May 2002 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] blocking certain ips
by Reckhard, Tobias 07 May '02

07 May '02

> Someone who explains to me why I cant just append rule 3,4,5,6 at the > end of the INPUT rules (APPEND) instead I have to INSERT them? > Is it because of rule 23 which cannot be overwritten? > Would make sense to me. Then I better insert right bevore line > 23, right? Is this a serious question? [snip] > 23 DROP all -- 0.0.0.0/0 0.0.0.0/0 > 24 REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp > dpt:113 reject-with tcp-reset [snip] Of course you *can* append rules 3-6 at the end of the INPUT chain, but they won't have any effect because of rule 23, which matches each and every IP packet and drops it on the floor. Rule 23 is in no way read-only, where did you get that idea? BTW, rule 24 is superfluous as well, it will never be hit, you might as well remove it. Tobias

1 0

RE: [suse-security] blocking certain ips
by Reckhard, Tobias 07 May '02

07 May '02

> > Now I need something that lists all INPUT rules by number > on the screen > > Is > > /usr/sbin/iptables -L -nv > > what you need ? If you want numbers, append '--line-numbers' to that, giving you: /usr/sbin/iptables -L -nv --line-numbers Tobias

1 0

RE: [suse-security] Telnet-Proxy
by Reckhard, Tobias 07 May '02

07 May '02

> You connect to the firewall on port 23, firewall asks for > authentification and a hostname and afterwards you get a > transparent telnet session to the named host, without > any intererence by the firewall. > > Is something like that available as open source software? I believe the TIS Firewall Toolkit (FWTK) contains a telnet proxy. Tobias

1 0

RE: [suse-security] Slightly OT but: SuSE 8.0 Yast Online Update and GPG
by Duane Kehoe 06 May '02

06 May '02

Maybe for You and Me a broken YOU is fine or using fou4s is fine. I am thinking about the larger public here. And I do think that a flaw in YOU is a show stopper as it is one of SuSE's main selling and advertising points of this distro. ______________________________________________________________ Duane Kehoe phone: 414.908.1814 Programmer / Analyst fax: 414.908.1601 Weyco Group, Inc. email: dkehoe(a)weycogroup.com -----Original Message----- From: Fred A. Miller [mailto:fm@cupserv.org] Sent: Monday, May 06, 2002 3:16 PM To: Duane Kehoe Subject: Re: [suse-security] Slightly OT but: SuSE 8.0 Yast Online Update and GPG -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Monday 06 May 2002 4:15 pm, Duane Kehoe wrote: > Yah I could, but I really want to use the default distro tools first before > I change over to a third party tool. Especially in areas where I could > negate my support solutions. Really I guess I have been following fou4s > but have no interest in using someone else's tool when I just paid 80.00 to > get the supplied and supported tools that should work. Plus SuSE appears > to have made significant improvements in speed which was the only negative > side of YOU for me. > I really and truly believe this is SuSE's responsibility to it's users, > especially when they make claims like everything is perfect after a 2 month > beta testing period. > > >I think the bug is in KDE, but not sure. For now, just answer "install" > > for all the files, then after the list is downloaded, do the > > upgrade.....it'll only upgrade what's needed. > > Also this is not a kde bug as it occurs from command line, kontrol panel > modules, and stand alone GUI Yast2. [snip] 'Hadn't checked it from command line. Yes, it's annoying, but NOT a show stopper. Fred - -- Fred A. Miller Systems Administrator Cornell Univ. Press Services fm(a)cupserv.org, www.cupserv.org - --- SuSE Linux v8.0 Pro--- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjzW5I4ACgkQB9vk4ichYXe5RQCgh72kSoBYcOP/JLns5Br5kR+C HvwAoLJuvfahupFl1oWBo1kpnodEy3ta =80fl -----END PGP SIGNATURE-----

1 0

RE: [suse-security] Slightly OT but: SuSE 8.0 Yast Online Update and GPG
by Duane Kehoe 06 May '02

06 May '02

Yah I could, but I really want to use the default distro tools first before I change over to a third party tool. Especially in areas where I could negate my support solutions. Really I guess I have been following fou4s but have no interest in using someone else's tool when I just paid 80.00 to get the supplied and supported tools that should work. Plus SuSE appears to have made significant improvements in speed which was the only negative side of YOU for me. I really and truly believe this is SuSE's responsibility to it's users, especially when they make claims like everything is perfect after a 2 month beta testing period. >I think the bug is in KDE, but not sure. For now, just answer "install" for >all the files, then after the list is downloaded, do the upgrade.....it'll >only upgrade what's needed. Also this is not a kde bug as it occurs from command line, kontrol panel modules, and stand alone GUI Yast2. ______________________________________________________________ Duane Kehoe phone: 414.908.1814 Programmer / Analyst fax: 414.908.1601 Weyco Group, Inc. email: dkehoe(a)weycogroup.com -----Original Message----- From: Markus Gaugusch [mailto:markus@gaugusch.at] Sent: Monday, May 06, 2002 2:52 PM To: Duane Kehoe Subject: Re: [suse-security] Slightly OT but: SuSE 8.0 Yast Online Update and GPG > What is the deal with the broken YOU / GPG on SuSE 8.0pro? Is there a work > around, or a fix planned? Can someone please let me know. I updated to 8.0 > over the weekend and everything was great, until ;( I ran YOU. Which > proceeded to tell me that either GPG was not installed, or SuSE had not > signed the update RPMs correctly, I of course installed the updates anyway. > Now I love SuSE but this is a definite show stopper for me(in fact I thought > about downgrading again!!), and worse yet imagine all the new users who will > be alienated by this type of horrific, and it is, error. I can replicate > this on different machines and on every install, this weekend I ran around > 10 installs to verify all of which reported the same error. Did you try fou4s? http://www.gaugusch.at/fou4s It replaces YOU and works with 8.0 (and gpg) Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus(a)gaugusch.at X Against HTML Mail / \

1 0

SuSE 8.0 no ftp installation possible ? NFS is insecure.
by Gunther Stammwitz 06 May '02

06 May '02

Hello, I've just been trying to install SuSE 8.0 via FTP, but I couldn't believe it hwen I saw it: there is no ftp-installation option. There are only two options left: - Installation via NFS (insecure !!!!) - Installation via SMB/Windows file sharing (doesn't work, because the installer can't find a no further specified module). Please don't force us to use nfs - that sucks and is _really_ insecure. Am I missing something or did SuSE remove the ftp-installer. Andy why doesn't the (also insecure) smb-installer work ? Bye, Gunther

9 11

VPN masquerading
by Joost van der Lugt 06 May '02

06 May '02

Hi all, I am trying to set up VPN masquerading, for a Windows box, and just wondered if there was an easy way to do this, using just the firewall.rc.config script, or do both that plus the custom config script have to be used? I have seen the VPN how-to, however just wondered about a how to aply this with SuSE's scripts. Thanks for any suggestions, (PS if there is someone familiar with setting upo VPN on the SuSe box itself, I would be very interested as well..., of course) - Cheers, Joost

4 4

Partitions
by Ricardo Javier Aranibar León 06 May '02

06 May '02

Hi list, I need information about secure partitions, I have HD 40G, I like a web server an mail server. I saw that web master partitions yours disk with var/, boot/, home/, I like to know what directorys create and how I can asing size for this? If someone can help me, I will Thank full Thanks, Ricardo _________________________________________________________________ Envíe y reciba su correo de Hotmail desde el móvil: http://mobile.msn.com

7 9

Re: [suse-security] DynDNS Clients
by Sven Lehmann 06 May '02

06 May '02

Hello, my English isn't so good, forgives my writing style. I had the problem with the blinking buttons for the standard Kernel of SuSE 7.3, as me used. The problem more highly than 4.2.16 didn't appear after update on any more. Mfg Svele John Andersen <jsa(a)pen.homeip.net> wrote .. > On Sunday 05 May 2002 06:44 am, Andreas.Novak(a)student.fh-nuernberg.de wrote: > > Dear List, > > > > I've recently downloaded the "dyndnsupdate client" for DynDns.org. I > think > > it's much easier to use than the other clients. Anyway I got problems. > > After I execute the binary with the appropriate options, it says that > the > > update was successful, afterwards my WebServer crashes. It refuses any > > input from the keyboard, and the Caps Lock und the Scroll Lock lights > are > > on. I've similar problems with another client for dyndns ( the ddclient > I > > think ). So most probably it's not a specific problem to this client. > > Perhaps I just configured something wrong?? > > Sounds to me like it put your processor in a tight loop. > It matters not how easy to config a daemon is if it causes > this. > > I've been running ez-ipupdate on SuSE, TurboLinux, Mandrake > and FreeBDS without a single problem. Its linked to > the clients pages on dyndns. > > -- > _________________________________________________ > No I Don't Yahoo! > And I'm getting pretty sick of being asked if I do. > _________________________________________________ > John Andersen / Juneau Alaska > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here

1 0

Re: [suse-security] SuSEfirewall2 and nimda
by Michael Stern 06 May '02

06 May '02

>iptables -A block -p tcp --dport http -m state --state NEW,ESTABLISHED,RELATED \ -m string --string "root.exe" -j DROP< i'm curious .. does this drop the packet only or all further packets (which might come in) too? thank you, michael

2 1