March 2004 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] DHCP Problems
by Schoenwaelder Oliver 11 Mar '04

11 Mar '04

Hi Scott, well, it looks like there are problems with your DHCP server. The 169.254/16 subnet is the MS APIPA (automatic private IP addressing) net. It provides DHCP-configured clients the ability to assign itself an IP address if a DHCP server is not available. APIPA doesn't provide a gateway, thus they can communicate only with others in the same subnet (usually other MS clients). APIPA clients will check every five minutes whether a DHCP server becomes available. If there is one it stops the APIPA service and initiates the DHCP lease process. So have a look at your DHCP server log files and/or client event log for any DHCP message types (DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, DHCPACK and in your case maybe DHCPNACK, DHCPDECLINE). What happens if you do a manual ipconfig /release and ipconfig /renew? Hth, Olly > -----Original Message----- > From: Scott Wrobel [mailto:saw424@xeomail.com] > Sent: Thursday, March 11, 2004 4:14 AM > To: suse-security(a)suse.com; suse-slstd-e(a)suse.com > Subject: [suse-security] DHCP Problems > > > > > i have just learned about / resurched / configured / and > tested DHCP yesterday. > When i started i didn't know what it was and it was not > even installed on my computer. I installed it, read about > it, conigured the files, and then tested it once on my test > network with two windows comps. When i shut everything down > at the end of the day all the computers work working exactly > like i wanted them to. The windows computers contacted the > linux box receaved fixed ip addresses based on hardware and > worked fine. > Today i start everything up and nothing is working the same > way. the ip addresses on the windows comps are > 169.254.150.xx when the specified range is 192.168.1.1xx the > subnet masks are wrong and the gateways on the windows comps > are non existant. the only thing that does work is that the > two windows computers can see each other just fine. both > windows computers have been instructed to talk to the linux > box and one (win 2000 pro) says that it has done just that > when asked with ipconfig /all, the other one is going > somewhere totaly different for the address. they are > supposed to go to 192.168.1.44 and the stray (win 98) is > going to 255.255.255.255 for a DHCP server???????????? > Does anybody know what is going on??????????? > thx scott > > FadMart - http://www.fadmart.com - An Associate of the > World's Largest Store! > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here >

1 0

server setup
by Scott Wrobel 11 Mar '04

11 Mar '04

I am trying to setup a server for my windows home network (Win 98 to win XP, around 5-8 stationary computers and 2 laptops), initally it was going to be only a logon and internet connection server however the more research i do on the subject, the more it seems that i am making an all purpose server that will need to handle every possable server aspect with the sole exception of storing files. I now that i am probably missing somthing so if there are any programs that i have not included on the following list please tell me. These are the programs that range from properly installed and are working flawlessly to something i just found out about a few hours ago and I have just started tweaking with: Samba works great, don't need any help (that i know of) DHCP Works good, a little buggy Squid GOD HELP ME THIS IS A HEADACHE BIND I just learned about this 2 hours ago and i am going to tackle it tomarrow. For those in the Security group that keep telling me that my messages are off topic i am sorry, but i will need help configuring a firewall in a few days, and whatever else comes up pertaining to the subject, and i think that a firewall has alot to do with security ;). FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

1 0

windows to squid to internet
by Scott Wrobel 11 Mar '04

11 Mar '04

I am trying to set up two windows boxes to connect to the internet throught my linux box using squid. I have made my own squid.conf file as shown below. I have gone into the windows computers (2000 pro (192.168.1.27) and 98 (192.168.1.25)) and told them both to use the proxy server over a network, address: localhost and port: 3128, however i am getting no results. The windows computers are manually configured to be in the same workgroup, gateway, netmask, and have the same first 3 segments of the ip addres as the server and can ping the server. Samba is running and is working. DHCP is giving me problems now that i have finally gotten it working. The modem in the linex box does connect to the internet. Any help / opinions / reasons why this is not related to a security mailing list ;) / etc. will be accepted warmly. http_access allow src 192.168.1.25 http_access allow src 192.168.1.27 http_access allow all acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 192.168.1.25/255.255.255.0 acl localhost src 192.168.1.27/255.255.255.0 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

updating postfix 1.1.12-13 to postfix 2.*
by Helder Lopes 10 Mar '04

10 Mar '04

Dear Friends; Hello I installed Suse 8 with postfix 1.1.12-13. Which comes with suse 8. I tryied to do an update on your website. But there is no postfix 2.*. how can I install it?? I very new at this. My problem is that I have the email server up and running well. I'm trying to stop receiving spam and viruses with body_checks and header_checks any solutions?? Thanks Miguel

2 1

Re: [suse-security] Tripwire twpol.txt for SuSE
by Paul Stoller 10 Mar '04

10 Mar '04

Sorry Oliver no one has replied yet so far. If I receive a sample configuration I will email it you too =) >If someone sent the file to Paul personally - I am interested in that file, >too! > >Thank you, greetings >Oliver ____________________________________________________________ Find what you are looking for with the Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

RE: [suse-security] postfix/imap/cyrus-sasl and Pam backend
by sematin＠mtn.co.ug 10 Mar '04

10 Mar '04

Hmm! I haven't tried this before but have you looked at: http://www.postfix.org/docs.html There seem to be a number of howtos there that could be relevant. Noah. > -----Original Message----- > From: Markus Feilner [mailto:lists@feilner-it.net] > Sent: 10 March 2004 14:12 > To: Suse-Security > Subject: [suse-security] postfix/imap/cyrus-sasl and Pam backend > > > Hello List, > I am looking for a site with good information about postfix, > cyrus-sasl > (and later kerberos authentikation against Active Directory). I have > postifix and imap running with cyrus sasl and sasldb, but i did not > manage to get it to authenticate against pam or kerberos. > I have been googling, but i could not find a solution. > > I know that: > - /etc/sysconfig/saslauthd tells saslauthd which mech to use. > the entry is: SASLAUTHD_AUTHMECH=pam > > - /usr/lib/sasl2/smtpd.conf > pwcheck_method: saslauthd > mechlist: plain login crammd5 digestmd5 > > -/etc/posstfix/main.cf > for testing: > (...) > smtpd_sender_restrictions = permit_sasl_authenticated, > permit_mynetworks, reject > smtpd_sasl_auth_enable = yes > smtpd_sasl_security_options = noanonymous > broken_sasl_auth_clients = yes > (...) > > Now: postfix grants all users access based on user/password > kombinations > in sasldb - and only those users. Shouldn't saslauth use the local > user/password Kombination? > (BTW: Why does sasl with PAM only work with PLAIN?) > > Thanks a lot! > -- > Mit freundlichen Grüßen > Markus Feilner > -- > Linux Solutions, Training, Seminare und Workshops - auch > Inhouse Feilner IT Linux & GIS Erlangerstr. 2 93059 Regensburg > fon: +49 941 70 65 23 - mobil: +49 170 302 709 2 > web: http://feilner-it.net mail: mfeilner(a)feilner-it.net > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

3 5

Tripwire twpol.txt for SuSE
by Paul Stoller 10 Mar '04

10 Mar '04

ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/tripwire.rpm While browsing the update directory for SUSE 9.0 at ftp.suse.com I saw the above mentioned tripwire update. I installed it but I noticed that the twpol.txt sample configuration that is included with tripwire is for Redhat 7.0 and nothing for SUSE. Can someone be so kind to share their twpol.txt configuration for Suse 9.0 with me and the rest of the list? Thank you so much. ____________________________________________________________ Find what you are looking for with the Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

2 1

modem problems
by Scott Wrobel 10 Mar '04

10 Mar '04

I have 2 internal modems one is new. Both work fine in windows computers and the new one says that it is linux compatable and even has driver files (for Red Hat) on the disk that came with it. Unfortunetly my linux box, which is going to be an internet connection server, doesn't detect eather of them. I cannot figure out how to use the drivers off the disk eather. I have tried switching the locations in the motherboard and rebooting each time with no results. HELP PLEASE!!!!!!!!!!!!!!!!!! I also have an external modem that i have gotten to work with the box however it is on load and i will have to return it soon. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

Processor Suse professional 9
by Valderes Branco 10 Mar '04

10 Mar '04

Hello! Please... The SuSe 9 has support it technology to hyper-threading for pentium 4? Thanks... Valderes

3 2

/bin/login file dissapeared
by Kheli 10 Mar '04

10 Mar '04

Dear List, Recently i can't telnet to my linux box. A warning appears. It said that it cannot find /bin/login file. I cannot login through console either. I just can ssh to my box. My Linux box is running Red Hat 7.2 Kernel 2.4.19. I use the box as squid proxy server and Apache web server. What should i do ? Thanks

3 3

shell commad during boot
by Scott Wrobel 10 Mar '04

10 Mar '04

I want my computer to run a spacific command (like on you would type into the console) while it is booting befor logon, is this possable and if so what file do i have to edit to acive the end result. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

Free Anti-Virus Engine
by Eric Kahklen 09 Mar '04

09 Mar '04

Can anyone recommend a free anti-virus engine that stays current with all the new viruses? I am trying to setup up my mail gateway to check for viruses using Amavis. Thanks, Eric

11 11

About permissions of files.....
by onder.akbas＠aradiom.com 09 Mar '04

09 Mar '04

I will change owner and permission(700) of some directories and files on my SuSE Linux 9.0. Owner of these directories will be root. Can anyone reach these directories and files if s/he does not know the root password. I wonder that : if someone updates(not new installation),the OS, can s/he change root password? I think SuSE Update asks the user root password, but i am not sure about update via CD. I dont know any secure way to hide my special files except this way. If anyone has better idea tell me the most secure way.. Thanks. -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

4 4

seccheck Problems on SuSE 8.1
by Andreas Hergesell 09 Mar '04

09 Mar '04

Hi, I'm using a SuSE 8.1 Server. Via cron seccheck is running everyday/week and month. Only seccheck weekly makes trouble. When seccheck weekly is running the server is working for some time but crashes suddenly. No access via ssh, http etc. Even ping doesn't work. No entry in /v/l/messages or /v/l/warn. Any hint? Thanks for help Andreas

2 3

cant acces domains who are running in my box
by Wouter 09 Mar '04

09 Mar '04

Hi, I have a problem whit the susefirewall. My internal network cant access my webserver and pop and more. When i connect to the IP witch suse have (192.168.1.10) then there is no problem. When i try to connect to www.mydomain.com then i have a problem. This problem i have only whit domains who are running on my box. So i can access al the other interet pages. I have checked /etc/sysconfig/susefirewall2 but i cant find what i most set there to fix this problem. Greets Wouter P.S. sorry for my bad english.

2 1

allow 'su' to limited users
by Gero Schmidt-Kärst 09 Mar '04

09 Mar '04

Hi everybody! I guess there is a easy possibility to allow the command 'su' only to a small group of users. Perhaps someone of you can send me a hint! Thank you very much! GSK

7 6

SuSEfirewall2 DMZ
by Jörg Uhl 09 Mar '04

09 Mar '04

Hi there, I hope that this question wasnt discussed before. I have a little problem with my SuSEfirewall on SuSE 9.0. Im using two different internet connections with fixed ips, one masqueraded DMZ and a masqueraded internal network. Im forwarding two different ips to one client in the DMZ. It depends on the routing table (default gateway) for which ip I get a response. When I change the default gateway I get response from the other ip. Is there a possibility to route the packages to the Interface where they are from? Thanks a lot joerg

1 0

NAI on unix do not find actual virus
by Mrvka Andreas 09 Mar '04

09 Mar '04

hi, i use the NAI product for my SuSE Linux 9 distribution. VirusScan for Unix: with actual engine and Dat file Virus Scan for Linux v4.32.0 Copyright (c) 1992-2003 Networks Associates Technology Inc. All rights reserved. (408) 988-3832 LICENSED COPY - Nov 27 2003 Scan engine v4.3.20 for Linux. Virus data file v4335 created Mar 08 2004 Scanning for 87151 viruses, trojans and variants. BUT it doesn't find the actual virus! You know the actual virus which attaches a password enclosed zip file. and in the message body it stands the password and then you find the exe file. i copied the exe file out of the zip file and ran the uvscan but nevertheless i was unsuccessful :-( can anybody help me? regards Andrew

3 2

AW: [suse-security] Gateway / netmask
by dag Danczul Georg 09 Mar '04

09 Mar '04

Hi, short NW course: every IP-NW has a NW-Address (the first one) and a broadcast (the last one) the mask defines the NW-size Mask: ff.ff.ff.0 class C, size 256 adresses (hex) => xx.yy.zz.0 network adress => xx.yy.zz.1-254 usable host range => xx.yy.zz.255 broadcast adress If you use anoter mask the range shift, but usable are always net+1 till broadcast-1 for exact infos see www.rfc-editor.org georg PS: the nework mask sometimes is written as /n i.e 255.255.255.0 =^= /24 (nr of nw-bits) -----Ursprüngliche Nachricht----- Von: Victor R. Cardona [mailto:vcardona@covad.net] Gesendet: Dienstag, 09. März 2004 00:56 An: suse-security(a)suse.com Cc: suse-slstd-e(a)suse.com Betreff: Re: [suse-security] Gateway / netmask Scott Wrobel wrote: | | I am seting up a network with a linux server and have been informed that the following netmask and gateway numbers are incompatable with each other, now i am a little confused about what i should change the last section of the gateway # to in order to make the network work better. | Current Gateway: 192.168.1.255 | Current Netmask: 255.255.255.0 | any advice will be apreceated. 192.168.1.255 is the network broadcast address. Your gateway should use an IP address between 192.168.1.1 and 192.168.1.254. The netmask is correct. Victor -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

DHCP Linux Server and Windows clients
by Scott Wrobel 09 Mar '04

09 Mar '04

I have made a modist attempt to configure DHCP on what will hopefully end up being a linux server for my home network which consists of all wondows computers. However i don't know how to configure the windows clients (win 98, 2000 Pro, and XP) to run any type of Client DHCP, this is probably due to the fact that i just found out about DHCP yesterday. Any help will be greatly apprecieated despite any spelling errors i may have made. thx. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1

Putting vmware's vmnet into a SuSEfirewall2 DMZ
by Michael James 09 Mar '04

09 Mar '04

Unfortunately I have to have a working copy of Windows both for helpping my users and to cope with word .doc files. But unless you want to do lots of patching and pandering it's unfit to be connected with the internet. (Power... maybe, the net - definitely not without a chaperone) Can I use the DMZ facilities of SuSEfirewall2 to give it NAT protection? That would buy a lot of protection for not much upkeep. michaelj -- Michael James michael.james(a)csiro.au System Administrator voice: 02 6246 5040 CSIRO Bioinformatics Facility fax: 02 6246 5166

1 0

information
by b＠rry.co.za 09 Mar '04

09 Mar '04

i wait for a reply!

1 0

Gateway / netmask
by Scott Wrobel 08 Mar '04

08 Mar '04

I am seting up a network with a linux server and have been informed that the following netmask and gateway numbers are incompatable with each other, now i am a little confused about what i should change the last section of the gateway # to in order to make the network work better. Current Gateway: 192.168.1.255 Current Netmask: 255.255.255.0 any advice will be apreceated. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

4 3

Latest XFree86 fix turns system unstable
by Oliver Schwabedissen 08 Mar '04

08 Mar '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I installed the latest XFree86 security fix yesterday. Since then my X server crashed twice :(. The system is running SuSE 8.2 Professional (Kernel k_athlon-2.4.20-105, KDE was updated to 3.1.4 through YaST using the rpms from ftp.suse.com). Fixes installed were XFree86-server-4.3.0-120 XFree86-4.3.0-120 Hardware is a Asus A7M266 with Athlon 1333 MHz, 512 MB RAM, video adapter is a MSI GeForce4 TI4200-8X. I'm using the latest nVidia driver (1.0-5336) and it was reinstalled after applying the XFree86 fixes. After the X server crashed it tried to restart, but without success. It wasn't possible to log on through a virtual console to shut down the system or even sync the disks, I had to do a hard reset. - From /var/log/messages: Mar 8 07:39:50 frodo kdm[3131]: Server for display :0 terminated unexpectedly Mar 8 07:39:55 frodo kdm[3160]: pam_unix2: session finished for user osc, service xdm Mar 8 07:39:55 frodo resmgr[811]: accepted connection from user root Mar 8 07:39:55 frodo resmgr[811]: disconnect from root Mar 8 07:40:01 frodo kdm[4058]: pam_unix2: session started for user osc, service xdm Mar 8 07:40:02 frodo kernel: Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1619e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3088, stackpage=d1619000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 bf7ff970 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 bf7ff970 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d2d05e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3076, stackpage=d2d05000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 bffffae4 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 bffffae4 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 ffffffd0 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1689e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3092, stackpage=d1689000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1acde7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3091, stackpage=d1acd000) Mar 8 07:40:02 frodo kernel: Stack: c020c508 c03cce70 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [ide_do_request+504/832] [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] Mar 8 07:40:02 frodo kernel: Call Trace: [<c020c508>] [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] Mar 8 07:40:02 frodo kernel: [sys_accept+87/320] [do_IRQ+125/176] [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] Mar 8 07:40:02 frodo kernel: [<c0240b67>] [<c010a8cd>] [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] Mar 8 07:40:02 frodo kernel: [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d15d3e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3090, stackpage=d15d3000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1119e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3089, stackpage=d1119000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:03 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:03 frodo kernel: printing eip: Mar 8 07:40:03 frodo kernel: c013c739 Mar 8 07:40:03 frodo kernel: *pde = 00000000 Mar 8 07:40:03 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:03 frodo kernel: CPU: 0 Mar 8 07:40:03 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:03 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:03 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:03 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: 00000001 Mar 8 07:40:03 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d31e9e88 Mar 8 07:40:03 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:03 frodo kernel: Process top (pid: 3157, stackpage=d31e9000) Mar 8 07:40:03 frodo kernel: Stack: 00000018 05430002 00000001 00000000 00000002 c160f800 c015ca95 c160b0c0 Mar 8 07:40:03 frodo kernel: 000001f0 00000001 dffea000 00000002 c861e2c0 c015dd27 c160f800 c016cca3 Mar 8 07:40:03 frodo kernel: c160f800 00000001 dffea000 c160d440 c016d295 c160f800 dffea000 00000002 Mar 8 07:40:03 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [proc_pid_make_inode+35/192] [proc_pid_lookup+229/496] [real_lookup+199/240] Mar 8 07:40:03 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c016cca3>] [<c016d295>] [<c01521d7>] Mar 8 07:40:03 frodo kernel: [link_path_walk+1343/2320] [path_lookup+57/80] [__user_walk+73/128] [filldir64+0/304] [sys_stat64+31/128] [system_call+51/56] Mar 8 07:40:03 frodo kernel: [<c015286f>] [<c0152f39>] [<c01531e9>] [<c0157480>] [<c014f5df>] [<c0108e67>] Mar 8 07:40:03 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mär 8 07:40:20 frodo gconfd (osc-3748): GConf-Server wird nicht verwendet, wird beendet. Mär 8 07:40:20 frodo gconfd (osc-3748): Beendet Mar 8 07:40:42 frodo kdm[3131]: Server for display :0 terminated unexpectedly - -- Ciao, Oliver GPG Public Key available at http://www.keyserver.net Key fingerprint = CD75 B140 3EAB 859B A904 C4EC BE86 FAC5 8566 5CEF Current Linux uptime: 0 hours 48 minutes. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8DBQFATCPSvob6xYVmXO8RAtpnAJ0Qs5otGyhjL2xXPg6AFqXvg2W9mACfYFy+ hlal+mOfTEQIZDng+m/m5d0= =liZI -----END PGP SIGNATURE-----

3 4

RE: [suse-security] Gateway / netmask
by Sturgis, Grant 08 Mar '04

08 Mar '04

You need to read up on IP networks and IP addresses. In your case, the following is true: Network number 192.168.1.0 Netmask 255.255.255.0 Broadcast address 192.168.1.255 Usable addresses 192.168.1.1 - 254 Good luck, Grant > -----Original Message----- > From: Scott Wrobel [mailto:saw424@xeomail.com] > Sent: Monday, March 08, 2004 12:21 PM > To: suse-security(a)suse.com; suse-slstd-e(a)suse.com > Subject: [suse-security] Gateway / netmask > > > > > I am seting up a network with a linux server and have been > informed that the following netmask and gateway numbers are > incompatable with each other, now i am a little confused > about what i should change the last section of the gateway # > to in order to make the network work better. > Current Gateway: 192.168.1.255 > Current Netmask: 255.255.255.0 > any advice will be apreceated. > > FadMart - http://www.fadmart.com - An Associate of the > World's Largest Store! > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > > This electronic message transmission is a PRIVATE communication which contains information which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Please notify the sender of the delivery error by replying to this message, or notify us by telephone (877-633-2436, ext. 0), and then delete it from your system.

1 0