Re: [suse-security] kernel 2.4: ipchains and ip_masq_ftp
Hi, thats right. But I use a 2.4.7 from kernel.org on my SuSE system. I think the patch is applied to this version. I take this kernel, because I recognized that some featurs I need are not implemented in the SuSE kernels. MfG. Stefan Walther stefan_walther@gehag-dsk.de dienst.: +4930/89786448 Funk: +49172/3943961 One thing to bear in mind with this approach : AFAIK the stock SuSE 7.2 2.4.4 kernel hasn't been patched to close the serious security hole in ip_conntrack_ftp, so if security is of any importance at all, and you have to allow FTP, 2.2.19 is probably better. just my 2 cents. Maf. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Maf. King Standby Exhibition Services ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "It is easier to do a job right than to explain why you didn't." - Martin Van Buren ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Maybe I'm wrong but the kernel was not patched to the ip-conntrack-ftp, it was patched iptables (http://netfilter.samba.org) . Best regards Agustin At 14:03 31/07/01 +0200, Stefan_Walther@gehag-dsk.de wrote:
Hi,
thats right. But I use a 2.4.7 from kernel.org on my SuSE system. I think the patch is applied to this version. I take this kernel, because I recognized that some featurs I need are not implemented in the SuSE kernels.
MfG.
Stefan Walther stefan_walther@gehag-dsk.de dienst.: +4930/89786448 Funk: +49172/3943961
One thing to bear in mind with this approach : AFAIK the stock SuSE 7.2 2.4.4 kernel hasn't been patched to close the serious security hole in ip_conntrack_ftp, so if security is of any importance at all, and you have to allow FTP, 2.2.19 is probably better.
just my 2 cents. Maf.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Maf. King Standby Exhibition Services
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"It is easier to do a job right than to explain why you didn't."
- Martin Van Buren
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Hi, On Tue, Jul 31, Stefan_Walther@gehag-dsk.de wrote:
thats right. But I use a 2.4.7 from kernel.org on my SuSE system. I think the patch is applied to this version. I take this kernel, because I recognized that some featurs I need are not implemented in the SuSE kernels.
What is missing in the SuSE kernels that exists in stock kernels? We never remove any functionality from Linus' kernels, so I'm very curious what you're referring to.
MfG.
Stefan Walther
Hubert Mantel
participants (3)
-
Agustin Muñoz -
Hubert Mantel -
Stefan_Walther＠gehag-dsk.de