September 2004 - openSUSE Security - openSUSE Mailing Lists

Failed attempts, block address
by MB 02 Jan '05

02 Jan '05

Hi list, Been getting a ton of attempts on my ssh/ftp connections as of late, first they started with the usual script kids trying the admin/guest/etc on the ssh connection, now i get people trying all sorts of stupid usernames with blank passwords on the ftp connection. 1. Is there a way to block an IP, either perm. or for set period of time for SSH attempts 2. Is there a simular way for VSFTP I'm sure i could block the address's manually, but i'd like it if it was automated? say for 6 attempts? Matt SuSE 9.1 --------------------------------- Do you Yahoo!? Yahoo! Mail - You care about security. So do we.

7 7

SUSE 9.0 Pro Production Quality?
by Eric Kahklen 19 Nov '04

19 Nov '04

I had a discussion with my local LUG and a member had some interesting threads to share. Basically it showed that SUSE 9.0 is not really a production level version. For production level use, it is recommended to go with the Enterprise version of SUSE. Has other people got this impression? My concern is that my company can't afford to purchase any more software at this time so would I be better off looking at something like Debian? I know this is kind of off topic, but basically I am curious if 9.0 Pro is secure and stable enough for my organization needs. Thanks, Eric -- ______________________________________________________________________

17 22

Automated kernel updates
by Andreas Haupt 04 Oct '04

04 Oct '04

Hello, I plan to recheck SuSE's security updates before installing them on the machines. "Normal" packages are easy. I just imitate an update mirror with just links in it. If a link exists the corresponding patch will be installed. This way I can use SuSE's online_update. Kernel updates on the other hand should just be installed when the system is going down. Furthermore I want the last working kernel not to be deinstalled when the new kernel is being installed. "rpm -i" would do this for me so I have vmlinuz (new kernel) and vmlinuz.previous (last working kernel) later on. Does anyone have such a system installed at his/her site? Otherwise there is some work to do for me... Can you give me some advises on the implementation? Thanks in advance Andreas -- | Andreas Haupt | E-Mail: andreas.haupt(a)hmi.de | Hahn-Meitner-Institut (DN) | WWW: | Glienicker Straße 100 | Phone: +49/30/8062-2597 | 14109 Berlin | Fax: +49/30/8062-2096

4 9

[Genera] Rules for firewall?
by Rikard Johnels 01 Oct '04

01 Oct '04

Hi all! I dont know if this is the right list, but here goes. I am fairly new to firewalling and iptables. I have a setup as follows: firewall: red eth0 external interface (adsl, dhcp) yellow eth1 dmz interface green eth2 internal interface On dmz is a combined server running web/ mysql/ ftp/ caching dns/ time/ outgoing mail and nfs server I only want web/ftp to be available from red All other services is for green (and yellow) network I have several machines on green (So i guess i want NAT there) One Linux server with NFS Three linux ones running gnomemeeting amsn and licq Two windows ones running Netmeeting, MSN, ICQ All machines run bittorrent, limewire and dc++ I want ssh access to all boxes I want to be able to run all communicationservices from arbitrary box. All internal boxes shall use time/ dns/ outgoing mail om the dmz server The firewall is to be locked down for user login only via ssh. Anything to be done is sudo'ne (note to self, find out how to lock ssh to userlogin only) But i want access from red to firewall so i can "jump" to green and yellow if needed. I want as full access as possible from green to red I have read the SuSEFirewall2 docs in /usr/share/docs/packages/SuSEFirewall2 but i cant figure it out.. What so set, what to add/remove.. Any pointers on where to start learning? Any pointers on how to set it up? -- /Rikard ------------------------------------------------------------------------------------ Rikard Johnels email : rikjoh(a)norweb.se Web : http://www.rikjoh.com Mob : +46 735 05 51 01 ------------------------ Public PGP fingerprint ---------------------------- < 15 28 DF 78 67 98 B2 16 1F D3 FD C5 59 D4 B6 78 46 1C EE 56 >

5 5

How to lock p2p comunication
by Paolo Santancini 30 Sep '04

30 Sep '04

Hi all, I have a SuSe 8.2 distribution with SuSeFirewall2 set up succesfully. I would like to know How can I lock the peer to peer comunications from a port to a port? I tried to modify the script of the firewall adding custom iptables rules, but nothing to do. Someone may help me? Thanks Paolo

2 1

Martian source (How to ignore in logs)
by b＠rry.co.za 30 Sep '04

30 Sep '04

Hello All, How do I get SuSE 9.1 (SuSEfirewall2) to ignore martian source messages and not log them? I have a valid reason to have martian source on my two nics and the messages they are logging is wasting huge amounts of logfile and making it difficult to spot real traffic... Any help greatly appreciated

4 6

Cyrus Mailserver POP3 /IMAP secure password authentication
by Andrei Bintintan 30 Sep '04

30 Sep '04

Hi to all, I'm using a Suse 9.1 OS, I have setup a Postfix + Cyrus mailserver. Everything runs well, I can connect with pop3 and imap, also with SSL(pop3s and imapds). Now, out clients are mailny windows based systems. I want to know how I have to setup cyrus to make the "log in using secure password authentication" available. I want only that the password is sent secure and not the whole pop3 connection. I succeded authentication with the smtp connection but not with the pop3 connection. When I try to connect from Outlook express I receive the following error: Unable to logon to the server using Secure Password Authentication. Account: 'Andy makla', Server: '192.168.0.17', Protocol: POP3, Server Response: '.', Port: 995, Secure(SSL): Yes, Error Number: 0x800CCC18 In the logs I find only this: Sep 30 03:51:36 makla master[8867]: about to exec /usr/lib/cyrus/bin/pop3d Sep 30 03:51:36 makla pop3[8867]: executed Sep 30 03:51:36 makla pop3[8867]: accepted connection Sep 30 03:51:36 makla master[8536]: process 8867 exited, status 0 Hope you can help. Best regards. Andy.

1 0

re: time
by Ben 30 Sep '04

30 Sep '04

Thankyou all for your help. I think this is not really a security question so ill leave it alone and work it out myself. Thanks again for everything you gut's are awesome im off for the weekend, got a gentoo to tackle. Yours...Ben :) -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

1 0

re: new time
by Ben 30 Sep '04

30 Sep '04

Hey There ya go!. Is my time fixed now, It should be (i hope) Yours...Ben :) :D -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

3 5

dangerous ms files
by b＠rry.co.za 29 Sep '04

29 Sep '04

(forwarded from dansguardian list - From: proxy(a)barendse.to) This is from a message on another mailing list but i guess it is of interest for this list too: Microsoft have apparently expanded their list of "High-risk file types" with the release of Windows XP SP2. The new list of high-risk dangerous attachments they have added are: .ade .adp .app .asp .bas .bat .cer .chm .cmd .com .cpl .crt .csh .exe .fxp .hlp .hta .inf .ins .isp .its .js .jse .ksh .lnk .mad .maf .mag .mam .maq .mar .mas .mat .mau .mav .maw .mda .mdb .mde .mdt .mdw .mdz .msc .msi .msp .mst .ops .pcd .pif .prf .prg .pst .reg .scf .scr .sct .shb .shs .tmp .url .vb .vbe .vbs .vsmacros .vss .vst .vsw .ws .wsc .wsf .wsh

1 0

Re: [SLE] re: why wont my suse compile
by Ben 29 Sep '04

29 Sep '04

On Wed, 29 Sep 2004 14:54:40 -0700, Ben <willcu(a)paradise.net.nz> wrote: > On Tue, 28 Sep 2004 19:51:28 -0700, Randall R Schulz <rschulz(a)sonic.net> > wrote: > >> Patrick, >> >> On Tuesday 28 September 2004 19:32, Patrick Shanahan wrote: >>> * Randall R Schulz <rschulz(a)sonic.net> [09-28-04 09:59]: >>> > It's called "Dictionary" (Gasp! What an inspired name!) >>> > >>> > It's always in the recent applications section of my KDE menu, so >>> > I'll have to go looking for it's original home... There it is. It's >>> > in the "Office..." sub-menu of the KDE menu. Assuming you installed >>> > it. >>> >>> and is available from the cl as 'dict'. Much easier to use this way. >> >> That's debatable, and probably dependent on the context in which you're >> using it. >> >> I'm by no means command-line-phobic (or even possessed of an overall >> bias >> one way or the other), but in this case, I like the GUI. >> >> It's somewhat like the discussion of how best to extract user names from >> an "ls" listing. "Best" is very context- and purpose-dependent. >> >> >> What I would like to have (but have not had time to investigate, yet) is >> the ability to have the current text selection automatically primed into >> a Dictionary / dict search. I do miss that level of integration with MS >> Bookshelf. >> > This is the thread i started the other day, look how far removed from > the question > it has become, WTF is it all about suse, security or gramma and nit > picking > PSS When i did CL "dict" no such thing?. Is that for SuSE 9.1 pro? cause it dont werk in SuSE 9.1 personal? A decent Dictionary would be handy for me as the flames i get for spelling is terrible, So i guess i should do something about it really. :) >>> -- >>> Patrick Shanahan >> >> >> Randall Schulz >> > > > -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

2 1

re: strange but true
by Ben 29 Sep '04

29 Sep '04

Hello all I have a strange problem, I keep watch on a network belonging to a non-profit org at which there are one hardware firewall (linksys) that is a embedded linux (i think). The computers where logged off yet i saw that three of the computers made a tcp connection to the net. How is it possible to make this connection if the computers are logged off? is this a fault with the firewall or is it possible for a logged off computer to make an outgoing connection? Any suggestion's will be greatfully received Yours...Ben :D -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

5 21

Re: [suse-security] re: Time
by Scott Leighton 29 Sep '04

29 Sep '04

On Wednesday 29 September 2004 3:49 pm, you wrote: > On Tue, 28 Sep 2004 20:45:42 -0700, Scott Leighton <helphand(a)pacbell.net> > > >> > > >> > Well, your mail header has this: > >> > > >> > Date: Wed, 29 Sep 2004 14:41:07 -0700 > >> > > >> > Which is clearly the wrong date and time. I'm in that > >> > timezone and the time right now is > >> > > >> > Tues, 28 Sep 2004 18:57:41 -0700 > >> > > >> > Scott > >> > >> Sorry bro but today is wednesday here??????? > > > > Then you can't possibly be in the PDT timezone. > > > > As noted above, -0700 > > > > Scott > > OHH, I see. Time zone! > im not sure what time zone i should be in (and thats pretty typical for > me). > i choose Auckland NZ when i install but i notice that its never right! > that must be the problem. I used to do NTPDATE TIME.PARADISE.NET.NZ and > that > would fix it, but that doesnt work in SuSE, What is the SuSE equivalent to > NTPDATE? > Do you know if there is a Command line script for it? > Thanks, i see that you are right! > I'll have to defer your question to one of the experts on the list. All I know is that I set my timezone in the clock in the lower right hand corner of KDE and it all just works. I use xntp to keep it all sync'd, but don't recall having to specify any timezone when setting that up. Someone will surely come along who knows the facts and can help you with specifics. Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.5-7.108-default x86_64

1 0

Re: [suse-security] re: Time
by Scott Leighton 29 Sep '04

29 Sep '04

On Wednesday 29 September 2004 3:01 pm, you wrote: > On Tue, 28 Sep 2004 19:58:37 -0700, Scott Leighton <helphand(a)pacbell.net> > > wrote: > > On Wednesday 29 September 2004 2:41 pm, Ben wrote: > >> I have noticed that someone complained about the time. > >> What was wrong with my time? > >> It seem right from where i sit? > >> But i am happy to listen if there is a prob with my time > >> Again, my time seems right from here? > >> is it wrong at your end? > > > > Well, your mail header has this: > > > > Date: Wed, 29 Sep 2004 14:41:07 -0700 > > > > Which is clearly the wrong date and time. I'm in that > > timezone and the time right now is > > > > Tues, 28 Sep 2004 18:57:41 -0700 > > > > Scott > > Sorry bro but today is wednesday here??????? Check your timezone. I'm in -0700 which is Pacific Daylight Time. Your headers are showing -0700, which is obviously not correct for where you are really located. Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.5-7.108-default x86_64

1 0

re: Time
by Ben 29 Sep '04

29 Sep '04

I have noticed that someone complained about the time. What was wrong with my time? It seem right from where i sit? But i am happy to listen if there is a prob with my time Again, my time seems right from here? is it wrong at your end? Yours...Ben :) -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

2 1

SSH password attacks
by suse＠rio.vg 28 Sep '04

28 Sep '04

This may not be strictly SuSE related, but what the heck: Lately, I've been getting tons of attempts to login via ssh for "guest", "test", "user", and "admin". Plenty others for root, and even one that seemed to have been a list of some script kiddie's /etc/passwd. The root ones are pretty obvious and always blocked, but I've found the others rather curious. Does anyone running a unix server really use "guest", "test", "user", or "admin" as real accounts? Judging by the volume of attempts I'm getting, there has to be something causing this. Was a borked version of ssh server released for windows, or something? Or is this trying to connect to zombie machines? From what I understand, ssh server isn't common on windows, and those accounts certainly aren't common to unix... Anyone know what's going on here? (I'm not worried about my machines, root is blocked by sshd and I don't have the other accounts, I'm just curious.)

16 20

Fou4s 0.12.0 released!
by Markus Gaugusch 28 Sep '04

28 Sep '04

I'm glad to announce Fast OnlineUpdate for SuSE (fou4s) 0.12.0. Many months have passed since the last version came out, mostly because I'm going to school again, in addition to my daily job. Right now, just before school starts again, I've (hopefully) fixed the most annoying bugs and added some nice features. These are the official release notes. The bad news first: * If root starts fou4s in an untrusted directory, the "SuSE-release" script would be executed from that directory. This is fixed now (ownership-check). * Some updates were missed (scripts), and unfortunately I just discovered, that mysql updates from August were also missed on SuSE 9.0. Now the good news: * Fou4s will do a fully automatic backup of your old kernel. It will be named /boot/vmlinuz.fou4s. This backup is independent from the RPM package and must be deleted manually if it is not needed any more. You also have to add an appropriate lilo.conf/grub menu entry by hand, but fou4s will remind you to do so. Of course this feature can also be disabled in fou4s.conf (KernelBackup=0) * Remind to reboot after doing a kernel update (works even if you updated your kernel with YOU :) * Remote host functionality improved (export scripts and kernels) * A Nagios check script (by William Jacqmein) What else? * Fou4s is no longer on the AutoList in the default configuration. Previously, you had to install a cronjob manually and edit it to fit your needs. Now you can use the --cronserver or --cronworkstation commands and you probably won't look inside the cronjob files. Therefore I decided to remove the self-update feature. Existing installations won't be affected, though. * Support for user/password in urls (e.g. ftp://user:pass@mymirror/suse) * No longer run SuSEconfig with GID fou4s This release will probably be the last before 1.0 (ok, probably 0.12.1 will be released with some minor fixes that usually come out after a release). My TODO list is nearly empty :) Last words: If you sent me a mail during the last months and your bug(-fix) is not included with this release, please contact me again. I was very busy and probably just overlooked it. Thank you for your attention Markus Gaugusch -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(at)gaugusch.at X Against HTML Mail / \

2 1

Re: [suse-security] dns and named in chroot jail
by suse＠tremor.com 28 Sep '04

28 Sep '04

Your issue is that dhcpd is running as the user dhcpd but the permissions on the test.it directory (and I'm assuming the files as well) do not have the correct permissions for dhcpd to update it. If you "chmod 775 test.it" and "chmod 664" the files inside that folder, then make the user dhcpd part of the named group, you should be good. > Hi, > I wanna configure dhcpd and named in chroot jail for security reason. > Dhcpd and named work well but dhcpd does not update named and in the log > files i have nothing that help me to understand the problem. > I use suse professional 9.1. > I read the document in /usr/share/doc/packages/bind but i do not know > where is the problem. > Could you help me ? > Best regards, > Cristian Del Carlo. > > 5) /etc/sysconfig/dhcpd > DHCPD_INTERFACE="eth0" > DHCPD_RUN_CHROOTED="yes" > DHCPD_CONF_INCLUDE_FILES="/etc/named.keys" > DHCPD_RUN_AS="dhcpd" > DHCPD_OTHER_ARGS="" > DHCPD_BINARY="" > > 6) ls -al /var/lib/named > drwxr-xr-x 2 named named 4096 Sep 28 18:54 test.it

1 1

dns and named in chroot jail
by Cristian Del Carlo 28 Sep '04

28 Sep '04

Hi, I wanna configure dhcpd and named in chroot jail for security reason. Dhcpd and named work well but dhcpd does not update named and in the log files i have nothing that help me to understand the problem. I use suse professional 9.1. I read the document in /usr/share/doc/packages/bind but i do not know where is the problem. Could you help me ? Best regards, Cristian Del Carlo. My configuration is the following : 1) /etc/dhcpd.conf default-lease-time 600; max-lease-time 7200; include "/etc/named.keys"; authoritative; allow unknown-clients; ddns-update-style interim; ignore client-updates; subnet 10.1.1.0 netmask 255.255.255.0 { range 10.1.1.101 10.1.1.185; option domain-name "test.it"; option domain-name-servers 10.1.1.1; option subnet-mask 255.255.255.0; option routers 10.1.1.1; option domain-name-servers 10.1.1.1; ddns-domainname "test.it"; ddns-rev-domainname "1.1.10.in-addr.arpa"; zone test.it. { primary 127.0.0.1; key DHCP_UPDATER; } zone 1.1.10.in-addr.arpa. { primary 127.0.0.1; key DHCP_UPDATER; } } 2) /etc/named.conf acl PROVIDER { 192.168.9.30; }; acl BIND { 10.1.1.1; 127.0.0.1/8; }; acl RETELOCALE { 10.1.1.0/24; 127.0.0.1/8; }; options { directory "/var/lib/named"; dump-file "/var/log/named_dump.db"; statistics-file "/var/log/named.stats"; forwarders { 192.168.9.30; }; listen-on port 53 { BIND; }; listen-on-v6 { any; }; allow-query { RETELOCALE; }; allow-transfer { none; }; allow-recursion { RETELOCALE; }; notify no; }; < .......> include "/etc/named.conf.include"; include "/etc/named.keys"; zone "test.it" in { type master; file "test.it/master.zone"; allow-transfer { 127.0.0.0/8; }; allow-update { key DHCP_UPDATER; }; }; zone "1.1.10.in-addr.arpa" in { type master; file "test.it/10.1.1.0.zone"; allow-transfer { 127.0.0.0/8; }; allow-update { key DHCP_UPDATER; }; }; 3) /etc/named.keys key DHCP_UPDATER { algorithm hmac-md5; secret "<samething>"; }; 4) /etc/sysconfig/named NAMED_RUN_CHROOTED="yes" NAMED_CONF_INCLUDE_FILES="rndc-access.conf /etc/named.keys" NAMED_ARGS="" 5) /etc/sysconfig/dhcpd DHCPD_INTERFACE="eth0" DHCPD_RUN_CHROOTED="yes" DHCPD_CONF_INCLUDE_FILES="/etc/named.keys" DHCPD_RUN_AS="dhcpd" DHCPD_OTHER_ARGS="" DHCPD_BINARY="" 6) ls -al /var/lib/named drwxr-xr-x 10 root root 4096 Sep 23 14:02 . drwxr-xr-x 58 root root 4096 Sep 28 08:34 .. -rw-r--r-- 1 root root 192 Apr 6 04:06 127.0.0.zone drwxr-xr-x 2 root root 4096 Sep 28 08:27 dev drwxr-xr-x 2 named named 4096 Apr 6 04:06 dyn drwxr-xr-x 3 root root 4096 Sep 28 14:55 etc -rw-r--r-- 1 root root 158 Apr 6 04:06 localhost.zone drwxr-xr-x 2 named named 4096 Sep 24 12:07 log drwxr-xr-x 2 root root 4096 Sep 23 14:02 master -rw-r--r-- 1 root root 2517 Apr 6 04:06 root.hint drwxr-xr-x 2 named named 4096 Sep 23 12:11 slave drwxr-xr-x 2 named named 4096 Sep 28 18:54 test.it drwxr-xr-x 4 root root 4096 Sep 23 09:31 var

1 0

Re: [suse-security] re: strange but true
by Derek Fountain 28 Sep '04

28 Sep '04

On Wednesday 29 September 2004 12:28, you wrote: > On Tue, 28 Sep 2004 17:26:40 +0800, Derek Fountain <dflists(a)iinet.net.au> > > wrote: > > On Wednesday 29 September 2004 11:57, Ben wrote: > >> it seems to me that linux has as many security probs > >> as MS does?. > >> > >> as i am pretty much a newbie (only got into linux the last 2-3 months) > > > > Given the latter statement I'd suggest you hold your judgement on the > > former! > > True! > do you have a suggestion on a security concious linux Dist? Um, yes, SUSE! I think they're as security conscious as any other major distro, and they make patches available promptly (at least for the the latest version of their product). If you mean "security paranoid" perhaps you should look at something like Trustix? While Linux doesn't, IMHO, have anything like the security problems of Windows, you are wise as a newbie to hit the Linux ground running, so to speak, with security issues in mind. Occasionally Linux does have a problem which could be as grave as some of the Windows ones. The recent image based buffer overflows are a case in point - we only dodged that bullet because of a limited user base. I have a feeling the JPEG issue on Windows which has popped up over the last 24 hours will demonstrate what can be done with this sort of problem.

1 0

Re: [suse-security] re: strange but true
by Ben 28 Sep '04

28 Sep '04

On Tue, 28 Sep 2004 08:49:21 +0000 (GMT), Armin Schoech <schoech(a)iap-kborn.de> wrote: > Hi, > >> Year it was a TCP connection and the port from memory was fairly high >> somewhere around 1300 or there bouts! >> hope that helps, sorry i dont have, oh hang on, yes i do >> its port 80 all of them where port 80 which is a web site aye >> but when i enters the ip numbers it comes up un known? >> > --> probably this is a virus/trojan etc. which tried to connect to a > website which has been shut-down because it provides virus updates, > trojan commands, or something like this. > > Doesn't sound too good anyways... > > Armin > > No i didnt think it sounded to good! it seems to me that linux has as many security probs as MS does?. I think ill dive into linux security over the next few months and arm myself with as much knowlege as pos. do you know of any linux dist's that are on the safer side as far as security goes? as i am pretty much a newbie (only got into linux the last 2-3 months) but have learn a heap in that time and am considering doing a gentoo install that ive herd can be done using knoppix. But im rather hooked on SuSE 9.1 and will endevour to learn as much on security and SuSE as i can, This mail list has been awesome and i learn alot from peoples problems and answers. Thanks to everyone who devotes their time here for people like me that really appreciates and learns a heap. Yours...Ben -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

2 1

Re: [suse-security] Making SuSE 9.1 a router?? HOW??
by John Andersen 28 Sep '04

28 Sep '04

On Saturday 25 September 2004 02:02 pm, melissad wrote: > Am reading the docs on iptables now. It seems then that I have what I > need for the interfaces. I will reconfigure the Cisco router behind > that and play with some connectivity. www.shorewall.net Makes Iptables easy, and much more flexible than the SuSE firewall. You may find you don't need the cisco anymore and can hook the SuSE box directly to the internet. -- _____________________________________ John Andersen

4 7

IPSEC Openswan firewalling
by Dimitris Stamatoulis 27 Sep '04

27 Sep '04

Dear all, I have a linux box with suse 9.1 distro and I have set-up an ipsec tunnel using Openswan with a PIX 515. Of course there is no ipsec0 interface because of the 2.6 kernel. I am using my own application which is dealing with tcp sockets. The application is working fine through the ipsec tunnel. The problem I have is that I cannot put any firewalling regarding my tcp ports beacuse there is no ipsec0 interface to apply iptables, which means that if someone puts a linux box on my hub(where my linux box is), he can access my tcp listening ports, even though my tunnel is established. How can I prevent this? What can I do? I have not used at all racoon,setkey etc.. Only Openswan. -- Thanks in advance, Dimitris Stamatoulis

1 0

Re: [suse-security] Mozilla 1.7.3
by Marcus Meissner 27 Sep '04

27 Sep '04

On Mon, Sep 27, 2004 at 03:16:09PM +0100, Anthony Edwards wrote: > On Mon, Sep 27, 2004 at 04:06:30PM +0200, Marcus Meissner wrote: > > > This is not the official mozilla upgrade RPM from SuSE. > > > > rpm -Uvh mozilla......rpm > > > > on the commandline to upgrade with this one. > > Hi Marcus > > Many thanks. The issue is, though, that after upgrading Mozilla using > the rpm -Uvh command, Flash, Acrobat, RealPlayer etc no longer work. > > There are instructions at: > > http://portal.suse.com/sdb/en/2002/09/mozilla.html > > However, these instructions do not work either; running: > > SuSEconfig --module mozilla (as root) results in an error message > ("module mozilla not found" I believe is the syntax) and so one then > has a broken Mozilla from that point on. > > Any ideas? Its not an official SuSE RPM, so of course the integration broke. Ciao, Marcus

1 0

Mozilla 1.7.3
by Anthony Edwards 27 Sep '04

27 Sep '04

ftp://ftp.suse.com/pub/projects/mozilla/1.7.3/README-1.7.3 states: These packages are based on the 1.7.2 release but contain all security fixes which are done with 1.7.3 release. Unfortunately though, packages appear to have been built for SuSE 9.0 & 9.1 only. I own a copy of 9.1, but am currently running 8.2 on both my production workstations and have no present plans to upgrade due to time pressures and the disruption involved. Are there any plans to build and release a package for SuSE 8.2? TIA. -- Anthony Edwards anthony.edwards(a)uk.easynet.net

3 5