August 2001 - openSUSE Security - openSUSE Mailing Lists

Fwd: Re: [suse-security] sendmail
by phil 27 Aug '01

27 Aug '01

Na, I didn't BCC. But, I think they can read it now. ---------- Forwarded Message ---------- Subject: Re: [suse-security] sendmail Date: Sun, 26 Aug 2001 23:13:48 -0500 From: Avi Schwartz <avi(a)CFFtechnologies.com> To: phil <phil(a)osbtown.com> Well, unless you BCCed the list, only you and me read this :-) Avi --On Sunday, August 26, 2001 08:59:23 PM -0700 phil <phil(a)osbtown.com> wrote: > Thanks again. > > Just to be fully clear about this to others who may read this thread, I > did have to update postfix to postfix-20010228pl03-5.i386.rpm > which was 1894387 bytes. > > So if we got that version of postfix and that "sendmail symlink" thingy > called sendmail then we are cool for now. (As of whatever day this is.) > > btw - I only noticed it because of some perl scripts that deal with the > mail. > > I just wanted it to be clear for others. > > On Sunday 26 August 2001 08:14 pm, you wrote: >> No harm at all. Better safe then sorry ;-) >> >> Avi >> >> --On Sunday, August 26, 2001 08:09:16 PM -0700 phil <phil(a)osbtown.com> >> >> wrote: >> > Thanks Very much >> > >> > That is pretty much what I thought. Some kind of symlink. Just >> > checking though to be sure. No harm in that eh? >> > >> > On Sunday 26 August 2001 07:51 pm, you wrote: >> >> Type man sendmail (and assuming you don't have the real sendmail >> >> installed you will get: >> >> >> >> sendmail - Postfix to Sendmail compatibility interface >> >> >> >> Basically it is an interface allowing programs that expect sendmail to >> >> continue to be happy even when sendmail is not around. >> >> >> >> Avi -- Avi Schwartz avi(a)CFFtechnologies.com "I have to share the credit. I invented it, but Bill made it famous." - IBM engineer Dave Bradley describing the control-alt-delete reboot sequence -------------------------------------------------------

1 0

sendmail-tls
by Egan 27 Aug '01

27 Aug '01

Where is the SuSE 7.1 source RPM for update of sendmail-tls????? It's not on the FTP server, and the sendmail SRPM that is there does not have the same stuff that was in my original sendmail-tls SRPM. I've made my own patches to the source and I need the source RPM. Egan

1 0

RE: [suse-security] Getting information about a certain user's activity
by Andreas Achtzehn 26 Aug '01

26 Aug '01

J wrote: > What about VNC What do you mean by VNC? I know VNC as a way to get X programs on other clients running. But what I want is a dump of the screen of a user. Andreas

1 0

a few questions regarding SuSEfirewall(2)
by Florian Pressler 26 Aug '01

26 Aug '01

Hi, there are a few things unclear with the configuration of SuSEfirewall. I just upgraded to SuSEfirewall2. There is the variable FW_SERVICE_SAMBA. I use Samba, but I am in doubt if I should set it to yes, because I don't know exactly what it does - is it just opening the port 137, 138, 139 TCP/UDP? And if yes, on which devices? I think this would not be very secure, so I would rather open the ports manually. But if it would be that easy, why does FW_SERVICE_SAMBA exist anyway? I don't quite get the meaning of it. Same with FW_SERVICE_DNS. And second, why should one want to set FW_ALLOW_INCOMING_HIGHPORTS(TCP|UDP) to yes? I wonder why the default setting is yes, I think this is quite a security-hole. The last question concerns FW_ALLOW_PING_EXT="no". Does this setting mean, that someone in the internet is not able to ping my machine? Sorry for the question, the doc/comments are not sufficient for me). regards Florian Pressler _________________________________________________________________ Downloaden Sie MSN Explorer kostenlos unter http://explorer.msn.de/intl.asp

1 0

TEST
by Fluffy Bananachunks 25 Aug '01

25 Aug '01

TEST

1 0

Re: [suse-security] SuSEfirewall-4.9
by myLinux 24 Aug '01

24 Aug '01

Am Freitag, 24. August 2001 19:55 schrieben Sie: > Am Freitag, 24. August 2001 23:47 schrieben Sie: > > smtp/pop3. I think its a fault in section 9 of firewall.rc.config but I > > just can't fix it. The logscript reads > > the logscript show denied packages to port 53 - nameserver run there. That`s it! Thanks! It works now, although I have opened too much - but I think I'll get the rest on my own.... Andi -- It's not a bug - it's a feature!

1 0

SuSEfirewall-4.9
by myLinux 24 Aug '01

24 Aug '01

Hi seclist; I'm running Marcs SuSEfirewall 4.9 on Kernel 2.2.16 - and since my last reinstall I can't get it up again. It's stupid, I know, since I had it once; but I have the choice: a firewall which is up *OR* eMail via smtp/pop3. I think its a fault in section 9 of firewall.rc.config but I just can't fix it. The logscript reads Aug 24 21:40:38 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 62.96.128.66:53 62.27.129.207:1024 L=280 S=0x00 I=8915 F=0x0000 T=53 (#37) Aug 24 21:40:38 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.16.22:53 62.27.129.207:1024 L=280 S=0x00 I=20517 F=0x0000 T=55 (#37) Aug 24 21:40:38 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.127.225:53 62.27.129.207:1024 L=280 S=0x00 I=31245 F=0x0000 T=56 (#37) Aug 24 21:40:39 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.16.22:53 62.27.129.207:1024 L=280 S=0x00 I=20562 F=0x0000 T=55 (#37) Aug 24 21:40:39 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.127.225:53 62.27.129.207:1024 L=280 S=0x00 I=31277 F=0x0000 T=56 (#37) Aug 24 21:40:41 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 62.96.128.66:53 62.27.129.207:1024 L=280 S=0x00 I=9003 F=0x0000 T=53 (#37) Aug 24 21:40:42 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.16.22:53 62.27.129.207:1024 L=280 S=0x00 I=20795 F=0x0000 T=55 (#37) Aug 24 21:40:44 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.127.225:53 62.27.129.207:1024 L=280 S=0x00 I=31387 F=0x0000 T=56 (#37) Aug 24 21:40:45 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 62.96.128.66:53 62.27.129.207:1024 L=280 S=0x00 I=9218 F=0x0000 T=53 (#37) Aug 24 21:40:47 Lummerland kernel: Packet log: input DENY ppp0 PROTO=17 212.255.16.22:53 62.27.129.207:1024 L=280 S=0x00 I=21055 F=0x0000 T=55 (#37) I'm shure most of you can help me with that - thanks in advance!!! Andi -- It's not a bug - it's a feature!

2 1

[OT] - 1700+ "Majordomo results: Re: Confirmation for subscribe suse-mult" =( ???
by Fluffy Bananachunks 24 Aug '01

24 Aug '01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry for off topic - did anyone else get 'flooded' in any way shape or form earlier today? I have about 1700+ emails with the above subject - and I don't know why? I've never had something like that happen to me before, and was wondering if there was something that I did that might have caused it, what I could have done to curb it once it happended (instead of bouncing them back thus causing me to be 'spamblocked' by my ISP ;P ) et al... I mean, what was sent to me was from suse - it was like it was stuck in a really bad loop or something... Can someone point me to the way of enlightenment on this? George -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE7hqJuo2oOGEnz8fYRAlC9AKCHBaopnVg0C/D+pCphrpFcUzLzugCgs2it r9pT64nAVWHb/FpTaE69NWY= =PeXH -----END PGP SIGNATURE-----

1 0

AW: [suse-security] Newbie-Frage: Gesamtgröße immer gleich groß nach dem booten ?
by Peer Stefan 24 Aug '01

24 Aug '01

>What about the information contained in the headers ? I know I send out >X-mailer and X-AntiVir "product endorsements", and you can always look at >the www site on the domain name - in my case a commercial site. Could this >be called an advertisment by such laws? > >Just 2 cents. > >Maf. sure, and, did you think of e-mail addresses? you can always take the domain and put a www in front of it and ... bingo, 99 times out of 100 you'll get a web-server. this thread has nothing to do with security anymore and therefore does not belong here. someone already mentioned spam, where the whole body of a mail contains advertisement, not any remark in a footer or header. please discuss these matters elsewhere, so it becomes a SEP. Stefan Peer

4 3

Newbie-Frage: Gesamtgröße immer gleich groß nach dem booten ?
by Beck Marcel 24 Aug '01

24 Aug '01

hallo zusammen, ist ein suse linux (6.2) system direkt nach dem booten von der größe aller zusammen gezählten dateien oder deren anzahl immer gleich ? problem: ich möchte einfach überwachen, ob sich an meinem system nichts geändert hat (hacker) ohne progs einzusetzen (tripwire...) deshalb möchte ich nach dem booten einfach alle meine dateien zählen lassen und wenn sie gleich groß und viel sind als am tag zuvor habe ich einigermassen die gewissheit das alles ok ist. kann mir das einer beantworten ? Mit freundlichen Grüßen, M. Beck Marcel Beck IT-Abteilung Steca GmbH Mammostraße 1 87700 Memmingen Fon: 08331 8558 769 Fax: 08331 8558 11 Mail: marcel.beck(a)steca.de Web: www.steca.de

7 9