October 2005 - openSUSE Security - openSUSE Mailing Lists

About spam fighting policies
by Carlos E. R. 10 Oct '05

10 Oct '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'll ask here, because I consider spam fighting to be part of the security policies. A colister of one the SuSE lists finds now and then that he can not post to the list because his emails are considered spam. In this case, the rules his provider infringes are: > X-Virus-Scanned: by amavisd-new at Relay1.suse.de > X-Spam-Status: Yes, hits=6.2 tagged_above=-20.0 required=5.0 > tests=BAYES_50, > DNS_FROM_RFC_ABUSE, DNS_FROM_RFC_POST, MY_LINUX, RCVD_IN_SBL, > RCVD_IN_SORBS_SOCKS ie: BAYES_50 0 0 1.567 0.001 DNS_FROM_RFC_ABUSE Envelope sender in abuse.rfc-ignorant.org 0 0.374 0 0 DNS_FROM_RFC_POST Envelope sender in postmaster.rfc-ignorant.org 0 1.376 0 1.614 RCVD_IN_SBL Received via a relay in Spamhaus SBL 0 1.050 0 0.107 RCVD_IN_SORBS_SOCKS SORBS: sender is open SOCKS proxy server 0 0 0 0.338 Note that the scores do not add to 6.2, so SuSE must have modified them. The first two rules I checked in http://www.rfc-ignorant.org/, and they mean that "postmaster(a)arnet.com.ar" and "abuse(a)arnet.com.ar" addresses do not accept email. I agree that is a bad thing, but... Spamhaus I don't know where to check, yet. And sorbs I can not check, because sorbs do not likes me and refuses to help: An Error Occured: Throttled Reason: Throttled Explanation: To stop abuse this page is limited to 10 lookups per hour. Note: If you are forced to use a proxy server you may be able to arrange a higher throttle limit by contacting one of the SORBS administrators. I can not request a higher limit because I'm on a dynamic address, and yes, providers here (Spain) usually set up proxies to reduce their traffic, so web servers can easily see thousands of queries coming from the same IP. I simply want to see why "arnet.com.ar" is listed! I don't see why I should be Sorb's client to see that... :-/ But the question is: must SuSE lists and/or SpamAssassin be so stringent requiring that our providers be impeachless? Notice that many users have no choice but to use the few providers available in each country. Maybe Novell has a choice, but many of us don't, nor can we convince big providers to comply with internet rules. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD4DBQFDSvrZtTMYHG2NR9URAsZZAJY4oUclJFVsqWlTXA33LOe/uTFTAJ9xbC6C +sibLhyZBsuvxTL1tgLgQQ== =ta7x -----END PGP SIGNATURE-----

1 0

Re: [suse-security-announce] SUSE Security Announcement: RealPlayer format string problem (SUSE-SA:2005:059)
by Frank Steiner 10 Oct '05

10 Oct '05

Marcus Meissner wrote > Note that we no longer support RealPlayer on the following distributions > for some time now: > - SUSE Linux 9.1 > - SUSE Linux 9.0 > - SUSE Linux Desktop 1.0 > > On these distributions, please deinstall RealPlayer by running as root: > rpm -e RealPlayer I've been installing the RealPlayer 10 version from SuSE 9.2 on our SuSE 9.0 hosts since SuSE 9.2 was out. So why is it not possible to release the player in version 10 for SuSE 9.1 and 9.0, too, instead of dismissing them completely? cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *

1 0

security fix fpr php4
by Sigi Kirchmair 10 Oct '05

10 Oct '05

Hi, I have been told that php has a security fix and the current version would be 4.3.11 - for about a month now. The newest version for suse 9.3 (YOU) is 4.3.10. Am I right assuming that suse does not provide the newest fix yet. If that's the case why does it take soooooo long. I had hackers on my machine now 3 times within the last month (came through php) and try to do everything to keep hackers out. The first thing I guess is apply all security updates and one would think the delay for newest updates to be put on the YOU servers would only be days rather than weeks. Can anybody help me here? thanks sigi

3 2

Large file transfers fail through SuSE firewall
by MePHiTiC 10 Oct '05

10 Oct '05

I'm using SuSE 9.3 as a router between 2 networks (eth0 = 192.168.65.0/24 & eth1 172.16.72.0/24). I'm having a problem when transferring large files or a large amount of multiple files. I get an error message stating the network share is unavailable. If I transfer from 192.168.65.228 to 172.16.72.3 using Windows Explorer I get the network share is unavailable after a few moments. I've tailed (tail -f /var/log/firewall | grep 192.168.65.228) the firewall log and watched a tcpdump on eth0 and eth1. There aren't any error messages displayed or anything. The packets just stop. I have allowed access from eth0 to eth1 but not from eth1 to eth0. Could this be the problem? I need to open a port possibly for Windows network shares? Thanks for any help! Jason

2 1

slow boot
by suse-list 09 Oct '05

09 Oct '05

I've noticed a very big slowdown (10-20x) in boot process after we upgraded from 9.1 to 9.3. I've traced it - all is about quota script - we have 100Gb reiserfs 3.6 partition with quotas. In 9.1 quotacheck was wery fast, but now it's very slow. Please advice ...

3 2

broken patch for sles9 (patch-9860, 7e6cf48cf7a796f79176269c2c18b8df)
by Sven 'Darkman' Michels 08 Oct '05

08 Oct '05

Hi there, i just updated a fresh install of sles9. While updating one of the patches failed. I tried to install it manually and got the same error: error: /var/lib/YaST2/you/mnt/i386/update/SUSE-CORE/9/rpm/i586/perl-5.8.3-32.4.i586.patch.rpm: headerRead failed: region trailer: BAD, tag 0 type 0 offset 0 count 0 error: /var/lib/YaST2/you/mnt/i386/update/SUSE-CORE/9/rpm/i586/perl-5.8.3-32.4.i586.patch.rpm cannot be installed anyone knows about this? is the patch broken (used novells download server since this is a novell account)? Regards, Sven

2 2

unsubscript
by a.bolliger＠dplanet.ch 07 Oct '05

07 Oct '05

unsubscrip _____________________________________________________________ Lust auf Shopping? Bequem einkaufen im sunrise eShop. http://www.sunrise.ch/eshop

2 1

please unsubscribe
by Straubinger Markus 07 Oct '05

07 Oct '05

many thx markus

2 1

robustness of encrypted partitions
by Malte Gell 07 Oct '05

07 Oct '05

Hi there, I guess encrypted partitions / files (mounted as encrypted virtual disk) are vulnerable regarding unclean unmounts, so does using the "sync" option add much more safety to encrypted partitions / files? And if I use an encrypted file as a virtual disk via loop device, does it make much sense to use e.g. e2fsck on such a file? If it doesn't, I think it would be sensible to use "tune2fs -c 0 -i 0" to avoid any fs checks? Thanks Malte

2 3

IDS software
by Dragan Andric 07 Oct '05

07 Oct '05

Dear all, Please advice for some feature rich and automatic IDS sw for SUSE Linux. I'm seeking for a IDS that I can setup a event/action combination. P.E. If somebody try an unauthorized login on a system after three atempt I would like to ban this adress for some time (24h) I have an idea how to resolve that using a log parsing and iproute command but I'm affraid that the performance of my server will drop dramaticly. Thanks. Regards, Dragan Andric

6 5