January 2002 - openSUSE Security - openSUSE Mailing Lists

AW: [suse-security] harden_suse-3.5 and SuSE 7.3
by K.J.Mueller＠EnBW.com 31 Jan '02

31 Jan '02

Hi Togan, my personal interpretation of this is something like SuSE saying: "...in case you think, you need something that is "harder" than standard SuSE, you should consider using something different, like 'SuSE Linux Firewall on CD'..." Otherwise it would be a strange coincidence that the moment, when this product became available was about the same time harden_suse disappeared from the SuSE-distro. ...just guessing. Please correct me, if you think I'm wrong. Regards, K. > -----Ursprüngliche Nachricht----- > Von: Togan Muftuoglu [mailto:toganm@users.sourceforge.net] > Gesendet am: Montag, 28. Januar 2002 08:23 > An: Suse-Security > Betreff: [suse-security] harden_suse-3.5 and SuSE 7.3 > > Hi, > > harden_suse version 3.5 looks like max_version supported is 7.2. What > are the problem possiblities when I run this with a 7.3 machine >

1 0

SSl php and imap
by CIVITA ALAN 31 Jan '02

31 Jan '02

suse-security(a)suse.com Hi all, I'm try to install the php 4.1.1 on an 7.3 SUSE with imap support. First at the configure i must take --with-imap-ssl cause the skript says that i must take this option too. So i do this and now it works So i do make At the make progress he stops with the following warning -ldl -lmysqlclient -lcrypt -lcrypt -lresolv -lm -ldl -lnsl -lresolv -lcrypt /usr/i486-suse-linux/bin/ld: cannot find -lcrypto collect2: ld returned 1 exit status make[1]: *** [libphp4.la] Error 1 make[1]: Leaving directory `/usr/local/etc/php-4.1.0' make: *** [all-recursive] Error 1 what have I do wrong or what must i install that it works? Thank for helping

1 0

SuSEfirewall2 blocks all external network traffic to or from any computer on my nework, including the firewall-machine itself
by Sebastian J. Bronner 31 Jan '02

31 Jan '02

I have a problem that I haven't seen addressed in the archives. I have configured my gateway computer according to the Scenario 3 (a small university wants to use masquerading to provide internet access to its internal network) in the EXAMPLES file with the following settings: FW_DEV_EXT="eth0:0" FW_DEV_INT="eth0" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_NETS="192.168.0.0/24" Of course, I also set START_FW2="yes" in /etc/rc.config. Whenever I start the firewall, I am unable to ping the outside world from the gateway machine itself or any machine configured to use it as a gateway. This configuration worked with SuSEfirewall(1), but now that I'm using kernel 2.4.16, I really think I aught to use SuSEfirewall2. -- Sebastian J. Bronner waschtl(a)sbronner.com

5 9

Is necesary the portmapper?
by Juan Carlos S.C 31 Jan '02

31 Jan '02

Hi list: I have an email server runnig sendmail and I ask myself if portmapper is necesary. I don't use any rpc service so... is safe to stop it or is used for something else? Thanks.

2 1

german, RADIUS ?
by Dörfler Andreas 31 Jan '02

31 Jan '02

hi, sorry for german but my englisch is terrible ;) (zudem sprechen 90% hier eh deutsch ;)) falls das ot ist bitte ich das zu entschuldigen aber nachdem es doch in einem gewissen grad im sicherheit geht denke ich das es hier paßt. nachdem wir bei uns langsam aber sicher für ras die authentifizierung von einem radiusserver vornehmen lassen wollen stellt sich jetzt die frage welchen man nun nimmt. die cistron/livingston radiusserver sind ja auch schon in die tage gekommen und strotzen nur mit veralteten standards und sicherheitslöchern. die einzigen alternativen (die nichts kosten) die ich so gefunden habe sind der freeradius (freeradius.org) und der openradius (openradius.com) welches projekt würdet ihr so empfehlen ? hat jemand gute erfahrungen mit einem der beiden gemacht ? mfg / best regards doerfler UNIX is like an indian tipi: no windows, no gates and apache inside wenn windows die antwort ist, wie dumm war dann die frage ?

2 1

Musicmatch Installation
by Dan Banyard 31 Jan '02

31 Jan '02

hi, sorry if this is slightly off the subject.... I have just tried to install musicmatch on SuSE v7.2....I get an error: ERROR: The graphical setup program failed to run. Make sure your $DISPLAY environment variable is set. if i echo $DISPLAY i get this :0.0 Anyone have any ideas what this needs to be set to? Thanks in advance. Dan

2 1

Online Update
by Markus Gaugusch 30 Jan '02

30 Jan '02

Does/will Yast online update support HTTP (or at least http proxy)? As ftp is a weird protocol anyway, I don't think it should be used so much, especially for important things like updates. I have some servers behind an MS Proxy Server and can't use online update, because yast doesn't support any proxy, and socksify + bouncer on a machine with MS Proxy client installed doesn't work, too (http/ssh works thoug). And once again, why is YOU not half as cool as apt-get ?? thanks Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus(a)gaugusch.at X Against HTML Mail / \

9 10

NIS: password encryption used for /etc/passwd with SuSE 7.0?
by Lars O. Grobe 30 Jan '02

30 Jan '02

Hi! Does anybody know which encryption SuSE 7.0 uses for user passwords in /etc/passwd (users which are not in shadow)? Is it md5 or des, and can I change the encryption mechanism? Thank You, CU, Lars.

1 0

timbuktu & SuSEfirewall2
by Olivier M. 30 Jan '02

30 Jan '02

Hello, I have a SuSEfirewall2 running for a small subnet with masquerading. Everything is fine, but now somebody in intranet would like to access a Timbuktu-based server (it's pc-anywhere like) outside, and it doesn't work... I guess it would probably need another ip_masq module ? Or what do you think? Here are the infos about the ports: Timbuktu uses a well-defined UDP port, 407, for connection handshaking and then switches to other TCP ports for each kind of service: Service TCP Port Control 1417 Observe 1418 Send Files 1419 Exchange Files 1420 Notify Dynamic TCP/IP ports above 1023 Chat Dynamic TCP/IP ports above 1023 Intercom Dynamic TCP/IP ports above 1023 Thx in advance for any hint! Olivier -- _________________________________________________________________ Olivier Mueller - om(a)8304.ch - PGPkeyID: 0E84D2EA - Switzerland qmail projects: http://omail.omnis.ch - http://webmail.omnis.ch

2 4

Email Server 3 content filter
by Dirk Borchers 30 Jan '02

30 Jan '02

Hi! I have the SuSE Email Server III and configured it for content filtering. Unfortuantely the filter does not work with Windows XP Outlook clients (no problems with Windows NT Outlook) . For example, emails with attachments are not rejected. How can this be fixed? Dirk

1 0