January 2003 - openSUSE Security - openSUSE Mailing Lists

Urgggggg!!! SuSEFirewall2 is getting on my nerves!!!!!
by Chris Bek 08 Jan '03

08 Jan '03

Hi there SuSErs... Well I must be doing something really wrong because everything that I do with SuSEFirewall2 is just not working! I have a small network with 5 PCs (all Win9X) and a Linux box (Currently SuSE 7.3) acting as a server. The server is a DHCP server and a Samba server for the entire network. So far everything is working perfect!!! Users log on the network, logon script executes etc.... Then a new task came up: let's input the internet into the network. Configured a 56Kbps modem on the server with YAST. Manged to get my account setup and running. Made a test connection and netscape works great on the server as well as e-mail (pop3). I tried configuring SuSEfirewall to manage all incoming requests from the PCs of the network. The firewall warned me about masquerading etc. so I downloaded the latest version of SuSEfirewall2 from the internet and installed it. Since I only need direct masquerading to be done (no proxies are currently working on the net) I made all the necessary changes as outlined in the examples supplied with the software. Since I needed to have Samba to keep working on the network, I opened (among others) 139 port for samba to work. Double checked all the changes that I have made and run rcSuSEfirewall2 to see what happens. Strange enough when wvdial executes it tells me that DNS is not functioning properly since www.suse.com cannot be found (or something like that please forgive me I am away from the Linux station now). Further on, when I open mIRC or other like programs (winmx etc) from a station, I look at the activity of IPtraf (I check this to see what happens) and I see no connections being created whatsoever.... mIRC prompts me that there was an error trying to find the host.... I have made no changes to the Win9X PCs. Is there something that I am forgeting to do?? I undestand that it is impossible for all of you to react to this since I have no output of the SuSEfirewall.conf file being published to this message.... I understand. Can someone please send me their configuration file so I can see what you have done, on a system that currently is working fine?? In addition, is there something that I have to do regarding route or routing?? What about the Win9X PCs?? Is there something that I have to do there?? I thank you so very much for all your help is advance!!!! I am killing myself trying to figure this one out for about 2 weeks now and managed nothing more than thin air!!!!! Chris

11 10

problem with routing
by payam payami 08 Jan '03

08 Jan '03

I want to use suse 7.3 for router & i want to do masquerading. I have 2 net card that one is for internal network & another is for external network. eth0 for internal network eth1 for external network I was setting in /etc/rc.config.d/firewall2.rc.config (The options that related to masquerading) and type this command in command line iptables -t nat -A POSTROUTING -j MASQUERADE -o eth1 Is this any problem with this rule or in my configuration file? Because only router system can see internet and another systems can't see internet How can i solve this problem that another systems (internal network) can see internet? Thanks for your help, Payam __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

2 1

Urrgggg!! SuSEfirewall2 is getting FINALLY SOLVED!!!
by Chris Bek 08 Jan '03

08 Jan '03

OK!!! Thank you all!!! I will try that when I get to my linux box and let you know how things are going!! Thank you soo much for all your help!!! Chris

1 0

Urgggggg!!! SuSEFirewall2 is getting on my nerves!!! PART2
by Chris Bek 08 Jan '03

08 Jan '03

Dear all, Thank you for all your help on the matter. It appears that everything that I have done so far regarding the configuration of the SuSEfirewall2 file is correct and as it is supposed to be. I have double checked all the parameters and everything seems fine. I also checked to see if forward has been activated in rc.config and it is so I am also ok there. The only thing that I have not done until now is to write a routing table. This is something that I hear for the first time and I also have no idea how to do it. I hate to bare you with this issue so I will read about it. If someone could give me some extra help on it, like how to write it, which file should I edit, what routing parameters should there be (if there is such a thing?!?!?!) etc, it would be apreciated!!!! many thanks again to all of you!!! Chris

2 1

Glibc update
by webmaster 07 Jan '03

07 Jan '03

Hi All, While updating glibc-2.2-7.i386 to glibc-2.2-25.i386 the next err is seen: It conflicts with ldso-1.9.9-72 However such a file canot be found on system, neither yast nor find gets such a file. Rpm -i --nodeps also stops while updating. Any hints? Thanks Antal ++++++++++++++++++++ Kreorg Oktatóközpont Hunyadi tér 8, Budapest 1067 ++++++++++++++++++++ kreorg(a)kreorg.hu http://www.kreorg.hu ++++++++++++++++++++ Grid - Erő a változáshoz.

3 4

Pam & SSH. Anomalous behaviour (NOT CRITICAL, hope)
by Francisco Escarpa 07 Jan '03

07 Jan '03

Hello, On a reinstallation of SuSE 7.3 ( from bare metal ), I've found I'm unable to log in via ssh. After many headaches, discover that the problem was not Openssh (3.3p6) but pam. In /etc/pam.d/sshd, the item auth required pam_unix.so (original) had to be changed with auth required pam_unix_auth.so to allow ssh logins. In other two machines with 7.3 and same configuration I've the first item, and all works OK. Any idea ? Thanks in advance, Paco. -- Francisco José Escarpa Sánchez-Garnica ------------------------------------------ SANTIAGO & CINTRA IBERICA S.A. C/ José Echegaray 4 - P.A.E. Casablanca B5 28100 ALCOBENDAS - Madrid Tel.: +34902120870 - Fax: +34902120871

1 0

Re: [suse-security] Urgggggg!!! SuSEFirewall2 is getting on my nerves!!!!!
by Jörn Ott 07 Jan '03

07 Jan '03

> Doublecheck "IP_FORWARD" in /etc/sysconfig/sysctl this is in /etc/rc.config on a 7.3 box (or in a file in /etc/rc.config.d/) Masquerading should be activated on the linux box and I strongly recommend setting up a DNS server on that machine (for caching DNS requests). Then put the DNS server of your provider into the forwarders {} section in /etc/named.conf Check if the SuSEfirewall2 script is executed in /etc/ppp/ip-up (AFAIK SuSEfirewall2 wasnt mentioned there, there was only a line about FW1) >> What about the Win9X PCs?? Is there something that I have to do >> there?? you need to set up a default gateway (IP of your server) and a DNS server (either your server if you run a nameserver or the nameserver of your provider). Testing should go the following way: - Trigger a dialing - look into /var/log/messages to see what happened (and find out which DNS server your peer wants to assign you) - look at ifconfig ppp0 (find out your IP etc) - ping the IP of your peer from your linux box - ping a name (www.yahoo.com) from your linux box - ping you linux box from a windoze - traceroute (tracert) an IP from your windoze - nslookup a name from a windoze - traceroute a name from a windoze That should give you some hints on the problem cya Jörn ------------------------------------------------------------ Jörn Ott Telefon: (0 22 24) 94 08 - 73 EDV Service & Beratung Telefax: (0 22 24) 94 08 -74 Lohfelder Str. 33 E-Mail: mailto:white@ott-service.de 53604 Bad Honnef WWW: http://www.ott-service.de/

1 0

AW: [suse-security] Urgggggg!!! SuSEFirewall2 is getting on my nerves!!!!!
by Ulrich Roth 07 Jan '03

07 Jan '03

Hi, > Double checked all the changes that I have made and run > rcSuSEfirewall2 to see what happens. Strange enough when > wvdial executes it tells me that DNS is not functioning > properly since www.suse.com cannot be found (or something > like that please forgive me I am away from the Linux station now). Connect your computer to the internet first, then start up the firewall. Bye Uli -- Ulrich Roth IMPACT Business & Technology Consulting GmbH Im Mediapark 8 / KolnTurm D-50670 Koeln Phone +49-221-93 70 80-29 Fax +49-221-93 70 80-15 E-Mail: roth(a)impact.de

1 0

Apache and SSL
by Wouter 07 Jan '03

07 Jan '03

Hi, I try to install SSL for apache but i have a problem whit it. When i do rcapache start then he ask for een password when i give it (it`s the right pass) he say failed. Apache don`t start. When i check /var/log/httpd/error_log i will see this [Sun Jan 5 01:38:01 2003] [error] mod_ssl: Init: Unable to read server certificate from file /etc/httpd/ssl.crt/server.key (OpenSSL library error follows) [Sun Jan 5 01:38:01 2003] [error] OpenSSL: error:0D09F007:asn1 encoding routines:d2i_X509:expecting an asn1 sequence Can someone help me whit this ? Greets Wouter Groeten Wouter SuSE Linux 8.0, kernel 2.4.18-4GB on a PI-233 Mhz with 64 Mb 1:00am up 21 days, 3:25, 2 users, load average: 0.06, 0.25, 0.25

3 2

trivial question, sorry
by Thomas Ruch 06 Jan '03

06 Jan '03

Hallo, I'm playing something arround with apache on SuSE 8.0 and now want to access some things from the internet. For doing this, I've configured SSL with my apache, witch works fine. Now I want to make this server accessible via https and secure the complete site via userid and password. What is the easiest way to secure a complete site via password. Ofcourse, I do want to access this site from my private netowrk without having to fill in userid/password. In the docs I did only find something to secure directory by directory, which is not, what I want. Thanks for help Thomas

6 5