June 2004 - openSUSE Security - openSUSE Mailing Lists

Waiting for dev/900
by Werner Penz 30 Jun '04

30 Jun '04

Hi, after an kernel update with YOU one of my SuSe9.1-box aborts the boot with teh message: Waiting for dev/900 to appear: .... not found .... Any helps ?

1 0

RE: [suse-security] How to drop Winmx p2p
by José Luis Ledesma 30 Jun '04

30 Jun '04

you are using the --syn option, so you only are preventing establishing new connections, you are not dropping the established ones, so perhaps the connections are alive because they were established before you applied the rule... HTH, José Luis Ledesma _______________ Competitiveness Telephone: +34 93 582 02 90 Email: jledesma(a)competitiveness.com Website: http://www.competitiveness.com -----Original Message----- From: lab.civitanova(a)unimc.it [mailto:lab.civitanova@unimc.it] Sent: miércoles, 30 de junio de 2004 10:58 To: suse-security(a)suse.com Subject: Re: [suse-security] How to drop Winmx p2p Scrive Markus Gaugusch <markus(a)gaugusch.at>: > On Jun 30, lab.civitanova(a)unimc.it <lab.civitanova(a)unimc.it> wrote: > > > How can I stop winmix peer to peer connections? I try in my gateway > > machine to write this : "iptables -A FORWARD -p tcp --syn -dport 6699 -j > > DROP", but it doesn't work. Winmix seem to connect anyway with a remote > > host at the port 6699. > > First: Better stop all traffic except for "known good" ports. There are so > many was to do file sharing, that you can hardly prevent them by > firewalling. > > Second: You probably have another rule that allows all traffic and the > rule above is appended to your ruleset. Better use -I (insert) and not -A > (append). > > Markus > -- > __________________ /"\ > Markus Gaugusch \ / ASCII Ribbon Campaign > markus(at)gaugusch.at X Against HTML Mail > / \ > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > > Thanks everybody but nothing to do!!! Winmix connection seem to be alive anyway!!!! I try other ways Bye Bye -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

How to drop Winmx p2p
by lab.civitanova＠unimc.it 30 Jun '04

30 Jun '04

Hi all!!! How can I stop winmix peer to peer connections? I try in my gateway machine to write this : "iptables -A FORWARD -p tcp --syn -dport 6699 -j DROP", but it doesn't work. Winmix seem to connect anyway with a remote host at the port 6699. Anyone may help me? Thanks!!! Paolo

4 4

susefirewall2 and internal/external interface
by Bojan Hribernik 30 Jun '04

30 Jun '04

Hello, happy 9.1 personal user here :D I've got few questions regarding SuSEfirewall2 configuration with yast2. I have got dsl connection with dsl0 and eth0 (home workstation). 1. In my case, dsl0 is the external interface, and eth0 is internal, right? Or should i chose <none> as the internal device? 2. What firewall features should I enable to be able to use edonkey network with additional iptable rules? Forward Traffic and Do Masquerading? Protect from Internal Network? Allow Traceroute? Protect All Running Services? Treat IPsec Traffic as Interal? 3. On suse 9.0 I opened tcp/udp ports like this: # su # netstat -ltupn | grep xmule (to see which ports need to be open) # IPTABLES -A INPUT -p tcp --dport 4662 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT # IPTABLES -A INPUT -p udp --dport 4665 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT # IPTABLES -A INPUT -p udp --dport 4672 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT But now, on 9.1 it does not work, I allways get lowid. I also noticed that iptable rules disappear after reconnect?!? #iptables -L -v Should I save them? How? What does the iptables-save do? Should I restart the firewall after adding rules? Should I reboot? Aaaargh... not so happy suse user anymore! :D Thanks Bojan

1 0

RE: [suse-security] Problems writting to Promise disk
by carlos＠keysoft.pt 29 Jun '04

29 Jun '04

Sorry about the previous post. Fumbling fingers sent the mail by mistake. I've just installed a software raid SuSE 9.1 server and it was a breeze. When the installer arrives at the partitioning phase, look around in the (advanced?) dropdowns and there's an option to make partitions of type RAID. FWIW, I created two identical swap partitions (one on each drive) and then created the RAID partition on the first drive. The installer then asked and auto created the identical partition in the other drive. Don't know if it's this simple in previous SuSE versions. Carlos -- Carlos Costa e Silva <carlos(a)keysoft.pt>

4 3

kernel update thread
by dannowwillis＠att.net 29 Jun '04

29 Jun '04

My apologies if I've missed something in this thread. I have 3 SuSe servers (two 9.0 and one 9.1)- all older pentium boxes. I have not run the kernel updates after reading of all the problems. There was some early activity in this thread concerning going to more of the Red Hat "fallback position" kernel update (giving the option of booting to an older kernel if disaster strikes). Is this an option now using YAST? After being bitten by SAMBA 3.02 to 3.04 update problems on the 9.1 box, I'm not eager to break things again. Thanks, Dan Willis

1 0

Amazon account subscribed here?
by Bjorn Tore Sund 28 Jun '04

28 Jun '04

I'm an irregular poster to this bounce. But the last four or five times I've gotten one of these rather immediately after the post. Some jerk that's subscribed an Amazon support address to the bounce or who forwards his email to Amazon support? Anyone else noticing this, or am I imagining things? Bjørn -- Bjørn Tore Sund Phone: (+47) 555-84894 Stupidity is like a System administrator Fax: (+47) 555-89672 fractal; universal and Math. Department Mobile: (+47) 918 68075 infinitely repetitive. University of Bergen VIP: 81724 Support: system(a)mi.uib.no Contact: teknisk(a)mi.uib.no Direct: bjornts(a)mi.uib.no ---------- Forwarded message ---------- Date: Sun, 27 Jun 2004 04:19:32 -0700 From: Amazon.co.uk <nobody(a)amazon.co.uk> To: Bjorn Tore Sund <bjornts(a)mi.uib.no> Subject: Re: Your Amazon.co.uk Inquiry Greetings from Amazon.co.uk. Please note: this is an automated response, but it contains information that should help to answer your questions. Please do not reply to this e-mail, as we are not able to respond personally to messages sent to this address. To better serve you, we've made it easy to find answers and make changes quickly and efficiently through our Web site. To view your account history, change the delivery address or payment method, cancel an item or make other changes to undispatched orders or to your account, visit: http://www.amazon.co.uk/youraccount To find answers to questions about our delivery rates, returns policy and how to use any of our services, visit our online help desk at: http://www.amazon.co.uk/helpdesk If you have experienced difficulties in reading an HTML e-mail we have sent to you, you may wish to set your communication preferences to text-only, so that we will no longer send you e-mail in HTML format. You may do this either by visiting "Your Account" at the top of any page and selecting "Update your communication preferences" or by simply clicking on the URL below: http://www.amazon.co.uk/exec/obidos/account-access-login We hope our online resources meet all your needs. If you've explored the above links but still need to get in touch with us, you will find all our contact details in the online help guide. We appreciate your business and look forward to seeing you again soon at Amazon.co.uk. Warmest regards, Amazon.co.uk Customer Services http://www.amazon.co.uk/ ********************************************************************** The information contained in this e-mail message and any attachments is intended for the addressee only and may be confidential. If you are not the addressee, you must not read, use, pass on or copy this message or any attachments or disclose its contents to anyone. If you have received this e-mail in error, please notify us by returning the e-mail and delete all copies of this message including any attachments. E-mails cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete or contain viruses. The sender does not accept any liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard copy version. Please be aware that the contents of any e-mails sent to Amazon.co.uk may be monitored and reviewed in accordance with lawful business practice. **********************************************************************

5 5

RE: [suse-security] Problems writting to Promise disk
by carlos＠keysoft.pt 28 Jun '04

28 Jun '04

If you are installing a new system with SuSE 9.1 it's simple: when the installer arrives at the partitioning phase, look around in the dropdowns and there's an option > -----Original Message----- > From: emiliano(a)iranon.com [mailto:emiliano@iranon.com] > Sent: segunda-feira, 28 de Junho de 2004 08:44 > To: nzkiwi(a)mte.biglobe.ne.jp; suse-security(a)suse.com > Subject: Re: [suse-security] Problems writting to Promise disk > > > Keith Wilkinson wrote: > > > I think there's a warning when you install that the 2.6 kernel > > does not support Promise and similar software RAID, you > > should use the LINUX software RAID instead. > > > > > I don´t understand when you say "use the LINUX software RAID > instead." > How I do that? Can you explain me > more detailed what I have to do > > Thanks > > Emiliano Sutil > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

1 0

Re: [suse-security] Problems writting to Promise disk
by Emiliano Sutil 28 Jun '04

28 Jun '04

Keith Wilkinson wrote: > I think there's a warning when you install that the 2.6 kernel > does not support Promise and similar software RAID, you > should use the LINUX software RAID instead. > > I don´t understand when you say "use the LINUX software RAID instead." How I do that? Can you explain me more detailed what I have to do Thanks Emiliano Sutil

2 1

Recomendations for surveillance/configuration/heartbeat tool for remote servers
by Robert Rozman 27 Jun '04

27 Jun '04

Hi, I have a network of servers and I'd like to get some recomendations for selecting the right tools for this task: - I have a series of simple servers connected on the Internet - I'd like to remotely: - control all those servers, - watch their behaviour, - implement somekind of heartbeat function (servers send heartbeat packets in regular time intervals - if not received -> alarm), - statistics framework for performance analysis - if possible to have secure connections (possibly in software) also for other communication ports that other applications use ... I found some tools like Argus, but as newbie I'm not sure if they satisfy my needs... Any recomendation, idea, pointer to more info would be great, thanks in advance, Robert.

1 0