June 2003 - openSUSE Security - openSUSE Mailing Lists

DHCP-Relay over ipsec
by Luis Abenza Sánchez 20 Jun '03

20 Jun '03

Hi All!! I have 5 networks connected to one central network over ipsec. Each network has a different ip family 192.168.x.0/24. I want to configure a DHCP server in the central network to serve all the networks. I only have to install a DHCP-Realy in each gateway of each network and configure the DHCPSERVER="192.168.0.10" for example, or not? I found the DHCP-Relay software in: http://www.strongsec.com/freeswan/dhcprelay/ Is this the best to use? Thanks!!

2 1

Re: [suse-security] IP accounting
by GentooRulez 20 Jun '03

20 Jun '03

>>When i came back this morning the daemon went away? > > Oh. It shouldn't do that :) > When i came back THIS morning there was to read root@box:/home/trafmon-20030618 > ./trafmon -l /var/log/trafmon log file corrupted root@box:/home/trafmon-20030618 > shitty, isnt it? Do i have to sigHUP trafmond nightly via logrotate necessarily? Michael

2 1

Re: [suse-security] IP accounting
by GentooRulez 20 Jun '03

20 Jun '03

> On Wed, Jun 18, 2003 at 02:38:54PM +0200, GentooRulez wrote: >> Any suggestions are appreciated > > Try ftp://verein.lst.de/pub/people/okir/trafmon > > It does traffic accounting by snooping traffic, currently limited to > TCP. Traffic analysis is offline, so that you can do your summaries at > whatever time intervals you like. > > I'm using it to do TCP traffic accounting of a smallish server. > > It doesn't do exactly what you want, but maybe it comes close enough so > that you can adapt it. > > Olaf Thanks. I test some short tests. When i came back this morning the daemon went away? Should i put it in /etc/inittab to automatically re(spawn|start) it? Is there a short briefing for trafmon analysis tool or do i have to parse the source? Michael

2 1

X Listening
by Richard Ibbotson 19 Jun '03

19 Jun '03

Hi Anyone know how to stop X-windows and port 6000 from listening on SuSE 8.2 ? I've already tried changed the line ... :0 local /usr/X11R6/bin/X :0 vt07 to :0 local /usr/X11R6/bin/X :0 vt07 --nolisten tcp but X-windows is still listening on port 6000. What else do I need to change ? Thanks -- Richard

6 6

ProFTPd-vulnerability with PostgreSQL
by Lothar Kimmeringer 19 Jun '03

19 Jun '03

Hello, if you're using ProFTP with a postgres-based user-authentification, you should look at http://lists.netsys.com/pipermail/full-disclosure/2003-June/010504.html (if you haven't already yet). Regards, Lothar

1 0

RE: [suse-security] quick sshd question
by Michael Ryan 19 Jun '03

19 Jun '03

... This prevents root from logging in - what I want is to prevent everyone OTHER than root logging in. Michael -----Original Message----- From: Sturgis, Grant [mailto:Grant.Sturgis@arraybiopharma.com] Sent: Thursday, June 19, 2003 5:19 PM To: Michael Ryan; suse-security(a)suse.com Subject: RE: [suse-security] quick sshd question man sshd_config or vi /etc/ssh/sshd_config PermitRootLogin no -----Original Message----- From: Michael Ryan [mailto:michael.ryan@storm.ie] Sent: Thursday, June 19, 2003 10:15 AM To: suse-security(a)suse.com Subject: [suse-security] quick sshd question Hi list, How can I prevent all local users EXCEPT root from logging on via sshd? Thanks in advance, Michael -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here This electronic message transmission is a PRIVATE communication which contains information which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Please notify the sender of the delivery error by replying to this message, or notify us by telephone (877-633-2436, ext. 0), and then delete it from your system.

3 3

quick sshd question
by Michael Ryan 19 Jun '03

19 Jun '03

Hi list, How can I prevent all local users EXCEPT root from logging on via sshd? Thanks in advance, Michael

1 0

YOU behind a proxy
by Lukacs Zsolt 19 Jun '03

19 Jun '03

Hello list I have updated my system from SuSE 8.1 to 8.2 and I have some problems using YOU. After the update I could not make it work, but it worked before. I have tried to set the http_proxy variable to "http://proxyserver:port" but it says that there has been an HTTP error 407. Then I have tried to set it to "http_proxy=http://user:password@proxyserver:port" than it says that can not resolve proxy "user". How can I tell to the YOU to use the proxy with user and password. I have also tried to set the proxy in the wgetrc file to "http_proxy=http://proxyserver:port" and the proxy-user=user, proxy-passwd=password but nothing happened. I have tried the wget and it works yust fine. Anybody experienved the same problem or can anybody tell me some a solution to my problem? Thanks Zsolt

2 1

GnuPG from Windows to Linux
by Christof Schmitt 19 Jun '03

19 Jun '03

Hello List, first i tried Windows Version of GnuPG (WinPT) and transfered the public key to the keyserver and it worked. Then i installed gpa and gpg to my SuSE Linux 8.0. After that I wanted to import the secret key from the cd, where i secured the keys (windows-Version), to the Linux-System, but it does not work. The only thing, i can do, is to create a new key (the same name and passphrase and key-length, but another day) with a public and a secret part, but i fear, that the Linux-Version and the Windows-Version of the keys are different now. What did i wrong? Or am i wrong? Is there a possibility to transfer the keys from Windows to Linux? with regards, Chris

3 2

openssh Port24 New Trojaner ?
by Lars Vaessen 19 Jun '03

19 Jun '03

Hi list My hosting Partner is telling me that my Server is hacked. It shout be an problem with an wrong version of openssh and an trojaner will be installed on port 24. No more information Now I have checked my Server, but there is nothing. I'm using the version openssh 3.5p1 (Suse 8.2) Does somebody knows something about this trojaner ? nmap -sS 217.*.*.* Starting nmap V. 2.54BETA30 ( www.insecure.org/nmap/ ) Interesting ports on (217.*.*.*): (The 1542 ports scanned but not shown below are in state: filtered) Port State Service 21/tcp open ftp 22/tcp open ssh 25/tcp open smtp 80/tcp open http 110/tcp open pop-3 113/tcp closed auth 443/tcp closed https #################################################### Thanks for helping Lars

3 2