May 2002 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] Telnet-Proxy
by support＠ufos-gmbh.de 09 May '02

09 May '02

Hi all, I implemented a telnet proxy by using the portforwarding feature from openssh. This gives you the advantage that you do not have to forward packets on your firewall and some graet authentication schemes. with best regards, Jörg Zaretzke -------- Original Message -------- Subject: [suse-security] Telnet-Proxy (06-Mai-2002 15:02) From: m.sckopke(a)gis-systemhaus.de To: j.zaretzke(a)ufos-gmbh.de > Hi all, > > has anybody ever heard of a telnet-proxy? > Checkpoints Firewall-1 offers this kind of functionality: > > You connect to the firewall on port 23, firewall asks for > authentification and a hostname and afterwards you get a > transparent telnet session to the named host, without > any intererence by the firewall. > > Is something like that available as open source software? > > Thanks a lot, > > Martin > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here

2 1

Re: [suse-security] Run-level editor in 8.0
by tux the turtle 09 May '02

09 May '02

Alexander Thoma am Sonntag, 5. Mai 2002 14:11: > that's why i'm administrating unix/linux systems using an editor and a > shell. that's all you need. yast(1/2) is running while installation and > can go where ever it likes after that. Yup - I agree. It took me 2 days setting up 8.0 on my HP Omnibook XT1000 as well a on my K7 Desktop (2 days for each!). Result: permanent crashes due to some weired setups in standard-config. On my K7 i'm back to 7.3 and on the HP i have (finally) running a 8.0 minimal system installing all other by hand. But there still is a slight fear of what happends underneath the keys i still don't know... TuThTu --- <<Jo, Jeffrey!>>

2 1

"interessantes" Netzwerk Problem
by d_lord＠gmx.de 09 May '02

09 May '02

Hi @ all, I have got some problems setting up a "virtuall" network. Desktop1 (eth0:1) 192.168.168.5 | (eth0) 192.168.5.25 | | (eth1) 192.168.5.1 Server1 (eth1:1) 192.168.168.3 Server1 (eth0:1) 192.168.168.1 | (eth0) xxx.xxx.xxx.xxx | |-----LAN ---- GW zzz.zzz.zzz.zzz -------- INTERNET | | | (eth1) yyy.yyy.yyy.yyy Server2 (eth1:1) 192.168.168.2 Server2 (eth0:1) 192.168.168.4 | (eth0) 192.168.1.1 | | (eth0) 192.168.1.2 Desktop2 (eth0:1) 192.168.168.6 I have to astablish a direkt connection from Desktop1 to Desktop2 and the other way round. World be best if tunneled over ssh but not really needed As you can see I've assigned a virtuall IP to every NIC I use. Between Server1 and Server2 there is a LAN but the IPs from eth0 of Server1 and eth1 of Server2 are public. So I decided to use some privat IP addresses here too so the Gateway blocks dem. The communication between Desktop1 and Server2 is working well if I use the normal way which means connect to server1 MASQ , connect to server2 but I don't reach Desktop2. Most of the time this is wanted. But sometimes I like to build a cluster from Desktop1 and Desktop2 so i have to have direkt ssh access, smb access and some further ports and services. Portforwarding isn't really usefull I think because I need a couple of ports. Now, lets see what I have: Desktop 1/2 kernel 2.4.16 + ipchains (no iptables at the moment) Server 1/2 kernel 2.2.20 + ipchains At the moment I can ping 192.168.168.4 and 192.168.168.2 from Desktop2 and 192.168.168.3 192.168.168.1 from Desktop1. Server1 kann ping Server2 over the public and the privat adress But I really don't get a connection between Desktop1 and Desktop2 I think something with the routing is broken maybe because both NICs of the Servers are in the same subnet but how could i manage the problem without putting the to NICs into the same subnet? I hope it's clear to you what I like to do so could please anyone give me a hint what I miss or have to do? The only thing that has to work the direkt connection between Desktop1 and 2 Thanks D. Lord PS.: Hope this is not too OT :-) and sorry for my poor english -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

2 1

SuSE 8.0
by Bill Eastman 08 May '02

08 May '02

I got SuSE 8.0 yesterday. To begin with, the DVD will not boot, therefore I will be returning it to Best Buy. Next I discovered that locate is not installed. In one of the books, it says it can be installed after the default installation, but the book does not say what group it is in. And the install everything option was not there. Does anyone know what group locate is in, so I can install it? ---------------- The instructions said Requires Windows 95 or better, so I installed Linux

4 3

OT Postings
by Jörg Mayer 08 May '02

08 May '02

Hello, is it just my impression or is the amount of off-topic postings increasing? This is not the suse-highendusers/suse-netadmin mailinglist, it's suse-security. Ciao Jörg -- Jörg Mayer <jmayer(a)loplof.de> Signature fault, brain dumped

8 8

Re: [suse-security] SuSE YOU scheduling
by mario libraro 08 May '02

08 May '02

> I wrote fou4s ( http://www.gaugusch.at/fou4s ) _exactly_ because of this > problem. > Maybe there IS a solution with YOU, but I don't think so. > > check it out ... > Markus oh nice.. really.. this is not what i were looking for but it perfectly solves my problem :)

1 0

Virtual network cards
by Kim L. Christensen 08 May '02

08 May '02

Hello list, Is it possible to create more than 4 different ip addresses for 1 network card.? looking in the rc.config file, there is an example for up to 4 adresses but I would like to know if this is the maximum or not. Regards Kim Christensen

2 1

Yast2 authentication and RPM signature authentication
by Rafael E. Herrera 08 May '02

08 May '02

Hi, I just upgraded to 8.0 from 7.3 and have been experiencing some warnings from Yast2 (although I got the same in 7.3). 1. When launching Yast2 I get: Session management error: Authentication Rejected, reason : None of the authentication protocols specified are supported and host-based authentication failed Why is this message given and how should I configure my system to implement the authentication required? 2. I just got a security announcement and there is a note at the bottom about how to installing suse's signature. I saved the public signature and run the suggested command: # gpg --batch; gpg < announcement.txt | gpg --import gpg: Go ahead and type your message ... something ^D gpg: no valid OpenPGP data found. gpg: processing message failed: eof gpg: Signature made Wed 08 May 2002 05:58:59 AM EDT using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" Could not find a valid trust path to the key. Let's see whether we can assign some missing owner trust values. No path leading to one of our keys found. gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. gpg: Fingerprint: 73 5F 2E 99 DF DB 94 C4 8F 5A A3 AE AF 22 F2 D5 gpg: key 9C800ACA: not changed gpg: key 3D25D3D9: not changed gpg: Total number processed: 2 gpg: unchanged: 2 This is hard to interpret, but I gather the key was not fully authenticated. If I run ca checksig using rpm, I get: # rpm -v --checksig shadow-4.0.2-88.i386.rpm shadow-4.0.2-88.i386.rpm: MD5 sum OK: ee8e88db89c24da38498c8612f3cdfb2 gpg: Signature made Thu 25 Apr 2002 01:40:07 PM EDT using DSA key ID 9C800ACA gpg: Good signature from "SuSE Package Signing Key <build(a)suse.de>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. gpg: Fingerprint: 79C1 79B2 E1C8 20C1 890F 9994 A84E DAE8 9C80 0ACA Again, this does not look good either. How is the suse key installed properly and how do I test that I did it right? Thanks. -- Rafael

1 0

Re: [suse-security] SuSE 8.0 (fwd) - OT
by Markus Gaugusch 08 May '02

08 May '02

Maybe I should have replied to the list ... even if it is off-topic ---------- Forwarded message ---------- Date: Wed, 8 May 2002 14:54:55 +0200 (CEST) From: Markus Gaugusch <markus(a)gaugusch.at> To: Bill Eastman <beastman(a)austin.rr.com> Subject: Re: [suse-security] SuSE 8.0 Try the following (insert first suse cd) mount /cdrom cd /cdrom zgrep locate INDEX.gz if that doesn't work, do zgrep locate ARCHIVES.gz |grep bin I always copy index.gz and archives.gz to my harddrive for convenience. hth, Markus -- _____________________________ /"\ Markus Gaugusch ICQ 11374583 \ / ASCII Ribbon Campaign markus(a)gaugusch.at X Against HTML Mail / \

1 0

SuSE YOU scheduling
by mario libraro 08 May '02

08 May '02

Hi to all listmates, after many many searches in the web i haven't still understood a pretty simple thing: how can I schedule (with crond for example) the execution of Yast Online Update? I think i must execute y2bignfat via crond with some parameter but i haven't found any clear documentation on it. Can someone help me? Mario Libraro

1 0