February 2004 - openSUSE Security - openSUSE Mailing Lists

UML as security layer and for server consolidation
by GentooRulez 15 Feb '04

15 Feb '04

User-Mode Linux as security layer and for server consolidation? Due to lack of sufficient machines to provide all services i have to offer to my network participants i wonder wether it is a good idea to encapsulate each service (as e.g. kerberos,ldap,bind,mail,dhcp,samba) in several UMLl environments with own filesystem for each and to duplicate this box with heartbeat and drbd (or something like that) for high(er) availability. (sorry for that long sentence) What do you think? Are these services strongly separated doing that way or can an attacker control whole system by compromising only one uml-provided service to easy (when I follow all security rules while setting up each subsystem and isolating UML instances using iptables on base system)? Thx in advance Michael

1 0

sendmail/amavis.
by elfed lewis 14 Feb '04

14 Feb '04

Hi There, Im using sendmail and amavis on a suse 9.0 (32 bit) machine along with sophos antivirus. Ive said yes to the "use amavis" in the amavis file inside /etc/sysconfig. Amavis starts up fine, sendmail starts up fine (without any error messages). ive configured amavisd.conf as per the instructions in /usr/share/doc/ packages/amavis. Ive also run /etc/SuSEconfig to recreate any neccessary conf files, and then rebooted the server. but when i send the eicar test virus, it doesnt virus scan at all! But no errors, nothing saying amavis or sendmail have a problem. Sendmail just ISNT sending the email to amavis! Any ideas what i am doing wrong? Id attach the config files, but im assuming that this mailing list would chop them off? Hwyl, Elf

3 5

Re: [suse-security] list error? [was: [suse-security] Got so many messages from me.. :( ]
by reyman 13 Feb '04

13 Feb '04

No, it's not list error.. it's my mail server :( I using postfix, when I postquere -p, there was still another messages that not send (my SMTP think it's not send), so my server kept sending to this list.. I have delete that queue, and right now I'm sending from another server. I try to fix this.. I'm really sorry with this inconvinience.. On Fri, 13 Feb 2004 03:12:01 +0100, "Andreas Bittner" <bittner(a)stud.fh-heilbronn.de> wrote : > > i am getting this email over and over again from the suse list server... > > is this a bug? > > 2/12/2004, 12:55PM, since then i have received this message already > eleven times every few hours and sometimes every few minutes... > > last (11th) arrival was 2/13/2004, 3:05AM > > anyone at suse? > > > > ----- Original Message ----- > From: "Arie Reynaldi Zanahar" <reyman(a)reynaldi.com> > To: <suse-security(a)suse.com> > Sent: Thursday, February 12, 2004 12:54 PM > Subject: [suse-security] Got so many messages from me.. :( > > > > All, > > > > Sorry with this inconience, but I didn't post so many messages to this > list, > > it seems I send to this list like 10 times more.. But I didn't do that > :(( I > > dont know wha'ts going on... I'll try to unsubscribe first.... > > > > -- > > Arie Reynaldi Zanahar > > reyman(a)reynaldi.com > > > > > > -- > > Check the headers for your unsubscription address > > For additional commands, e-mail: suse-security-help(a)suse.com > > Security-related bug reports go to security(a)suse.de, not here > > > > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > > > >

1 0

Got so many messages from me.. :(
by Arie Reynaldi Zanahar 13 Feb '04

13 Feb '04

All, Sorry with this inconience, but I didn't post so many messages to this list, it seems I send to this list like 10 times more.. But I didn't do that :(( I dont know wha'ts going on... I'll try to unsubscribe first.... -- Arie Reynaldi Zanahar reyman(a)reynaldi.com

2 1

AW: [suse-security] IRC bots with wwwrun
by Rasp, Robert 12 Feb '04

12 Feb '04

Hello, on my company's WWW-Server and Firewalls i have a partition only for /tmp and i mount it "rw nodev noexec". This may help CU Robert -----Ursprüngliche Nachricht----- Von: Evert Smit [mailto:admin@sidhe.net] Gesendet: Donnerstag, 12. Februar 2004 13:24 An: suse-security(a)suse.com Betreff: [suse-security] IRC bots with wwwrun hi all, some guy manages to either missuse phpnuke or contenido on mysever to install his irc bots in my /tmp and var/tmp directories. any of you know about some measaures i could take against this? regards -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

DMZ and SuSE firewall
by Manuel Balderrábano 12 Feb '04

12 Feb '04

Hi to all. I'm planning to set up a demilitarized zone between the Internet and the Intranet. This is the first time I configure a firewall and feel a bit scared! :-) On between I will install a web/postfix server, and maybe plugging some more servers in the future. Of course, I want all computers on the Intranet to have access to the Internet with no restrictions at all. How do I have to configure both firewalls? Both should use NAT or maybe just one of them? Even better: Where can I find documentation about configuring such a scenario? (Please, not a 2000-page manual) Thanks in advance.

2 3

IRC bots with wwwrun
by Evert Smit 12 Feb '04

12 Feb '04

hi all, some guy manages to either missuse phpnuke or contenido on mysever to install his irc bots in my /tmp and var/tmp directories. any of you know about some measaures i could take against this? regards

2 1

Grep uncomment lines from .conf
by Arie Reynaldi Zanahar 12 Feb '04

12 Feb '04

Dear, I want to grep lines that not commented from a file, Someone said that I can use $sed -e '/^[[:space:]]*#/d;/^[[:space:]]*$/d' file.conf but I think it's too long, I have use $egrep -v '^#' file.conf but it containt so many blank lines. Is there any suggest what should I use ? Maybe like combining egrep with other script.. As simple as possible :) regards, -- Arie Reynaldi Zanahar reyman(a)reynaldi.com

8 7

new XFree86 Bug
by Thomas Biege 12 Feb '04

12 Feb '04

Hi. FYI: I am sure you already heared about the local buffer overflow in XFree86's fontfile code. There are some more buffer overflows in the code that needs to be fixed. I hope we found them all. New packages are submitted now and will be released after QA-testing finished successfully. Bye, Thomas -- Thomas Biege <thomas(a)suse.de>, SUSE LINUX AG, Security Support & Auditing -- # If you have the "driftnet" program installed, webcollage can display a # collage of images sniffed off your local ethernet, instead of pulled out # of search engines: in that way, your screensaver can display the images # that your co-workers are downloading! -- xscreensaver source-code

1 0

/dev/random support for openssl and suse8.1
by Jens Gassmann 12 Feb '04

12 Feb '04

Hi, my mailserver(qmail) could not connect to other mailserver with TLS. I read that qmail and openssl must have /dev/random but at my installation (suse 8.1) there is no /dev/random? How can i install /dev/random? Jens

4 4