January 2003 - openSUSE Security - openSUSE Mailing Lists

apache + mod_frontpage
by Franck 24 Jan '03

24 Jan '03

Lo All is anyone help me to configure mod_frontpage with apache. I'm on SuSE 8.1 with apache + SSL + PHP4 + apache.contrib.rpm + mod_frontpage. All are installed but how can i start apache with frontpage extensions ? When i lauched : /usr/lib/frontpage/version4.0/bin/fpsrvadm.exe -> choice1 -> choice 1 -> /etc/httpd/httpd.conf, i have "cannot open srm.conf" :( Help me plizz or a howto !!! 100000 thanks .. -- Franck \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ franck(a)linuxpourtous.com Fingerprint : 20F4 DBE5 7234 52D6 3610 BB17 D73C 1F7A 9E64 F6A1 http://www.linuxpourtous.com Clef PGP : http://www.linuxpourtous.com/download/franck_linuxpourtous.asc \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\

2 5

RE: [suse-security] apache + mod_frontpage
by Peer Stefan 24 Jan '03

24 Jan '03

Hi Ruprecht, > From: Ruprecht Helms [mailto:rhelms@mayn.de] > Hi Thorsten Marsen, > > Be aware to > >> make a decision about Extensions 2000 *OR* 2002 - I think > 2002 is much more > > safe - and may be strongly recommened for that - but > requires a httpd-Patch! > > That is a very big reason for nontaking frontpage. Others are > the blowing up > of html-pages with ms-special-commands. And the third, > relating to the last - > you need extensions to execute such sites and you can only > upload the pages > from frontpage. >From a security point of view I totally agree with you. > Other editors (Dreamweaver, Quanta, asWedit, ...) produces > normal site without > the above mentioned bullshit of extensions and you need not especially > ms-extensions for running and you can upload the pages via ftp. Yeah, but sometimes clients just ignore any "wise-guy-talk". And after all, as a system administrator you're supposed to serve your clients. So if a client wants to use Frontpage (ignoring all warnings and rational thinking), you can either say no and loose this client or enable the Frontpage Extensions on your webserver. The choice is yours. And even if a system administrator wants to enable the Frontpage Extensions for his/her Apache webserver, there's no need to start flaming. And really cool websites are written with vi and best viewed with lynx. Forget about Macromedia Dreamweaver and all the other bloatware ;-) > Regards, > Ruprecht Regards, Stefan

3 3

amavis and new antivir output
by eMail Postamt 24 Jan '03

24 Jan '03

Hi, the output of new ANTIVIR was changed. OLD: AntiVir / Linux Version 2.0.3 Copyright (C) 1994-2002 by H+BEDV Datentechnik GmbH. /var/spool/vscan/amavis/amavis-07866131/parts/msg-16570-2.exe Date: 29.07.2002 Time: 05:04:35 Size: 87951 VIRUS: file contains code of the virus 'Worm/Klez.E' NEW: AntiVir / Linux Version 2.0.6-3 Copyright (C) 1994-2002 by H+BEDV Datentechnik GmbH. All rights reserved. /var/spool/vscan/amavis/amavis-05958731/parts/msg-2885-2.pif Date: 24.01.2003 Time: 11:43:36 Size: 65536 ALERT: [Worm/Sorbig.A virus] /var/spool/vscan/amavis/amavis-05958731/parts/msg-2885-2.pif <<< Contains signature of the worm Worm/Sorbig.A my new search string: @virusname = [$output =~ /:\s+?\[(.*?)\s/g); I hope thats ok. It's not tested with multiple virus files in a mail. regards Matthias Bitterlich Hauptamt - EDV --- Zentraler eMail - Ein- und Ausgang der Stadt Waren (Müritz) --- Stadt Waren (Müritz) Zum Amtsbrink 1 17192 Waren (Müritz) Tel: (+49) 3991 177-0 Fax: (+49) 3991 177177 Internet eMail: postamt(a)waren-mueritz.de www: http://www.waren-mueritz.de

1 0

RE: [suse-security] apache + mod_frontpage
by Olsson Mattias 24 Jan '03

24 Jan '03

Been trying to follow you conversation ... im missing one part thoe:) I have SuSE 8.1 with apache and mod_fp installed but i cant find a good page with some installation / configuration instructions. HEHE in other words i cant get it to work:) Can somebody pls send me an link to a setup guide for suse.... Regards /Mattias

1 0

Antwort: Re: [suse-security] revocation of a pgp-key
by Bruno Leonhardt 24 Jan '03

24 Jan '03

there is no expiration date ! :-( I've made some bull shit about 2 years ago - I created a key and now I found it on the certserver :-( ... maybe I'll find the passwort anywhere ... "Sven 'Darkman' Michels" <sven(a)darkman.de> 22.01.03 16:26 An: suse-security(a)suse.com Kopie: Thema: Re: [suse-security] revocation of a pgp-key Bruno Leonhardt wrote: > Hi , > > how do I delete or revoke a key from the key-server if I've lost the pass > and have no revocation-cert ? no way :( You have to wait until the key expires... -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

3 2

Fwd: Re: [suse-security] 3 SuSEfirewall2 questions
by Harald Wallus 24 Jan '03

24 Jan '03

On Tuesday 21 January 2003 18:32, Richard Ems wrote: > Hi list. > > This is my 2nd try. > I hope this time I get some answers ;-) > > I have 3 questions about SuSEfirewall2. > This is a SuSE Linux 8.1 system. > > > > 1) What is NEW_FW_MASQ_DEV good for? > > I have in my /etc/sysconfig/SuSEfirewall2 > > FW_DEV_EXT="eth0 eth0:3" > > and > > FW_MASQ_DEV="$FW_DEV_EXT" > > > but in /sbin/SuSEfirewall2 (from SuSEfirewall2-3.1-26) FW_MASQ_DEV is > "filtered" and eth0:3 discarded. So after this filtering I have only > FW_MASQ_DEV="eth0". > > Is this needed/wanted? Why? The SuSEfirewall2 script pay no attention on alias in this device definitions. > ========== > 2) I'm trying to connect from a public external ip (a) to a private > internal masqueraded ip, over the public ip address (b) at eth0:3. > > From tcpdump on both the external and internal devices, pakets are > being correctly forwarded from ext to int, but when responses arrive at > the internal device they are being dropped on the last forward_int chain > rule. > > For this to work I have set on /etc/sysconfig/SuSEfirewall2 > FW_FORWARD_MASQ="1.2.3.4,192.168.30.15,tcp,2222,22,5.6.7.8" > > where 1.2.3.4 is the ext source public ip (a) > and 5.6.7.8 is the public ip address (b) > > Does someone have any clue? Your line is wrong: 192.168.30.15/32,5.6.7.8/32,tcp,22 <Internal IP that have to mask>/<netmask, 32 for a single IP>,<IP of the public adress, not of the external interface>/<netmask of this source, 32 for a single IP>,<protocol, it is only allowed tcp or udp>,<port of the public interface,80 to access a webserver> It is not possible to do redirect with that options. There are some restriction of the SuSEfilewall2, but the advantage to config it with a vi. > ========== > 3) What do _ext/_int/_dmz mean on forward_xxx or input_xxx ? > [forward|input]_pakets_COMING_FORM_xxx > or > [forward|input]_pakets_GOING_TO_xxx ??? I think you mean FW_SERVICES_DMZ_TCP and such definitions: It means that you can access from intern with port >1024 to the defined port. I hope that helps you a bit. Perhaps you try first a sample configuration and extends that. Another tools is fwbuilder, which I think it looks very nice. But I have to configure firewalls remotly and thats the reason I prefere SuSEfirewal. Greetings Harald -- Dr. Harald Wallus netlike-gmbh Am Listholze 78, D-30177 Hannover Tel: +49(0)511 90 95 1-23 Fax: +49(0)511 90 95 1-90 Email: wallus(a)netlike-gmbh.de Internet: http://netlike-gmbh.de ------------------------------------------------------- -- Dr. Harald Wallus netlike-gmbh Am Listholze 78, D-30177 Hannover Tel: +49(0)511 90 95 1-23 Fax: +49(0)511 90 95 1-90 Email: wallus(a)netlike-gmbh.de Internet: http://netlike-gmbh.de

5 8

gpg - question
by BLeonhardt＠analytek.de 24 Jan '03

24 Jan '03

Hi, is anybody using GnuPG for encrypting mail-messages ? My Question : If I made my private and public key and even a revocation-cert. Is the revocation-cert used to delete or deactivate my public key ( which has the sender ) or is it just a info-message for not using this key because it's insecure / no longer used or anything else ? regards, ..:: bruno ::..

4 3

iptables: Invalid Argument
by payam payami 23 Jan '03

23 Jan '03

I want to use suse 7.3 for router & i want to do masquerading. I have 2 net card that one is for internal network & another is for external network. eth0 for internal network eth1 for external network I have typed in /etc/rc.config.d/firewall2.rc.config this rule: iptables -A FORWARD -i eth1 -s 192.168.1.0/30 -j MASQUERADE Is this any problem with this rule? Because when the system is booting in process boot i get this line: Starting Firewall Initialization: (phase 3 of 3) iptables: Invalid Argument and only router system can see internet and another system can't see internet How can i solve this problem that another system (internal network) can see internet? Thanks, Payam __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

3 2

Ipsec and SuSEfirewall2
by Kriszti=?iso-8859-1?q?=E1n=20G=E1ncs?= 23 Jan '03

23 Jan '03

Hello! Does anybody made a net like us (described later) with freeswan connection? If it works somewhere please send me your SuSEfirewall2 config file. Server1: SuSE 8.0 Leased Line fix ip number Masquraded net 192.168.0.0/24 samba Server2 SuSE 8.1 ADSL dinamyc ip number masquraded net 192.168.99.0/24 samba We wish to connect the two subnets but we have the shunt SA or no eroute message and the kernel drop every package on the ipsec interface. Thanks Krisz --

2 1

signed messages
by Boris Kimel 23 Jan '03

23 Jan '03

Hello list, Why send signed messages to this list? My Outlook keeps crashing on every signed message... Boris. -- -- -- -- -- Boris Kimel N. D. Zelinsky Institute of Organic Chemistry 47 Leninsky Prospekt, Moscow, Russia Phone1: +7 095 135-89-41 Phone2: +7 095 938-35-10 Phone3: (inside IOC) 9-80 auto secretary, please use! Fax: +7 095 135-53-28 Email: webmaster(a)1303.ru -- -- -- -- --

3 2