December 2003 - openSUSE Users - openSUSE Mailing Lists

Re: [SLE] SuSE's time keeping
by Jerome Lyles 04 Dec '03

04 Dec '03

On Thursday 04 December 2003 01:07 pm, Gary Hodges wrote: > Jerome Lyles wrote: > >On Thursday 04 December 2003 06:44 am, Bruce Marshall wrote: ---------------------------- ---------------------------- > >> > >>Have none of you ever heard of NTP? I set my watch by my computer > >>whereas I used to use WWV.... > >> > >>NTP is very easy to set up on SUSE. If you want my /etc/ntp.conf file > >>I'll be glad to send it. That's the only thing you need to change once > >>ntpd is installed. > > > >When I reboot my time is always five minutes off. I want your > > /etc/ntp.conf file. > > Be sure to read my post "ntp bug with 9.0." > > Gary I can't find the search function for suse-linux-e archives. Where is it? Thanks, Jerome

2 1

Wget question
by Bruce Marshall 04 Dec '03

04 Dec '03

Anyone know if Wget can be made to pass a userid and a password in a form in order to get in to a site and grab the pages? (no I'm not trying to crack anything... just trying to automate a process) -- +----------------------------------------------------------------------------+ + Bruce S. Marshall bmarsh(a)bmarsh.com Bellaire, MI 12/03/03 18:32 + +----------------------------------------------------------------------------+ "The attention span of a computer is only as long as its electrical cord."

3 4

SuSEfirewall with VPND
by Darrell Cormier 04 Dec '03

04 Dec '03

Greetings all, I am trying to configure SuSEfirewall2 (SuSE 8.2 Pro) to allow vpn connection to my office network. I am using VPND version 1.1.0 and SuSEfirewall2-3.1-95. I am going through the SuSEfirewall2 tutorial provided by Togan but it appears that the VPN section is tailored to frees/wan. I have been able to get the VPND connection to my office on my firewall/router/gateway machine. This was accomplished by adding sl0 to the following line in the /etc/sysconfig/SuSEfirewall2 file: FW_DEV_INT="eth1 sl0" Now the other machine on my internal network is not able to use that vpn connection. I am using the I.P. of eth1 (which is the same as the vpn I.P.) on the firewall as my default gateway on my internal workstation. All other internet traffic seems to work but not the vpn connection. I should be able to ping any machine on my companies internal network through the vpn connection. However, on my internal workstation I can't. I can from the firewall machine but not from internal machine. What do I have to do to the firewall to make that work for internal machines? I am looking at IPtables documents right now but have not found (or have overlooked) what I need to do next. Sorry about the long post but I want to give some info about my setup. When I make my vpn connection, my ifconfig shows (with modified IPs): #ifconfig eth0 Link encap:Ethernet HWaddr 00:40:05:39:85:2A inet addr:64.111.11.11 Bcast:64.111.11.255 Mask:255.255.255.0 inet6 addr: feee::eee:5ff:fe39:852a/64 Scope:Link UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1 RX packets:363228 errors:0 dropped:0 overruns:0 frame:0 TX packets:89230 errors:0 dropped:0 overruns:0 carrier:0 collisions:27 txqueuelen:100 RX bytes:58782243 (56.0 Mb) TX bytes:9496656 (9.0 Mb) Interrupt:10 Base address:0xb400 eth1 Link encap:Ethernet HWaddr 00:B0:D0:26:51:3D inet addr:10.222.44.1 Bcast:10.222.44.255 Mask:255.255.255.0 inet6 addr: feee::2a5:d566:fe26:513d/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:41545 errors:0 dropped:0 overruns:0 frame:0 TX packets:42183 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:4345142 (4.1 Mb) TX bytes:30915614 (29.4 Mb) Interrupt:11 Base address:0xdc00 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:15 errors:0 dropped:0 overruns:0 frame:0 TX packets:15 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1156 (1.1 Kb) TX bytes:1156 (1.1 Kb) sl0 Link encap:VJ Serial Line IP inet addr:10.222.44.1 P-t-P:10.222.44.84 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1600 Metric:1 RX packets:11 errors:0 dropped:0 overruns:0 frame:0 compressed:0 TX packets:11 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 compressed:0 txqueuelen:10 RX bytes:924 (924.0 b) TX bytes:924 (924.0 b) The sl0 being the VPND connection. In /etc/sysconfig/SuSEfirewall2 I have the following: FW_QUICKMODE="no" FW_DEV_EXT="eth0" FW_DEV_INT="eth1 sl0" FW_DEV_DMZ="" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_MASQ_NETS="0/0" FW_PROTECT_FROM_INTERNAL="yes" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_TCP="123 16004 5900:5912 http https pop3 rsync ssh" FW_SERVICES_EXT_UDP="500" FW_SERVICES_EXT_IP="50 51" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_INT_TCP="" FW_SERVICES_INT_UDP="" FW_SERVICES_INT_IP="" FW_SERVICES_QUICK_TCP="" FW_SERVICES_QUICK_UDP="" FW_SERVICES_QUICK_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="no" FW_ALLOW_INCOMING_HIGHPORTS_UDP="DNS" FW_SERVICE_AUTODETECT="yes" FW_SERVICE_DNS="no" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_SERVICE_SQUID="no" FW_SERVICE_SAMBA="no" FW_FORWARD="" FW_FORWARD_MASQ="" FW_REDIRECT="" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="no" FW_LOG_ACCEPT_CRIT="no" FW_LOG_ACCEPT_ALL="no" FW_LOG="--log-level warning --log-tcp-options --log-ip-option --log-prefix SuSE-FW" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="no" FW_ALLOW_PING_EXT="no" FW_ALLOW_FW_TRACEROUTE="yes" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_ALLOW_FW_BROADCAST="no" FW_IGNORE_FW_BROADCAST="yes" FW_ALLOW_CLASS_ROUTING="no" FW_CUSTOMRULES="" FW_REJECT="no" FW_HTB_TUNE_DEV="" TIA, Darrell Cormier

2 9

Iptables
by Santiago R. Oviedo V. 04 Dec '03

04 Dec '03

Hi, I'm facing some problems with iptables rules, the idea is to redirect request from the port 83 of the FW to port 80 from a LAN machine. The rule is as follows: $IPTABLES -t nat -A PREROUTING -p tcp -s $LAN_NET --dport 83 -j DNAT \ --to $SERVER_IP:80 Running the command "iptables -nvL -t nat" i see the rule is matched but doesn't work in the browser. I'll keep waiting for comments Best regards Santiago

1 0

Kernel brk() security announcement
by Gary Hodges 04 Dec '03

04 Dec '03

I just got the email from SuSE about the Kernel brk() vulnerability. Going through the instructions in the email I see that kernel k_athlon-2.4.21-144.i586.rpm is what I'm supposed to download. About a week ago there was a kernel update that I did with YaST/YOU. It is the same version number as the one listed for the current security announcement. ~>rpm -q k_athlon k_athlon-2.4.21-144 I'm I correct to assume that I'm OK? Is it possible that changes were made to the kernel but the version number didn't change? Cheers, Gary

4 3

SuSE Linux killed my hardware!
by Sebastian Wolff 04 Dec '03

04 Dec '03

Dear SuSE community! This is a call for help and a troll against linux. Is it possible that in particular situations Linux may kill the main board of any laptop? By now I destroyed with the help of SuSE Linux 8.2 and 9.0 2 (!) laptops in the last 2 month: An older Maxdata and a brand new Dell Inspiron 5100. Both show the same symptoms: They simply don't react after turning the power on (except turning on the fan and the CD drive). The repair service believes it is the main board which must be replaced. And each time the 'damage' resulted from similar situations (the first time I believed it was the age of my laptop): I wanted to change the BIOS configuration. To enter the setup you have to press F2 in the very beginning. Usually I miss this time. Hence, I resetted the computer after missing it. However, I am used to damages to the file system in the worst case - therefore, to press reset is a very common and intuitive way. Well. Sometimes it can also kill your whole hardware. Now I have 2 questions: (1) What happened ???! (2) Who can I sue for it? After all this operating system (really, I liked it till now) destroyed a value of 2500 Euro (2700 $) within only 2 month! As a student I can live with that money for a whole year - and then I wanted to finish a research project next week - 3 complete month of work are gone now. Now, this is a 'free' operating system. Who is responsible? Linus Torvalds? SuSE? The developer who produced this bug? Rather nobody. After this incident I have to define 'reliability' in a new sense. This warranty problem might be a reason to encourage companies to stay at Windows, HP-UX or MacOS. Regards Sebastian

20 21

Vuln in rsync
by Kevin Donnelly 04 Dec '03

04 Dec '03

http://www.secunia.com/advisories/10353/ This is believed to be how the Gentoo and FSF/Debian servers were compromised. -- Best wishes Kevin Donnelly www.kyfieithu.co.uk - Meddalwedd Rydd yn Gymraeg

1 0

RE: [SLE] Which Cable/DSL Firewall?
by VANTASSLE, GEORDON M (SBCSI) 04 Dec '03

04 Dec '03

John Andersen <mailto:jsa@pen.homeip.net> wrote on Thursday, December 04, 2003 3:32 AM: >> Me, I'm not too busy to learn. Heck, I run a SuSE firewall at home. >> But, would you buy "wanting an extra layer of protection" as a valid >> reason for wanting a hardware firewall? That's why I'm looking for >> one, myself. >> >> Geordon > > Sure, that sounds reasonable. Just remember to be safe > and put the hardware firewall BEHIND the SuSE box. <g>. Of COURSE I'd wire it behind the SuSE box! You know, right in front of the Windows clients on the inside! (maniacal laughter) Besides, I want to put a wireless router in place, too. That'll fit nicely behind my "moat" (actual hostname. :) Now, can anyone recommend any WLAN router/firewall combinations that they've had good use with? -- Geordon

2 1

ntp bug with v9.0
by Gary Hodges 04 Dec '03

04 Dec '03

I was unable to get ntp working on several machines by following the instructions in the manual on p.374. Below is an example of the error sequence I would get when restarting xntpd: 25 Nov 15:02:27 ntpd[3623]: ntpd exiting on signal 15 25 Nov 15:02:26 ntpd[3867]: running as uid(74)/gid(65534) euid(74)/egid(65534). 25 Nov 15:05:52 ntpd[3867]: time set 0.000000 s 25 Nov 15:05:52 ntpd[3867]: synchronisation lost 25 Nov 16:02:26 ntpd[3867]: can't open /var/lib/ntp/drift/ntp.drift.TEMP: No su ch file or directory 25 Nov 17:02:26 ntpd[3867]: can't open /var/lib/ntp/drift/ntp.drift.TEMP: No su ch file or directory 25 Nov 18:02:26 ntpd[3867]: can't open /var/lib/ntp/drift/ntp.drift.TEMP: No su ch file or directory I finally discovered what appears to be a config typo. That's what I am calling it anyway. The driftfile line from /etc/ntp.config is: driftfile /var/lib/ntp/drift/ntp.drift # path for drift file The following shows the typo: space:/var/lib/ntp # pwd /var/lib/ntp space:/var/lib/ntp # ls -l drwxr-xr-x 2 ntp nogroup 80 2003-12-04 08:59 drift drwxr-xr-x 2 root root 104 2003-11-20 12:37 etc drwxr-xr-x 4 root root 96 2003-11-12 16:15 var space:/var/lib/ntp # ls -l var/lib/ lrwxrwxrwx 1 root root 4 2003-11-12 16:15 BADntp -> ../. lrwxrwxrwx 1 root root 5 2003-12-03 17:49 ntp -> ../.. Notice that BADntp is a link to ../. while the fix links to ../.. That's two dots after the slash. With the link set to ../.. it works as described in the manual. Here is the log from the restart of ntpd with the fixed link: 3 Dec 20:59:52 ntpd[9602]: ntpd exiting on signal 15 3 Dec 20:59:50 ntpd[10069]: running as uid(74)/gid(65534) euid(74)/egid(65534). 3 Dec 20:59:50 ntpd[10069]: frequency initialized 0.000 from /var/lib/ntp/drift /ntp.drift 3 Dec 21:03:01 ntpd[10069]: kernel time discipline status change 41 Cheers, Gary

1 0

Mozilla Icon
by Smith, Robert A 04 Dec '03

04 Dec '03

I'm running SuSE 9.0 Pro, and it set up using a blank page icon for Mozilla. Can someone please direct me to the location of that funky little Dinosaur so I can correct this? Tanx a bunch! Rob Smith

4 3