May 2005 - openSUSE Security - openSUSE Mailing Lists

*****SPAM***** Tuerkei in die EU
by draht＠suse.de 16 May '05

16 May '05

GEWALTEXZESS: http://www.spiegel.de/politik/ausland/0,1518,345203,00.html Politiker zerrei�t Menschenrechtsbericht: http://www.spiegel.de/politik/ausland/0,1518,325983,00.html Schily = Hitler http://www.spiegel.de/politik/deutschland/0,1518,345929,00.html Schily wehrt sich gegen Hitler-Vergleiche: http://www.spiegel.de/politik/deutschland/0,1518,345749,00.html Sie hat ja wie eine Deutsche gelebt: http://www.spiegel.de/panorama/0,1518,342484,00.html http://www.npd.de/npd_info/deutschland/2005/d0205-31.html Parallelgesellschaften - Feind hoerte mit: http://www.npd.de/npd_info/meldungen/2005/m0305-15.html Sie war unerlaubt spazieren: http://www.taz.de/pt/2004/11/25/a0143.nf/text Tiere an Autobahn geschlachtet: http://forum.gofeminin.de/forum/actu1/__f384_actu1-TuRKEI-NEIN-DANKE.html

1 0

AW: [suse-security] cracked system?
by Rasp, Robert 14 May '05

14 May '05

Hello, Take a look at www.spamassassin.org and www.amavis.org. If you like qmail (I do) you can find some usfull hints here: http://www.wallroth.de/sebastian/lwq.html http://qmail-scanner.sourceforge.net http://www.clamav.net/ If you manage to Install a Mailgateway with a virussanner ans a Spamfilter, you problems with this Virus-Mails are gone. CU Robert -----Ursprüngliche Nachricht----- Von: Dr. Axel Krebs [mailto:Axel.Krebs@T-Online.de] Gesendet: Samstag, 14. Mai 2005 07:41 An: suse-security(a)suse.com Betreff: [suse-security] cracked system? Hi! I am "Newbie", using SuSE 9.1. DSL from T-Online. Xmain Evolution 1.4.6. Last weeks, I am experiencing mails from unknown people to my email-adresses. Sometimes two or three mails within a few seconds. These are accounts with T-Online, Ginko, Web.de. I looks as "they" knew all may emailadresses. I'm asking myself, if there is a general(?) procedure how to get rid off these potential parasites? These scheme should follow these steps: - analyse - evaluation - proof of solution QUESTIONS: 1.) Is there a (simple?) way to deciffer... 1.a) who is doing what on my system, 1.b) how do they come there 2.) Does anybody know, how I can "clean" my system, in ideal case without changing Email-Adresses (printed an business cards). Thereby, I mean: how can I reject unwanted mail? A simple "How-To", Tutorial or so preferable. 3.) For future, I like to prevent from re-establishing those trash-mails again: how can I prevent unknown people from using "my adresse"? 3.a) My fear is, that my emails addresses "travel" uncontrolled. Is there a way to control? (I know, this seems to be naiv) 3.b) How can I reject unwanted mail? 3.c) Do I need to create positive liste following the thought: who may send me an email (filtering)? A simple "How-To", Tutorial or so preferable for the above mentioned questions. Thank you for all useful hints! (P.S.: as I said: I am newbie) -- Dr. Axel Krebs <Axel.Krebs(a)T-Online.de> -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

Upgrade to gpg-1.4 on SUSE 9.0?
by R Hannes Beinert 14 May '05

14 May '05

Could someone provide me with some tips on how to best upgrade from gpg-1.2.2 to gpg-1.4.1 on a SuSE v9.0 system? Any pointers to FAQs, or other FM's would be gratefully accepted. Thank you! Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html

1 0

Suse Versions, Ipsec and NAT traversal
by Markus Feilner 12 May '05

12 May '05

Hello List, does anybody know which SuSE Versions have the NAT traversal integrated in openswan/freeswan? Thanks! -- mit freundlichen Grüssen, Markus Feilner -- Feilner IT Linux & GIS Linux Solutions, Training, Seminare und Workshops - auch Inhouse Beraiterweg 4 93047 Regensburg fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 mail mfeilner(a)feilner-it.net web http://www.feilner-it.net

1 0

Setting system-wide ulimit without rebooting?
by Frank Steiner 12 May '05

12 May '05

Hi, is there a way to set a new hard limit (for e.g. core size :-)) on a running system so that users/processes cannot revert it? It seems I can only set new limits in my own environment, but what I want is system-wide new limit to restrict all already running processes (and childs spawned from them). Like saying "From now on, the new hard limit is 0 on this computer". So that I could protect all running hosts against the new elfloader bug without rebooting them. cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *

1 0

AW: [suse-security] openswan, cisco pix and nat problem
by Peer Stefan 12 May '05

12 May '05

Hi Markus, There's the parameter nat-traversal=on, which could be set in your ipsec.conf. It should do the trick for you. For more information there's a whole ipsec/vpn universe to explore on www.spenneberg.de. Cheers, Stefan > From: Markus Feilner [mailto:lists@feilner-it.net] > Subject: [suse-security] openswan, cisco pix and nat problem > > Hello List, > I have a problem with connections to a cisco pix. The VPN > Partner wants me to > nat/masquerade my traffic with my outside public IP. > How do I specify that in my ipsec.conf? > Are the following lines correct? > left=my_pub_IP > leftsubnet=local_subnet > right=pub_IP_of_vpn_partner > rightsubnet=remote_subnet > Or do I have to insert the remote_IP/32 in the righsubnet field? > > The other question is: > Has anybody solved Masquerading/Natting the VPN traffic, so > that connections > from several local to several remote hosts are possible? > > Thanks for helping! > > > -- > mit freundlichen Grüssen, > Markus Feilner > -- > Feilner IT Linux & GIS > Linux Solutions, Training, Seminare und Workshops - auch Inhouse > Beraiterweg 4 93047 Regensburg > fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 > mail mfeilner(a)feilner-it.net web http://www.feilner-it.net > > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > >

1 0

netmask calculator online
by Markus Feilner 12 May '05

12 May '05

Hi, I use this: http://jodies.de/ipcalc -- mit freundlichen Grüssen, Markus Feilner -- Feilner IT Linux & GIS Linux Solutions, Training, Seminare und Workshops - auch Inhouse Beraiterweg 4 93047 Regensburg fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 mail mfeilner(a)feilner-it.net web http://www.feilner-it.net

2 1

openswan, cisco pix and nat problem
by Markus Feilner 12 May '05

12 May '05

Hello List, I have a problem with connections to a cisco pix. The VPN Partner wants me to nat/masquerade my traffic with my outside public IP. How do I specify that in my ipsec.conf? Are the following lines correct? left=my_pub_IP leftsubnet=local_subnet right=pub_IP_of_vpn_partner rightsubnet=remote_subnet Or do I have to insert the remote_IP/32 in the righsubnet field? The other question is: Has anybody solved Masquerading/Natting the VPN traffic, so that connections from several local to several remote hosts are possible? Thanks for helping! -- mit freundlichen Grüssen, Markus Feilner -- Feilner IT Linux & GIS Linux Solutions, Training, Seminare und Workshops - auch Inhouse Beraiterweg 4 93047 Regensburg fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 mail mfeilner(a)feilner-it.net web http://www.feilner-it.net

1 0

rpasswdd does not work with NIS
by Bob Vickers 12 May '05

12 May '05

Dear All, I wanted to replace yppasswd with rpasswdd on my SuSE 9.1 system and found some nice clear instructions in http://www.tldp.org/HOWTO/NIS-HOWTO/rpasswdd.html Unfortunately they don't seem to work. The shadow password file is successfully updated, but the subsequent 'make' fails, so the change is not visible to NIS clients. After running rpasswdd through strace I concluded that the problem is caused by rpasswdd setting the real UID to the user making the request, so the make command runs unprivileged. Here is my /etc/pam.d/rpasswdd: #%PAM-1.0 auth required pam_unix2.so nullok account required pam_unix2.so password required pam_pwcheck.so nisdir=/var/yp/etc password required pam_unix2.so nisdir=/var/yp/etc use_first_pass use_authtok password required pam_make.so /var/yp session required pam_unix2.so Here is an extract from the strace output: 10:48:07.770935 open("netgroup~", O_RDWR|O_CREAT, 0600) = -1 EACCES (Permission denied) 10:48:07.771028 write(2, "makedbm: Cannot open netgroup~\n", 31) = 31 Has anyone else encountered this? Is my analysis right? Is it fixed in 9.3? Is there a workround? Regards, Bob ============================================================== Bob Vickers R.Vickers(a)cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691

1 0

iptables wildcard for IP Addresses?
by Markus Feilner 11 May '05

11 May '05

Hello List, I want to enable several (ten) hosts to access my VPN. I am using SuSEfirewall and I have custom iptables rules in SuSEfirewall2-custom. Now i want to add one rule for all these hosts. I know that "!" is the wildcard for "any host but the following". How can I add an iptables rule affecting Source IPs from e.g. 1.1.1.10 to 1.1.1.20? I've been looking, but i didn't ind something. Can I use bash-constructs like for.. in SuSEfirewall2-custom? Is there any docs around about this specific file? thanks! -- --------------------------- Bitte beachten Sie unsere neuen Adressdaten! Vielen Dank. --------------------------- Feilner IT Linux & GIS Linux Solutions, Training, Seminare und Workshops - auch Inhouse Beraiterweg 4 93047 Regensburg fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 mail mfeilner(a)feilner-it.net web http://www.feilner-it.net

5 6