Hi list, I have a SuSE 7.3 box here, and after updating sshd via YOU, something weird happened. It seemed so weird to me that I decided to post it here. The 7.3 box is a firewall, it links three seperate networks to the internet. My home LAN is one of these networks, I have to add. Now that I updated the box, it locked up pretty soon with an Oops message. I restarted it and it seemed to work fine, Therefore, I went home after a while and got a bit on IRC and texted wif some of my friends when suddenly my session would disconnect. Well, the uplink to the ISP is kinda "OEM" ADSL, it is provided by our national telco to the ISP, which in turn resells the connection to us, thus the ISP doesnt have to run lines down to every building in the country. So far so good, this line is quite the crap when compared to a real leased line, it goes down alot for short moments etc; they blame it on capacity problems. Thus I tought the line would be just down due to "normal behaviour" and come back up after a short while. But this wasnt so. The line was down, and it didnt look like it would come back up by itself. So I went to my other connection (cable) and tried to ping the traceroute to my inner firewall. The result was that the packets stopped at mentioned suse 7.3 box. Therefore I tried to ping the machine, to no avail. I also tried logging in via SSH, that didnt work either. So I assumed that the box would simply have Oops'd again. I couldnt login to it, neither from my LAN side, nor from the internet side, and it didnt even reply to pings. But suddenly... I noticed, while being on the computer with the cable connection, that I was still logged in to my webserver box, that is attached to the same LAN as my workstation is (where I irc'd from) ! Now what the fsck?? It was definately responsive, I could type commands and it gave me output. So I tried to establish another SSH session, which wouldnt work either! Now, as if this werent strange enough, I logged in to the inner firewall from the webserver box, also via ssh, and tried to login to said suse 7.3 firewall from the inner firewall (which has a connection to the suse 7.3 firewall via SDSL). And that worked. The box that didnt reply to pings, nor route my traffic from the LAN to the internet or vice versa, it gave me a login prompt. So I logged on, and looked at logs, but there was nothing unusual, no suspicious messages or anything. I looked at route -n and also at netstat -a and nothing appeared to be wrong. So I did rcnetwork restart. And all of a sudden, my connectivity was restored, IRC reconnected etc. Very very very very weird. I might add that such things never happened before I updated sshd. Cheers Chris Burri .-. /v\ L I N U X // \\ >I know KungFu!!< /( )\ ^^-^^
Hallo zusammen ich habe privat einen apache-server auf suse linux 8.0 eingerichtet und ich kann auch schon die standart-seite übers internet abrufen. ich hab aber noch nicht ganz kapiert wie dass mit den virtuellen hosts funktioniert. kann mir da einer eine anleitung oder so liefern? danke
Mauz schrieb:
Hallo zusammen
ich habe privat einen apache-server auf suse linux 8.0 eingerichtet und ich kann auch schon die standart-seite übers internet abrufen.
ich hab aber noch nicht ganz kapiert wie dass mit den virtuellen hosts funktioniert. kann mir da einer eine anleitung oder so liefern?
danke
RTFM ! Apache HTTP Server Version 1.3 Apache Virtual Host documentation http://httpd.apache.org/docs/vhosts/index.html Apache HTTP Server Version 2.0 Apache Virtual Host documentation http://httpd.apache.org/docs-2.0/vhosts/
[attempt at Deutsch below] Hmmm... suddenly our beloved _english_ language _security_ mailing-list seems to have turned into a german language mailing-list for UNIX-newbies. Is this the twilightzone? Please don't post off-topic emails. Thank you. Cheers, Yuri. Suse-security ist, wie die Name schon sagt, ein List fuer _security_ (Sicherheit) Problemen, nicht fuer allgemeine UNIX-Einsteiger Problemen. Daneben spricht man auf diesem List nur English. Danke schoen. -- -------------------------------------------------------------------------- Yuri Robbers phone : +31-71-5420908 cell : +31-6-12167687 Bolderikkamp 32 email : yuri@deavolente.org 2353 HM Leiderdorp web : www.deavolente.org/~yuri the Netherlands PGP : Check any hkp server -------------------------------------------------------------------------- Fingerprint: B0 EA 16 36 C8 9F 25 08 36 63 FE 60 42 8C 81 5B 0B F3 20 B2 --------------------------------------------------------------------------
participants (4)
-
christian.burri@synecta.ch
-
Mauz
-
Stefan Nowak
-
Yuri Robbers