July 2002 - openSUSE Security - openSUSE Mailing Lists

unable to connect via ssh
by Oliver Ziltener 24 Jul '02

24 Jul '02

Dear list This is not directly a security question, but the technologie what I use comes from the security area. So I hope somebody can support me from this list. After a clean shutdown (due maintanence at the 230V system) of the system, it was not possible to connect again via ssh. And of course afew days before was ssh working perfect. I can see in the sniffer files that the tcp 3 way handshake is working fine, but afterwards I get a timeout. No information in any logfiles about ssh failure. I use on a win a putty-client. The ssh daemon is running. I use suse 8.0 with susefirewall2. The system response to port 22 (checked with nmap) And I have physically access to the system. Has anybody an idea how to fix that? thanks in advance Oliver

2 1

AW: [suse-security] relaying denied
by Thomas Schmidt 24 Jul '02

24 Jul '02

Perhaps a problem with DNS Have you insert the MX records in the DNS Database? If you don´t set a point after the full qualified domain name, this error appears Try somethink like this IN MX 10 linux-server.yourdomain.net. Which bind version do you use? > -----Ursprüngliche Nachricht----- > Von: Miguel Albuquerque [mailto:mfoacs@e-workshop.ch] > Gesendet: Mittwoch, 24. Juli 2002 13:53 > An: suse-security(a)suse.com > Betreff: [suse-security] relaying denied > > > Hello, > > I'm unable to send a e-mail message my server denies relaying no > mather > if they are allowed in the spam control rules. This affects only one > domain name and I can't figure out what's wrong. > > Greetings, > Miguel > > > > ---- > .-. Basilinfo Sàrl > /v\ We Run SuSE Network Systems Web Management > // \\ *The LINUX Experts* c/o Miguel Albuquerque > /( )\ Av. Miremont 46 > ^^-^^ 1202 - GE, SWITZERLAND > > Tel: +41 (22) 782 5344 Fax: +41 (22) 782 5348 > mailto:mfoacs@e-workshop.ch http://www.basilinfo.com > > > -- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

1 0

Re: [suse-security] relaying denied
by BLeonhardt＠analytek.de 24 Jul '02

24 Jul '02

are you using sendmail with tcpwrapper ??? maybe that's just another possibility ... ... maybe you're just using the wrong password ;-) ... ... maybe your domain is not listed in /etc/mail/access or you didn't rebuild your access-db Regards / Mit freundlichen Grüßen Bruno Leonhardt CLP Domino R5 Systemadministrator ----------- AnalyTek Systemhaus Hospital Str. 2a D-65589 Hadamar Besuchen Sie uns im Internet unter : http://www.analytek.de Stefan Suurmeijer <stefan(a)raptorweb.nl> 24.07.02 14:33 An: Miguel Albuquerque <mfoacs(a)e-workshop.ch> Kopie: suse-security(a)suse.com Thema: Re: [suse-security] relaying denied Which MTA are you using? If sendmail, did you hash the access database after editing? Without more details on your situation it's hard to say anything sensible Stefan Miguel Albuquerque wrote: >Hello, > >I'm unable to send a e-mail message my server denies relaying no >mather >if they are allowed in the spam control rules. This affects only one >domain name and I can't figure out what's wrong. > >Greetings, >Miguel > > > > > -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

relaying denied
by Miguel Albuquerque 24 Jul '02

24 Jul '02

Hello, I'm unable to send a e-mail message my server denies relaying no mather if they are allowed in the spam control rules. This affects only one domain name and I can't figure out what's wrong. Greetings, Miguel ---- .-. Basilinfo Sàrl /v\ We Run SuSE Network Systems Web Management // \\ *The LINUX Experts* c/o Miguel Albuquerque /( )\ Av. Miremont 46 ^^-^^ 1202 - GE, SWITZERLAND Tel: +41 (22) 782 5344 Fax: +41 (22) 782 5348 mailto:mfoacs@e-workshop.ch http://www.basilinfo.com

3 2

Fw: [suse-security] Kazaa
by Thiego Xavier (MIU) 24 Jul '02

24 Jul '02

> Ok Ray Leach > It could send me the rule of iptables please? > Thanks?

4 4

Rule Iptables to KAZAA
by Thiego Xavier (MIU) 24 Jul '02

24 Jul '02

Hello Somebody has the rule of iptables to liberate the gates of kazaa? Send me please? Thiego Xavier Miu Assessoria www.miunet.com.br

3 2

af-packet ??
by Gunther Stammwitz 23 Jul '02

23 Jul '02

Hello, the daily security-check-script on one of our SuSE 8.0-servers has reported something that is being called "af_packet". I have never heared this before and would like to ask if someone on the list knows what this means. Maybe this is a trojan or something like that ? Greetings, Gunther Changes in your daily security configuration of linux: OLD: /var/lib/secchk/security-report-daily Fri Jul 19 00:00:00 2002 NEW: /var/lib/secchk/security-report-daily.new Tue Jul 23 00:00:01 2002 * Changes (+: new entries, -: removed entries): + af_packet + Connectivity & Colocation @ www.rackbase.de + ----------------------------------------------- Mainlab GmbH Sachsenhäuser Landwehrweg 236 60598 Frankfurt am Main Tel. / Fax: 0700-2MAINLAB (0700-26246522) Email: info(a)mainlab.de Web: www.mainlab.de

4 5

IPSec (FreeS/WAN) not in kernel-sources
by Stephan Uhlmann 23 Jul '02

23 Jul '02

Hi all, I use SuSE 8.0 and saw that it has the compiled kernel module for IPSec (FreeS/WAN). That's fine. Now I wanted to compile my own kernel (no module support for higher security) but saw that it lacks the FreeS/WAN code. The ipsec.c is not there. So my question is if that's normal or do I miss something? It's not a big problem, because I alsways can manually patch the FreeS/WAN code into the kernel, but I just found that strange. Also makes me wonder what else is in the kernel binary and not in the sources. Cheers, Stephan -- I intend to live forever. So far so good.

2 1

Re: PHP Security Advisory -- SuSE non-IA32 versions vulnerable?
by Scott Courtney 23 Jul '02

23 Jul '02

Good afternoon! I notice that the Bugtraq page says: "So far only the IA32 platform has been verified to be safe from the execution of arbitrary code. The vulnerability can still be used on IA32 to crash PHP and, in most cases, the web server." Roman Drahtmueller then said, on list: "...not present in SuSE products." Could Roman, or someone else from SuSE, please clarify the preceding statement as to whether this "not present" is applicable to SuSE's S/390 and zSeries Linux distributions? In other words, is SuSE's PHP binary package immune due to SuSE's choice of compile-time settings and so on, or was Roman's statement based on the Bugtraq comment of IA32 being less vulnerable and therefore the bug being not as big an issue for the "main" version of SuSE? Thanks! Scott -- -----------------------+------------------------------------------------------ Scott Courtney | "I don't mind Microsoft making money. I mind them courtney(a)4th.com | having a bad operating system." -- Linus Torvalds http://4th.com/ | ("The Rebel Code," NY Times, 21 February 1999) | PGP Public Key at http://4th.com/keys/courtney.pubkey

4 4

BIND8 on SuSE80 Pro with SuSEFirewall2?
by Geordon VanTassle 23 Jul '02

23 Jul '02

Hello , I'm trying to run an authoritative nameserver on my server, but I must have missed something. Can someone point me in the right direction when using SuSEfirewall2-2.1-57 ? Thanks. -- Best regards, Geordon mailto:gvantass@interaccess.com PGP Key ID: 0xFCF06B79 Your Fortune ==> "A business whose only goal is profit is a poor kind of business."

1 0