February 2003 - openSUSE Security - openSUSE Mailing Lists

ipsec under suse8.1
by Patrick Schelter 02 Feb '03

02 Feb '03

Hi all, i have some problems with my vpn-gateway running with freeswan 1.98b under suse 8.1. When i start ipsec it seems to be work fine. No errors are in /var/log/messages from ipsec, but there is no secured connection running with if ipsec0. No packets are going through this interface. I test it with a ping -p deadbeef and the same pattern will go out through eth1/ipsec0. In another mailing list, i have read, that there is a problem with freeswan under suse 8.1. Whats the problem and what can i do? Best regards Patrick

2 1

SuSEfirewall2 & Checkpoint software
by T. Ermlich 01 Feb '03

01 Feb '03

Hello there, I've got a question, and I found no answer related to this topic - or maybe I'm simply too stupid and didn't get it .... Short story: Home LAN - SuSEfirewall2 System (SuSE 8.1 via DSL) - internet - Checkpoint FW - Companies LAN Long story: Well, my employer has a Checkpoit FW running to protect the companies LAN. We all got so called tokens (looks like an calculator) and some software to be installed on our PCs. The software is called SecuRemote. At home I have a small LAN (one SuSE 8.1 acting as a gateway, 3 MS based clients). I installed the software, checked the Checkpoint website for information how to configure an iptables fw, and I think I did it: the neccessary ports are udp 50, udp 51, udp 500 & udp 2746. So I added the lines: FW_FORWARD="212.212.212.212/32,192.168.10.100/24,udp,50 212.212.212.212/32,192.168.10.100/24,udp,51 \ 212.212.212.212/32,192.168.10.100/24,udp,500 212.212.212.212/32,192.168.10.100/24,udp,2746" FW_FORWARD_MASQ="212.212.212.212/32,192.168.10.100/24,udp,50 212.212.212.212/32,192.168.10.100/24,udp,51 \ 212.212.212.212/32,192.168.10.100/24,udp,500 212.212.212.212/32,192.168.10.100/24,udp,2746" (In both cases 212.212.212.212 is just a place holder!!! ... not the real ip adress.) But it does not work ...... no VPN connection is established between my MS client and a system on the companies LAN. When I connect to the internet directly (eg. via an ISDN dial-up connection) it works fine. Well, one of my thoughts was to modify the MTU/MRU values - but setting them eg. to 1404 didn't solve it. Has anyone around there an idea? Can I use the SuSEfirewall2 for this? Thanks in advance!!!! c y Torsten

2 2

Re: [suse-security] Does "kpackage" do a "checksig" ???
by GarUlbricht7＠netscape.net 01 Feb '03

01 Feb '03

Hi List Does "kpackage" do a "checksig" ??? I normally do my "security updates" via YOU; whereas, rpm package upgrades I downloaded from SuSE (or a SuSE mirror) to a download directory and then install via "kpackage." My question is does anyone know if "kpackage" does a "checksig" on the rpm before installing? (SuSE 8.0 - personal ) I know it checks dependencies but should I do: "rpm --checksig <package name>.rpm" on each rpm ??? Best regards, -- ~Gar __________________________________________________________________ The NEW Netscape 7.0 browser is now available. Upgrade now! http://channels.netscape.com/ns/browsers/download.jsp Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/

2 1