January 2002 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] SSH
by Ben Rosenberg 17 Jan '02

17 Jan '02

I was under the impression that anything below 3.0p1 or the SuSE patched 2.9.9 RPM have this vulnerability. I could be wrong, but this doesn't stop you from using the new SuSE rpm or doing what I did..compiling 3.0.2p1 which works quite well. * JW (jw(a)centraltexasit.com) [020116 10:38]: ->Can anyone tell me if openssh-2.5.2 is vulnerable the crc32 compensation ->attack? -----=====-----=====-----=====-----=====----- Ben Rosenberg mailto:ben@whack.org -----=====-----=====-----=====-----=====----- I'm out of my mind, but feel free to leave a message...

2 2

Re: [suse-security] I have been hacked, what to do now?
by Leo Rivas 17 Jan '02

17 Jan '02

Hi Markus Checked that files but found nothing wrong yet (used vi and mcedit), what may I expect to find there?... according to the log i sent, should y suppose the 'hacker' made an enter or are those failed tries? Thanks Leo Markus Noch wrote: > hi, > > check ps,netstat,login and pstree . the one who hacked your machine replaces them to hide his intrusion. > further search for tools like dsniff. dsniff is a rootkit. > open this one`s ( ps,netstat,login and pstree ) with an asci editor. in some cases you can > see plain text. > > greetz and fun, > -- > ----------------------------------------------------- > Markus Noch > bsk IT Systemhaus GmbH > .-. Tel.: +49 6241 / 94650-21 > /v\ Klosterstrasse 23 > // \\ 67547 Worms > /( )\ > ^^-^^ > _ _ _ _ ___ ____ > | |__ ___| | __ | \ | |/ _ \ / ___| > | '_ \/ __| |/ /____| \| | | | | | > | |_) \__ \ <_____| |\ | |_| | |___ > |_.__/|___/_|\_\ |_| \_|\___/ \____| > Network-Operation-Centre POP Worms > noc(a)bsk-info.de > ---Home is where ever those login prompts shine !---- > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

3 2

firewall
by Omppu 17 Jan '02

17 Jan '02

where can i view the set of rules that susefirewall2 creates??

2 1

Re: [suse-security] I have been hacked, what to do now?
by Leo Rivas 17 Jan '02

17 Jan '02

Hi The machine is behind a firewall, but masqueraded some ports (21, 22, 80) to the outside, the logcheck is configured to check the /var/log/allmessages periodically and sends a mail to root about the recent changes. Leo Patrick Grantham wrote: > What log file did this come out of? Was the machine behind a firewall or > router with simple port blocking? > ----- Original Message ----- > From: "Leo Rivas" <leorivas(a)yahoo.com> > To: "Suse Security" <suse-security(a)suse.com> > Sent: Thursday, January 17, 2002 10:03 AM > Subject: [suse-security] I have been hacked, what to do now? > > > Hi > > Someone hacked on my suse6.3 machine (old ssh1 was on), what i need to > > know is what to check, i want to use this chance to learn about how to > > find a possible trojan or something else (obviously, y already rescued > > data and im ready to reinstall to suse 7.2). The machine wasnt critical, > > > > nor important (just a 'toy' with ftp, ssh, apache+phpnuke+mysql), now i > > can make any tests to learn from this. > > > > This machine was named 'batiwater' and had Psionic's logcheck, this is > > the mail it sent me: > > > > ---mail--- > > > > Active System Attack Alerts > > =-=-=-=-=-=-=-=-=-=-=-=-=-= > > Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:16:19 batiwater sshd[2571]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:16:45 batiwater sshd[2572]: fatal: Local: crc32 compensation > > attack: network attack detected > > > > ...many more like this... > > > > Jan 12 05:24:25 batiwater sshd[2595]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation > > attack: network attack detected > > > > Security Violations > > =-=-=-=-=-=-=-=-=-= > > Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation > > attack: network attack detected > > > > ...more like this... > > > > Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation > > attack: network attack detected > > > > Unusual System Events > > =-=-=-=-=-=-=-=-=-=-= > > Jan 12 05:00:04 batiwater sshd[2465]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:00:25 batiwater sshd[2507]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:01:05 batiwater sshd[2509]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:16:19 batiwater sshd[2571]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:16:45 batiwater sshd[2572]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:17:10 batiwater sshd[2573]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:19:02 batiwater sshd[2578]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:20:22 batiwater sshd[2582]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:21:46 batiwater sshd[2587]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:22:26 batiwater sshd[2589]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:23:06 batiwater sshd[2591]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:24:25 batiwater sshd[2595]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation > > attack: network attack detected > > Jan 12 05:00:04 batiwater sshd[2465]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:00:15 batiwater sshd[2507]: connect from 209.147.160.67 > > Jan 12 05:00:15 batiwater sshd[2507]: log: Connection from > > 209.147.160.67 port 1385 > > Jan 12 05:00:20 batiwater sshd[2507]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:00:25 batiwater sshd[2507]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:00:35 batiwater sshd[2508]: connect from 209.147.160.67 > > Jan 12 05:00:35 batiwater sshd[2508]: log: Connection from > > 209.147.160.67 port 1386 > > Jan 12 05:00:40 batiwater sshd[2508]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:00:54 batiwater sshd[2509]: connect from 209.147.160.67 > > Jan 12 05:00:54 batiwater sshd[2509]: log: Connection from > > 209.147.160.67 port 1387 > > Jan 12 05:00:59 batiwater sshd[2509]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:01:05 batiwater sshd[2509]: fatal: Local: Corrupted check > > bytes on input. > > Jan 12 05:01:15 batiwater sshd[2510]: connect from 209.147.160.67 > > Jan 12 05:01:15 batiwater sshd[2510]: log: Connection from > > 209.147.160.67 port 1388 > > Jan 12 05:01:20 batiwater sshd[2510]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:01:35 batiwater sshd[2511]: connect from 209.147.160.67 > > Jan 12 05:01:35 batiwater sshd[2511]: log: Connection from > > 209.147.160.67 port 1389 > > Jan 12 05:01:40 batiwater sshd[2511]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:01:55 batiwater sshd[2512]: connect from 209.147.160.67 > > Jan 12 05:01:55 batiwater sshd[2512]: log: Connection from > > 209.147.160.67 port 1390 > > Jan 12 05:02:00 batiwater sshd[2512]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:02:14 batiwater sshd[2513]: connect from 209.147.160.67 > > Jan 12 05:02:14 batiwater sshd[2513]: log: Connection from > > 209.147.160.67 port 1391 > > Jan 12 05:02:19 batiwater sshd[2513]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:02:34 batiwater sshd[2514]: connect from 209.147.160.67 > > Jan 12 05:02:34 batiwater sshd[2514]: log: Connection from > > 209.147.160.67 port 1392 > > Jan 12 05:02:39 batiwater sshd[2514]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:02:54 batiwater sshd[2515]: connect from 209.147.160.67 > > Jan 12 05:02:54 batiwater sshd[2515]: log: Connection from > > 209.147.160.67 port 1393 > > Jan 12 05:02:59 batiwater sshd[2515]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:03:14 batiwater sshd[2516]: connect from 209.147.160.67 > > Jan 12 05:03:14 batiwater sshd[2516]: log: Connection from > > 209.147.160.67 port 1394 > > Jan 12 05:03:19 batiwater sshd[2516]: log: Could not reverse map address > > > > 209.147.160.67. > > > > ...more like this... > > > > > > Jan 12 05:28:06 batiwater sshd[2606]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:28:21 batiwater sshd[2607]: connect from 209.147.160.67 > > Jan 12 05:28:21 batiwater sshd[2607]: log: Connection from > > 209.147.160.67 port 1468 > > Jan 12 05:28:26 batiwater sshd[2607]: log: Could not reverse map address > > > > 209.147.160.67. > > Jan 12 05:28:26 batiwater sshd[2607]: fatal: Did not receive ident > > string. > > Jan 12 05:50:33 batiwater sshd[1034]: log: Generating new 768 bit RSA > > key. > > Jan 12 05:50:34 batiwater sshd[1034]: log: RSA key generation complete. > > > > ---/mail--- > > > > Sorry about what a long message, my first oppinion is that this guy used > > > > a software to hack in, and if he made it, wasnt smart enough to delete > > the traces, you can see his IP there, maybe a script kiddie?. What else > > may i expect from this? > > > > Thanks in advance > > Leo _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

I have been hacked, what to do now?
by Leo Rivas 17 Jan '02

17 Jan '02

Hi Someone hacked on my suse6.3 machine (old ssh1 was on), what i need to know is what to check, i want to use this chance to learn about how to find a possible trojan or something else (obviously, y already rescued data and im ready to reinstall to suse 7.2). The machine wasnt critical, nor important (just a 'toy' with ftp, ssh, apache+phpnuke+mysql), now i can make any tests to learn from this. This machine was named 'batiwater' and had Psionic's logcheck, this is the mail it sent me: ---mail--- Active System Attack Alerts =-=-=-=-=-=-=-=-=-=-=-=-=-= Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:16:19 batiwater sshd[2571]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:16:45 batiwater sshd[2572]: fatal: Local: crc32 compensation attack: network attack detected ...many more like this... Jan 12 05:24:25 batiwater sshd[2595]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation attack: network attack detected Security Violations =-=-=-=-=-=-=-=-=-= Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation attack: network attack detected ...more like this... Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation attack: network attack detected Unusual System Events =-=-=-=-=-=-=-=-=-=-= Jan 12 05:00:04 batiwater sshd[2465]: fatal: Local: Corrupted check bytes on input. Jan 12 05:00:25 batiwater sshd[2507]: fatal: Local: Corrupted check bytes on input. Jan 12 05:01:05 batiwater sshd[2509]: fatal: Local: Corrupted check bytes on input. Jan 12 05:10:22 batiwater sshd[2537]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:13:46 batiwater sshd[2545]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:15:54 batiwater sshd[2570]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:16:19 batiwater sshd[2571]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:16:45 batiwater sshd[2572]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:17:10 batiwater sshd[2573]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:19:02 batiwater sshd[2578]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:20:22 batiwater sshd[2582]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:21:46 batiwater sshd[2587]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:22:26 batiwater sshd[2589]: fatal: Local: Corrupted check bytes on input. Jan 12 05:23:06 batiwater sshd[2591]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:24:25 batiwater sshd[2595]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:25:49 batiwater sshd[2599]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:09 batiwater sshd[2603]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:27:29 batiwater sshd[2604]: fatal: Local: crc32 compensation attack: network attack detected Jan 12 05:00:04 batiwater sshd[2465]: fatal: Local: Corrupted check bytes on input. Jan 12 05:00:15 batiwater sshd[2507]: connect from 209.147.160.67 Jan 12 05:00:15 batiwater sshd[2507]: log: Connection from 209.147.160.67 port 1385 Jan 12 05:00:20 batiwater sshd[2507]: log: Could not reverse map address 209.147.160.67. Jan 12 05:00:25 batiwater sshd[2507]: fatal: Local: Corrupted check bytes on input. Jan 12 05:00:35 batiwater sshd[2508]: connect from 209.147.160.67 Jan 12 05:00:35 batiwater sshd[2508]: log: Connection from 209.147.160.67 port 1386 Jan 12 05:00:40 batiwater sshd[2508]: log: Could not reverse map address 209.147.160.67. Jan 12 05:00:54 batiwater sshd[2509]: connect from 209.147.160.67 Jan 12 05:00:54 batiwater sshd[2509]: log: Connection from 209.147.160.67 port 1387 Jan 12 05:00:59 batiwater sshd[2509]: log: Could not reverse map address 209.147.160.67. Jan 12 05:01:05 batiwater sshd[2509]: fatal: Local: Corrupted check bytes on input. Jan 12 05:01:15 batiwater sshd[2510]: connect from 209.147.160.67 Jan 12 05:01:15 batiwater sshd[2510]: log: Connection from 209.147.160.67 port 1388 Jan 12 05:01:20 batiwater sshd[2510]: log: Could not reverse map address 209.147.160.67. Jan 12 05:01:35 batiwater sshd[2511]: connect from 209.147.160.67 Jan 12 05:01:35 batiwater sshd[2511]: log: Connection from 209.147.160.67 port 1389 Jan 12 05:01:40 batiwater sshd[2511]: log: Could not reverse map address 209.147.160.67. Jan 12 05:01:55 batiwater sshd[2512]: connect from 209.147.160.67 Jan 12 05:01:55 batiwater sshd[2512]: log: Connection from 209.147.160.67 port 1390 Jan 12 05:02:00 batiwater sshd[2512]: log: Could not reverse map address 209.147.160.67. Jan 12 05:02:14 batiwater sshd[2513]: connect from 209.147.160.67 Jan 12 05:02:14 batiwater sshd[2513]: log: Connection from 209.147.160.67 port 1391 Jan 12 05:02:19 batiwater sshd[2513]: log: Could not reverse map address 209.147.160.67. Jan 12 05:02:34 batiwater sshd[2514]: connect from 209.147.160.67 Jan 12 05:02:34 batiwater sshd[2514]: log: Connection from 209.147.160.67 port 1392 Jan 12 05:02:39 batiwater sshd[2514]: log: Could not reverse map address 209.147.160.67. Jan 12 05:02:54 batiwater sshd[2515]: connect from 209.147.160.67 Jan 12 05:02:54 batiwater sshd[2515]: log: Connection from 209.147.160.67 port 1393 Jan 12 05:02:59 batiwater sshd[2515]: log: Could not reverse map address 209.147.160.67. Jan 12 05:03:14 batiwater sshd[2516]: connect from 209.147.160.67 Jan 12 05:03:14 batiwater sshd[2516]: log: Connection from 209.147.160.67 port 1394 Jan 12 05:03:19 batiwater sshd[2516]: log: Could not reverse map address 209.147.160.67. ...more like this... Jan 12 05:28:06 batiwater sshd[2606]: log: Could not reverse map address 209.147.160.67. Jan 12 05:28:21 batiwater sshd[2607]: connect from 209.147.160.67 Jan 12 05:28:21 batiwater sshd[2607]: log: Connection from 209.147.160.67 port 1468 Jan 12 05:28:26 batiwater sshd[2607]: log: Could not reverse map address 209.147.160.67. Jan 12 05:28:26 batiwater sshd[2607]: fatal: Did not receive ident string. Jan 12 05:50:33 batiwater sshd[1034]: log: Generating new 768 bit RSA key. Jan 12 05:50:34 batiwater sshd[1034]: log: RSA key generation complete. ---/mail--- Sorry about what a long message, my first oppinion is that this guy used a software to hack in, and if he made it, wasnt smart enough to delete the traces, you can see his IP there, maybe a script kiddie?. What else may i expect from this? Thanks in advance Leo _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

RE: [suse-security] I have been hacked, what to do now?
by EXTERN Schumacher Markus (Intern; AB/EBE) 17 Jan '02

17 Jan '02

Hi try this: http://www.chkrootkit.org/ it helped me a lot once :) mARKUS > -----Original Message----- > From: Leo Rivas [mailto:leorivas@yahoo.com] > Sent: Thursday, January 17, 2002 10:51 AM > To: engelhardtk(a)bsk-info.de; Suse Security > Subject: Re: [suse-security] I have been hacked, what to do now? > > > Hi Markus > Checked that files but found nothing wrong yet (used vi and > mcedit), what may I expect to find there?... > according to the log i sent, should y suppose the 'hacker' > made an enter or are those failed tries? > > Thanks > Leo > > > Markus Noch wrote: > > > hi, > > > > check ps,netstat,login and pstree . the one who hacked your > machine replaces them to hide his intrusion. > > further search for tools like dsniff. dsniff is a rootkit. > > open this one`s ( ps,netstat,login and pstree ) with an > asci editor. in some cases you can > > see plain text. > > > > greetz and fun, > > -- > > ----------------------------------------------------- > > Markus Noch > > bsk IT Systemhaus GmbH > > .-. Tel.: +49 6241 / 94650-21 > > /v\ Klosterstrasse 23 > > // \\ 67547 Worms > > /( )\ > > ^^-^^ > > _ _ _ _ ___ ____ > > | |__ ___| | __ | \ | |/ _ \ / ___| > > | '_ \/ __| |/ /____| \| | | | | | > > | |_) \__ \ <_____| |\ | |_| | |___ > > |_.__/|___/_|\_\ |_| \_|\___/ \____| > > Network-Operation-Centre POP Worms > > noc(a)bsk-info.de > > ---Home is where ever those login prompts shine !---- > > > > > _________________________________________________________ > Do You Yahoo!? > Get your free @yahoo.com address at http://mail.yahoo.com > > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com >

1 0

vnc masqueraded
by Jens Woch 17 Jan '02

17 Jan '02

Hi folks, there's a tiny masqueraded lan (192.168.0.0/24) behind a firewall (suse 73, Susefirewall2), standard-configuration. Task: Enable remote control of the internal computers via VNC. The following already works: (1) intern <-> intern (2) intern <-> firewall (3) extern <-> firewall (4) intern -> extern The problem is (5) extern -> intern (currently i do a remote control of the firewall, which does a remote control of an internal computer, but that's pretty shitty) I do not know the right questions. Is it a firewall-, routing-, or masquerading-thingie? How do I address internal computers anyway? Please enlighten me. Thanks in advance, Jens -- --------------------------------------------------------------- Jens Woch | woch(a)uni-koblenz.de Dep. of Computer Science | http://www.uni-koblenz.de/~woch University of Koblenz | Tel.: +49 228 2611 PF 201 602, D-56016 Koblenz | Fax: +49 261 2601 ---------------------------------------------------------------

6 9

AW: [suse-security] firewall
by Peer Stefan 17 Jan '02

17 Jan '02

try 'iptables -L | less'. regards, stefan -----Ursprüngliche Nachricht----- Von: Omppu [mailto:Omppu@Aktivist.NET] Gesendet: Donnerstag, 17. Jänner 2002 12:28 An: suse-security(a)suse.com Betreff: [suse-security] firewall where can i view the set of rules that susefirewall2 creates?? -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

2 2

RealAudio Proxy
by Robert Rottscholl 17 Jan '02

17 Jan '02

Hi List, my question is: "Which Proxy-Server should I use to get the rtsp protocol running(554 tcp/udp)? Does SuSE offer a solution?" Thanks Robert Rottscholl - DE

2 1

DENY traffic but don't log
by Azman Salleh 17 Jan '02

17 Jan '02

Hello, For a particular chain, how to DENY TCP traffic but do not log ? I have ipchains 1.3.9 commands for my firewall. Some of the DENY'd traffic really fills up my log files (I have to clear up the /var fs every day - Code Red stuff I think). thanks, azman

2 1