So I set FW_FORWARD_TCP="w.x.y.z/32,192.168.1.1,22" and FW_FORWARD_MASQ_TCP="w.x.y.z/32,192.168.1.1,22" There is a host route to 192.168.1.1 set in w.x.y.z's routingtable. If I run: ssh 192.168.1.1 I get: Jul 5 12:29:53 mail kernel: Packet log: forward ACCEPT eth1 PROTO=6 \ w.x.y.z:1023 192.168.1.1:22 L=60 S=0x00 I=39225 F=0x4000 T=63 SYN (#4) in my gateways /var/log/messages . The is no entry in /var/log/messages on 192.168.1.1 and w.x.y.z is trying forever :( What's missing? Thanks in advance -- ------------------------------------------------------------------- bye bye (c) by Thom | Thorsten Marquardt | EMail: THOM(a)kaupp.chemie.uni-oldenburg.de | Member of the pzt project. | http://kaupp.chemie.uni-oldenburg.de/pzt -------------------------------------------------------------------

1 0

test
by Homer J Simpson 05 Jul '01

05 Jul '01

testmail

1 0

Someone using qmail+vpopmail+Amavis ?
by Maarten van den Berg 05 Jul '01

05 Jul '01

See subject. We're trying to implement amavis in our qmail setup, but it works only up to some degree; real local users (recipients) get a mail warning them of a virus being sent to them, but virtual users' addresses get re-written to something weird, thus receive no warnings. If the addressee is "user(a)subdomain.domain", it gets rewritten to "subdomain.domain-user(a)subdomain.domain", or somtimes even "subdomain.domain-subdomain.domain-user(a)subdomain.domain" This only happens with virtual domains/users. We're now using the shellscript-version of Amavis, not amavis-perl. Partly because of the dependancies of the perl-version, and partly because it is not obvious by reading the docs what extra benefit the new amavis-perl offers... If anyone has such a setup working, please give us some pointers. A search on google sadly returned nothing appropriate... TIA, Maarten -- Maarten J H van den Berg van Boetzelaer van Bemmel, informatie- en netwerktechnologie http://vbvb.nl T 020-4233288 F 020-4233286 G 06-51994273

3 2

Re: [suse-security] SuSEfirewall 2.1 and NetMeeting 3.01
by michael.ryan＠storm.ie 03 Jul '01

03 Jul '01

Hi Torsten, tnx for the reply but I'm still having no success :( ns1:/ # /usr/sbin/ipmasqadm portfw -l prot localaddr rediraddr lport rport pcnt pref TCP ns1.storm.ie viking2.storm.ie ldap ldap 7 10 TCP ns1.storm.ie viking2.storm.ie ulp ulp 7 10 TCP ns1.storm.ie viking2.storm.ie msiccp msiccp 10 10 TCP ns1.storm.ie viking2.storm.ie imtc-mcs imtc-mcs 7 10 TCP ns1.storm.ie viking2.storm.ie h323hostcall h323hostcall 10 10 I have tried connecting to ns1.storm.ie from outside using NetMeeting 3.01 but it immediately returns 'The other party did not accept your call'. I have also tried this with SuSEfirewall down - made no difference. Any ideas what I might be doing wrong? MR Torsten Mueller To: michael.ryan(a)storm.ie <torsten@arch cc: suse-security(a)suse.com esoft.de> Subject: Re: [suse-security] SuSEfirewall 2.1 and NetMeeting 3.01 06/29/2001 10:53 PM Hey Michael, i use a isdn dialup line to connect to the internet. I changed the /etc/ip-up script and added the portforwarding for netmeeting (and icq). This is the netmeeting part: #netmeeting anrufe von draussen /usr/sbin/ipmasqadm portfw -f /usr/sbin/ipmasqadm portfw -a -P tcp -L $LOCALIP 1720 -R 192.168.100.5 1720 /usr/sbin/ipmasqadm portfw -a -P tcp -L $LOCALIP -R 192.168.100.5 1503 echo "setze portforwarding fuer netmeeting eingehende anrufe" The problem with this config is, that you can only use 1 host in the intranet to receive the netmeeting calls from outside the lan. Another solution would be to use a gatekeeper, but i havn't tested this. Hope this helps. Greetings Torsten michael.ryan(a)storm.ie schrieb: > > Ok, I have added the ip_masq_h323.o module and re-started masquerading to > load the module. > SuSEfirewall is still in place as before. I can now use NetMeeting 3.01 on > a PC to connect to a hosted meeting outside the firewall. > > My question now is how do I allow external NetMeeting clients connect to a > NetMeeting host on our internal/private network. > Any help much appreciated :) > > MR > Hey, > > i use a setup with a netmeeting kernel module and > portforwarding. > > Look at the masquearding howto, there's the lnk to the > module. > > Greetings Torsten > > michael.ryan(a)storm.ie schrieb: > > > > Trying to allow external sources connect to a machine on our private > > network which is acting as a NetMeeting host. > > Gateway is a SuSE 6.4 box, ip masquerading up and running SuSE firewall > 2.1 > > Anyone done this before? any advice on how this can be done securely? > > > > tnx in advance, > > > > MR -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

3 3