March 2004 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] DHCP Problems
by Schoenwaelder Oliver 11 Mar '04

11 Mar '04

Hi Scott, well, it looks like there are problems with your DHCP server. The 169.254/16 subnet is the MS APIPA (automatic private IP addressing) net. It provides DHCP-configured clients the ability to assign itself an IP address if a DHCP server is not available. APIPA doesn't provide a gateway, thus they can communicate only with others in the same subnet (usually other MS clients). APIPA clients will check every five minutes whether a DHCP server becomes available. If there is one it stops the APIPA service and initiates the DHCP lease process. So have a look at your DHCP server log files and/or client event log for any DHCP message types (DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, DHCPACK and in your case maybe DHCPNACK, DHCPDECLINE). What happens if you do a manual ipconfig /release and ipconfig /renew? Hth, Olly > -----Original Message----- > From: Scott Wrobel [mailto:saw424@xeomail.com] > Sent: Thursday, March 11, 2004 4:14 AM > To: suse-security(a)suse.com; suse-slstd-e(a)suse.com > Subject: [suse-security] DHCP Problems > > > > > i have just learned about / resurched / configured / and > tested DHCP yesterday. > When i started i didn't know what it was and it was not > even installed on my computer. I installed it, read about > it, conigured the files, and then tested it once on my test > network with two windows comps. When i shut everything down > at the end of the day all the computers work working exactly > like i wanted them to. The windows computers contacted the > linux box receaved fixed ip addresses based on hardware and > worked fine. > Today i start everything up and nothing is working the same > way. the ip addresses on the windows comps are > 169.254.150.xx when the specified range is 192.168.1.1xx the > subnet masks are wrong and the gateways on the windows comps > are non existant. the only thing that does work is that the > two windows computers can see each other just fine. both > windows computers have been instructed to talk to the linux > box and one (win 2000 pro) says that it has done just that > when asked with ipconfig /all, the other one is going > somewhere totaly different for the address. they are > supposed to go to 192.168.1.44 and the stray (win 98) is > going to 255.255.255.255 for a DHCP server???????????? > Does anybody know what is going on??????????? > thx scott > > FadMart - http://www.fadmart.com - An Associate of the > World's Largest Store! > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here >

1 0

server setup
by Scott Wrobel 11 Mar '04

11 Mar '04

I am trying to setup a server for my windows home network (Win 98 to win XP, around 5-8 stationary computers and 2 laptops), initally it was going to be only a logon and internet connection server however the more research i do on the subject, the more it seems that i am making an all purpose server that will need to handle every possable server aspect with the sole exception of storing files. I now that i am probably missing somthing so if there are any programs that i have not included on the following list please tell me. These are the programs that range from properly installed and are working flawlessly to something i just found out about a few hours ago and I have just started tweaking with: Samba works great, don't need any help (that i know of) DHCP Works good, a little buggy Squid GOD HELP ME THIS IS A HEADACHE BIND I just learned about this 2 hours ago and i am going to tackle it tomarrow. For those in the Security group that keep telling me that my messages are off topic i am sorry, but i will need help configuring a firewall in a few days, and whatever else comes up pertaining to the subject, and i think that a firewall has alot to do with security ;). FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

1 0

windows to squid to internet
by Scott Wrobel 11 Mar '04

11 Mar '04

I am trying to set up two windows boxes to connect to the internet throught my linux box using squid. I have made my own squid.conf file as shown below. I have gone into the windows computers (2000 pro (192.168.1.27) and 98 (192.168.1.25)) and told them both to use the proxy server over a network, address: localhost and port: 3128, however i am getting no results. The windows computers are manually configured to be in the same workgroup, gateway, netmask, and have the same first 3 segments of the ip addres as the server and can ping the server. Samba is running and is working. DHCP is giving me problems now that i have finally gotten it working. The modem in the linex box does connect to the internet. Any help / opinions / reasons why this is not related to a security mailing list ;) / etc. will be accepted warmly. http_access allow src 192.168.1.25 http_access allow src 192.168.1.27 http_access allow all acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 192.168.1.25/255.255.255.0 acl localhost src 192.168.1.27/255.255.255.0 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

updating postfix 1.1.12-13 to postfix 2.*
by Helder Lopes 10 Mar '04

10 Mar '04

Dear Friends; Hello I installed Suse 8 with postfix 1.1.12-13. Which comes with suse 8. I tryied to do an update on your website. But there is no postfix 2.*. how can I install it?? I very new at this. My problem is that I have the email server up and running well. I'm trying to stop receiving spam and viruses with body_checks and header_checks any solutions?? Thanks Miguel

2 1

Re: [suse-security] Tripwire twpol.txt for SuSE
by Paul Stoller 10 Mar '04

10 Mar '04

Sorry Oliver no one has replied yet so far. If I receive a sample configuration I will email it you too =) >If someone sent the file to Paul personally - I am interested in that file, >too! > >Thank you, greetings >Oliver ____________________________________________________________ Find what you are looking for with the Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

RE: [suse-security] postfix/imap/cyrus-sasl and Pam backend
by sematin＠mtn.co.ug 10 Mar '04

10 Mar '04

Hmm! I haven't tried this before but have you looked at: http://www.postfix.org/docs.html There seem to be a number of howtos there that could be relevant. Noah. > -----Original Message----- > From: Markus Feilner [mailto:lists@feilner-it.net] > Sent: 10 March 2004 14:12 > To: Suse-Security > Subject: [suse-security] postfix/imap/cyrus-sasl and Pam backend > > > Hello List, > I am looking for a site with good information about postfix, > cyrus-sasl > (and later kerberos authentikation against Active Directory). I have > postifix and imap running with cyrus sasl and sasldb, but i did not > manage to get it to authenticate against pam or kerberos. > I have been googling, but i could not find a solution. > > I know that: > - /etc/sysconfig/saslauthd tells saslauthd which mech to use. > the entry is: SASLAUTHD_AUTHMECH=pam > > - /usr/lib/sasl2/smtpd.conf > pwcheck_method: saslauthd > mechlist: plain login crammd5 digestmd5 > > -/etc/posstfix/main.cf > for testing: > (...) > smtpd_sender_restrictions = permit_sasl_authenticated, > permit_mynetworks, reject > smtpd_sasl_auth_enable = yes > smtpd_sasl_security_options = noanonymous > broken_sasl_auth_clients = yes > (...) > > Now: postfix grants all users access based on user/password > kombinations > in sasldb - and only those users. Shouldn't saslauth use the local > user/password Kombination? > (BTW: Why does sasl with PAM only work with PLAIN?) > > Thanks a lot! > -- > Mit freundlichen Grüßen > Markus Feilner > -- > Linux Solutions, Training, Seminare und Workshops - auch > Inhouse Feilner IT Linux & GIS Erlangerstr. 2 93059 Regensburg > fon: +49 941 70 65 23 - mobil: +49 170 302 709 2 > web: http://feilner-it.net mail: mfeilner(a)feilner-it.net > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

3 5

Tripwire twpol.txt for SuSE
by Paul Stoller 10 Mar '04

10 Mar '04

ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/tripwire.rpm While browsing the update directory for SUSE 9.0 at ftp.suse.com I saw the above mentioned tripwire update. I installed it but I noticed that the twpol.txt sample configuration that is included with tripwire is for Redhat 7.0 and nothing for SUSE. Can someone be so kind to share their twpol.txt configuration for Suse 9.0 with me and the rest of the list? Thank you so much. ____________________________________________________________ Find what you are looking for with the Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

2 1

modem problems
by Scott Wrobel 10 Mar '04

10 Mar '04

I have 2 internal modems one is new. Both work fine in windows computers and the new one says that it is linux compatable and even has driver files (for Red Hat) on the disk that came with it. Unfortunetly my linux box, which is going to be an internet connection server, doesn't detect eather of them. I cannot figure out how to use the drivers off the disk eather. I have tried switching the locations in the motherboard and rebooting each time with no results. HELP PLEASE!!!!!!!!!!!!!!!!!! I also have an external modem that i have gotten to work with the box however it is on load and i will have to return it soon. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

Processor Suse professional 9
by Valderes Branco 10 Mar '04

10 Mar '04

Hello! Please... The SuSe 9 has support it technology to hyper-threading for pentium 4? Thanks... Valderes

3 2

/bin/login file dissapeared
by Kheli 10 Mar '04

10 Mar '04

Dear List, Recently i can't telnet to my linux box. A warning appears. It said that it cannot find /bin/login file. I cannot login through console either. I just can ssh to my box. My Linux box is running Red Hat 7.2 Kernel 2.4.19. I use the box as squid proxy server and Apache web server. What should i do ? Thanks

3 3