March 2004 - openSUSE Security - openSUSE Mailing Lists

Putting vmware's vmnet into a SuSEfirewall2 DMZ
by Michael James 09 Mar '04

09 Mar '04

Unfortunately I have to have a working copy of Windows both for helpping my users and to cope with word .doc files. But unless you want to do lots of patching and pandering it's unfit to be connected with the internet. (Power... maybe, the net - definitely not without a chaperone) Can I use the DMZ facilities of SuSEfirewall2 to give it NAT protection? That would buy a lot of protection for not much upkeep. michaelj -- Michael James michael.james(a)csiro.au System Administrator voice: 02 6246 5040 CSIRO Bioinformatics Facility fax: 02 6246 5166

1 0

information
by b＠rry.co.za 09 Mar '04

09 Mar '04

i wait for a reply!

1 0

Gateway / netmask
by Scott Wrobel 08 Mar '04

08 Mar '04

I am seting up a network with a linux server and have been informed that the following netmask and gateway numbers are incompatable with each other, now i am a little confused about what i should change the last section of the gateway # to in order to make the network work better. Current Gateway: 192.168.1.255 Current Netmask: 255.255.255.0 any advice will be apreceated. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

4 3

Latest XFree86 fix turns system unstable
by Oliver Schwabedissen 08 Mar '04

08 Mar '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I installed the latest XFree86 security fix yesterday. Since then my X server crashed twice :(. The system is running SuSE 8.2 Professional (Kernel k_athlon-2.4.20-105, KDE was updated to 3.1.4 through YaST using the rpms from ftp.suse.com) Fixes installed were XFree86-server-4.3.0-120 XFree86-4.3.0-120 Hardware is a Asus A7M266 with Athlon 1333 MHz, 512 MB RAM, video adapter is a MSI GeForce4 TI4200-8X. I'm using the latest nVidia driver (1.0-5336) and it was reinstalled after applying the XFree86 fixes. After the X server crashed it tried to restart, but without success. It wasn't possible to log on through a virtual console to shut down the system or even sync the disks, I had to do a hard reset. - From /var/log/messages: Mar 8 07:39:50 frodo kdm[3131]: Server for display :0 terminated unexpectedly Mar 8 07:39:55 frodo kdm[3160]: pam_unix2: session finished for user osc, service xdm Mar 8 07:39:55 frodo resmgr[811]: accepted connection from user root Mar 8 07:39:55 frodo resmgr[811]: disconnect from root Mar 8 07:40:01 frodo kdm[4058]: pam_unix2: session started for user osc, service xdm Mar 8 07:40:02 frodo kernel: Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1619e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3088, stackpage=d1619000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 bf7ff970 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 bf7ff970 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d2d05e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3076, stackpage=d2d05000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 bffffae4 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 bffffae4 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 ffffffd0 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1689e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3092, stackpage=d1689000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1acde7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3091, stackpage=d1acd000) Mar 8 07:40:02 frodo kernel: Stack: c020c508 c03cce70 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [ide_do_request+504/832] [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] Mar 8 07:40:02 frodo kernel: Call Trace: [<c020c508>] [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] Mar 8 07:40:02 frodo kernel: [sys_accept+87/320] [do_IRQ+125/176] [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] Mar 8 07:40:02 frodo kernel: [<c0240b67>] [<c010a8cd>] [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] Mar 8 07:40:02 frodo kernel: [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010007 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d15d3e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3090, stackpage=d15d3000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:02 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:02 frodo kernel: printing eip: Mar 8 07:40:02 frodo kernel: c013c739 Mar 8 07:40:02 frodo kernel: *pde = 00000000 Mar 8 07:40:02 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:02 frodo kernel: CPU: 0 Mar 8 07:40:02 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:02 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:02 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:02 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: d157b3c0 Mar 8 07:40:02 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d1119e7c Mar 8 07:40:02 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:02 frodo kernel: Process nscd (pid: 3089, stackpage=d1119000) Mar 8 07:40:02 frodo kernel: Stack: 00000296 00000000 00000005 00000000 00000000 dff98400 c015ca95 c160b0c0 Mar 8 07:40:02 frodo kernel: 000001f0 00000005 d2d07ba0 00000000 00000000 c015dd27 dff98400 c023fd24 Mar 8 07:40:02 frodo kernel: dff98400 c023fc9c cf6629c0 00000005 00000000 00000005 c0240b67 00000003 Mar 8 07:40:02 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [sock_alloc+20/160] [sockfd_lookup+28/144] [sys_accept+87/320] Mar 8 07:40:02 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c023fd24>] [<c023fc9c>] [<c0240b67>] Mar 8 07:40:02 frodo kernel: [sock_poll+41/48] [do_pollfd+79/144] [poll_freewait+58/80] [sys_poll+856/928] [sys_socketcall+217/608] [system_call+51/56] Mar 8 07:40:02 frodo kernel: [<c0240389>] [<c015806f>] [<c015770a>] [<c0158528>] [<c0241899>] [<c0108e67>] Mar 8 07:40:02 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mar 8 07:40:03 frodo kernel: <1>Unable to handle kernel paging request at virtual address 96fbf720 Mar 8 07:40:03 frodo kernel: printing eip: Mar 8 07:40:03 frodo kernel: c013c739 Mar 8 07:40:03 frodo kernel: *pde = 00000000 Mar 8 07:40:03 frodo kernel: Oops: 0000 2.4.20-4GB-athlon #1 Sat Feb 7 02:00:47 UTC 2004 Mar 8 07:40:03 frodo kernel: CPU: 0 Mar 8 07:40:03 frodo kernel: EIP: 0010:[kmem_cache_alloc+89/240] Tainted: PF Mar 8 07:40:03 frodo kernel: EIP: 0010:[<c013c739>] Tainted: PF Mar 8 07:40:03 frodo kernel: EFLAGS: 00010003 Mar 8 07:40:03 frodo kernel: eax: b5a979b2 ebx: b5a979b2 ecx: c0561040 edx: 00000001 Mar 8 07:40:03 frodo kernel: esi: c160b0c0 edi: 00000246 ebp: 000001f0 esp: d31e9e88 Mar 8 07:40:03 frodo kernel: ds: 0018 es: 0018 ss: 0018 Mar 8 07:40:03 frodo kernel: Process top (pid: 3157, stackpage=d31e9000) Mar 8 07:40:03 frodo kernel: Stack: 00000018 05430002 00000001 00000000 00000002 c160f800 c015ca95 c160b0c0 Mar 8 07:40:03 frodo kernel: 000001f0 00000001 dffea000 00000002 c861e2c0 c015dd27 c160f800 c016cca3 Mar 8 07:40:03 frodo kernel: c160f800 00000001 dffea000 c160d440 c016d295 c160f800 dffea000 00000002 Mar 8 07:40:03 frodo kernel: Call Trace: [alloc_inode+293/320] [new_inode+23/96] [proc_pid_make_inode+35/192] [proc_pid_lookup+229/496] [real_lookup+199/240] Mar 8 07:40:03 frodo kernel: Call Trace: [<c015ca95>] [<c015dd27>] [<c016cca3>] [<c016d295>] [<c01521d7>] Mar 8 07:40:03 frodo kernel: [link_path_walk+1343/2320] [path_lookup+57/80] [__user_walk+73/128] [filldir64+0/304] [sys_stat64+31/128] [system_call+51/56] Mar 8 07:40:03 frodo kernel: [<c015286f>] [<c0152f39>] [<c01531e9>] [<c0157480>] [<c014f5df>] [<c0108e67>] Mar 8 07:40:03 frodo kernel: Code: 8b 44 81 18 0f af 5e 18 89 41 14 03 59 0c 40 74 42 57 9d 89 Mär 8 07:40:20 frodo gconfd (osc-3748): GConf-Server wird nicht verwendet, wird beendet. Mär 8 07:40:20 frodo gconfd (osc-3748): Beendet Mar 8 07:40:42 frodo kdm[3131]: Server for display :0 terminated unexpectedly - -- Ciao, Oliver GPG Public Key available at http://www.keyserver.net Key fingerprint = CD75 B140 3EAB 859B A904 C4EC BE86 FAC5 8566 5CEF Current Linux uptime: 0 hours 48 minutes. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8DBQFATCPSvob6xYVmXO8RAtpnAJ0Qs5otGyhjL2xXPg6AFqXvg2W9mACfYFy+ hlal+mOfTEQIZDng+m/m5d0= =liZI -----END PGP SIGNATURE-----

3 4

RE: [suse-security] Gateway / netmask
by Sturgis, Grant 08 Mar '04

08 Mar '04

You need to read up on IP networks and IP addresses. In your case, the following is true: Network number 192.168.1.0 Netmask 255.255.255.0 Broadcast address 192.168.1.255 Usable addresses 192.168.1.1 - 254 Good luck, Grant > -----Original Message----- > From: Scott Wrobel [mailto:saw424@xeomail.com] > Sent: Monday, March 08, 2004 12:21 PM > To: suse-security(a)suse.com; suse-slstd-e(a)suse.com > Subject: [suse-security] Gateway / netmask > > > > > I am seting up a network with a linux server and have been > informed that the following netmask and gateway numbers are > incompatable with each other, now i am a little confused > about what i should change the last section of the gateway # > to in order to make the network work better. > Current Gateway: 192.168.1.255 > Current Netmask: 255.255.255.0 > any advice will be apreceated. > > FadMart - http://www.fadmart.com - An Associate of the > World's Largest Store! > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > > This electronic message transmission is a PRIVATE communication which contains information which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Please notify the sender of the delivery error by replying to this message, or notify us by telephone (877-633-2436, ext. 0), and then delete it from your system.

1 0

k3b
by Murat Akca 08 Mar '04

08 Mar '04

I have a big problem about k3b when I write cd's with k3b there are a lot of files which I do not write for example: angels.pif cool_screensaver.scr dictionary.doc.exe dolly_duster.jpg.pif doom2.doc.pif e-book.archive.doc.exe e.book.doc.exe eminem - lick my pussy.mp3.pif hardcore porn.jpg.exe how to hack.doc.exe and lots of them.These files are copied recursively in all folders in writed cds.I'm using suse 9.0 and last week I made Suse update using Yast. Do u have any idea?A linux virus?

8 10

RE: [suse-security] Traffic redirection using SuSEFirewall2
by Barry Gill 08 Mar '04

08 Mar '04

Manuel Balderrábano <garibolo(a)wanadoo.es> wrote the Mar 4, 2004 2:53 PM: > By port redirection I mean that all traffic coming to a specific port of the > firewall will be redirected to a specific server on the DMZ zone, I think > this is called circuit-level forwarding. You can use the FW_FORWARD_MASQ [snip from /etc/sysconfig/SuSEfirewall2] # Example: # 200.200.200.0/24,10.0.0.10,tcp,80,81,202.202.202.202 # The class C network 200.200.200.0/24 trying to access 202.202.202.202 port # 80 will be forwarded to the internal server 10.0.0.10 on port 81. # Example: # 200.200.200.0/24,10.0.0.10,tcp,80 # The class C network 200.200.200.0/24 trying to access anything which goes # through this firewall ill be forwarded to the internal server 10.0.0.10 on # port 80 This way all connections are logged as FW-FORWARD-MASQ

2 2

k3b
by Murat Akca 08 Mar '04

08 Mar '04

Now I searched the computer and all these files are found in same location /home/onder/OpenOffice.org1.1/share/angels.pif /home/onder/OpenOffice.org1.1/share/autocorr/angels.pif /home/onder/OpenOffice.org1.1/share/autocorr/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/autocorr/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/autocorr/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/dict/angels.pif /home/onder/OpenOffice.org1.1/share/dict/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/dict/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/dict/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/dict/ooo/angels.pif /home/onder/OpenOffice.org1.1/share/dict/ooo/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/dict/ooo/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/dict/ooo/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/samples/angels.pif /home/onder/OpenOffice.org1.1/share/samples/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/samples/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/samples/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/samples/english/angels.pif /home/onder/OpenOffice.org1.1/share/samples/english/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/samples/english/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/samples/english/eminem - lick my pussy.mp3.pif /home/onder/OpenOffice.org1.1/share/uno_packages/angels.pif /home/onder/OpenOffice.org1.1/share/uno_packages/dolly_buster.jpg.pif /home/onder/OpenOffice.org1.1/share/uno_packages/doom2.doc.pif /home/onder/OpenOffice.org1.1/share/uno_packages/eminem - lick my pussy.mp3.pif Any idea? On Monday 08 March 2004 14:06, Murat Akca wrote: > I have a big problem about k3b when I write cd's with k3b there are a lot > of files which I do not write for example: > > angels.pif > cool_screensaver.scr > dictionary.doc.exe > dolly_duster.jpg.pif > doom2.doc.pif > e-book.archive.doc.exe > e.book.doc.exe > eminem - lick my pussy.mp3.pif > hardcore porn.jpg.exe > how to hack.doc.exe > > > and lots of them.These files are copied recursively in all folders in > writed cds.I'm using suse 9.0 and last week I made Suse update using Yast. > > Do u have any idea?A linux virus?

3 2

[suse-security] Weeeeee! ;))) (fwd)
by Sebastian Krahmer 08 Mar '04

08 Mar '04

Well, not only that the statement 'I dont bite' is not true (I do so from time to time :), I think its sufficient for an infected host to have my address and the address of the list in his address book so some worm can spoof a lil bit here and a lil bit there. :) regards, Sebastian ---------- Forwarded message ---------- Date: Sat, 06 Mar 2004 17:06:29 +0100 From: krahmer(a)suse.de To: suse-security(a)suse.com Subject: [suse-security] Weeeeee! ;))) I don't bite, weah! pass: 17566 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

To Ken Schneider, RE: Suse Linux Server elaboratation
by Scott Wrobel 07 Mar '04

07 Mar '04

----- Original Message ----- From: "Ken Schneider" <suseseclist(a)rtsx.com> To: suse-security(a)suse.com Sent: Sunday, March 07, 2004 12:28 PM Subject: [suse-security] Suse Linux Server elaboratation > --------------------------------------------------------------- > > To put things breafly i am all but lost in the depths of linux. > I am currently running samba on the server, it is lacated on an > isolated network with test computers so that i don't mess up my good > computers. > I will be running with a 56k :( internet connection (after resolving my > modem problems) and i am hoping to achive dial on demand over the > network an well as having a logon server. i am still new to linux but > am learning fast. I just took a look at the manual and i will probably > be attempting to set up squid now that i know what it is. > The network is running with work groups, not a domain (yet), all > computers have a gatway of 192.168.1.255 netmask of 255.255.255.0 and > all ip addresses begin with 192.168.1.___. I have good experience > configuring windows clients but nothing on the server side. > I hope this new info helps. > > One item I see that will be a problem is the address you show for the gateway, 192.168.1.255/255.255.255.0. Since this is the broadcast address for the subnet your are using this will not work. 192.168.1.1 - 192.168.1.254 are the only usable addresses for this subnet/netmask combo. I think you should change that first to eliminate future network problems. Get the networking between the PC's working first and then start on getting your internet access working, samba and then squid so that you have a better understanding on how all the components work together. Ken Schneider Also, go one step at a time and document what you do for future reference. I don't quite understand because i currently have a Win 2000 Pro and a Win 98 SE set up on the Isolated network with the Linux Box and they can all see and/or ping each other easily, as well a share files. I also have a second netwr with 2 Win XP, 1 Win 98, and a Win 2000 Pro all of which have that same config and none of them have any problems. On all windows computers i am running tcp/ip, ipx..., and netbios protocalls, that is if this changes anything. I beleave that i might have hade a complaint from my linux box on this subject but it was when i was configuring samba and all i had to do to fix it was to use the network restart command at the prompt. FadMart - http://www.fadmart.com - An Associate of the World's Largest Store!

2 1