January 1999 - openSUSE Users - openSUSE Mailing Lists

RE: [SuSE Linux] IRC - Ok, now what? ;)
by chandlerrick＠hotmail.com 09 Jan '99

09 Jan '99

>Michael Your making more of this than it really is. I do administer a large lan running AIX and SCO. I take that very seriously. It is VERY secure. I never use the root account and change the password quite frequently. My Linux box on the other hand is just a play toy. The reason I use it verses Windows is that I just plain love Unix. I use the root account on it constantly. I don't have any security set up on it. The reason? I don't really DO anything with it. Web site here, web site there. Install programs and listen to MP3's. I just happened to try out IRC and found out something about a security problem on my Linux box. I don't think that it is a crime to share my experience with someone else. I really didn't expect to get chastised by other members about it either. Maybe your system needs to be administered tightly, but mine doesn't. And all I gave was a suggestion, not a command. If someone doesn't like it, simply don't follow it. But really, securing your machine if your going to use IRC is not saying that IRC is the evil of the internet and is the only way someone can gain access to your machine. I was just sharing my experiences. Forgive me. I will never post on this list again. I don't know what I doing and I will have to quit my job of the last five years because I can't administer a simple Unix/Linux LAN, which I've been doing very successfully. I appologize Michael for sharing. ______________________________________________________ Get Your Private, Free Email at <A HREF="http://www.hotmail.com"><A HREF="http://www.hotmail.com</A">http://www.hotmail.com</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

3 2

Re: [SuSE Linux] IRC - Ok, now what? ;)
by risch＠tir.com 09 Jan '99

09 Jan '99

More good tips! Thanks very much. Reagards, Bob A.Crowe(a)OPENMAIL1.TSEA-E.sukepabe.simis.com wrote: > > Leigh, > > Perhaps, in the spirit of cooperation, you would like to start the ball > rolling....? After all, everyone one the list is supposed to be working > together. > > I think that reading the documentation for network-cracking tools like > SATAN is worthwhile, and updating assorted utilities on a Linux box is > an essential - known secure (or, at least, more secure) versions of the > likes of sendmail. > > Also, avoid NIS like the plague, never export NFS filesystems globally, > and try to export NFS read-only if possible, disable fingerd, or get a > modified version if you NEED to use it. > > Disable or delete unused or dormant system or user accounts. > > Subscribe to the CERT mailing list, so you at least get notification of > security holes (have a look at the security page on linux weekly news, > too) and also Phrack magazine. > > There must be more than just that..... > > Putting stuff like that out might stir a few people, but that's > well-known stuff. > > Any opinions? > > Alan. > > - > To get out of this list, please send email to majordomo(a)suse.com with > this text in its body: unsubscribe suse-linux-e > Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the > archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

1 0

RE: [SuSE Linux] IRC - Ok, now what? ;)
by Leigh.Richardson＠seaforth-maritime.co.uk 09 Jan '99

09 Jan '99

Is anybody prepared to knock up a quick list of security precautions people need to make before going on the web??? Leigh -----Original Message----- From: rthompson(a)motleypc.com Sent: Thursday, January 07, 1999 6:27 PM To: suse-linux-e(a)suse.com Cc: Richardson, Leigh Subject: RE: [SuSE Linux] IRC - Ok, now what? ;) If you have an IP address....you can never keep somebody from finding it. There are enough scanners out there that anybody wanting to find a machine to hack can easily find one. Scanners can scan whole networks for services running on standard ports to find a machine to examine further. Don't run services you don't need (http, ftp, etc). This reduces your chance of being "scanned". Disable root login as was discussed already on this list. Rick - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

3 2

[SuSE Linux] Warning: My Wp8 instructions were wrong!!!!!!!!!!!!!
by zentara＠netfrog.net 09 Jan '99

09 Jan '99

Hi, I just posted some erroneous instructions. I tried them myself, and they are bad. Sorry. I was in a hurry before the Falcons-49er's game. :-) The instructions should be: 1. Copy the piecemeal files to an empty directory as lowercase gui00.gz thru gui06.gz. 2. gunzip each of them seperately to produce lowercase gui00 thru gui06 3. tar -xvf gui00 4. Run the Runme executable. When prompted if all files are downloaded and unpacked, answer yes. 5. Follow the instructions. - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

1 0

[SuSE Linux] CNN - Microsoft downplays security threat to Excel - January 7, 1999
by fmiller＠lightlink.com 09 Jan '99

09 Jan '99

<A HREF="http://cnn.com/TECH/computing/9901/07/computers.security.reut/index.html"><A HREF="http://cnn.com/TECH/computing/9901/07/computers.security.reut/index.html</A">http://cnn.com/TECH/computing/9901/07/computers.security.reut/index.html</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

9 10

[SuSE Linux] awedrv vs OSS && ^Z of a root shell
by chavez＠incubus.org 09 Jan '99

09 Jan '99

Hello all :-> and I would like to thank you for freely giving so much information on this list in such a congenial manner, for IMHO it's the users' character that in the end is the greatest measure of the value of a given distribution. First, which produces the best sound for an awe32 PnP (CT 1920) upgrade card the OSS driver or awedrv? I have installed OSS and upgraded to the latest free version and all is well. But I'm wondering if I should go ahead and burn the $20 for the commercial version or install support for the card in the kernel with awedrv, ISA PnP tools, and the other utilities. I'm mainly concerned with sound quality not installation. Second, as a former user of a fairly old Slackware distribution (if it ain't broke don't fix it unless there is a damn good reason) I'm not sure why I can't su to root and place the shell in the background, which I find invaluable when configuring my system. Lastly, if you are a newbie, which I do and always will think of myself as, and are concerned about the security of your system a good place to start is your local used book store or an online book store, which both generally have better prices than those insidious mega store places. Three recommendations that I feel would be very practical for the beginner are: (IMHO one should learn the basic syntax for writing shell scripts first in order to make the most effective use of these texts) Unix Shell Programming Revised Edition By Stephen G. Kochan and Patrick H. Wood Revised Edition 1990 476 pages (est.), ISBN 0-672-48448-X Essential System Administration, 2nd Edition By AEleen Frisch 2nd Edition September 1995 788 pages, ISBN 1-56592-127-5 Practical UNIX and Internet Security, 2nd Edition By Simson Garfinkel & Gene Spafford 2nd Edition February 1996 800 pages (est.), ISBN 1-56592-148-8 It also goes without saying that the primary resource for information should be the LDP, man pages, FAQs, and the HOWTOs; but I find that people new to *n[iu]x seem to be more comfortable with manually typed text, also any of the above mentioned books make for good reference to the newly initiated. - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

3 2

[SuSE Linux] KDE Themes
by Leigh.Richardson＠seaforth-maritime.co.uk 09 Jan '99

09 Jan '99

Does anybody know how to get transparent backgrounds under KDE? Leigh}:~) - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

11 12

[SuSE Linux] ftp
by luca＠thehub.co.uk 09 Jan '99

09 Jan '99

Hi When I try to ftp to a site the login procedure works and I get access to the site but when I try to send a command like 'ls' for example the ftp program hang without doing anything. What am I missing here ? -- Luca Colombi System Administrator The Hub Communications Co. Ltd. The Farmhouse Syon Park Middlesex TW8 8JF Tel: +44(0)181 560 9222 Fax: +44(0)181 560 9333 E-mail: luca(a)thehub.co.uk URL: <A HREF="http://www.thehub.co.uk"><A HREF="http://www.thehub.co.uk</A">http://www.thehub.co.uk</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

4 4

RE: [SuSE Linux] IRC - Ok, now what? ;)
by Leigh.Richardson＠seaforth-maritime.co.uk 09 Jan '99

09 Jan '99

Well Dizzy, What can I say.......gulp!? I'm cowering in the corner....you meanie. BUT Hey Wait.... Thanks for the kick up the arse. I will now research sufficently before posing any further questions. Sincerly yours Leigh xxx -----Original Message----- From: dizzy73(a)connix.com Sent: Friday, January 08, 1999 2:47 PM To: suse-linux-e(a)suse.com Cc: Richardson, Leigh Subject: Re: [SuSE Linux] IRC - Ok, now what? ;) "Richardson_seaforth, Leigh" wrote: > Alan, > I'm looking for a specific solution as I don't know exactly how to disable > services etc in Linux. I'm scared and if there's anybody out there that can > help me then ----HELP! Leigh, this post is not directed to you specifically but in a general response to this thread Ok- I wrote a message yesterday regarding the original post/outcome of *not having root pw* after writing I said ahhh the hell with it, what does it matter my ranting directed to someone too lazy to utilize a simple root pw. Chances are... if their too incompetent to to secure the primary adm of the system AND.... connect to the net THEN be surprised someone telnetted to their box they will be deaf to suggestions of actually LEARNING anything useful about their system. How to disable services.... this was answered a few days ago is SEVERAL messages How to secure your system??? Use a root pw. Use a FW, Disable services as PREVIOUSLY described! Look in any Linux book on disabling services What vers of sendmail is secure...? The most current is the most secure. Allot of people are using linux and don't want to be bothered with having to learn/reserch/test and understand their system. What Im seeing is people wanting to be spoon fed with "just do this and your all set" a no brainer so to speak. I doesn't work that way, there are too many variables. It takes time and effort to (properly) learn and implement a Linux system, if one isn't prepared to do this I consider it a gross waste of time replying to those who don't take the system seriously. When I began with Linux most of my newbie questions went unanswered, now I understand why. My questions indicated I did not perform sufficient research and those who did the work didn't feel obliged to shared the hundreds of hours of time they spent providing me with a simple condensed answer that wont edify the newbie on what is really going on with the system. Finally those who aren't humble enough to respect those who have more experience OR expect others to do their work for them, deserve what they get. As pleasant as this list is, Im beginning to believe its too soft rob Linux Home page <A HREF="http://www.connix.com/~dizzy73/LBM.htm"><A HREF="http://www.connix.com/~dizzy73/LBM.htm</A">http://www.connix.com/~dizzy73/LBM.htm</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

15 22

[SuSE Linux] PPP
by sodah＠qatar.net.qa 09 Jan '99

09 Jan '99

hi i cant male ppp work. to call out my isp via ppp , i did the following 1. /etc/ppp/ppp.chat TIMEOUT 30 ""ATZ OK ATDT365763 ABORT "NO CARRIER" ABORT BUSY ABORT DIALTONE ABORT WAITING TIMEOUT 40 CONNECT "" TIMEOUT 4 Username: myname Password: mypasswd 2./etc/ppp/ppp-up #!/bin/sh # /etc/ppp/ppp-up #ppp-connection exec /usr/sbin/pppd lock connect \ '/usr/sbin/chat -v -f /etc/ppp/ppp.chat' \ -detach debug lock modem crtscts defaultroute \ /dev/modem 38400 3. /etc/ppp/options lock -detach modem lock /dev/modem 115200 crtscts defaultroute asyncmap 0 mtu 1500 mru 1500 noipdefault debug passive name "myname" 4. /etc/resolv.conf domain qatar.net.qa nameserver 194.133.33.10 nameserver 194.133.33.13 5. in the /var/log/warn i get the following msg ==> /var/log/messages <== Jan 8 16:50:35 earth kernel: CSLIP: code copyright 1989 Regents of the University of California Jan 8 16:50:35 earth kernel: PPP: version 2.2.0 (dynamic channel allocation) Jan 8 16:50:35 earth kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc. Jan 8 16:50:35 earth kernel: PPP line discipline registered. Jan 8 16:50:35 earth kernel: registered device ppp0 Jan 8 16:50:36 earth pppd[401]: pppd 2.2.0 started by pons, uid 0 Jan 8 16:50:36 earth pppd[401]: Removed stale lock on modem (pid 339) Jan 8 16:50:37 earth chat[407]: timeout set to 30 seconds Jan 8 16:50:37 earth chat[407]: send (ATZ^M) Jan 8 16:50:37 earth chat[407]: expect (OK) Jan 8 16:50:37 earth chat[407]: ATZ^M^M Jan 8 16:50:37 earth chat[407]: OK -- got it Jan 8 16:50:37 earth chat[407]: send (ATDT365763^M) Jan 8 16:50:37 earth chat[407]: abort on (NO CARRIER) Jan 8 16:50:37 earth chat[407]: abort on (BUSY) Jan 8 16:50:37 earth chat[407]: abort on (DIALTONE) Jan 8 16:50:37 earth chat[407]: abort on (WAITING) Jan 8 16:50:37 earth chat[407]: timeout set to 40 seconds Jan 8 16:50:37 earth chat[407]: expect (CONNECT) Jan 8 16:50:37 earth chat[407]: ^M Jan 8 16:50:54 earth chat[407]: ATDT365763^M^M Jan 8 16:50:54 earth chat[407]: CONNECT -- got it Jan 8 16:50:54 earth chat[407]: send (^M) Jan 8 16:50:54 earth chat[407]: timeout set to 4 seconds Jan 8 16:50:54 earth chat[407]: expect (Username:) Jan 8 16:50:54 earth chat[407]: 14400/REL-LAPM V.42 BIS^M Jan 8 16:50:55 earth chat[407]: ^M Jan 8 16:50:55 earth chat[407]: ^M Jan 8 16:50:55 earth chat[407]: User Access Verification^M Jan 8 16:50:55 earth chat[407]: ^M Jan 8 16:50:55 earth chat[407]: Username: -- got it Jan 8 16:50:55 earth chat[407]: send (myname^M) Jan 8 16:50:55 earth chat[407]: expect (Password:) Jan 8 16:50:55 earth chat[407]: fahed^M Jan 8 16:50:55 earth chat[407]: Password: -- got it Jan 8 16:50:55 earth chat[407]: send (mypasswd^M) Jan 8 16:50:55 earth pppd[401]: Serial connection established. Jan 8 16:50:56 earth pppd[401]: Using interface ppp0 Jan 8 16:50:56 earth pppd[401]: Connect: ppp0 <--> /dev/modem Jan 8 16:50:56 earth pppd[401]: sent [LCP ConfReq id=0x1 <mru 1500> <asyncmap 0x0> <magic 0xd12528ed> <pcomp> <accomp>] Jan 8 16:51:23 earth last message repeated 9 times Jan 8 16:51:26 earth pppd[401]: LCP: timeout sending Config-Requests ==> /var/log/warn <== Jan 8 16:51:26 earth pppd[401]: LCP: timeout sending Config-Requests i cant do ping, and no data is crossing the line!!!!!!! what could be wrong? thx -pons p.s. i am not on the list, so pls send me the answer to my priv. email adr. i can be reached via email at sodah(a)qatar.net.qa - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

3 2