April 2004 - openSUSE Security - openSUSE Mailing Lists

Per user config for SpamAssassin with amavisd-new and cyrus-imapd
by David Huecking 26 Sep '04

26 Sep '04

Hi folks, maybe someone could give me a hint... I switched from: fetchmail->sendmail->sendmail.milter->Amavis->.forward->procmail->spamc(SpamAssasin)->INBOX which did global virus checking and per user spam checking with Bayes testing to fetchmail->postfix->amavisd-new->perl-spamassassin->cyrus-imapd which does global virus and global spam checking BUT NO PER USER spam checking, so without Bayes testing! :-( So the rate of unreconised spam did increase. I fiddled around with options in the /etc/mail/spamassassin/local.cf, but they were ignored because amavisd-new calls spamassin via perl interface and takes some SA parameters from the /etc/amavisd.conf (beginning with $sa_). I tried calling a SUIDed cyrus deliver (without SUID deliver hasn't got the right: deliver[3876]: connect(/var/lib/imap/socket/lmtp) failed: Permission denied) to user cyrus via .forward and a .procmailrc. The log said that lmtpd was called, but depending on the syntax of deliver in the .procmailrc the mail was delivered to the INBOX-file in /var/spool/mail or just vanished! One example for my .promailrc: :0 fw |/usr/bin/spamc -f |/usr/lib/cyrus/bin/deliver -e -a david -m user.david and the .forward: "|IFS=' ' && exec /usr/bin/procmail -f- || exit 75 #user" Could someone give me a hint using sieve or procmail for a per user SpamAssassin check? Thanks in advance. -- Eat, sleep and go running, David Huecking. Encrypted eMail welcome! GnuPG/ PGP-Key: 0x57809216. Fingerprint: 3DF2 CBE0 DFAA 4164 02C2 4E2A E005 8DF7 5780 9216

2 2

lpd service and SuSefirewall2
by Paolo Santancini 30 Apr '04

30 Apr '04

Hello, I've a network printer declared as samba printer in my lnx machine. This server has 3 different ethx and a SuSefirewall2 running over. How can use from Lan 192.168.0.0/24 the samba printer with ip=172.168.0.200 ? Is it possible? Thanks Bye Paolo

4 6

RE: Re: [suse-security] lpd service and SuSefirewall2
by Barry Gill 30 Apr '04

30 Apr '04

list(a)nolog.org wrote the Apr 30, 2004 2:36 PM: > 'The One' to tell others what the subject line should be? Should we ask > you next time before we write to the list whether our chosen subject blah blah blah. Please no flame wars. If you are unhappy about what someone says, mail them directly, not to the list. whether "the bob" or "Paranoic_user" is wrong or right (or whether his opinions are wrong or right) is irrelevant. What is relevant is that this is someone you don't know who has taken the time to attempt to help someone he/she doesn't know from a bar of soap with a problem. Clarifying the problem is part of solving the problem. Clearly identifying what you are trying to achieve in your mail subject helps those who know abit about what you are trying to do identify mails that they may wish to respond to. Bickering wastes my time and yours. (P.S., thanks from someone who doesn't know you from a bar of soap for your input to my previous question) B

1 0

RE: Re: [suse-security] iptables nat rules for differend dns-names
by Barry Gill 30 Apr '04

30 Apr '04

> I dont think so. I also don't think so. What I am interested to know however, is can multiple external interfaces be used? eg. eth0, has.valid.ip.add, eth0:1 has.valid.ip.add2, eth0:2 has.valid.ip.add3 eth1 192.168.0.1 eth2 10.0.0.1 eth0 (and sub ints) is external eth1 is DMZ eth2 is internal if I have 2 web servers internally and don't want to set up reverse proxy on squid (some people don't like this because of their sevrer logging) and want to be able to forward NAT'd connections to two servers in the DMZ, can I use eth0:1's IP for server1 and eth0:2's IP for server2 and set up my forward rules based on what address was requested (as you know I use SuSEfirewall2) doing this will be no problem. My concern comes in in that will the return traffic be nat's out the virtual interface that the connection came through? Bazz

2 1

Re: [suse-security] sasldblistusers2 / saslpasswd2 not not working
by Sheridan West 30 Apr '04

30 Apr '04

--- Andreas Winkelmann <ml(a)awinkelmann.de> wrote: > Am Donnerstag, 29. April 2004 13:39 schrieb Sheridan > West: > > > > as root: > > command run: /usr/sbin/sasldblistusers2 > > result: can't get keyhandle, listusers failed > > Hmm, most time i see this error, it has something to > do with Berkeley-DB. > Did you change somthing regarding BDB? > > What says: > # ldd /usr/sbin/sasldblistusers2 libresolv.so.2 => /lib/libresolv.so.2 (0x40028000) libsasl2.so.2 => usr/lib/libsasl.so.2 (0x4003b000) libdl.so.2 => /lib/libdl.so.2 (0x4004f000) libdb-4.0.so => /usr/lib/libdb-4.0.so (0x4000000) libc.so.6 => /lib/ld-linux.so.2 (0x4000000) No changes to bdb but i decided to make bdb, then sasl and cyrus just in case using the syntax in the url still no luck > > > When I make my own cyrus at least cyradm does not > > segfault and I can connect to the server. > > > > file: imapd.conf > > > sasl_pwcheck_method: saslauthd > > sasl_pwcheck_method: auxprop > > You have two diffrent values for "pwcheck_method". I > don't know at the moment > which one wins. Maybe the last one. Best to delete > one. > > > sasl_auxprop_plugin: sasldb > > > -- > Andreas > I will change that - I have been trying to get something that works the cyrus deamon is not the problem its getting an account to manage and create users, and a cyradm that does not segfault on connect thats the problem ____________________________________________________________ Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html

2 2

SuSE Firewall2
by Travis Barlow 30 Apr '04

30 Apr '04

Hello I am hoping someone here may be able to answer a question for me. I have to set up a proxy for a network, and I want it to work along these lines.... User opens up their browser and are given a page that I assign them automatically from the proxy(or DHCP server) and then they can enter an account id and password that I provide. Anyone know if I can do this with SuSE Firewall2?? And how do I do it? Thanks Travis Barlow Gestionnaire de systémes et Sécurité Université Sainte-Anne "Paranoia is heightened awareness"

2 1

RE: allow EXCEPT (SuSEfirewall2)
by Barry Gill 30 Apr '04

30 Apr '04

Thanks very much all. I think the long and short of it is I need to export my riules from SuSEfirewall2 and finally learn setting up IPtables/IPchains directly Bazz

2 1

iptables nat rules for differend dns-names
by Philippe Vogel 30 Apr '04

30 Apr '04

Hi! Is it possible to filter with nat rules that I can access two servers on different IP's but with the same port? scenario: Inet | dev-ext (pppoe over dsl) | FW | dev-int (LAN) | servera.local.net:80 serverb.local.net:80 DNS names are provided by a service like dyndns.org. Philippe

2 1

allow EXCEPT (SuSEfirewall2)
by Barry Gill 30 Apr '04

30 Apr '04

Helo suse-security (little mail joke, sorry) I want to set up a rule in SuSEfirewall2 that allows all users from my LAN to browse or FTP from 192.168.0.0/24 to 0/0 This is easy and done. FW_MASQ_NETS="192.168.0.0/24,0/0,tcp,80 \ 192.168.0.0/24,0/0,tcp,21" My question is, I only want two internal addresses to be able to FTP and Browse to a specific FTP/WWW server. I cannot find any reference in SuSEfirewall2 to include an exclusion in the above line. I was thinking something like: FW_MASQ_NETS="192.168.0.0/24,0/0!200.200.200.211,tcp,80 \ 192.168.0.222,200.200.200.211,tcp,80" Any idea how to do this, or should I create all my forwarding rules directly using iptables? B

4 3

SuSE Firewall2 HOWTO or FAQ
by Anthony Brock 29 Apr '04

29 Apr '04

I've been monitoring discussions around the SuSE Firewall2 for some time. As a recent convert from RH 8, I've been confused from "day one" concerning how to configure this particular component. This is even after I've ready through the configuration file several times. To be honest, I'm not even certain how I could bypass this to explicitly specify the IP table rules. However, discussions on this list (and notes within the configuration file) indicate that this and many other options are available. Is there a general "HOWTO" or guide concerning this tool? Even better, is there a cookbook or FAQ? Thanks! Tony

5 4

iptables nat rules for different dns-names [2]
by Philippe Vogel 29 Apr '04

29 Apr '04

Hi! Is it possible to filter with nat rules that I can access two servers on different IP's but with the same port and with apache + mod_backhand? This has nothing to do with the 1st post (both are different ideas). Or in a different setup: dns-names over dyndns Inet | dev-ext (pppoe over dsl) | FW | dev-int (LAN) | servera.local.net:80 (apache+mod_backhand) serverb.local.net:80 (apache+mod_backhand) Server a&b are identical, but sync data. Any ideas? Philippe

1 0

sshd keep alive
by Emiliano Sutil 29 Apr '04

29 Apr '04

Hello, I have Suse 9.0 and I use ssh to create tunnels to access several services of the server. My problem is that ssh close the connections if there is no activity in the tunnel. I have the property KeepAlive yes in the sshd_config but I doesnt work. I have ipchains as firewall, perhaps this is my problem but I don´t know, ¿any idea? Thaks -- Emiliano Sutil García

6 7

RE: [suse-security] sshd keep alive
by sematin＠mtn.co.ug 29 Apr '04

29 Apr '04

Unless you have a specific need for ssh tunnels, you could simply setup a VPN tunnel between your host and the server using ipsec and thus ALL your connections to the server go through that secure tunnel. You don't need keepalives for that. Noah. > -----Original Message----- > From: Emiliano Sutil [mailto:emiliano@iranon.com] > Sent: 29 April 2004 10:15 > To: suse-security(a)suse.com > Subject: [suse-security] sshd keep alive > > > Hello, > > I have Suse 9.0 and I use ssh to create tunnels to access several > services of the server. > My problem is that ssh close the connections if there is no > activity in > the tunnel. > I have the property KeepAlive yes in the sshd_config but I > doesnt work. I have ipchains as firewall, perhaps this is my > problem but I don´t know, > > ¿any idea? > > > Thaks > > -- > Emiliano Sutil García > > > > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

5 6

sasldblistusers2 / saslpasswd2 not not working
by Sheridan West 29 Apr '04

29 Apr '04

Hi I have a suse 8.2 prof setup - the final aim is to get cyrus and exim working. Cyrus is causing headaches so far. A short history: the Suse rpms for cyrus do not seem work / or you get segfaults - so I downloaded and 'make' both sasl and cyrus - now the logic seems to require an entry in /etc/sasl2db before I can get cyradm to work. I have been using this as a guide http://www.tldp.org/HOWTO/Postfix-Cyrus-Web-cyradm-HOWTO/install.html Having a look here sysconfig auth is set to pam - I can see the cyrus server but cant do anything with it can anybody clue me in and help me get this working. It got to be easy ? yes /no sorry about my stupidness. ____________________________________________________________ Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html

2 2

RE: [suse-security] sshd keep alive
by sematin＠mtn.co.ug 29 Apr '04

29 Apr '04

I have not done ipsec tunnels in linux since my one and only attempt at freeswan proved to be a whole 24 hours of frustration however I have run it very easily in steps taking about 15 minutes with FreeBSD. I assumed that by now freeswan should be useable and easy to setup since about 3 years have passed since my abortive attempt at setting it up. Noah. > -----Original Message----- > From: Geoffrey [mailto:esoteric@3times25.net] > Sent: 29 April 2004 13:13 > To: suse-security(a)suse.com > Subject: Re: [suse-security] sshd keep alive > > > sematin(a)mtn.co.ug wrote: > > Unless you have a specific need for ssh tunnels, you could simply > > setup a VPN tunnel between your host and the server using ipsec and > > thus ALL your connections to the server go through that > secure tunnel. > > You don't need keepalives for that. > > I'm looking for enlightenment here. Personal experience seems to > indicate that ssh is a lot easier to set up then a vpn, > freeswan being > the only solution I've tried, and know of that works on > Linux. So, ssh > is the way I normally approach this problem. I can get ssh up an > running from install, whereas freeswan is an effort measured in hours > and frustration. > > Are there other solutions? > > -- > Until later, Geoffrey Registered Linux > User #108567 > Building secure systems in spite of Microsoft > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

2 1

Re: [suse-security] sshd keep alive
by Armin Schoech 29 Apr '04

29 Apr '04

Hi, > >--> I think you have to enable keek alive in both sshd_config and > >ssh_config, i.e. for the server AND the client. > > > Well, I use a windows machine to access this linux server. I access > with putty, exactly with > the command plink.exe, I don´t know where to indicate this in the > client, do you know? > --> when you start "putty.exe" on your Windows client, you can change the settings for a specified connection (user@host). These settings are then also used by the other programs of the PuTTY suite like pscp.exe and probably also plink.exe Somewhere in the options under "Connections" you will find a check-box for keep-alives. Good luck! Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50

1 0

Re: [suse-security] sshd keep alive
by Paranoiac_User 29 Apr '04

29 Apr '04

>> You can circumvent all this trouble by using ready made solutions >> instead of reinventing the wheel. There are free OpenSource projects >> as autossh and rstunnel (reliable ssh tunnel) that address this issue. >> >> [1] http://sourceforge.net/projects/rstunnel/ >> [2] http://www.harding.motd.ca/autossh/ >> >> the bob >> >> -- http:\\www.hs-pongratz.de >> > I didn´t know this projects, I´ll investigate them, one question before > I start, can I use this solutions on the client machine running windows? > Nope, according to projects descriptions on links mentioned above these are *nix solutions. But ipsec would be interoperable with windows >=2k. the bob -- http://www.hs-pongratz.de

1 0

Re: [suse-security] sshd keep alive
by Paranoiac_User 29 Apr '04

29 Apr '04

> I have Suse 9.0 and I use ssh to create tunnels to access several > services of the server. > My problem is that ssh close the connections if there is no activity in > the tunnel. > I have the property KeepAlive yes in the sshd_config but I doesnt work. > I have ipchains as firewall, perhaps this is my problem but I don´t know, > You can circumvent all this trouble by using ready made solutions instead of reinventing the wheel. There are free OpenSource projects as autossh and rstunnel (reliable ssh tunnel) that address this issue. [1] http://sourceforge.net/projects/rstunnel/ [2] http://www.harding.motd.ca/autossh/ the bob -- http:\\www.hs-pongratz.de

1 0

Re: [suse-security] How to block some IPs with SuSEfirewall2 ?
by Marc Samendinger 28 Apr '04

28 Apr '04

> -----Original Message----- > From: Anders Johansson [mailto:andjoh@rydsbo.net] > Sent: Wednesday, April 28, 2004 7:14 AM > > > On Wednesday 28 April 2004 06.52, Christian Lange wrote: > > Hello Andreas, > > > > > Well, now I did and an > > > IPTABLES -A OUTPUT -j REJECT -d www.x.de > > > in fw_custom_before_antispoofing() > > > > you will need a rules like this: > > > > iptables -A FORWARD -s IP_OF_NAT_BOX_1 -d IP_OF_DESTINATION > -j DROP/REJECT > > iptables -A FORWARD -s IP_OF_NAT_BOX_2 -d IP_OF_DESTINATION > -j DROP/REJECT > > Really? I didn't think NATed packets passed through the > FORWARD table. I > thought that was for unmodified packets only. nope > iptables -t nat -I PREROUTING -d DEST_IP -j DROP > > would have been my guess You guessed wrong, nat in the PREROUTING chain is for DNAT (Destination nat) only. SNAT takes place in the POSTROUTING chain. SNAT packets take their way through the FORWARD chain and can therefore be DROPed/REJECTed in the FORWARD chain. Take a look at the Kernel Packet Traveling Diagram on Stef Coene's site docum.org http://www.docum.org/stef.coene/qos/kptd/ HTH marc

2 1

How to block some IPs with SuSEfirewall2 ?
by Andreas 28 Apr '04

28 Apr '04

Hi, I'd like to make a number of IPs unreachable from within our LAN. The PCs in the LAN have internet access via an SuSE 8.2 box that does NAT for them. Now I'm rather convinced that /etc/sysconfig/scripts/SuSEfirewall2-custom is the place to stop all packets to and from those IPs. I tried to set some rules but didn't get any result. How can I stop any talk between my host and certain IP adresses ? Thanx in advance Andreas

4 4

Re: [suse-security] Tripwire on Suse 9.0
by Jeremy Gardner 27 Apr '04

27 Apr '04

Thanks to all of you for telling me about the update. Still getting used to Suse, forgot updates were available and hadn't seen any mention of it in the email lists. I did a clean install on the whole package and everything works great. Thanks again! Jeremy -----Original Message----- From: Oswald Jaskolla [mailto:oswald@jaskolla.net] Sent: Monday, April 26, 2004 11:53 AM To: suse-security(a)suse.com Subject: Re: [suse-security] Tripwire on Suse 9.0 Hi Jeremy, Jeremy Gardner wrote: > So you're saying: > 1. Install tripwire-2.3.1-98.i586.rpm from 9.0 CD > 2. Run online update to patch tripwire Right! > Do you know what version the update would bring me to? I just want > to make sure I have the correct latest version. That's tripwire-2.3.1-138.i586.patch.rpm, But I guess you should be able to install the whole package instead ofthe old one and patching. The problem was with a change in the binutils package. At least that's what http://www.suse.de/de/private/download/updates/90_i386.html says Greetings, Oswald -- _/_/ _/ | _/ _/ _/ | Oswald Jaskolla <oswald(a)jaskolla.net> _/ _/ _/ _/ | http://www.jaskolla.net/oswald/ _/_/ _/ _/_/ _/ | -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

Re: [suse-security] Tripwire on Suse 9.0
by Jeremy Gardner 26 Apr '04

26 Apr '04

So you're saying: 1. Install tripwire-2.3.1-98.i586.rpm from 9.0 CD 2. Run online update to patch tripwire And skip installing/configuring from source? Do you know what version the update would bring me to? I just want to make sure I have the correct latest version. Thanks! Jeremy -----Original Message----- From: Oswald Jaskolla [mailto:oswald@jaskolla.net] Sent: Monday, April 26, 2004 2:57 AM To: suse-security(a)suse.com Subject: Re: [suse-security] Tripwire on Suse 9.0 Hi! Christian Lange wrote: > Jeremy Gardner schrieb: >> I am trying to get Tripwire working on Suse 9.0. I started with >> tripwire-2.3.1-98.i586.rpm. After I got the segmentation fault on my >> first twadmin command, (...) > > (...) > 1. install the newest tripwire-xy.tar.gz > 2. install the original tripwire.rpm from your SuSE 9.0 release > Alternatively skip 1. and install the patch from online update. Greetings, Oswald -- _/_/ _/ | _/ _/ _/ | Oswald Jaskolla <oswald(a)jaskolla.net> _/ _/ _/ _/ | http://www.jaskolla.net/oswald _/_/ _/ _/_/ _/ | -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

3 2

RIF: [suse-security] Hardening SuSE 9
by Palmerini Gian Fabio 26 Apr '04

26 Apr '04

Hello after "configuring" harden_suse script in the installation media of SuSE 9.0 you can find SecCheck Script V2.0 that help you to verify the status of your machine you can find documentation and script about hardening suse and susefirewall2 at http://www.suse.com/~marc/ and: http://susefaq.sourceforge.net/guides/fw_manual.html for susefirewall 2 Best regards Gian Fabio -----Messaggio originale----- Da: GarUlbricht7(a)netscape.net [mailto:GarUlbricht7@netscape.net] Inviato: lun 26/04/2004 9.52 A: suse-security(a)suse.com Cc: Oggetto: RE: [suse-security] Hardening SuSE 9 Armin Schoech wrote on 4/26/2004 2:45:05 AM Eastern Daylight Time: > >> On the actual hardening, >> there is a script for hardening SuSE linux systems >> called harden_suse or hard_suse or something similar to that. >> Searching the CDs using yast for the string "hard" should find it. >> > AFAIK, this script has not been updated for a while. > So be careful before applying it to a SuSE 9.0 system. > It may not work and/or cause problems. > >Armin --< sig line trimmed >----- There are several different approaches the I am awear of: Go into YaST2 --> Security & Users --> Security settings --> --> "change level" Install "bastille" (this was last upgraded on 12/3/03 for SuSE 9.0 per change notes). It's on the 9.0 CD/DVD. { Bastille Linux is a security hardening program for various Linux distributions.} "bastile" doesn't show up for 8.2 (at least I couldn't find it) For 8.0 there is a script with "harden" in it's name, and I think that is the one Armin is referring to above... Anther approach is the custom one. Do port scans and shut down all the services you aren't using etc., removing rpms that aren't needed, etc. (SuSE is shipping with more and more things turned off -- but it is always good to check) Hope this helps, -- "Paranoia is heightened awareness." -- __________________________________________________________________ Introducing the New Netscape Internet Service. Only $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

Tripwire on Suse 9.0
by Jeremy Gardner 26 Apr '04

26 Apr '04

Howdy, I am trying to get Tripwire working on Suse 9.0. I started with tripwire-2.3.1-98.i586.rpm. After I got the segmentation fault on my first twadmin command, I did some research and discovered this is a known issue. Many people said to use the version that comes with Suse 8.2, tripwire-2.3.1-25.i586.rpm. I removed the 9.0 version and installed the 8.2 version. I was able to get through the twadmin commands, but still got the segmentation fault when I ran `tripwire --init`. I downloaded the source from tripwire.org for tripwire-2.3-47.bin.tar.gz and installed that. Same segmentation fault problem. Many people posted that the 8.2 version worked for them, but I couldn't get it to work for me. Do I need to install a library, downgrade a library, or something else? Is there a version to install that I don't know about? This is very frustrating, a big reason I went with Suse was that it had newer versions of packages than many, and you can run Tripwire for free over Solaris, but what's the point if it doesn't work on a version of Suse that's been out for awhile now. I just switched from Redhat and Suse, hope I don't regret it. Thanks! Jeremy

3 2

RE: [suse-security] Hardening SuSE 9
by GarUlbricht7＠netscape.net 26 Apr '04

26 Apr '04

Armin Schoech wrote on 4/26/2004 2:45:05 AM Eastern Daylight Time: > >> On the actual hardening, >> there is a script for hardening SuSE linux systems >> called harden_suse or hard_suse or something similar to that. >> Searching the CDs using yast for the string "hard" should find it. >> > AFAIK, this script has not been updated for a while. > So be careful before applying it to a SuSE 9.0 system. > It may not work and/or cause problems. > >Armin --< sig line trimmed >----- There are several different approaches the I am awear of: Go into YaST2 --> Security & Users --> Security settings --> --> "change level" Install "bastille" (this was last upgraded on 12/3/03 for SuSE 9.0 per change notes). It's on the 9.0 CD/DVD. { Bastille Linux is a security hardening program for various Linux distributions.} "bastile" doesn't show up for 8.2 (at least I couldn't find it) For 8.0 there is a script with "harden" in it's name, and I think that is the one Armin is referring to above... Anther approach is the custom one. Do port scans and shut down all the services you aren't using etc., removing rpms that aren't needed, etc. (SuSE is shipping with more and more things turned off -- but it is always good to check) Hope this helps, -- "Paranoia is heightened awareness." -- __________________________________________________________________ Introducing the New Netscape Internet Service. Only $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp

1 0