October 2009 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] Nessus Packages
by Sascha 'saigkill' Manns 21 Oct '09

21 Oct '09

Hello Mates, short Question: AFAIS we haven't an Package for Nessus. Is that right, or not? -- Sincerely yours Sascha Manns openSUSE Member openSUSE Ambassador openSUSE Marketing Team openSUSE Build Service Web: http://saschamanns.gulli.to Blog: http://saigkill.wordpress.com ClaimID: http://claimid.com/saigkill -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 1

[opensuse-security] Minimum time intervall for log-in re-tries
by Wolfgang Kluge 19 Oct '09

19 Oct '09

Good morning. I hope someone could help me in this: I receive remote login attempts in 1 second intervals from the same IP address to our port 22. Port 22 is forwarded by the firewall ( Sifoworks ). OS is openSUSE 11.0 Is there a way to increase the time between a failed login attempt and the next possible login re-try ? Regards Wolfgang Kluge -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

4 3

Re: [opensuse-security] Minimum time intervall for log-in re-tries
by Josh More 19 Oct '09

19 Oct '09

You can also run DenyHosts ( http://denyhosts.sourceforge.net/ ) to block connections based on failed logins. -Josh More, RHCE, CISSP, NCLP, GIAC morej(a)alliancetechnologies.net 515-245-7701 >>> Ralf Ronneburger <ralf(a)ronneburger.de> 10/19/09 4:23 AM >>> Hi Wolfgang, SuSEfirewall2 (config file /etc/sysconfig/SuSEfirewall2) already has an option for this: FW_SERVICES_ACCEPT_EXT="0.0.0.0/0,tcp,22,,hitcount=3,blockseconds=60,recentname=ssh" This blocks requests for 60 seconds after the third attempt. Greetings, Ralf Wolfgang Kluge schrieb: > Good morning. > I hope someone could help me in this: > > I receive remote login attempts in 1 second intervals from the same IP > address to our port 22. > Port 22 is forwarded by the firewall ( Sifoworks ). > OS is openSUSE 11.0 > > Is there a way to increase the time between a failed login attempt and > the next possible login re-try ? > > Regards > Wolfgang Kluge > > > > > > -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0

[opensuse-security] Fast OnlineUpdate for SuSE (fou4s) 0.15.1 available
by Markus Gaugusch 18 Oct '09

18 Oct '09

I'm happy to announce a new version of fou4s (Fast OnlineUpdate for SuSE). Changelog: * Bugfixes for SLES10 * Fix reboot notification for kernel updates * Huge performance improvement on subsequent calls on 11.x * Fix kernel version detection fault in certain cases General information: Fou4s is a commandline tool, usually run via crontab every night. It checks for and downloads updates and sends an email report to the administrator. best regards, Markus Gaugusch -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(at)gaugusch.at X Against HTML Mail / \ -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0

Re: [opensuse-security] Signature verification failed for file 'repomd.xml' from repository 'openSUSE-11.1-Update'
by Thomas R. Jones 05 Oct '09

05 Oct '09

Data corruption failure during transfer? Works on my system. thomas@bodhisattva:~/Desktop> sudo zypper refresh root's password: Repository 'openSUSE BuildService - GNOME:Community' is up to date. Repository 'openSUSE-11.1-Non-Oss' is up to date. Repository 'openSUSE-11.1-Oss' is up to date. Retrieving repository 'openSUSE-11.1-Update' metadata [done] Building repository 'openSUSE-11.1-Update' cache [done] Retrieving repository 'Packman Repository' metadata [done] Building repository 'Packman Repository' cache [done] Repository 'VideoLan Repository' is up to date. Repository 'thomasrjones' is up to date. All repositories have been refreshed. thomas@bodhisattva:~/Desktop> On Wed, 2009-04-01 at 17:41 +0200, Michael Ströder wrote: > HI! > > What's up with this? > > -------------------- snip -------------------- > # zypper refresh > Repository 'openSUSE-11.1-Non-Oss' is up to date. > Signature verification failed for file 'repomd.xml' from repository > 'openSUSE-11.1-Update'. > Warning: This might be caused by a malicious change in the file! > Continuing might be risky. Continue anyway? [yes/NO]: > -------------------- snip -------------------- > > Ciao, Michael. -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

5 6