April 2002 - openSUSE Security - openSUSE Mailing Lists

chroot with OpenSSH
by Kurt Minder 04 Apr '02

04 Apr '02

hi does anybody know a good howto for configuring a chroot environment with openssh on a linux 7.3 box kurt

1 0

lock out during ssh
by Alexander Pacheco 04 Apr '02

04 Apr '02

Hi, I have a Suse 7.3 with Susefirewall activated at home which I can access from workplace using ssh. My problem is my home PC locks up if I connect using my user name and try to change directory but not when I login as root. I get the same problem when I do ssh localhost on my PC. Could anybody give me a solution to this. Thanks for your help Alex -- ************************************************************* * Alexander Pacheco * * 2323, NPB, Tel: Office (352)-392-3010 * * P.O. box 118435 Home (352)-336-4036 * * University of Florida, * * Gainesville, Fl 32611-8435. * * pacheco(a)qtp.ufl.edu alexp(a)ufl.edu * * http://www.qtp.ufl.edu/~pacheco * *************************************************************

1 0

Antwort: Re: [suse-security] Open Relay Problems
by BLeonhardt＠analytek.de 04 Apr '02

04 Apr '02

Usually you can say in /etc/mail/access : <local-net> RELAY <spammers-domain> ERROR: " 550 Don't wanna have Spam :-) " and then ./sbin/conf.d/SuSEconfig.sendmail [enter] now the new access.db should be build .. and the spammer should be blocked, right ? Mit freundlichen Grüßen Bruno Leonhardt CLP Domino R5 Systemadministrator ________________________________________________________________________________________________________ AnalyTek Systemhaus Hospitalstr. 2a D-65589 Hadamar Tel.: 06433/81403-15 Fax : 06433/81403-40 Roman Drahtmueller An: Shonne Beavers <shonnedb(a)directvinternet.com> <draht(a)suse.de> Kopie: suse-security(a)suse.de Thema: Re: [suse-security] Open Relay Problems 03.04.02 19:30 Bitte antworten an Roman Drahtmueller > > I have a SuSE 7.3 Sendmail host running Sendmail v8.11 function as my > Primary MX. Someone is spamming mail into my domain. This host does not > have any accounts on it, just an aliases file. How can I stop this?? > What is your problem? 1) You are running an open relay 2) You get spammed 2) is not easy to solve, and 1) is non-trivial to achieve (that this sendmail in fact does relaying). > Shonne Beavers Roman. -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

4 3

RE: RE: [suse-security] OT: User accounts
by BLeonhardt＠analytek.de 04 Apr '02

04 Apr '02

THANKS ALL FOR YOUR SUGGESTIONS !!! That helps and works :-) ... Mit freundlichen Grüßen Bruno Leonhardt CLP Domino R5 Systemadministrator ________________________________________________________________________________________________________ AnalyTek Systemhaus Hospitalstr. 2a D-65589 Hadamar Tel.: 06433/81403-15 Fax : 06433/81403-40

1 0

Re: Helmut Dehling/DS/GFK/DE ist außer Haus.
by Michael Stern 03 Apr '02

03 Apr '02

Sie könnten Ihren Autoresponder ruhig so konfigurieren, dass nicht die ganze SuSE-Security Community bei jedem Post von Ihnen eine Autoreponser bekommt (parsen Sie einfach den Header nach List-* Feldern, sodass in diesem Fall keine Mail gesendet wird). Danke, Michael Stern ----- Original Message ----- From: <Helmut.Dehling(a)gfk.de> To: "Michael Stern" <mhstar(a)gmx.at> Sent: Thursday, April 04, 2002 1:01 AM Subject: Helmut Dehling/DS/GFK/DE ist außer Haus. Ich werde ab 02.04.2002 nicht im Büro sein. Ich kehre zurück am 15.04.2002. Ich werde Ihre Nachricht nach meiner Rückkehr beantworten.

2 1

Firewall2 not working with VPN
by Matthias Dietzsch 03 Apr '02

03 Apr '02

Hello can any help? I have a SUSE 7.1 installatin kernel Linux 2.2.18 with Suse Firewall 2 on my pppoe router with masq. eth0 external 192.168.2.1 bond0 internal 192.168.100.1 I want to make with my win2000 computer a connection over this pppoe router to another firewall (3com Superstack 3). In the firewall log file i cannot see any deny information about this vpn connection. What modules must i load or what ports must i give free? Thanks for any help.

1 0

Open Relay Problems
by Shonne Beavers 03 Apr '02

03 Apr '02

I have a SuSE 7.3 Sendmail host running Sendmail v8.11 function as my Primary MX. Someone is spamming mail into my domain. This host does not have any accounts on it, just an aliases file. How can I stop this?? Shonne Beavers shonnedb(a)directvinternet.com ICQ 138341211 "In order to accomplish good, we must compromise some of the evils of this world." --Unknown

2 1

Bandwidth control
by Lars Christiansen 03 Apr '02

03 Apr '02

Does anyone know of a way to limit bandwith when users are useing Kazaa, Napster and other programs like those. I want to limit bandwidth on a IP-adress level. I dont want to deny the use of the programs, only limit bandwidth. If anyone knows of programs or solutions i would like to know where to get programs and doc's. Thanks in advance Lars Christiansen

4 4

Re: [suse-security] Suse Linux Firewall 2
by Michael Appeldorn 03 Apr '02

03 Apr '02

>Hi. > >I am running Suse 7.3 with Firewall 2. >Now i want to disable portforwarding at scheduled times, to disable Microsoft >Messenger from my Lan. >I can'r let MSN run through squid because one of the client's is a iMac and >the MSN client for the iMac won't allow the use of Generic Proxy. > >So i am using portformarding for that. (IP_Forward). Is there a possibility to >make a cron job for disabling MSN in working hours ? > So why not, edit /etc/crontab as follows 0 20 * * * /sbin/SuSEfirewall start file /etc/rc.config.d/firewall2.rc.config.night 0 08 * * * /sbin/SuSEfirewall start file /etc/rc.config.d/firewall2.rc.config.day cp to firewall.configs to day|night and adapt them snip /sbin/SuSEfirewall ------ Options: start generate and load the firewall filter rules from /etc/rc.config.d/firewall2.rc.config stop unload all filter rules close no incoming network traffic except bootp+ping (used for boot security) file FILENAME same as \"start\" but load alternate config file FILENAME test generate and load the filter rules but do not drop any packet but log to syslog anything which *would* be denied status print the output of \"iptables -L -nv\" debug print the iptables command to stdout instead of executing them help this output Calling $0 without any option is the same as the \"start\" option. The \"file FILENAME\" option my be used with the start, test and debug options.\n" exit 0 } ------ snap Yours Michael Appeldorn

1 0

RE: [suse-security] OT: User accounts
by Peer Stefan 03 Apr '02

03 Apr '02

i just recognized that attachements do not make it to the list... so, here it comes: -------------------------------------- #!/usr/bin/perl -w $debug = 1; $exist = 0; open STDIN,"<"; while (<STDIN>){ $exist = 1; ($uname,$x,$uid,$gid,$comment,$homedir,$shell) = split ":",$_; chomp ($uname,$x,$uid,$gid,$comment,$homedir,$shell); # $debug && print " -- found $uname:$x:$uid:$gid:$comment:$homedir:$shell\n"; # checking whether user exist open PASSWD,"</etc/passwd"; while(<PASSWD>){ ($un,$xx,$u,$g,$c,$d,$s) = split ":",$_; chomp ($un,$xx,$u,$g,$c,$d,$s); if ($uname =~ /\$un/) { print " * User $uname already exist!\n"; $exist = 0; } else { $exist = 1; } } close PASSWD; if ($exist != 0) { # changing every shell to false? # $shell =~ s/(bash|csh|ksh|sh|tcsh)/false/g; if ($uid > 100){ print "Executing 'useradd -u $uid -g $gid -c \"$comment\" -d $homedir -s $shell $uname' ... "; #`useradd -u $uid -g $gid -c \"$comment\" -d $homedir -s $shell $uname`; print "done.\n"; } else { print " * useradd -u $uid -g $gid -c \"$comment\" -d $homedir -s $shell $uname\n"; } } else { print " * User $uname already exist!\n"; } } close STDIN; exit 0; ------------------------- -----Original Message----- From: Peer Stefan [mailto:stefan.peer@tiwag.at] Sent: Wednesday, April 03, 2002 2:15 PM To: Suse-Security Subject: RE: [suse-security] OT: User accounts i once wrote a script myself, which adds users from any unix-like password-file to a system (reads STDIN). have a look at the attachment. it's provided 'asis' - feel free to add or delete stuff as you like. cheers stefan ps: it just adds users with uids greater than 100 - so no system user is added. -----Original Message----- From: Michael Stern [mailto:mhstar@gmx.at] Sent: Wednesday, April 03, 2002 2:07 PM To: Suse-Security Subject: Re: [suse-security] OT: User accounts well of course you could create a script manually which reads and parses an input file and passes the data to useradd and whatever program you want to execute ... i don't know whether suse does provide one, but it shouldn't be too difficult to write such a script. ----- Original Message ----- From: <BLeonhardt(a)analytek.de> To: <suse-security(a)suse.com> Sent: Wednesday, April 03, 2002 2:01 PM Subject: [suse-security] OT: User accounts Hello, does anybody have a idea, how to generate more than 100 Users without having to add them manually or with YaST ? Is there anything like a skript ? The users need the home-dir's too ... ! Thank's ! Best Regards / Mit freundlichen Grüßen Bruno Leonhardt -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0