January 2004 - openSUSE Security - openSUSE Mailing Lists

Discussing W32 worms and viruses and some other crap on this list
by Martin Peikert 27 Jan '04

27 Jan '04

Hello, list admins, please corect me if I'm wrong. Since this list is intended for 'Linux security discussions'[1], I really do not know why MS worms and viruses are discussed here. The same holds for spam you get as a result of posting to this list. Please reduce the traffic to discussions that are related to Linux _and_ security, not _only_ security, crap related to MS products or spam (for that issue I would contact the list admins - they can ban spammers from the list, I cannot). TIA GTi [1] http://www.suse.com/us/private/support/online_help/mailinglists/ P.S.: Please don't cc me, I'm on the list.

3 3

Re: [suse-security] nat of locally generated connections
by BLeonhardt＠analytek.de 27 Jan '04

27 Jan '04

I was looking for a solution concurrently in the web - but didn't find anything that answers my question . imho, this should work : iptables -A OUTPUT -t nat -o eth1 -j MASQUERADE but I get following error : iptables: Invalid argument -bruno Martin Peikert <list(a)nolog.org> schrieb am 27.01.2004 10:59:13: > Hello, > > BLeonhardt(a)analytek.de wrote: > > how do I masquerade / source-nat locally generated packets with iptables - any hints ? > > rtfm and the HowTos you'll find at netfilter.org. Next time try google > first before asking '31337' questions. > > GTi

4 5

Allow ssh access only at certain times
by Tom Knight 27 Jan '04

27 Jan '04

Hi, I allow ssh access to a number of accounts on one of my servers from a list of IP addresses, but I don't really want people to be using this service outside normal working hours.. I'm restricting access to these accounts thus: In /etc/pam.d/sshd, add: account required pam_time.so In /etc/security/time.conf, add: sshd;*;user;Wd0900-1700 All well and good, BUT... I can't log in! (And yes, it _is_ a weekday between 9am and 5pm....) Given that the only system change is the addition of that line, and that in /var/log/messages I see: Jan 27 12:07:13 carbon pam_time[4642]: garbled syntax; expected name (rule #1) Jan 27 12:07:13 carbon sshd[4642]: PAM rejected by account configuration[6]: Permission denied I'm using SLES 8, and my pam package is version 0.76-109 Does the positioning of the line in pam.d/sshd matter that much? It's currently the last "account" line, but it was the first "account" line. (And no, Mr PromotionFactory, I don't want to be on your list) Tom. --------------- Tom Knight System Administration Officer Arts & Humanities Data Service Web: http://www.ahds.ac.uk Email: tom.knight(a)ahds.ac.uk Tel: (0)20 7928 7371

4 4

Please remove this @#$%^&% from the list.
by Kenneth Schneider 27 Jan '04

27 Jan '04

On Tue, 2004-01-27 at 07:11, maillist(a)promotionfactory.net wrote: > Please reply to this e-mail to receive our current specials. If others > should get this, include their e-mail also. This is the whois info. Maybe this could be posted on a few newsgroups, I'm sure they would like to get the additional phone calls. Registrant: Lockhart Design (LMTIZXWXGD) 7505 Big Buck Trail Waxhaw, NC 28173 US Domain Name: PROMOTIONFACTORY.NET Administrative Contact, Technical Contact: Dunn, Lance (LD3695) dunnnc(a)AOL.COM Dunn Mfg Corp dba Adcap Line 1400 Goldmine Rd. Monroe, NC 28110 US 704-283-2147 fax: 704-289-6857 Record expires on 19-Aug-2004. Record created on 19-Aug-2003. Database last updated on 27-Jan-2004 07:16:01 EST. Domain servers in listed order: NS1.PROMOTIONFACTORY.NET 66.193.15.252 NS2.PROMOTIONFACTORY.NET 66.193.15.253 This comes back from ARIN kens:~ # whois 66.193.15.252 Time Warner Telecom TWTC-NETBLK-4 (NET-66-192-0-0-1) 66.192.0.0 - 66.195.63.255 Charlotte Colocation TWTC-CHRL-C-CHCO-00 (NET-66-193-8-0-1) 66.193.8.0 - 66.193.15.255 Perhaps a complaint to Time Warner would be in order. -- Ken Schneider unix user since 1989 linux user since 1994 SuSE user since 1998 (5.2)

2 1

Test - ???
by Giovanni Racciu 27 Jan '04

27 Jan '04

I've received a mail from the list (today at 0.38) with the subject test. It appears to be a w32.novarg.a@mm virus. Any idea ? Giovanni

6 6

promotionfactoory again!
by Giovanni Racciu 27 Jan '04

27 Jan '04

After having sent a message to the list I got back a mail from promotionfactory.net !! Didn't we get rid of this? Giovanni

6 6

Re: [suse-security] Test - ???
by mailings - kunstwerke.designs 27 Jan '04

27 Jan '04

Hi Giovanni, i got the same message too from lists.suse.com. Regards Ben --------------------- the source is: Received: from lists.suse.com (lists.suse.com [195.135.221.131]) but did you (all) receive the same e-mail ? Giovanni

1 0

nat of locally generated connections
by BLeonhardt＠analytek.de 27 Jan '04

27 Jan '04

Hi, how do I masquerade / source-nat locally generated packets with iptables - any hints ? -bruno

1 0

FreeSwan Kernel Config
by David White 27 Jan '04

27 Jan '04

I am trying to get Freeswan to work with my SuSE 8.1 Pro installation. My kernel does not have KLIPS support, so I am trying to recompile it. I got the files from the http://www.suse.de/~garloff/linux/FreeSWAN/ website and I am still coming up blank. I downloaded and installed the following files via YaST2 freeswan-1.99_0.934-0.i586.rpm freeswan-1.99_0.934-0.src.rpm km_freeswan-1.99_0.934-0.i586.rpm I then issued the following commands # cd /usr/src/linux # make xconfig (left all the default settings in xconfig) # make dep # make bzImage # cd /usr/src/kernel-module/zz_freeswan # make xgo As I understand it, at this point, I should be able to go to the NETWORK OPTIONS in the xconfig and selection the options for FreeSwan and IPSEC. However, I do not have any options for FreeSwan anywhere in the configuration window! I do not understand why this is the case. I am new to kernel configs, so any information would be helpful! Thanks

2 1

test
by nordi＠addcom.de 26 Jan '04

26 Jan '04

The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment.

1 0