November 2002 - openSUSE Security - openSUSE Mailing Lists

Forged domain
by Miguel Albuquerque 07 Nov '02

07 Nov '02

Someone is using one of the domain names hosted by us to spam all mail accounts in all local domains. Unfortunely, sendmail is (and was before me) the mail system. It sounds pretty much the same of saturday's topic about the "[suse-security] DOS on sendmail daemon" but the users got the spam in their mail boxes. I've mailed abuse(a)domain.net and I got Diagnostic-Code: 550 5.2.1 <abuse(a)hinet.net>... Mailbox disabled for this recipient. Message Headers: Return-Path: <123017(a)cedoff.org> Received: from ns.e-workshop.ch (ns.e-securenet.ch [212.147.96.4]) by ns.e-workshop.ch (8.12.2/8.12.3/SuSE Linux 0.6) with ESMTP id gA44i1Q1023068; Mon, 4 Nov 2002 05:44:02 +0100 Message-Id: <200211040444.gA44i1Q1023068(a)ns.e-workshop.ch> Received: from cedoff.org (61-224-129-145.HINET-IP.hinet.net [61.224.129.145]) by mail.cedoff.org (AvMailGate-2.0.1.7) id 23063-44BB0D0E; Mon, 04 Nov 2002 05:43:59 +0100 From: "download your free" <asiamailer(a)pchome.com.tw> Subject: Want to boost your sales with Internet Marketing? Try HiMailer. Content-Type: text/html Date: Sun, 3 Nov 2002 23:59:33 +0800 X-Priority: 3 X-Library: Indy 9.0.3-B X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.7; AVE: 6.16.0.0; VDF: 6.16.0.12; host: ns) To: undisclosed-recipients:; Status: RO Where the hole is? Thanks for your help -- .-. e-SecureNet /v\ We Run SuSE Project Manager // \\ *The LINUX Experts* c/o Miguel Albuquerque /( )\ Av. Miremont 46 ^^-^^ 1202 - GE, SWITZERLAND Tel: +41 (22) 782 5344 Fax: +41 (22) 782 5348 mailto:mfoacs@e-securenet.ch http://www.e-securenet.ch "Was Sind und was Sollen die Zahlen?" Dedekind. ____________________________________________________________

5 6

Susefirewall2 DMZ
by Frédéric Poulet 06 Nov '02

06 Nov '02

Hello, I configured Susefirewall2 with a DMZ but i can't see my web server from internet or from my intern network. Can I have an example of config file for help me ? My system WEB | FIREWALL----- 192.168.50.0 --- DMZ ---- 192.168.50.2 --- WEB SERVER (apache) | 192.168.1.0 | INTERN NETWORK (192.168.1.x) Thanks ! ___________________________________________________________ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com

2 1

Qmail SuSe 8.1
by Franck 06 Nov '02

06 Nov '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, Is anyone installed Qmail with Suse 8.1 (or 7.3) ? How do i find documentation to installing Qmail with a SuSe ? Is there RPM for qmail because SuSe don't have :( 10000 thanks - -- Franck \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ franck(a)linuxpourtous.com Fingerprint : 20F4 DBE5 7234 52D6 3610 BB17 D73C 1F7A 9E64 F6A1 http://www.linuxpourtous.com Clef PGP : http://www.linuxpourtous.com/download/franck_linuxpourtous.asc \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (GNU/Linux) iD8DBQE9x7k31zwfep5k9qERAjplAJ9pmJLd7v/mMIq9InTdm+Op0CKg8ACeJZGG eC3EEqgJKT6HV6JrFXC6lP0= =h/Os -----END PGP SIGNATURE-----

5 7

Re: [suse-security] SuSEfirewall2 + M$ vpn server
by Fabio Sena 06 Nov '02

06 Nov '02

Somebody has some related documentation the implementation of a server vpn in suse 8.0? legalizing with clients Windows? Using SuseFirewall2 with Iptables? [] Fabio Sena Brazil - PE ----- Original Message ----- From: "studio3arc.com Admin" <admin(a)studio3arc.com> To: "'Fabio Sena'" <skill(a)cyberland.com.br> Sent: Sunday, November 04, 2001 6:23 PM Subject: RE: [suse-security] SuSEfirewall2 + M$ vpn server > > I'm having a hard time understanding your post. I'll assume your trying > to allow a pptp vpn connection through your firewall. Your internal > network seems to be masquaraded. To my knowledge IP Tables doesn't > support protocol 47 which is required for PPTP traversal. In order to > support this you need to install an experimental patch. See the link > below good luck getting it to work. > > > http://www.iptables.com/documentation/pomlist/pom-extra.html#pptp-conntr > ack-nat > > > > FW description > > > > FW_SERVICES_EXT_TCP="pptp 1723 500 53 ssh" > > FW_SERVICES_EXT_UDP="42:500 1024:5000" # For VPN/Routing > > which END at the firewall!! FW_SERVICES_EXT_IP="47 50 51 gre" > > > > FW_SERVICES_DMZ_TCP="pptp 53 500 1723:1800 5800 5900" > > FW_SERVICES_DMZ_UDP="53 500 1024:5000 5900" # For VPN/Routing > > which END at the firewall!! FW_SERVICES_DMZ_IP="47 50 51" > > > > > > FW_FORWARD="200.249.140.60,192.168.1.2 192.168.1.2,200.249.140.60" > > > > > > FW_FORWARD_MASQ="0/0,192.168.1.2,tcp,500 > > 0/0,192.168.1.2,tcp,1723 0/0,192.168.1.2,tcp,5900 > > 0/0,192.168.1.2,tcp,3389 0/0,192.168.1.2,udp,500" > > > >

1 0

openss with opie
by Gabor Acs 06 Nov '02

06 Nov '02

Hi I find a solution how to work the open-sshd with opie. Please help me! The opie is working correctly with login su sudo ... wia pam. Gábor Ács IT Security Manager EDS GOSD Hungary Phone +3613475594 Mobil +36302978599

1 0

AW: [suse-security] Security Problem OpenSSH
by Ulrich Roth 06 Nov '02

06 Nov '02

> - fixed security problem: when password expired the forced password > change echoed the password on the screen [bug #20903]. > > Is the echoed password the old, expired password or the new, recently > thought up password? If I understand correctly, it will show on the screen the passwords you type in, which means the old password once (if you have to type it in) and the new password twice. Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KölnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

2 1

RE: [suse-security] -help
by Barry Gill 06 Nov '02

06 Nov '02

>Succinct - and with a certain idiomatic force. Obviously a majordomo efficianardo that did not read the list rules/help...

2 1

Security Problem OpenSSH
by Bonemach 06 Nov '02

06 Nov '02

Hi Today (nov 6), SuSE published an updated OpenSSH package for SuSE 7.3 that, according to the changelog, fixes the following issue: - fixed security problem: when password expired the forced password change echoed the password on the screen [bug #20903]. Is the echoed password the old, expired password or the new, recently thought up password? Where can I find the bug numbers/information on the SuSE site? greetings Bone Machine --- "Beep beep beep yeah" - The Pixies ---

1 0

-help
by Paul.Mustermann＠t-online.de 06 Nov '02

06 Nov '02

help

2 1

Re: [suse-security] SuSE Security Announcement: lprng/html2ps (SuSE-SA:2002:040)
by Armin Schöch 06 Nov '02

06 Nov '02

Hi ! I'm having trouble applying the new html2ps-1.0b1-428.i386.rpm to an up-to-date SuSE 7.0 machine. I downloaded the rpm from ftp.suse.com and checked the MD5 checksum which is ok. When I apply the rpm to my system with rpm -Fhv html2ps-1.0b1-428.i386.rpm nothing happens and I can't kill the command with Ctrl-C. "ps l" reports (originally one line): 000 0 20608 19894 0 0 2328 992 leaf_m D pts/0 \ 0:00 /bin/rpm -U --hash --verbose -- html2ps-1.0b1-428.i386.rpm According to "man ps", the status code "D" means: "uninterruptible sleep (usually IO)" I can kill "rpm" with "kill -9 process-ID". If I do so, it takes some seconds until the rpm process is killed. Is someone having the same trouble on a SuSE 7.0 ? Or could give me a hint what may be wrong ? Thanks ! Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50

7 13