March 2002 - openSUSE Security - openSUSE Mailing Lists

VPN
by Riccardo Sama' 02 Mar '02

02 Mar '02

I'm trying to make a vpn connection between my linux box (suse 7.3 kernel 2.4.10GB) and my alcatel speed touch home ethernet adsl modem. The protocol is pptp, can anyone tell me how to proceed? Wich program can i use? is there a pptp client version for suse linux? many thanx Ricky

1 0

VPN
by Riccardo Sama' 02 Mar '02

02 Mar '02

I'm trying to make a vpn connection between my linux box (suse 7.3 kernel 2.4.10GB) and my alcatel speed touch home ethernet adsl modem. The protocol is pptp, can anyone tell me how to proceed? Wich program can i use? is there a pptp client version for suse linux? many thanx Ricky

1 0

Help for SuSEFirewall2
by amiky＠gic.parma.it 01 Mar '02

01 Mar '02

Hi I'm a new subscribed to the mailing-list i'd like to ask you a question about SuSeFirewall2 that i don't configure correctly Thank you for your interest this is the configuration scheme Internet | | Web server Web server | | | SuSE-Firewall------------------ | | | Internal LAN external address example (194.168.2.1 194.168.2.2 194.168.3) external fw interface: eth1 (194.168.2.1) dmz fw interface: eth2 (192.168.1.1) internal fw interface: eth0 (192.168.0.1) internal LAN: 192.168.0.1 netmask 255.255.255.0 ip internal of web sever 192.168.1.2 FW_DEV_EXT="eth1" FW_DEV_INT="eth0" FW_DEV_DMZ="eth2" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="192.168.0.1/24 192.168.1.0/24" FW_PROTECT_FROM_INTERNAL="no" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_TCP="www" FW_SERVICES_EXT_UDP="" FW_SERVICES_EXT_IP="" FW_SERVICES_DMZ_TCP="www" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="" FW_SERVICES_INT_UDP="" FW_SERVICES_INT_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" FW_SERVICE_AUTODETECT="yes" FW_SERVICE_DNS="no" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SQUID="no" FW_SERVICE_SAMBA="no" FW_FORWARD="" FW_FORWARD_MASQ="194.168.1.2,192.168.1.2,tcp,80" FW_REDIRECT="" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="no" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_LOG="--log-level warning --log-tcp-options --log-ip-option --log-prefix SuSE- FW" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="yes" FW_ALLOW_PING_EXT="no"

2 1

RV: [suse-linux-s] Lista iptables-esp
by Carlos Carrera 01 Mar '02

01 Mar '02

Bueno, ya que por nigun lado he podido encontrar una lista de iptables en ESPAÑOL (bueno si alguien lo conoce puede decirme donde) en creado una lista de iptables en español, espero que no sea molestia... Bueno, para subcribirte a la lista solo envia un correo a majordomo(a)linux.lamolina.edu.pe Con el mensaje: subscribe iptables (todo en minuscula y no importa el subject) Envialo Y Listo!! Le llegara un mensaje de bienvenida ... LA PREGUNTA ES SI USTEDES ESTAN DE ACUERDO CON LA CREACION DE ESTA LISTA ............. Saludos cordiales, Carlos -----Mensaje original----- De: Gaston Franco [mailto:gfranco@arcert.gov.ar] Enviado el: Jueves, 28 de Febrero de 2002 03:14 p.m. Para: Carlos Carrera Asunto: Re: question... Hola Carlos . No que yo sepa. te puedo ayudar en algo ? . > Carlos Carrera wrote: > Hay una lista de IPTABLES en SPANISH ...??????? -- Para dar de baja la suscripción, mande un mensaje a: suse-linux-s-unsubscribe(a)suse.com Para obtener el resto de direcciones-comando, mande un mensaje a: suse-linux-s-help(a)suse.com

1 0

2.4.16 kernel for 7.3
by Selcuk Ozturk 01 Mar '02

01 Mar '02

Sometime ago it was said an announcement was due any minute about the kernel upgrade that has been sitting in ftp.suse.com since the end of Jan. It's been more than a month now. Did I miss the announcement? Selcuk --- Selcuk Ozturk VP of Information Technology eMediaMillWorks, Inc. 1100 Mercantile Lane, Ste 119 Largo, MD 20774 Phone: (301) 883-2482 x121 Fax: (301) 883-9120 Email: sozturk(a)eMediaMillWorks.com

1 0

new SSH xploit
by Michael Appeldorn 01 Mar '02

01 Mar '02

Hi list According to some entrys in BugTraq and statements here, there is an sshex binary out the, to attack sshd up 3.x. Where to get attackers weapon - to play with it and unter- stand their game. Michael Appeldorn

3 2

SuSEfirewall2.0 and licq
by tilman 01 Mar '02

01 Mar '02

hello, as my pc is online nearly all day, i installed the suse firewall. nevertheless i'd like to continue using licq, which doesn't work any more since i started the firewall. can sombody give me some hints, which parameters have to be changed to get this to work? i tried making accessible the icq ports, udp 4000 and tcp 2000-2020, without success. thanks a lot tilman

2 1

squid
by Dietmar Strasdat 01 Mar '02

01 Mar '02

Hello suse-security, http://cert.uni-stuttgart.de/archive/bugtraq/2002/02/msg00294.html Are SuSE squid packages affected? -- Best regards, Dietmar mailto:earthmate@gmx.net

7 9

security below osi level 3
by Olivier Hislaire 01 Mar '02

01 Mar '02

Hi, I've heard about possible attacks between osi levels 2 and 3, i.e. againts the network card driver and the HW or something like that. Does anybody know something about ? Is there somewhere specific documentation / information / tools to document and address that kind of vulnerability ? Is this under the scope of the O.S. capabilities ? Any information appreciated, Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire(a)msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------

1 0

Re: [suse-security] Iptables: matching packets on MAC address lev
by Christoph Egger 01 Mar '02

01 Mar '02

On Friday, 1. March 2002 10:14, daniele(a)infra.de wrote: > Hi Christoph, > > On Fri, Mar 01, 2002 at 09:53:49AM +0100, Christoph Egger wrote: > > I know, that iptables allows to filter packets on the MAC address level > > using the MAC module. > > > > How can I use the module? Is there anywhere a full documentation > > available? > > iptables -m mac --help > > You can get help to each module, with typing: > iptables -m module --help (if it's a matching module) > > If it's a JUMP-Module (aka target) you can get help with: > iptables -j target --help > > e.g.: iptables -j LOG --help > > But realize, that it's easy to fake mac-addresses... Ah! TNX a lot. -- CU, Christoph

1 0

Iptables: matching packets on MAC address level
by Christoph Egger 01 Mar '02

01 Mar '02

Hi! I know, that iptables allows to filter packets on the MAC address level using the MAC module. How can I use the module? Is there anywhere a full documentation available? -- CU, Christoph

1 0

RE: [suse-security] DNAT with Virtual IF
by Rossell, Roger 01 Mar '02

01 Mar '02

be sure you've removed ipchains mod, otherwise virtual ip addresses will not work -----Mensaje original----- De: Matthias Krauss [mailto:MKrauss@hitchhiker.com] Enviado el: jueves, 21 de febrero de 2002 18:37 Para: 'suse-security(a)suse.com' Asunto: [suse-security] DNAT with Virtual IF Hi folks, i'm looking for a nice workaround for the following prob: I've 3 IF's, user lan, dmz and an external inet link, now i'd like to dnat incomming requests like: $IPTABLES -A FORWARD -i $EXT -o $DMZ -d 10.0.10.2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A FORWARD -i $DMZ -o $EXT -s 10.0.10.2 -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -t nat -A PREROUTING -i eth0 -j DNAT --to 10.0.10.2 the above sample works fine, $EXT represent eth0 which is the outside IF, in addition i created a virtual if named eth0:1 which i can't address in iptables (wierd character : ) . I;m not getting any ruleset to work unless i'm using "-i eth0", the workaround like eth0+ doesnt help , did anybody dealed with this prob before ???? Many thanks Matthias Krauss -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0