November 1999 - openSUSE Users - openSUSE Mailing Lists

[SLE] ZDNet: News: Microsoft, DOJ settlement doubtful
by fmiller1＠twcny.rr.com 30 Nov '99

30 Nov '99

Good read. Fred http://www.zdnet.com/zdnn/stories/news/0,4586,2400504,00.html -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] kcore
by jozien＠cybercomm.net 30 Nov '99

30 Nov '99

When I started kde i noticed that it took a long time to load and there was a lot of activity on the hard drive and using df, I noticed the hard drive was getting loaded. Using find to check files less then 1 day old, I located the file /proc/kcore and it was over 33 meg. I tried to delete it as root but couldn't . I got a message "Operation not permitted" -r-------- 1 root root 33558528 Nov 29 18:33 kcore Why can't I delete it? Most core files can be deleted. TIF jozien(a)cybercomm.net -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

3 2

[SLE] IP-Masq Questions
by samelash＠ix.netcom.com 30 Nov '99

30 Nov '99

Hi Folks, Finaly geting arount to ip-masq aka ip fowarding. I looked at the four documents in the ip masq docs directory , and am more confused than before. My understanding is that the suse kernal allready suports ip masq. Right? So all I should need to do is creatre/edit some config files and some how get the pc to start ip masq serives ect.. Any one got/ or know of some simplified "for dummies" type docs to get this going ? What are the files needed to be created , and how configured ? how are the serivices started in yast/linux ? I hear wvdial wont work for dial up access to the net , what do I use ?? box 1 --------------| | box 2---------------+---------IP-MASQ / FIREWALL / DIAL UP MANAGER--------------phone line to isp----- | box 3---------------| | Linux Server--------+ Thanks all. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

2 1

[SLE] Newbie - serial connection
by keytec＠fyiowa.infi.net 30 Nov '99

30 Nov '99

Hi, I'm new to Linux. I worked with UNIX and AIX system several years ago - moved away from them, but liked the environment and wanted my own system. I've just set up Linux 6.2 on a 90MHZ pentium machine. It seems to be mostly running okay, but there are some things I'm not familiar with (most likely, have forgotten). 1. When I login as root on this system I'm on tty1. Is this normal? Other systems use "console". 2. I would like to make a serial terminal connection to the Linux machine from a PC running Windoze' Hyperterm. I haven't had much luck. Anyone familiar with that setup? Sam -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

2 1

[SLE] Netmask error /sbin/route
by icimjs＠loop.com 29 Nov '99

29 Nov '99

Hi guys, I'm in the process of installing a lan based on SuSE Linux 6.2. I'm using one of the computers as a gateway to the Internet on a dialup connection. When I start up a client machine on the network I get the boot time error message: Error while executing: /sbin/rout add -net 192.168.0.1 netmask 255.255.255.0 dev eth0 route: netask doesn't match rout address Failed services in runlevel 2: route 1. Does this mean that I have to change the netmask to 255.255.255.255? 2. Or something else? 3. Whose netmask do have I to change? 4. Where do I change the netmaks entry? TIA, Elan -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

3 2

[SLE] vbox and firewall
by jeroen＠jota.nl 29 Nov '99

29 Nov '99

Hi all, I have 1 linuxbox (pentium/100Mhz) acting as file/mail/gateway server for 3 windows 98 machines. My linuxbox took care of the internet connection for all three Win98 machines (and for itself) through a Teles ISDN card. Also, using vbox, the teles card took care of answering the phone for two different MSNs -numbers- after which a message was sent to the users mailbox, with the call attached. And with fetchmail in the crontab I recieved all my email from my ISP after which it was sent through to my users... everything worked almost perfectly ;-|. Because of security issues I decided to use an old Compaq P60 as a masquerading firewall, so I bought a new 500Mhz machine - my god they don't cost much these days :-). Now the configuration is as follows: 1 pentium 500 with SuSE6.2, acting as mail and fileserver 1 pentium 60 with SuSE6.2 acting as firewall 3 Win98 machines (2 P100's and 1 P350) to get my work done. The teles card is installed in the CompaqP60, which takes care of the internet connection for all machines. All machines can get through. And after shutting off DNS even fetchmail works. So far so good. But how do I get vbox to run 'from a distance' so to speak. I've been told that you shouldn't have users (besides root) on the gateway/firewall. But vbox seems to have to have users on the host it is working from. I would like to have vbox to use the users from the main file/mail server, because the gatewaymachine doesn't have a soundcard and I'd rather not add more users to the gatewayhost. Is that at all possible? If not how can I notify users on the main host that there's a message? Do I have to configure the gateway machine as mail-server as well? But wouldn't that be a security hole? Is it possible anyway to let one host know about the users on other hosts? Or do they have to be added to all machines seperately? Thanks a lot for any help! Jeroen Verstegen jeroen(a)jota.nl -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Re: [suse-security] portscanning and high ports
by chris.reeves＠iname.com 29 Nov '99

29 Nov '99

Hi Roman, Roman Drahtmueller wrote: > Be sure you really had a portscan on your box. It may as well have been > some ftp transfer, where a server actively opens tcp connections to a > client in your network for each file to be transferred. It should however > be possible to distinguish these connections from others by the source > port (20). This was definitely a portscan, the ports tried included low-numbered ports, but I didn't show those here, because I knew what they all were. > nmap used to come with a quite exhaustive services-file (can be found on > ftp.uni-freiburg.de:/pub/linux/misc/etc/services.nmap). It says: <snipped> Ah! This could be a very useful file. It has now been saved for future reference! Thanks. > > Is it generally considered safe to open up most high numbered ports? What do > > the people on these lists do? Do you close them all and open some, or open all > > and close some (all meaning all ports >1023)? > > This discussion reduces itself to the necessity of allowing people to open > connections from the outside to the inside in the first place. > > Everyone inside can tunnel/reflect ports from a higher port to a lower > one, which renders "full control of all opening connections" to an > illusion (there is no difference in whether a user inside "allows" for a > connection from outside to inside to be established or not. The fact (it > is possible) remains.). > From this standpoint, solely filtering ports doesn't improve "security" > as much as people often think it would. You need a more thouroughly > designed concept, because the sole port number doesn't tell anything about > the vulnerability of the whole system or even network. (access to an > X-server could be accomplished by connecting to ssh-spoofed X-servers on > the ssh-daemon-side. These ports default to the range above 6010.) If it > is impossible for you to combine your packet filter with other concepts of > restricting traffic/information flow, you might want to think of filtering > packets matching what is called the "established flag". Point taken. However, this isn't such a problem in my case, as I only have a small few machine home network, and at the moment this computer isn't connected to it. The "established flag" - is that the same as blocking SYN packets? It's probably not, is it. I'll have a look into that. Thanks a lot, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\\ /__/ / _ \/ // /\ \/ / ICQ# 22219005 _\_v __/_/_//_/\_,_/ /_/\_\ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Problem With XWindows Configuation
by icimjs＠loop.com 29 Nov '99

29 Nov '99

Hi guys, I am using three eMachines in a network. I have a problem configuring XWindows on one of these machines. The problem I get on this one machine is 1. When I select the SAX XWindows configuration tool, I see a column part of the screen continuously running from bottom to top. This column is on the right half of the screen and it is about 1/4 of the screen in width. I reaches from the bottom to the top. 2. Part of the SAX XWindows configuration windows does not fit on the screen. The button on the right that says "Next" is only partially visible. 3. When I use the autmotacially detected configuration (Mach64), and run it in test mode, the display becomes black, remains black, then there are intermittent flashes of the XWindows desktop. This same configuration works well on the other eMachines. 4. When I use the generic SVGA card selection, I get an image that remains stable. However, I have the same effect as under 1. and 2. Any ideas? TIA, Elan -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Security issue
by joakim＠astrocalc.com 29 Nov '99

29 Nov '99

Hi, I actually have 2 issues I need some help with after upgrading from 5.3 to 6.2 but here just the most urgent as it might be a potetial danger to my server. Going thrugh my userlist after updating Suse 5.3 to 6.2 I found a user "ixess" belonging to the group Yard. As I checked with my fresh local installation from scratch I found there a user "Yard", which also exsist on the server box (permanent connected to Internet) so that seam to be OK. But no user "ixess" on local box. Checking a backup of the 5.3 shows there already exsist an "ixess" user. So my question is if anyone knows if this is some "leftover" from 5.3 or might it be an old remain of an earlier uninvited "guest". The name sounded suspect... and I haven't added it, and of cause invoked a good impulse of changing the root password:) But also would like to know if it would be ok to delete that user and by that not causing system failure. Anyone can tell? Also have a sendmail related problem, but this first. Joakim -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] portscanning and high ports
by chris.reeves＠iname.com 29 Nov '99

29 Nov '99

Hi all, I have been portscanned a number of times recently by the same computer. I've used a combination of nslookup and finger and have the name of the culprit. It is being dealt with. This has prompted me to look even more closely at my firewalling. Ports <1024 are OK, as they are totally blocked, but those >1023 are pretty much open. Although virtually every single service is commented out in inetd.conf, I still want to block and log any connect attempts to 'special' ports. At the moment, these are the high numbered ports I block: 1433 Microsoft SQL 2049 NFS 5432 PostgreSQL 5999:6010 X-Windows 7100 X Font Server 12345:12346 NetBus 31337 Back Orifice I was having a look at the high numbered ports that he was scanning, and was wondering what the significance of these ports was (I couldn't see anything in /etc/services). By the way, the following are the high numbered ports that he tried to scan, have any ideas what they are used for? 5190 5191 5192 5193 5631 5632 5800 5900 8000 8010 8080 9100 25867 31787 33333 And finally, are there any other high numbered ports that you think could be potentially damaging (eg webmin - which port is that on)? Even if I'm not running that service, I would still like to know which ones pose a security threat so that I can block them anyway (in case I'm playing and start webmin, for example, without realilsing it). Is it generally considered safe to open up most high numbered ports? What do the people on these lists do? Do you close them all and open some, or open all and close some (all meaning all ports >1023)? One last question - I keep on coming around to this one every so often. If someone wants to connect to me using ICQ, they connect to a port >1023. I am assuming that ICQ doesn't have a daemon or anything listening on every possible port, so how does it know when another ICQ user is trying to connect? This isn't an ICQ specific question - I'm just using it as an example - it could apply to any remotely opened connection to a port >1023. How is this handled (how does the computer know whether ICQ should handle the connect attempt or whether it should be handled by some other process)? Thanks in advance, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\\ /__/ / _ \/ // /\ \/ / ICQ# 22219005 _\_v __/_/_//_/\_,_/ /_/\_\ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0