April 2003 - openSUSE Security - openSUSE Mailing Lists

SuSE FW on CD II
by Holger Janning (Telehaus Nordhorn GmbH) 09 Apr '03

09 Apr '03

Hallo, wir haben eine Konfig. nach folgendem Schema erstellt FWonCD --> GW --> I-Net 3 Netzwerkkarten 1. Karte (eth0) IP: 172.... (priv Netz) 2. Karte (eth1) IP: 10.... (priv Netz) 3. Karte (eth2) IP: 80.... (öffentliches Netz) eth0 geht Richtung I-Net und maskiert das internen Netz der Client PC. btw: die 172.* Adressen werden auf einem weiteren Rechner (default-GW) wieder in eine "echte" IP umgesetzt. eth2 soll eine DMZ abbilden Wir haben auf unserer Seite (GW) eine Route eingetragen, die das (80.*-Netz) über den GW 172.* findet. Wie muss die Konfig im FAS geändert werden, damit die FW die Anfragen an die DMZ annimmt? Danke!

2 1

rcsshd reload
by Hofmann Informatik 08 Apr '03

08 Apr '03

Hi, I have a box running SuSE8.2 Why kills "/etc/init.d/sshd reload" the sshd-deamon instead of reloading it? Output in /var/log/messages: "sshd[22265]: Received SIGHUP; restarting" I miss a second line like: "Server listening on 192.168.10.3 port 22" Any ideas? Best regards Sandro Trinkler

3 4

RE: [suse-security] problem wiht SuSEfirewall2
by Ricardo Javier Aranibar León 08 Apr '03

08 Apr '03

Edwin, I attch the file firewall2.rc.config, I think that this file is good, but i prefer that you check it. My problem is that I can't to do ping, pop3 from my internal network to my server if someone can help me i will thankfull. Regards, Ricardo >Reply-To: <edwin(a)nsi.co.id> >To: "'Ricardo Javier Aranibar León'" <ricardo_jal(a)hotmail.com> >Subject: RE: [suse-security] problem wiht SuSEfirewall2 >Date: Tue, 8 Apr 2003 09:22:45 +0700 > >Can you send me the etc/rc.config.c/firewall2.rc.config so I can help >you determine the problem. >I just installed it and maybe I can help you solve the problem. >And also give information how you connet to the internet and where you >put the email server (in internal network or publicly open) > >Greetings >M. Edwin >============================ >http://www.nsi.co.id >============================ > > > >-----Original Message----- >From: Ricardo Javier Aranibar León [mailto:ricardo_jal@hotmail.com] >Sent: Tuesday, April 08, 2003 5:28 AM >To: suse-security(a)suse.com >Subject: [suse-security] problem wiht SuSEfirewall2 > > >Hi list, > >I have a problem with my network. >I have a server with two interfaces: >eth0: internal network (192.168.100.0/24) >eth1: external network (205.58.172.41/18) >Today I installed SuSEfirewall2, Before I had installed SuSEfirewall >with >ipchains, in my LAN i could sended mail and connected to this server >external. >Now I installed SuSEfirewall2 with iptables and from my LAN (192...) I >can't >connect to my server of mail (POP3) and I can't to do ping it but I can >connect to internet. > > >Regards, >Ricardo > > > > > >_________________________________________________________________ >Charla con tus amigos en línea mediante MSN Messenger: >http://messenger.yupimsn.com/ > > >-- >Check the headers for your unsubscription address >For additional commands, e-mail: suse-security-help(a)suse.com >Security-related bug reports go to security(a)suse.de, not here > _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/

1 0

ipsec problem after kernelupdate
by Ralf Farke 08 Apr '03

08 Apr '03

Hi all, and another problem after kernelupdate to k_smp-2.4.18-243 .... First i got the kernel-panic problem again, but the second problem i got was more important for me: ipsecure doesn't works now. And therefore no connect to other hosts. Not so good for a nis-server Has anybody the same problem and can give me a hint? It seems, that the new kernel doesn't supports ipsec. Cause the system ist critical, i coudn't test a long time and i installed the original kernel immediatly. The system: 1,8 Ghz Pentium, SuSE 8.0 Kernel 2.4.18-4GB 2 scsi Harddisk freeswan-1.95_0.9.8-69 /var/log/messages: sunix ipsec_setup: Starting FreeS/WAN IPsec 1.95... Apr 8 13:31:27 sunix ipsec_setup: modprobe: Can't locate module ipsec Apr 8 13:31:27 sunix ipsec_setup: kernel appears to lack KLIPS Apr 8 13:31:27 sunix ipsec_setup: ^M^[[105C^[[10D^[[1;31mfailed^[[m^O Thanks again, Ralf Farke

1 0

Strange atalk behaviour - i forgot something...
by lars 08 Apr '03

08 Apr '03

..... We have a NT box which is doing the seed routing here... it may be a problem with that box. when I close down the NT machine, rcatalk status says: papd: No process afpd: No process timelord: No process atalkd:OK but wiothout the nt-box as a seedrouter it wont work, too :-(....

1 0

Strange atalk behaviour
by lars 08 Apr '03

08 Apr '03

Hi, folks! again a strange behavoiur here which I cant hendle alone ;-) netatalk on a Suse 8.1 w/ 2.4.19 and netatalk 1.5.3.1-71 was running for about 3 - 4 weeks without problems. users have their folders, shadowed passwords, can log in and so on. since yesterday - and I swear I changed NOTHING on any configurationfile!! - when the user logs in, no volumes are visible... rcatalk status says: papd: OK afpd: OK timelord: No process atalkd: No process /var/log/messages says: setifaddr: eth0 - invalid argument. try specifying a smaller net range. BUT NOW (!) it´s getting even better and more funny: we have another machine in the same subnet with identical config (suse, kernel, atalk), where the user can see and use their volumes - and rcatalk status and /var/log/messages saying exactly the same things!!! We have a NT box which is doing the seed routing here... it may be a problem with that box. when I close down the NT machine, rcatalk status says: papd: No process afpd: No process timelord: No process atalkd:OK 1. Do anyone have had similar experiences? 2. why (why, why, why...) did it work for some weeks (i didnt reboot the atalk-linux-box in that time) and suddenly shows the strange behaviour with no volumes visible (though accepting the user with his password)? thanx in advance for hints et.al. lars -- http://www.ruebenschweine.de Try also: http://www.warzenpower.de +++ http://www.lars-und-sandra.de +++ http://www.r100rt.de Diese email wurde automatisch generiert, Sie können deshalb nicht darauf antworten; webmaster(a)warzenpower.de

1 0

Shutdown Problem with Dawicontrol DC-100 Raid
by Lars Vaessen 08 Apr '03

08 Apr '03

Hi list I'm booting Suse 8.1 on an Dawicontrol DC-100 Raid. Here I got no Problems. But when I shutdown the system by the command " halt " : the computer is going down, the harddisk are stopped but the computer doesn't switch off. Thanks for helping Lars

2 1

suse-security-unsubscribe@suse.com
by Astleitner Thomas 08 Apr '03

08 Apr '03

unsubscribe

1 0

problem wiht SuSEfirewall2
by Ricardo Javier Aranibar León 08 Apr '03

08 Apr '03

Hi list, I have a problem with my network. I have a server with two interfaces: eth0: internal network (192.168.100.0/24) eth1: external network (205.58.172.41/18) Today I installed SuSEfirewall2, Before I had installed SuSEfirewall with ipchains, in my LAN i could sended mail and connected to this server external. Now I installed SuSEfirewall2 with iptables and from my LAN (192...) I can't connect to my server of mail (POP3) and I can't to do ping it but I can connect to internet. Regards, Ricardo _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/

2 1

Linux-Server is frozen after security update of kernel
by Habichtsberg, R. 07 Apr '03

07 Apr '03

Hi, I'm not sure if it is the reason but the probability is high: After the security update of the linux kernel, in my case from k_deflt-2.4.18-57 to k_deflt-2.4.18-261, I have two frozen systems. In the first case we are running a program that starts some stored procedures in a Informix Database (IDS 9.30.UC1). After a few minutes there are no more actions possible on that server. You can't find any message in /var/log/messages or online.log. Even recursively started commands like ps or onstat -g ses sid -r 1>protfile does not generate any output. In the second case the similar happened during daily cronjob which builds and loads a database of ca. 8 GB size. My question: Has anybody else problems with these kernel updates related to Informix Dynamic Server. Reinhard.

12 18