December 2000 - openSUSE Users - openSUSE Mailing Lists

Possible Hack??
by ccarson＠ebuilt.com 27 Dec '00

27 Dec '00

Message-ID: <AA1E32BC8A58D411A2CB0050DACEDA43010CB107@raptor> From: "Carson, Chuck" <ccarson(a)ebuilt.com> Date: Tue, 26 Dec 2000 17:26:23 -0800 Subject: Possible Hack?? First one question, Is SuSE susceptible to the LPD hack that affects red hat? Second, I saw some strange in.telnetd connections in /var/log/messages from an unknown IP address (I have traced it but do not wish to disclose at this time) but performing (last root, etc.. for all my user accounts) I see no connections from this IP address, so I am guessing it was a port scan. However, after performing (netstat -a) I see active sockets, /tmp/.ICE-unix/some_number. Is this normal, or is this one of the hacks going around. (I have seen hacks in the past utilize the .ICE directory is why I am asking) Also, will TCP wrappers log the so-called half-connect port scans in /var/log/messages? My passwords are pretty strong but I am guilty of using ftp and telnet so anyone with a sniffer will have my passwords with little effort. Lastly, does anyone know if it is possible to sniff Pac Bell's DSL network? I am on a 255.255.255.248 subnet (5 static's), so I was under the impression only the router and all machines on my address range could sniff my info. Am I right or wrong? Thanks, Chuck

3 3

RE: [SLE] APACHE HTTPD.CONF
by ccarson＠ebuilt.com 27 Dec '00

27 Dec '00

Message-ID: <AA1E32BC8A58D411A2CB0050DACEDA43010CB108@raptor> From: "Carson, Chuck" <ccarson(a)ebuilt.com> Date: Tue, 26 Dec 2000 17:37:25 -0800 Subject: RE: [SLE] APACHE HTTPD.CONF The default httpd.conf file has CGI enabled, but if I remember correctly, the printenv CGI app that comes with Apache needs to have the execution bit set. (chmod 755 printenv) Once you have tested this, remove the execution bit (chmod 600 printenv), this is a dangerous script to have lying around. Then access http://localhost/cgi-bin/printenv <http://localhost/cgi-bin/printenv> If this fails, post more info and we can help from there. As for your other problem, make sure you DISPLAY environment variable is set. If using bash, add this to your .profile or .bashrc export DISPLAY=localhost:0.0 Also add this to be sure: export MOZILLA_HOME=/path/to/netscape_directory Note: This is the path to the directory containing netscape, do not include the netscape executable itself in this variable Also make sure the user you are trying to run netscape as has a writable home directory. If these don't fix your problem, post more info. -Chuck -----Original Message----- From: Jeff Barnes [mailto:hoctopus@netzero.net] Sent: Tuesday, December 26, 2000 2:06 PM To: suse-linux-e(a)suse.com Subject: [SLE] APACHE HTTPD.CONF I am trying to view cgi programs on my machine. If anyone has a httpd.conf and access.conf files that I can use as examples please send them to me. thanks also I noted that my Netscape in my suse 6.4 only seems to be working in the root account. How does one fix that?

2 1

Yast1 still doesn't work
by dk983＠ncf.ca 27 Dec '00

27 Dec '00

Message-Id: <5.0.0.25.2.20001226225421.01bcceb0(a)pop3.norton.antivirus> Date: Tue, 26 Dec 2000 23:03:48 -0500 From: b stephen harding <dk983(a)ncf.ca> Subject: Yast1 still doesn't work Well may trials with install with Yast1 still continue. I believe the problem relates to Saturday with the power very briefing went out. I was installing KDE2.01, now i can neither install new rpm's or un-install rpm's. Does if you have ideas on how to fix this I'd appreciate it. I would hate to resort to reinstalling. b stephen harding Black & White Rhino Press ---------------------------------------- "A man is involved in life, leaves his impress on it, and outside of that there is nothing." Jean-Paul Satre The Contemporary World

2 1

ftp through router problem...
by spunk＠mac.com 27 Dec '00

27 Dec '00

Date: Tue, 26 Dec 2000 19:49:50 -0800 From: "Spunk S. Spunk III" <spunk(a)mac.com> Message-ID: <B66EA6DE.284C%spunk(a)mac.com> Subject: ftp through router problem... I have my router set to pass ftp via port 21 to my SuSE machine but it's not fully connecting when I'm outside my network. I can connect without a problem inside my network but from the outside, it starts to connect but never lists the contents of my machine. I checked the logs and it does show that I did connect. I guess it could be my connection at work but I wanted to see if anyone else is seeing this... TIA, Spunk

1 0

Re: [SLE] Chirstmas parts ?????
by corvinr＠sympatico.ca 27 Dec '00

27 Dec '00

Date: Tue, 26 Dec 2000 21:14:45 -0500 From: Corvin Russell <corvinr(a)sympatico.ca> Message-ID: <20001226211445.A10564(a)cloud.of.unknowing.org> Subject: Re: [SLE] Chirstmas parts ????? My main problem here is that what was apparently originally an offline conversation (correct me if I'm wrong) was needlessly put online. If this was on purpose and without your interlocutor's consent, it seems morally unsound. Please be sure to check incoming mail headers before automatically responding to the list. The evident intent of someone who responds privately and not to the list is to not broadcast their comments, and it is only in exceptional and compelling circumstances that this wish should be disrespected. Thanks, Corvin > > On Tue, 26 Dec 2000, you wrote: > > So everybody should just give shit to you for no real reason. > > > > Ha. > > Believe or not, but yes. I started my 'wulf project about 18 months ago. In that > time I've had people from all over the world sent me all types of parts and > whole computers. Allot of what I've got has come from the SuSE list. These are > a great group of people (can't say guys, there are a few girls on the list > <G>). Yours is the first negative post I've got in these 18 months. > > I just got last week a 15" monitor from a guy here in Germany. A friend in > Holland sent me three whole systems last June. So far I've got parts from > Germany, Holland, UK, Canada, US, Japan, and Israel. Over all I've gotten > enough to build 5 486s or PIs. > > I'm not asking anyone to run downtown and buy anything for me. In fact that is > not the idea at all. Today there are millions of dollars of useable computer > parts just laying around or worst being thrown away. What I am doing (and > showing) is that these parts are not only still usable, they are still worth > using. > > >>>Anf if anyone has a spare Cray for me.. I am working on a port :) > >>>Happy Whatever > >>>>Cliff > > Don't have one at the moment, but I was offered a PDP 11 (/45 or /70, I don't > remember which). But I turned it down because I could not afford the shipping > from Texas to Germany. > > Later! > > -- > Jim Hatridge -- Corvin Russell <corvinr(a)sympatico.ca>

2 1

1024 cylinder limit
by raghav＠easi.soft.net 27 Dec '00

27 Dec '00

Message-ID: <3A48512B.75F5FA3E(a)easi.soft.net> Date: Tue, 26 Dec 2000 13:34:59 +0530 From: Raghavendra R <raghav(a)easi.soft.net> Subject: 1024 cylinder limit Hi, Is the 1024 cylinder limit still applicable for IBM compatible PCs using Linux?? Or is there any version of SuSE Linux ( 7.0 ) which can circumvent this problem?? Recently, i heard that this limit has been removed for Linux!! Raghav

3 2

Fwd: Re: [SLE] Adventures in Home Networking
by peterjmcm＠toad.net 27 Dec '00

27 Dec '00

From: Peter McMenamin <peterjmcm(a)toad.net> Date: Tue, 26 Dec 2000 10:46:53 -0500 Message-Id: <00122610465300.04421@peter> Subject: Fwd: Re: [SLE] Adventures in Home Networking Juergen, I guess I'll try to tackle this again. > to get my PCI BIOS to assign an IRQ other than 0 to my network card. What type of card? ISA? PCI?. PCI sould work, you can probably define an options line for it, there are samples in /etc/modules.conf If it is ISA, there is still isapnp.conf, and the isapnp stuff. Ask, if nessesarry. I remember some fiddling with that too, but neither with what type of card nor which machine... Anyway, I am running short of IRQ's in this box... My computer is a H-P Pavillion 8160. The only thing I can tell about the motherboard is that the main circuit board in the box has this written on it 'TX97XV'. I've tried to get help from H-P's website but they only tell me that my computer is out of warrenty and that they don't know anything about LInux and that if I want MS help I must pay. Well if I had money I'd buy a computer under warenty wouldn't I? The BIOS setup utility is a Phoenix BIOS version 4.06. When I contact them they refer me to H-P and tell me that there should be a toggle for PCI-BIOS but there is not. It does have a way to reserve IRQs for legacy ISAs and as I have a PCI card I've left all IRQs unreserved. In any case this does not change anything with respect to my situation. I've thought of contacting Open BIOS but I really do not understand what they are doing over there. The card is a ne2k-pci.c: PCI NE2000 clone 'Winbond 89C940' . I seem to have sucsessfully installed the ne2k-pci.c module. Here is what 'dmesg' says about the card; WARNING: The PCI BIOS assigned this PCI NE2k card to IRQ 0, which isunlikely to work!. You should use the PCI BIOS setup to assign a valid IRQ line. ne2k-pci.c: PCI NE2000 clone 'Winbond 89C940' at I/O 0xfca0, IRQ 0. eth0: Winbond 89C940 found at 0xfca0, IRQ 0, 00:20:78:19:91:38. I've been in touch with Suse installation support. In fact that is how I got here. After going a couple of rounds with me thy told me to do two things 1) Buy O'Reilly's Running Linux 2) Go bother those people on the suse-linux-e list But I already own the book and, since I haven't found an answer to my problem in the list's archives. I'm here bothering you. It seems to me that what needs to be done is the IRQ assignment needs to be changed. I've moved the card to three different slots and gotten no change. I installed a new harddrive and in the thrashing stumbling process I almost reinstalled 6.4 (in the end I didn't have to do this but it did give me the chance to find out if a reinstallation would solve my IRQ problem) and found that indeed something outside of Suse 6.4 was assigning IRQ0 to my net card. I'm beginning to think that I really just am screwed. I don't want to buy another card. How do I manipulate PCI BIOS? Well I've either said too much or not enough. TIA, Peter

2 2

Fwd: [oclug] Security-enhanced Linux
by dk983＠ncf.ca 27 Dec '00

27 Dec '00

Message-Id: <5.0.0.25.2.20001226210847.01bcebc0(a)pop3.norton.antivirus> Date: Tue, 26 Dec 2000 21:09:02 -0500 From: b stephen harding <dk983(a)ncf.ca> Subject: Fwd: [oclug] Security-enhanced Linux >From: "Taylor, Chris" <CTaylor(a)nrcan.gc.ca> >To: "'oclug(a)lists.oclug.on.ca'" <oclug(a)lists.oclug.on.ca> >X-Mailer: Internet Mail Service (5.5.2650.21) >Subject: [oclug] Security-enhanced Linux >Sender: oclug-admin(a)lists.oclug.on.ca >X-BeenThere: oclug(a)lists.oclug.on.ca >X-Mailman-Version: 2.0rc1 >Reply-To: oclug(a)lists.oclug.on.ca >List-Help: <mailto:oclug-request@lists.oclug.on.ca?subject=help> >List-Post: <mailto:oclug@lists.oclug.on.ca> >List-Subscribe: <http://www.oclug.on.ca/mailman/listinfo/oclug>, > <mailto:oclug-request@lists.oclug.on.ca?subject=subscribe> >List-Id: General Membership Discussion List <oclug.lists.oclug.on.ca> >List-Unsubscribe: <http://www.oclug.on.ca/mailman/listinfo/oclug>, > <mailto:oclug-request@lists.oclug.on.ca?subject=unsubscribe> >List-Archive: <http://www.oclug.on.ca/pipermail/oclug/> >Date: Tue, 26 Dec 2000 09:07:18 -0500 > >If anyone is interested in a security-enhanced Linux, the NSA in the States >has come out with a distribution. > >http://www.nsa.gov/selinux/ > >Cheers, Chris >_______________________________________________ >oclug mailing list >oclug(a)lists.oclug.on.ca >http://www.oclug.on.ca/mailman/listinfo/oclug b stephen harding Black & White Rhino Press ---------------------------------------- "A man is involved in life, leaves his impress on it, and outside of that there is nothing." Jean-Paul Satre The Contemporary World

1 0

RE: [SLE] Strange Network Probs
by andrew＠andrewsmith.plus.com 27 Dec '00

27 Dec '00

Message-ID: <01C06FA1.0FC413A0(a)andrew.plus.net> From: Andrew Smith <andrew(a)andrewsmith.plus.com> Date: Wed, 27 Dec 2000 01:05:07 -0000 Subject: RE: [SLE] Strange Network Probs Ah ha! Never mind - I managed to get it workin... for some reason the NIC wanted to use IRQ 5 (the 3COM setup util found that out). Now linux detectes it under IRQ5 instead of IRQ10 as before. Strange... :o) -----Original Message----- From: Andrew Smith [SMTP:andrew@andrewsmith.plus.com] Sent: 26 December 2000 16:52 To: SuSE Linux Mailing List (E-mail) Subject: [SLE] Strange Network Probs Hi I have 3 machines: ANDREW - Win95 - 3C905B PCI NIC - 192.168.10.20 ALPHA - Win95 - 3C509B ISA NIC - 192.168.10.15 TAU - SuSE 6.1 - 3C509B ISA NIC - 192.168.10.2 Lets ignore ALPHA for now to make things a bit simpler... ANDREW and TAU are connected via a 10BaseT hub. I had problems with TAU using the BNC port instead, although this was fixed by a 3COM DOS utility. Now, both lights on my hub light up. Both machines boot fine and the network driver module is loaded on TAU. My problem now is that all network traffic (including ping) doesnt 'work'. Pinging from TAU to ANDREW results in a 100% packet loss, even though both lights on the hub flash. Pinging from ANDREW to TAU results in four "Request timed out" messages, but this time, only ANDREW's light flashes on the hub. I have made sure ipchains is flushed and input, forward and output all allowed. I have also made sure the firewall (ZoneAlarm) on ANDREW is disabled. I want to be able to use TAU as a internet gateway & firewall (I know how to do that) but that aint gonna happen till this is fixed! ANDREW and ALPHA can talk to eachother & share files fine. I did have ALPHA and TAU connected via BNC and working fine until it just stopped working one day (with the same problem). Incidently, it stopped working at the same time the CMOS got wiped (left TAU switched on but unplugged, (AFIK) thus draining the CMOS battery). And yes, I have made sure PnP BIOS Auto Config has been disabled :) And it's not a problem with the NICs as I have a number of them, all of which cause the same symptoms. Any help would be very gratefully appreciated, Many Thanks, Andrew Smith :o) -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/support/faq

1 0

Re: [SLE] FTP Transfer Speeds...
by creimer＠rahul.net 26 Dec '00

26 Dec '00

Message-Id: <5.0.2.1.2.20001226151311.024982a0(a)pop.rahul.net> Date: Tue, 26 Dec 2000 15:20:52 -0800 From: "Christopher D. Reimer" <creimer(a)rahul.net> Subject: Re: [SLE] FTP Transfer Speeds... At 03:02 PM 12/26/2000, Greg Thomas wrote: >We need more info. Are you talking about a home LAN? There is no >restriction on either my Linux or OpenBSD box. I'm running at 100Mbps >half-duplex and get about 6MBps via ftp. DOH! I was looking at the wrong machine. I FTPed files to my router box at 35 kilobytes per second since it has a slower CPU and hard drive. When I FTPed my server box that I'm rebuilding, I'm getting 400 kilobytes per second on a home network of Netgear FA310TX 10/100 NICs and a 10Mb hub. Does that sound about right for my network configuration? As for the 56k modem, I meant to say 3.5 kilobytes per second. Thanks! Christopher Reimer creimer's FPS Design & Portfolio http://www.rahul.net/creimer/

2 1