December 2002 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] Network goes down in flames
by GentooRulez 19 Dec '02

19 Dec '02

try to disable hdd dma hdparm -d0 /dev/hdX and check your error log on ALT-F10 while printing. quite OT, is'nt it? Michael

2 1

Logging to /var/log/firewall
by Ryan Allen 18 Dec '02

18 Dec '02

I've been trying to get ONLY FIREWALL messages to go in /var/log/firewall and all the rest of the kernel messages in /var/log/messages. For example, the boot up messages you are supposed to see with the "dmesg" command, which is now cluttered with firewall ACCEPT/DENY messages. I'm running SuSE 8.1 I've scanned the past archives and found a few ideas, the most promising was adding this to /etc/syslog.conf: ### Got this off the SuSE security mail list. ### Supposed to stuff all firewall messages in /var/log/firewall ### And out of /var/log/messages. ### ### I hope that all the other stuff still goes in /var/log/messages: ## ## - I wanted to get firewall messages in a separate file, so I added an entry ## kern.* - /var/log/firewall to /etc/syslog.conf, but now it logs to BOTH ## files. Any ideas how to cure this? ## ## yup, do this: *.*;!kern.* - /var/log/messages kern.* - /var/log/firewall Okay, so I added that, then for some reason _NO_ kernel messages were getting logged to either file. It also looks to me that this should pipe ALL kernel messages to /var/log/ferewall, even the boot up kernel messages. So, I'm back to ground zero with this: *.*;mail.none;news.none -/var/log/messages The only way I can think of to actually do this correctly is to pipe all messages to a perl script, that parses firewall messages into the firewall log and all the rest into messages. Am I out of my mind? I'm getting about a meg of firewall messages a day! If anybody has any suggestions, please reply!!! Thanks!! - Ryan

4 4

AW: [suse-security] Where to get scp
by Ulrich Roth 18 Dec '02

18 Dec '02

> Works fine but I'm trying to figure out how to make it do the > unattended trick. The whole thing with public/private keys is > confusing me to bits. I will tell you how to do it for an RSA1 type key. RSA2 is better, DSA: don't ask me. First generate yourself a private and a public key. In older distros which know only RSA1, type # ssh-keygen In newer distros: # ssh-keygen -t rsa1 This will create a private and a public key in the user's ~/.ssh directory. The files are called identity and identity.pub. Copy the identity.pub file to the destination machine, to the user's ~/.ssh directory (assuming the user has the same name as on the source machine). Rename the file to authorized_keys, or append it if authorized_keys already exists. On your source machine, make sure that your ssh client program tries the RSA1 protocol first by modifying /etc/ssh/ssh_config. Look for the line that begins with "Protocol". Good luck! Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KölnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

2 1

Where to get scp (was Analyzing FW logs)
by Olafur Gardarsson 18 Dec '02

18 Dec '02

I downloaded fwlogwatch as recommended and got it to work. Now my problem is that scp does not seem to be installed on my linux boxes (to copy log files from FW to webserver). Where can I download it from? Oli

6 8

FW: [suse-security] ppp0 to internal network
by Andre Vorster 18 Dec '02

18 Dec '02

Hi Andy Looks like you are using Shorewall, I am using SuSE Firewall2. according to your setup: #ZONE INTERFACE BROADCAST OPTIONS int eth0 ext eth1 dial ppp0 - norfc1918 #example for your ppp0 so telnet myfirewallbox.myzone.com would end up on myunixbox.internal.myzone.com Not quite they telnet myunixbox direct. I dont need very hi security on the dial-up, used only by trusted users. Thanx -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

Re: RE: [suse-security] Gliederung Umwelt
by GentooRulez 18 Dec '02

18 Dec '02

>Hi Sebastian Schucht, > >> Gliederung Umwelt > >dieses zählt also auch zur Rubrik Sicherheit unter Suse-Linux :)) >Denke mal, dass diese Mail hier versehentlich gelandet ist. >Ansonsten bist Du für mich ein Spammer und da habe ich geeignete >Gegenmaßnahmen. > >This is a security issue related to suse linux, too ? >Me thought, you accidentally dropped your mail here. >If not, you're a spammer and if've got convenient counteractive >measures against such mails. > AS THERE ARE ? Which of the keywords in that mail sucks :O)

2 1

Port 91 & 445
by Ian Laws 18 Dec '02

18 Dec '02

Hi All I have noticed that the ports 91 (mit-dov) and 445 (microsoft-ds) are cropping up a lot in my logs. Is there any reason for this?? What are these ports used for?? -- Ian David Laws Linux is for Networking Mac is for Working ian(a)the-laws-clan.de Windows is for Solitaire

2 1

Gliederung Umwelt
by Sebastian Schucht 17 Dec '02

17 Dec '02

Gliederung Umwelt Umwelt Wechselwirkung Mensch und Natur Bewertung der Probleme schwierig da zuwenig Daten Politisches Interesse Nachhaltige Entwicklung Schutz der Umwelt Verbesserung der Lebensqualität Ozeane Klima relevant Meeresströhmungen Artenvielfalt Überfischung ¼ aus Aquakultur Wälder Regionen mit bäumen über 5m Stabilisierung des lokalen Klimas Schutz vor Errosionen Filterung und Speicherung von Wasser Abholzung Fragmentierung Biologische Vielfalt Verlust an Arten Rote Liste Beeinträchtigung der Lebensräume durch den Menschen Atmosphäre Mischung aus Gasen Reflektion der Wärmestrahlung Wasserdampf Ozon andere wie Methan Schutz vor UV Stratosphäre(20-25km) Temperaturanstieg ca 0,3 – 1.3°C bis 2030 Ozonloch 25km2 FCKWs/ Methylbromid/ Halone/ Triclorkohlenwasserstoffe/ Methylclorophorm Kyoto Reduktion der Treibhausgase um 5,2% bis 2012 Böden Physikalisch/ Chemisches/ Biologisches System Speicherung von Wasser Lebensraum für Pflanzen/Microorganismen/Ernährunggrundlage Winderosion Wassererosion Wüstenbildung Wasser Grundvoraussetzung für Biologische Prozesse Bildung von Böden 0,007% des Wassers für den Menschen nutzbar Zunehmende Verschmutzung Zunehmende Feldbewässerung

2 1

Cyrus - SASL et.al.
by Matthias Mikuletz 17 Dec '02

17 Dec '02

Hello there, there has been the Cyrus-pre-login-buffor-overflow and the SASL-library-buffer-overflow recently (well, not too recently). I'm considering these bugs as 'serious bugs'. Please correct me if I'm wrong on this. I'm wondering if SuSE is still preparing an update to the Cyrus-IMAP and SASL packages? If so, then may I please get an answer on why this apparently takes forever. The positive answer from Roman on the question if this is being worked on (see below) nearly is two weeks old and still there is no official announcement nor update packages. >> I am wondering if the Bug posted on Tue, 03 Dec 2002 has any effect on >> the SuSE 7.3 or 8.1 Distribution. >> >> I have found no official statement from SuSE till now! >> >> Are the Cyrus versions on this distributions secure, or will there be >> an Security Patch in the near future? > >The latter, and Sebastian is working on it. > >To come soon. > >Roman. Greets and thanks for your answer Matthias Mikuletz ______________________________________________________________________________ Wie ware das: mehrere E-Mail Adressen - aber nur ein Postfach ? Kein Problem mit WEB.DE FreeMail - http://freemail.web.de/features/?mc=021127

1 0

procmail and kmail problems
by Sebastian Schucht 17 Dec '02

17 Dec '02

Hallo, I have same Problems with my procmail and kmail. If I fetch my mails with fetchmail as root and use as mda procmail with the atached config. The mails will be written in my local postbox but if I check my mails form kmail ther are no mail in my kmail-inbox. please help me with this problem. thank you for your help Sebastian Schucht

3 3