February 2004 - openSUSE Security - openSUSE Mailing Lists

Updating Squid 3.0
by Eric Kahklen 23 Feb '04

23 Feb '04

I am currently using squid 3.0 since it is the only version that supports OWA reverse proxying. Does SuSE provide patches and updates for this version? If not I may have to compile it myself and use the patches from Squid. Also, does anyone know how compile changes into the SuSE version?? Thanks, Eric

1 0

Re: [suse-security] SuseFirewall2 & Timeout
by Augusto S Amaya 22 Feb '04

22 Feb '04

Exacto , todo apunta a un bloqueo del port 80 justamente porque al bajar el SuseFirewall2 sale sin problemas. Configurá el FW para que puedas enviar y recibir data de dicho port. Sino en caso contrario , metete un par de reglas de iptables. Un abrazo. -------------------------------------------------------------- Augusto S Amaya Administrador Certif. Servidores Linux - Dto. de Produccion de Sistemas Perón 407 Conmutador: 6329-0000 Tel/Interno: 4370/4371/4372 Fax: augusto.s.amaya(a)bancogalicia.com.ar http://www.bancogalicia.com.ar cleidh_mor@btopenwo rld.com Para: Carlos Lorenzo Matés <clmates(a)mundo-r.com>, suse-security(a)suse.com cc: 19/02/2004 17:15 Asunto: Re: [suse-security] SuseFirewall2 & Timeout Por favor, responda a cleidh_mor -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It sounds as though you may be accidentally blocking port 80 incoming... difficult to say without knowing hwo your fw is configured. How do you connect to the internet? What have you setup as your inside and outside intefaces? (outside should be something like ppp0) Is there anythoing between you and the internet? Can you ping or traceroute kde.org with the firewall up? If you can ping with the firewall up, then traffic is passing your machine out to the net, and it's prob your browser settings, if not, it's the firewall. If you post the details above, I'll try and help a bit more. Cheers, Neil On Sunday 15 February 2004 23:27, Carlos Lorenzo Matés wrote: > Hello. > > I'm having problems viewing www pages having SuSEFirewall2 Activated. > > i get this message > > Se produjo un error al cargar http://www.kde.org: > > > Tiempo de espera agotado en el servidor > La conexión era a www.kde.org en el puerto 80 > > > if I stop the SuSEFirewall2 the page is shown right. > > I'm using version 3.1 release 206 > > > > Can someone help me? > > > > Greetings > -- > > Un Saludo. > Carlos Lorenzo Matés -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQFANRlg2h6w8BNEwKYRAvAbAJ99xBf7J5fxcqYkeaspNYgiFsv1RACfaGkr iqto/01Q3Da95l/4jQudErM==T4dU -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

SuseFirewall2 & Timeout
by Carlos Lorenzo Matés 22 Feb '04

22 Feb '04

Hello. I'm having problems viewing www pages having SuSEFirewall2 Activated. i get this message Se produjo un error al cargar http://www.kde.org: Tiempo de espera agotado en el servidor La conexión era a www.kde.org en el puerto 80 if I stop the SuSEFirewall2 the page is shown right. I'm using version 3.1 release 206 Can someone help me? Greetings -- Un Saludo. Carlos Lorenzo Matés

2 2

pptpd - assigning remote peer IPs depending on username?
by Stefan Gofferje 22 Feb '04

22 Feb '04

Hi, does anyone know a (non-RADIUS) way to assign remote peer's IP in dependance of the remote username, so that e.g. sgofferj always gets 192.168.5.1, hmueller always gets 192.168.5.2 and so on...? Regards, Stefan

1 0

kernel update for 9.0
by klaus.ruhwinkel＠fh-muenster.de 22 Feb '04

22 Feb '04

Hi List, I can't install the kernel update for 9.0. I got an error from RPM: invalid signature for the kernel k_deflt and k_athlon. rpm -Uhv k_deflt.rpm error: k_deflt.rpm: V3 DSA signature: BAD, key ID 9c800aca error: k_deflt.rpm cannot be installed Has anybody an idea. thanks Klaus

2 2

Bug in gpg 1.2.2-rc1-SuSE with --passphrase-fd 0?
by Al Bogner 21 Feb '04

21 Feb '04

Is this a bug or a feature with gpg 1.2.2-rc1-SuSE from SuSE 8.2? If I try the command below I am asked for a mantra/password. echo "Testpw" | gpg --batch --passphrase-fd 0 \ --output test.txt.gpg --symmetric test.txt In a German usenet-discussion I was told in MID <slrnc3d94h.m2e.themel-at.linux(a)eristoteles.iwoars.net> that the command works with a "non-SuSE-modified gpg" Do you have any ideas what I have to do to use gpg in a script with a dynamically created password? Al

2 3

Squid 3.0 fails to start? vulnerability????
by Eric Kahklen 21 Feb '04

21 Feb '04

I just installed Squid 3.0 and it won't start? is there a bug or vulnerability in it? or is a problem with 3.0?? here is what squid -k parse says when I try to start it on my SuSE 9.0 box. The same thing is in the logs. Sorry if this is off topic, but Squid is going to help protect Exchange so its security related I think. gateway:~ # squid -k parse FATAL: ERROR: Unknown policy lru Squid Cache (Version 3.0-PRE3): Terminated abnormally. CPU Usage: 0.008 seconds = 0.006 user + 0.002 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 504 Aborted Thank, Eric

6 11

AW: [suse-security] SUSE Security Announcement: Linux Kernel (SuS E-SA:2004:005)
by Stefan.Junge＠ssi-schaefer.de 21 Feb '04

21 Feb '04

Hi, I tried to download the kernel update for SuSE 8.0. But the folder 'images' does not exist. Where to find the kernel patch ? Maybe the folder kernel ? Stefan

3 2

Squid OWA/SSL Suse 9.0
by Eric Kahklen 21 Feb '04

21 Feb '04

I am trying to get Squid 3.0 to "reverese proxy" for my Exchange 2000 OWA interface. I understand there are many configuration options, but these seem to be the most relivant to the Accelerator mode I am looking for. https_port 443 cert=/etc/squid/key-cert.pem defaultsite=exchange.mail.org/exchange cache_peer 10.0.0.5 parent 80 0 proxy-only no-query no-digest front-end-https=on Regardless of what I try, I keep getting the error: Action canceled - Internet Explorer was unable to link to the Web page you requested. I ran into this when I tried using Apache as a reverse proxy. The reason to move to Squid was that I was told that this is fixed in Squid 3.0. Can someone please help me??? I am new to squid so any kind points in the right direction would be much appreciated. Thanks again, Eric

1 0

Mysql, Openssh-Headers
by Kai Pfeiffer 20 Feb '04

20 Feb '04

Hello list, according to Stefans question to the topic "apache Header" I have the same question for Mysql and Openssh. Is it possible to keep them more quiet if my box is scanned by eg. nmap.I use rpm's from suse. Thanks Kai Pfeiffer

3 2