May 2002 - openSUSE Security - openSUSE Mailing Lists

fou4s - Fast OnlineUpdate for SuSE 0.4.0
by Markus Gaugusch 20 May '02

20 May '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The next version of fou4s is out! - From the changelog: * Fixes for 0.3.0: + Environment variable LANG is unset, because GPG sig check fails with non-english environment + Check if /etc/suseservers exists * New options: --buildtime, --force, --fullpath, --version * New config file options: CheckFou4s, UseFullPath, DefaultVerbosity, ProxyUser, ProxyPasswd, Interactive, PatchesCont, Benchmark, RemoveAfterInstall * Downloaded files can now be placed in subdirectories (a1, n1, ...) * The -f option supports more than one RPM now (if used as last option) * Less messages with verbosity level 1 (-v), to see update info from cronjobs * Update descriptions are formatted now for better readability * New option handling with getopt, supporting now "-ab" in addition to "-a -b" * Options -u and -e/-i are allowed together now (package list update and check/installation in one step) MD5sums: d6640f65a348ca3411fa9872075a2e47 fou4s-0.4.0.tar.bz2 6add4bc11149281074e00d01766f1063 fou4s-0.4.0-8.noarch.rpm Users of the --checkfou4s option will be notified about the new version automatically during the next run of fou4s. regards, Markus Gaugusch - -- _____________________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign fou4s(a)gaugusch.at X Against HTML Mail / \ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE86L89DqGTK6+2bXwRAoUlAKDP46vxTWBNEFxaFt8pQylHATqBGwCffLZX B/UuYxGbVMaN1tExFNzV2Qg= =qyKH -----END PGP SIGNATURE-----

1 0

Sendmail out-of-box secure enough?
by Pep Serrano 20 May '02

20 May '02

Hello list, Here is a question perhaps a little naive :-) I am not sendmail expert at all and I do wonder... Is sendmail in SuSE Linux out-of-thebox secure enough for a with permanent connection to inet? I mean just setting the configuration "Host with permanent network connection" in Yast2... In case it is not (I guess) what minimal config do you propose to run a sendmail to just deliver emails from localhost to inet and to allow receiving only emails for its own domain? Any good recommendations? Cheers Pep Serrano.

13 19

Firewall2 config
by Luis Oliveira 19 May '02

19 May '02

Hi, I want to activate the firewall in Suse 8.0 Pro. I use my laptop at work and home. I have just one ethernet interface eth0. At home I have a ADSL connection (modem connected to a linksys router that functions also as a 4 port switch to my home network). IP address is given in both situations (home and office) by dhcp server. What should I configure as internal and external interface in yast2 - security - firewall ? I just want to enable ssh service on my machine. Thanks ./ luis oliveira

2 1

SuSE 7.3 on sparc and ip portforwarding
by Alexander Topolanek 19 May '02

19 May '02

Hi, Not shure to which list this question belongs, so I'm sending to both... I'm running a 7.3 on a sparc, which is used as an ADSL-router - I'm using a 2.2 Kernel and SuSEfirewall, and the I tried to setup some ip portforwarding. SuSEfirewall now tells me "I need /usr/sbin/ipmasqadm for running but can not find it, aborting." Did't find any rpm for that... Funny enough, on my intel box (with 7.3 & 2.4.x) it's there, but binary. Is that tool somewhere hidden in another rpm? Or should I get the sources and build it? Best regards Alexander

1 0

Re: ezmlm response
by Aaron Flores 17 May '02

17 May '02

--------------------------------- Do You Yahoo!? La emoción e intensidad del deporte enYahoo! Deportes.

1 0

RE: [suse-security] Ok, I Give...
by Peer Stefan 17 May '02

17 May '02

hi, > From: Gary Counsellor [mailto:sineigs@eskimo.com] > > I have been seeing this since I started SFW2 and conect via ppp. > Not sure why it's there, tried looking for clues as to why, > who but found nothing meaningful. Figured it might be me and my > isp (Well, I gotta think of something) this is most likely your isp, because 224.0.0.1 is the address for IGMP, a multicast routing protocol. have a look at /etc/rc.config.d/firewall2-custom.rc.config, line 26 onward: #example: allow incoming multicast packets for any routing protocol iptables -A INPUT -j ACCEPT -d 224.0.0.0/24 it's nothing to worry about, if you don't have routing protocols enabled. > Usually I just copy error messages into google and find what > I need to know but that didn't work this time. > Any suggestions? I'd be happy just to stop seeing it reported > but stopping it entirely, if feasible, would be cool also. > > SuSE-FW-UNAUTHORIZED-TARGET IN=ppp0 OUT= MAC= SRC=209.244.43.100 > DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=24643 PROTO=2 i asked google about DST=224.0.0.1 and got this link (first page): http://lists.debian.org/debian-firewall/2001/debian-firewall-200108/msg00056 .html > > Thanks for the help, you're welcome :) > -- > Gary Counsellor > http://www.musician2000.com > sineigs.all.attitudes(a)eskimo.com > Please remove .all.attitudes before replying regards, stefan

5 6

FTP-Proxy
by Michael Appeldorn 17 May '02

17 May '02

Hi list to increase to security i've installed suse-ftp-proxy to not directly contact the internet with the clients. but now all ftp-session ends up the ftp-server on the firewall and wont get transparent routed Thx for all proposals in advance Michael Appeldorn The config file [-Global-] User ftp ServerType standalone LogDestination daemon DestinationTransferMode passive PortResetsPasv yes Listen 192.168.11.11 # may be needed in NAT'ed/Masqueraded environments #TranslatedAddress 0.0.0.0 UseMagicChar % AllowMagicUser yes AllowTransProxy yes

2 1

RE: [suse-security] NTP über Firewall
by adkorte 17 May '02

17 May '02

>===== Original Message From "Reckhard, Tobias" >That's seems strange to me, ntpdate should fail, saying that it can't >find any suitable servers for synchronisation. It should not segfault. That was the behaviour in SuSE 7.3. After an upgrade to SuSE 8.0 I also see the reported behaviour. If ntpdate cannot connect to my (local) ntp server (because it is taken offline), it crashes on a segfault. Not a very nice way to terminate... Regards, Arjen

1 0

What can i do if someone tries to exploit me?
by Martin Gudel 17 May '02

17 May '02

Hi all, following almost all security relevant problems, one of my machines got exploited last week. After i fixed this hole, my firewall now repeated the same trials from the same source on other machines which are already protected against this attack. The person on the other side retries and retries. It's a uk-source, I'm in Germany. What can I do?- Is there any "global police department" for this? Thanks for help Martin

3 2

No FW
by Florian Winger 17 May '02

17 May '02

Hi everybody, I want a absolutly open system, cause it is not connected to the internet only in my LAN. I´m using SuSE 8.0 and have already removed SUSEfirewall2, personal-firewall, yast2-config-firewall and yast2-trans-firewall packages with yast2. Is there anything more to do? thank a lot!! Flo -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

3 2