July 2005 - openSUSE Security - openSUSE Mailing Lists

Question regarding SSH tunnel
by Andreas Otto 05 Jul '05

05 Jul '05

Hi, most of the times when we are deploying web applications we are using SSH (sftp) to transfer files from local development servers to remote production servers. In one case we can only reach a production server from another remote server. It looks like this: local development <---> remote server <---> remote production Normaly we deploy applications for this szenario like this: local development <---> remote server remoteserver <---> remote production Is it possible to shorten the two-steps process to one step? If, how could this be done? Cheers, Andreas -- Noch 33435 Sekunden... Actors will happen even in the best-regulated families.

2 2

Amavis-new and spamassassin
by Cristian Del Carlo 02 Jul '05

02 Jul '05

Hi list, i use suse 9.2/9.3 in my server mail with postfix, clamav and amavis-new. I don't understand how to change the control that amavis-new does with the spamassassin module. I have tried to change the /etc/mail/spamassassin/local.cf but the control of amavis-new doesn't change. I want to change the configuration to unable the RBLs. I have installed the following rpms: perl-spamassassin amavis-new The debug of amavis-new doesn't help me to understand. This are the module that amavis-new loads: Jul 1 15:07:43 cristian amavis[21674]: Perl version 5.008003 Jul 1 15:07:43 cristian amavis[21674]: Module Amavis::Conf 1.15 Jul 1 15:07:43 cristian amavis[21674]: Module Archive::Tar 1.08 Jul 1 15:07:43 cristian amavis[21674]: Module Archive::Zip 1.09 Jul 1 15:07:43 cristian amavis[21674]: Module Compress::Zlib 1.33 Jul 1 15:07:43 cristian amavis[21674]: Module Convert::TNEF 0.17 Jul 1 15:07:43 cristian amavis[21674]: Module Convert::UUlib 1.0 Jul 1 15:07:43 cristian amavis[21674]: Module DB_File 1.808 Jul 1 15:07:43 cristian amavis[21674]: Module MIME::Entity 5.404 Jul 1 15:07:43 cristian amavis[21674]: Module MIME::Parser 5.406 Jul 1 15:07:43 cristian amavis[21674]: Module MIME::Tools 5.411 Jul 1 15:07:43 cristian amavis[21674]: Module Mail::Header 1.60 Jul 1 15:07:43 cristian amavis[21674]: Module Mail::Internet 1.60 Jul 1 15:07:43 cristian amavis[21674]: Module Mail::SpamAssassin 2.63 Jul 1 15:07:43 cristian amavis[21674]: Module Net::Cmd 2.24 Jul 1 15:07:43 cristian amavis[21674]: Module Net::DNS 0.46 Jul 1 15:07:43 cristian amavis[21674]: Module Net::SMTP 2.26 Jul 1 15:07:43 cristian amavis[21674]: Module Net::Server 0.87 Jul 1 15:07:43 cristian amavis[21674]: Module Time::HiRes 1.52 Jul 1 15:07:43 cristian amavis[21674]: Module Unix::Syslog 0.100 Thanks, Cristian Del Carlo

3 3

New Security Offering for Linux
by Randall R Schulz 01 Jul '05

01 Jul '05

Hi, This just in: "FREE CompuSec is a suite of security solutions designed to completely protect desktops and notebooks. This software is a full version without any limitations and it is not a demo. The security functions that can be found in FREE CompuSec are..." - KDE Apps: <http://www.kde-apps.org/content/show.php?content=25989> - Vendor site: <http://www.ce-infosys.com/> Comments? Randall Schulz

2 1

SPAM: unsubscribe
by Vulcu Lucian 01 Jul '05

01 Jul '05

unsubscribe __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

RE: [suse-security] The future of Linux
by Jose_Thomas＠Dell.com 01 Jul '05

01 Jul '05

Also note that Antivirus software is not for securing Linux in the network, rather for Windows clients connecting to, say a Linux Mail server, Webserver etc in an intranet where the Linux machine play the interface to the Internet. Although the news for support discontinuity catch some attention, but in essence it is not much purpose otherwise. Jose -----Original Message----- From: Ulf Rasch [mailto:u.rasch@seppelec.com] Sent: Friday, July 01, 2005 3:50 PM To: suse-security(a)suse.com Subject: Re: [suse-security] The future of Linux Janvier Anonical wrote: > I have read that Microsoft has bought Sybari and discontinued its > anti-virus support for UNIX and Linux. It seems Microsoft views Linux > as a real threat. Since Sybari is out, what would be an alternative > for Linux users with regards to anti viruses? We use Clam Antivirus (http://www.clamav.net/) Regards Ulf -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

AW: [suse-security] The future of Linux
by Rasp, Robert 01 Jul '05

01 Jul '05

Hello, we use McAfee and ClamAV on our Mail-Gateway. Both wors verry stable and the automatic Updates are no Problem. CU Robert ________________________________ Von: Janvier Anonical [mailto:janvier@gmail.com] Gesendet: Fr 01.07.2005 12:07 An: suse-security(a)suse.com Betreff: [suse-security] The future of Linux -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I have read that Microsoft has bought Sybari and discontinued its anti-virus support for UNIX and Linux. It seems Microsoft views Linux as a real threat. Since Sybari is out, what would be an alternative for Linux users with regards to anti viruses? - -- To mess up a Linux box, you need to work at it; to mess up your Windows box, you just need to work on it. - Scott Granneman, Security Focus -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185) iQEVAwUBQsUV0GlGIXYBuowEAQqv5wgAvZ+M2T7Bf3aAKdX0M/XUW5s6u80NbxA1 cMTEKRXYVW8Zc637ey5UlDkhhoQ1hRqfPm/AAyi0Ki55f5h4YsGPh2h40MLS80en aSNnM5hjtXp6eii1zLwHvims1LkSr9s5gSXjhWWtUGp8wKSC2ugCahoLUAKYRRVn eai4FFykAQPukkLTWEqoX34Bp5wNf4hyl356IoqycQE6hFigkm2G/5rMy9rJHU1u jfpeYTX748JmnTBD57mQRvsgog89X5aB7EcFFQiA23MOu0QeN31Lcm9/ESGgu6RG xM7fXDWBJRjL+k93sHSlArkpe6gEDhtZE+TsZ8eNlObeDESrmnC9Fg== =UYEM -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

Bug in Susefirewall FW_ALLOW_INCOMING_HIGHPORTS_UDP
by Frank Stuehmer 01 Jul '05

01 Jul '05

Hi list, just tried to use fresh installed Suse 9.3 updated with you. SuSEfirewall2-3.3-18.2 /etc/sysconfig/SuSEfirewall2 with FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" Start FW complains, four lines "iptables: No chain/target/match by that name" Reasons are in /sbin/SuSEfirewall lines 1460 and 1469: for CHAIN in $input_zones; do --> chain=input_$chain should be "CHAIN=input_$CHAIN". Frank Stuehmer

10 15

Discontinued SUSE Linux Distribution: 8.2
by Roman Drahtmueller 01 Jul '05

01 Jul '05

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------- Wed Jun 29 17:00:00 MEST 2005 Dear suse-security-announce subscribers and SUSE LINUX users, With the release of the SUSE Linux 9.3 FTP edition this week, SUSE Security announces that the SUSE Linux 8.2 version of our home user product will be discontinued soon. Having provided security-relevant fixes for more than two years, vulnerabilities found in SUSE Linux 8.2 after July 14th 2005 will not be fixed any more for this product. As a consequence, the SUSE Linux 8.2 distribution directory on our ftp server ftp.suse.com has been moved from /pub/suse/i386/8.2/ to the /pub/suse/discontinued/ directory tree structure to free space on our mirror sites for the SUSE Linux 9.3 FTP edition; the 8.2 directory in the update tree /pub/suse/i386/update/8.2 will follow later in July 2005, as soon as all updates have been published. The discontinuation of SUSE Linux 8.2 enables us to focus on the SUSE LINUX distributions of a newer release date to ensure that our customers can continuously take advantage of the quality that they are used to with SUSE LINUX products. This announcement holds true for SUSE Linux 8.2 only. As usual, SUSE will continue to provide update packages for the following home users distributions: SUSE LINUX 9.0 SUSE LINUX 9.1 SUSE LINUX 9.2 and SUSE LINUX 9.3 for a two-year period after the release of the respective distribution. Please note that the maintenance cycles of SUSE LINUX Enterprise Server products and products based on the SUSE LINUX Enterprise Server operating system are not affected by this announcement. To learn more about SUSE LINUX business products, please visit http://www.novell.com/linux/suse/. If you have any questions regarding this announcement, please do not hesitate to contact SUSE Security at <security(a)suse.de>. Best regards, Roman Drahtmüller, SUSE Security. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iQEVAwUBQsK7yney5gA9JdPZAQGZ4Af/aXyoJzrkoiIe8PkysAlAbjCmbQWHnNWJ eLpk5xgtu/TTX2/zT6LrSg6t1uV4bgxg/x5026CShTXLJRpjMgRrlfZCZpSMUW3o DB5kLs2SSWWV8Ep7L2faiU5yMf4CD1LZ4HWq9wNxk/1vpbDilZL5Ni713D8r/Mcv WE5r3amyU0TkXO2peYNj4z8lk2rwiaJFUwMZzG6MRCn1CtgDXCIdwqe1gPn0tpdq r3tkRpLJrQltpPHcjO3N6MXo8OUlzThg4nm+C5WY0tbSn5eDo+DYdWH2s03fp20W M/9IKaoxACOtpgJhuljxA8OVtJ/7ybNaTfKquvfhMaoUuTiZtcBENA== =rNzC -----END PGP SIGNATURE-----

6 7