October 2002 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] SuSE Security Announcement: postgresql (SuSE-SA:2002:038)
by Joerg Henner 23 Oct '02

23 Oct '02

On Mit, 23 Okt 2002, Armin Schöch wrote: >Usually these things are fixed and there are updates on the FTP >servers but the bugs are not considered very serious so no Security >Announcement is released by SuSE. If you use YOU frequently (I do it >about once every 1 or 2 weeks), you will notice many packages that are >updated without special Security Announcement. Hi, It makes no sense to me, to list "Pending vulnerabilities" within security announcements, but dont list then later anymore.... Greetings, -- Jörg Henner Fon: +49 (7 11) 48 90 83 - 0 ETES - EDV-Systemhaus GbR Fax: +49 (7 11) 48 90 83 - 50 Libanonstrasse 58 A * D-70184 Stuttgart Web: http://www.etes.de ______________________________________ Inflex - eMail Scanning and Protection Queries to: postmaster(a)etes.de

1 0

AW: [suse-security] ssh exchange_identification fails
by Ulrich Roth 23 Oct '02

23 Oct '02

> -----Ursprüngliche Nachricht----- > Von: Miguel Albuquerque [mailto:mfoacs@e-workshop.ch] > Gesendet: Dienstag, 22. Oktober 2002 17:46 > An: suse-security(a)suse.com > Betreff: [suse-security] ssh exchange_identification fails > > > Hi, > > I try to ssh on my own box (local) and I got this: > ssh_exchange_identification: Connection closed by remote host... > > What's wrong? > > I haven't touched the conf files, the service is enabled SuSEFW2: > FW_SERVICES_EXT_TCP="pop3 smtp ssh" > > Any ideas? Do you try to login with an account that has a null password? Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KölnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

1 0

ssh exchange_identification fails
by Miguel Albuquerque 22 Oct '02

22 Oct '02

Hi, I try to ssh on my own box (local) and I got this: ssh_exchange_identification: Connection closed by remote host... What's wrong? I haven't touched the conf files, the service is enabled SuSEFW2: FW_SERVICES_EXT_TCP="pop3 smtp ssh" Any ideas? Thnx -- .-. e-SecureNet /v\ We Run SuSE Project Manager // \\ *The LINUX Experts* c/o Miguel Albuquerque /( )\ Av. Miremont 46 ^^-^^ 1202 - GE, SWITZERLAND Tel: +41 (22) 782 5344 Fax: +41 (22) 782 5348 mailto:mfoacs@e-securenet.ch http://www.e-securenet.ch

4 4

AmaVis or InterScan VirusWall
by Manuel Peña 22 Oct '02

22 Oct '02

Hello guys, I have a big doubt, When should I use AmaVis or InterScan VirusWall ? What are the differents between both? What is the better? Thanks, Manuel Peña Product Manager Softland Peru S.A. Telefono 471-2444 / Fax 471-2444 Movil 810-7988 mpena(a)softlandperu.com www.softlandperu.com

2 1

MS Messanger voice thru SuSEfirewall
by suse-sec＠orcaoffice.com 22 Oct '02

22 Oct '02

Hi all, Thanks for the answers to the previous question - my internal samba now works. My next problem is that I'd like to use MS Messenger voice thru my firewall. I've seen projects such as upnp and Linux UPnP Internet Gateway Device project, do I need to use them ? As you can guess I'm a very inexperienced iptables/firewall user, so I'd really appreciate any help you can give. Thanks CPH

2 1

Re: [suse-security] blowfish for hashing algorithm
by c v 21 Oct '02

21 Oct '02

wow fast reply... thanks for your help _________________________________________________________________ Get a speedy connection with MSN Broadband. Join now! http://resourcecenter.msn.com/access/plans/freeactivation.asp

1 0

blowfish for hashing algorithm
by c v 21 Oct '02

21 Oct '02

anyway..i was going through the pam documentation and i came accross something. I changed the default hashing algorithm from md5 to blowfish I did this by editing the files pam_unix2.conf and pam_pwcheck.conf in /etc/security it seems that it worked...once i changed my password using the passwd command the appropriate field in /etc/shadow became $2a$ instead of $1$ which signifies md5 . Has anyone else tried that?Any similar experiences? thanks in advance .......... _________________________________________________________________ Unlimited Internet access -- and 2 months free! Try MSN. http://resourcecenter.msn.com/access/plans/2monthsfree.asp

2 1

Firewall and samba
by suse-sec＠orcaoffice.com 21 Oct '02

21 Oct '02

Hi all, I have a fairly standard SuSEfirewall2 setup. However when I boot my machine I get the following when the firewall is started: "Warning detected activated samba, enabling FW_SERVICE_SMB! You still have to allow port tcp 139 on internal dmz and/or external." However it is not clear to me how I do this! Thanks for your help, CPH

2 1

Re: [suse-security] Firewall and samba
by GentooRulez 21 Oct '02

21 Oct '02

>Hi all, > I have a fairly standard SuSEfirewall2 setup. >However when I boot my machine I get the following when the firewall >is started: >"Warning detected activated samba, enabling FW_SERVICE_SMB! > You still have to allow port tcp 139 on internal dmz and/or external." > >However it is not clear to me how I do this! Stop samba with "etc/init.d/smb stop"or typing "rcsmb stop" edit "rc.config" and set "start_smb" to "no" regardz Michael

1 0

Tool to analyze firewall messages
by Al Bogner 21 Oct '02

21 Oct '02

In /var/log/messages I see messages like Oct 20 11:00:43 firewall kernel: SuSE-FW-DROP-DEFAULT IN=ippp0 OUT= MAC= SRC=61.0.114.198 DST=62.46.154.154 LEN=78 TOS=0x00 PREC=0x00 TTL=101 ID=3969 PROTO=UDP SPT=62302 DPT=137 LEN=58 I would like to see some whois data of the source IP in clear text and the destination port in clear text too. (Of course I know that 137 is the netbios-port) Is there an analyzing tool for these messages? Maybe like webalizer? Where can I define the log-file in FW2? I would like to have an own fw-logfile to have a better overview of the other messages Albert

7 8