April 2002 - openSUSE Security - openSUSE Mailing Lists

Network device
by Robert Rottscholl 08 Apr '02

08 Apr '02

Dear List, today I noticed that I have a network device sit0. It is not listed by ifconfig, but if I look at /proc/net/dev it is mentioned. Is ist SOmething security related or can I ignore it. Ciao ;-) Robert Rottscholl - DE

3 2

RE: [suse-security] pop3 proxy
by Reckhard, Tobias 08 Apr '02

08 Apr '02

> Please let me know whether such a linux based pop3 proxy > exists and if so, > where I can get it. I've used perdition successfully and have had reports that pop3proxy works fine, too. Consult Google for the corresponding Web links. Tobias

1 0

SuSEfirewall2 vs. DHCP
by Alan Hadsell 07 Apr '02

07 Apr '02

Hi -- My system specs: Small LAN, mixed Windows and SuSE Linux 7.1. One box is directly connected to the Internet via a cable modem, performing firewall and masquerading duty for the other machines on the system. This box is running the kernel from k_i386-2.4.16-34.i386.rpm. It also runs SuSEfirewall2 (2.1.0) and ICSA DHClient (from the 7.1 distribution CDRom). When it's working, it works very well. My problem: When the DHCP lease times out, the firewall box can't acquire a new one. It appears that the firewall's anti-spoofing rules are blocking the DHCP server's reply. At the time when this happens, I get numerous SuSE-FW-DROP-ANTI-SPOOFING messages with source port = 67 and destination port = 68. At this point, I lose all Internet connectivity until I reboot the firewall box. My configuration includes FW_SERVICE_DHCLIENT="yes". Although I have a reasonable theoretical understanding of iptables, I have to admit that the SuSEfirewall2 script, especially in the area of antispoofing, is well beyond me. If anyone can help with this, I'm all ears. Thanks, -- Alan Hadsell "Whatever does not kill me makes me stranger".

2 9

pop3 proxy
by mailinglists＠belfin.ch 07 Apr '02

07 Apr '02

Hi I have an Exchange server running in the internal LAN. Users must be able to get e-mails from outside the company, e.g. by cell phone. In order to prevent direct access to Exchange box, which could be done with some tasty port forwarding, I want to place a pop3 proxy in front of it. Users connect to the proxy and authenticate there, the proxy then connects to the Exchange and gets the mails. Please let me know whether such a linux based pop3 proxy exists and if so, where I can get it. Thanx a lot, Philipp

2 1

Re: [suse-security] SuSEfirewall2 vs. DHCP
by Michael Stern 07 Apr '02

07 Apr '02

,---- | Apr 6 07:50:33 wally kernel: SuSE-FW-DROP-ANTI-SPOOFING | IN=eth1 OUT= MAC= SRC=64.85.299.299 DST=255.255.255.255 | LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP | SPT=68 DPT=67 LEN=308 `---- I'm not an expert in DHCP at all, but to me it looks like the following happened: when requesting a new lease your system broadcasts and udp packet to discover any present DHCP server. because it is a broadcast, the packet is also received by your system - therefore it ends in the INPUT chain again. what would be interesting to know is whether the packet was also received by another system - did the ip renewal work? cheers, michael

1 0

connectivity failure
by Roman Drahtmueller 06 Apr '02

06 Apr '02

Hi together, I don't really know when this message will make it to the lists server and out again - our Oakland Internet provider is obviously not capable of maintaining the connectivity of our servers. By consequence, we're cut off the internet with two important servers: ftp.suse.com and lists.suse.com, which maintains most of the SuSE mailing lists. We're working on the problem, of course, but there's nothing we can do during the weekend since we don't have the bandwidth here in Nürnberg (yet). More later... Thanks, Roman. -- - - | Roman Drahtmüller <draht(a)suse.de> // "You don't need eyes to see, | SuSE Linux AG - Security Phone: // you need vision!" | Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless | - -

2 1

OT: User accounts
by BLeonhardt＠analytek.de 06 Apr '02

06 Apr '02

Hello, does anybody have a idea, how to generate more than 100 Users without having to add them manually or with YaST ? Is there anything like a skript ? The users need the home-dir's too ... ! Thank's ! Best Regards / Mit freundlichen Grüßen Bruno Leonhardt

5 4

Kernel 2.4.16.SuSE-31 ?
by malte_gell＠t-online.de 05 Apr '02

05 Apr '02

Hi, for a few days there's a kernel update for 7.3 below /pub/suse/i386/update/7.3/kernel/2.4.16-20020325 on the ftp server. I guess 2.4.16.SuSE-31 contains the fixes for the zlib issue ? Would be nice if the kernel rpm's would contain a changelog within... Regards, Malte

7 8

SendMail 8.12
by Nikos Psarrakis 05 Apr '02

05 Apr '02

Has anyone tried SendMail 8.12? Is there a known security issue or something? What are the .config files we should be aware of, in order to have a good level of security? Thanks in advance, i remain...

2 1

AW: chroot with OpenSSH
by Kurt Minder 05 Apr '02

05 Apr '02

Hi Ulf thank you for the description works the patch you decribed also with the 2.9.9 openssh version. I can't use the 3.x.x version beacause my libraries aren't compatible with it Kurt > -----Ursprungliche Nachricht----- > Von: Ulf Stegemann [mailto:ulf@zeitform.de] > Gesendet: Freitag, 5. April 2002 09:38 > An: Kurt Minder > Betreff: Re: chroot with OpenSSH > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Kurt, > > Kurt Minder <kurtminder(a)bluewin.ch> wrote: > > > does anybody know a good howto for configuring a chroot > environment with > > openssh on a linux 7.3 box > > I once wrote a little description on that topic (which I > recently updated for > OpenSSH 3.1). That config works for me for various Linux > 2.2.x installations > and I heard it was successfully used on Solaris, too. > > Maybe that helps: http://ulf.zeitform.de/sshchroot/index.html > > > Regards, > > Ulf Stegemann > > - -- > mailto:ulf@zeitform.de > GnuPG/PGP Key-ID: 0x8862250A > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: Public Key at http://ulf.zeitform.de/GnuPG/ > > iD8DBQE8rVQmENDn14hiJQoRAprhAKDshRZGdDZNVSeFLOGKWn6iSGwQdwCfRq9q > MUVtrniEsYMYA7rL5DaiDlI= > =wGBF > -----END PGP SIGNATURE----- >

1 0