February 2005 - openSUSE Users - openSUSE Mailing Lists

rkhunter-1.2.1-1.noarch.rpm available
by Patrick Shanahan 22 Feb '05

22 Feb '05

rkhunter -1.2.1-1.noarch.rpm is available for download: http://wahoo.no-ip.org/~pat/rkhunter-1.2.1-1.noarch.rpm http://wahoo.no-ip.org/~pat/rkhunter-1.2.1-1.src.rpm http://wahoo.no-ip.org/~pat/rkhunter-1.2.1.tar.gz Project description: Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix clone. The changes in this release are as follows: This release adds support for Mandrake 8.1, FreeBSD 5.3, and Slackware 10.1. It has support for Fink, updated MD5 hashes, updated packages, improved logging, improved output, and several bugfixes. Release focus: 5 - Minor feature enhancements Changelog Below is the changelog of Rootkit Hunter. It will contain changes of early released versions and the active development version. Current public version: 1.2.1 Current development version: 1.2.2 (not available yet) ----------------------------------------------- * 1.2.1 (21/02/2005) New: - Added support for Mandrake 8.1 (i586, no hashes) - Added support for FreeBSD 5.3 (i386, with hashes for release version) - Added support for Slackware 10.1 - Added Turkish translation to installer (note: language support temporarily disabled) - Added support for Fink (MacOS), added /sw/bin to BINPATHS - Added contrib directory - Added script (contrib) run_rkhunter, by Andy Spiegel Changes: - Updated hashes for SuSE 9.1, Mandrake 10.0 - Updated installer (changed copyright line, comments and disabled version number, because it can be confusing when installer version is another version than main version.) - Perform extra check before checking configuration file (to see if it exists) - Improved logging (show temporary directory, improve output when scanning for default rootkit files/directories) - Improved output when system is unsupported - Stop program when temporary directory doesn't exist instead of creating it - Updated packages: Apache, Bind, GnuPG, OpenSSL - Fixed some typos Bugfixes: - BINPATHS got overwritten when performing software version check - Fixed bug when checking for ssh root user. Thanks to Andy Spiegel - Clean up temporary prelink file Website: - Added notification list - Fixed some XHTML bugs -- author: Michael Boelen <michael(a)rootkit.nl> http://www.rootkit.nl -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery

1 0

Alternative Gateways
by Helge Preuss 22 Feb '05

22 Feb '05

Hi. I am currently setting up the gateway of my network to connect to the internet via a WLAN-based network. Previously I was using ISDN. My problem is, the Wireless net connection is not very reliable. What I would like to have is a mechanism to easily switch between wireless and ISDN as default gateway (for my network gateway, aka. "server"). This is not so trivial, because several changes have to be made: The default gateway has to be changed. The firewall rules have to be changed, so that the external interface is set to eth1 instead of ippp0. And, because that was not enough, I had to uninstall the ISDN subsystem. I haven't found out why, but until I did that, ippp0 was always used as the interface to dial out, and the default route was restored to it. Now I have thought of a crude method to switch between the two gateways: back up the files which are changed by YaST, when I make the necessary changes, and replace the config files in /etc with the ones which are currently needed. But as I said, I consider this very crude. Can anyone think of a better way? Let me briefly define "better": - It should preserve the system's integrity, - it should be done with SuSE's tools, - profiles must be switchable via a web interface (this should pose no problem, I can always write a wrapper) Thanks, Helge

3 2

usb hard drive enclosure
by Hans Krueger 22 Feb '05

22 Feb '05

dos any body have an usb hard drive enclosure working with suse 9.2 or 9.1 -- Hans hanskrueger(a)adelphia.net

7 6

Re: [SLE] Update via yast
by Carl E. Hartung 22 Feb '05

22 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Marc Collin wrote: >> You're running a YOU-updated kernel. My understanding is that it >> defaults to installing the source. >> >> Have you checked /usr/src/linux-2.6.8-24.11 ? >> >> - Carl > > ya i checked in this folder.... i can get it from there.... but why yast > online update don't give me the choice to download kernel source 2.6.8-24.11? The reason it doesn't show up in YOU as an available update is because the package has already been installed. You can install it again by checking the "reload all patches from server" box before clicking "Next." It will download information on all the available patches for 9.2 again. Select the kernel source for 2.6.8-24.11 and click "Accept." YOU will download and install it again in the same place. Is that what you're after or am I misunderstanding your question? - - Carl - -- ____________________________________________________________________ C. E. Hartung Business Development & Support Services http://www.cehartung.com/ carlh(a)cehartung.com Dover Foxcroft, Maine, USA Public Key #0x68396713 Reg. Linux User #350527 http://counter.li.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFCFYAlusxgymg5ZxMRAjpCAKCBCq204nroPHdopOPn5bMeejM7sgCferCi 8sJqiSFOHXATlmkm6mgc8Uo= =qqVW -----END PGP SIGNATURE-----

4 4

Kernel Patch
by Henry Standing 22 Feb '05

22 Feb '05

Ok - this is just embarrasing.... I have been using Linux for a couple of years now and have NO IDEA what I am doing when it comes to the Kernel. I would like to apply the following patch to the stock 9.2 Kernel - can someone walk me through, or point me at a decent resource? http://bugs.kde.org/attachment.cgi?id=8665&action=view -- _ Henry Standing (\o/) Systems Engineer /_\ Oxford Policy Management lists at opml dot co dot uk

2 1

RE: [SLE] Installing SuSE 9.2 onto Adaptec HostRaid
by Dirk.Laurenz＠fujitsu-siemens.com 22 Feb '05

22 Feb '05

Hi, there're drivers for hostraid. You can download them from the adaptec site. They aren't opensource and therefor not part of the kernel distribution. This is the problem you have, not a bug. Mit freundlichem Gruß, Dirk Laurenz Systems Engineer Fujitsu Siemens Computers S CE DE SE PS N/O Sales Central Europe Deutschland Professional Service Nord / Ost Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 (511) 84 89 - 18 08 Telefax: +49 (511) 84 89 - 25 18 08 Mobile: +49 (170) 22 10 781 Email: mailto:dirk.laurenz@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.com http://www.fujitsu-siemens.de/services/index.html ******************************************************************************************************************* -| -----Original Message----- -| From: Angus Beath [mailto:abeath@gmail.com] -| Sent: Tuesday, February 22, 2005 7:32 AM -| To: suse-linux-e(a)suse.com -| Subject: Re: [SLE] Installing SuSE 9.2 onto Adaptec HostRaid -| -| Hey gang, -| -| OK, having spent a couple of hours on this, I've found a -| workaround. The -| Adaptec 39320A has HostRAID capabilities. I turned this off and then -| installed SuSE onto a software RAID/LVM with the two SCSI -| disks I have. -| It's unfortunate that I cannot get hardware raid to work, -| and I don't -| have the time to pursue this further. I should note, that I -| attempted -| installs of Libranet (based on Debian) and also Fedora Core -| 3 and had -| the same result. Linux is able to see the raid adapter, but not the -| hostraid part of it and therefore, no hardware raid. -| Hopefully this will -| be fixed up soon. I've submitted appropriate bug reports. -| -| Regards, -| -| Angus -| -| -| On Mon, 2005-02-21 at 23:39 -0500, Carl E. Hartung wrote: -| > -----BEGIN PGP SIGNED MESSAGE----- -| > Hash: SHA1 -| > -| > Angus Beath wrote: -| > > Carl, -| > > -| > > thanks - I'll go through all those messages and see -| what I come up with -| > > - I'll post results to the list. -| > -| > Angus, -| > -| > I added ">=2005" because tons of stuff was coming up from -| 2003/2004 -| > without it. This probably knocked out any relevant hits -| from the last -| > part of 2004, so the search string needs refinement. -| Also, I don't want -| > to leave you with the impression that this is a SuSE problem. My -| > impression, after much googling and reading, is there -| have been some -| > related issues being ironed out in kernel recently. -| > -| > regards, -| > -| > - - Carl -| > -| > - -- -| > -| ____________________________________________________________________ -| > C. E. Hartung Business Development & -| Support Services -| > http://www.cehartung.com/ -| carlh(a)cehartung.com -| > Dover Foxcroft, Maine, USA Public Key -| #0x68396713 -| > Reg. Linux User #350527 -| http://counter.li.org/ -| > -----BEGIN PGP SIGNATURE----- -| > Version: GnuPG v1.2.5 (GNU/Linux) -| > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org -| > -| > iD8DBQFCGrdxusxgymg5ZxMRAtVWAJ4vPjj5Q5mYzArCr7E7TldkfMmkPQCeNteO -| > vPcPM9lL49bA1x1qj7mPhao= -| > =Ys8/ -| > -----END PGP SIGNATURE----- -| > -| -| -| -- -| Check the headers for your unsubscription address -| For additional commands send e-mail to suse-linux-e-help(a)suse.com -| Also check the archives at http://lists.suse.com -| Please read the FAQs: suse-linux-e-faq(a)suse.com -| -|

1 0

Re: [suse-security] SuSEfirewall, iptables and SNAT
by Polarizer 22 Feb '05

22 Feb '05

Markus Feilner schrieb: > Hello List, > I want to SNAT a host in my local net - i have been trying so by adding > the following line to my susefirewall custom script > > iptables -t nat -A POSTROUTING -s SOURCE_IP -d TARGET_IP -j SNAT > --to-source NATTED_SOURCE_IP > > I have configured DNAT the same, and that works fine, but outgoing > packets are not natted. > (My Firewall is also rejecting everything but allowed traffic) > what's wrong? what am i missing? > thanks a lot! You may want to try this: iptables -t nat -I POSTROUTING -s SOURCE_IP -d TARGET_IP -j SNAT --to-source NATTED_SOURCE_IP to ensure no other rule in the queue before hits thoose packets! Take a look at ip route replace $srcip/32 dev $adev src $newsrc$ too The polarizer polarizers at its best http://www.glass-polariser.com

1 0

Re: [SLE] Firefox X display problem--Start Again
by Jeff Pohlmeyer 22 Feb '05

22 Feb '05

> This is completely bonkers. I have never seen such silliness before. > Any ideas what is going on? Not the slightest idea, so please excuse my rambling... I googled around a bit for "_disableObsoleteExtensions" and it looks like you are not alone, although I didn't find any magic answers. By strange coincidence, KDE seems to be mentioned frequently. Maybe you could test under a different WM? Another wild guess (grasping at straws now) is that maybe firefox is trying to use libraries from thunderbird or mozilla? Check this as root vs normal to see if there is any difference: % echo $LD_LIBRARY_PATH % echo $MOZILLA_FIVE_HOME % type -ap firefox % ldd /path/to/firefox/firefox-bin If all else fails, you might try posting to http://forums.mozillazine.org/ - Jeff . __________________________________ Do you Yahoo!? Yahoo! Mail - now with 250MB free storage. Learn more. http://info.mail.yahoo.com/mail_250

1 0

RE: [SLE] Installing SuSE 9.2 onto Adaptec HostRaid
by Dirk.Laurenz＠fujitsu-siemens.com 22 Feb '05

22 Feb '05

Hi, if you have a PRIMERGY Server, download the SLES 9 Driverpackage from http://www.fsc-pc.de. Build a a320raid Image Disk and press the "alt"-Key, when booting from the first cd. Mit freundlichem Gruß, Dirk Laurenz Systems Engineer Fujitsu Siemens Computers S CE DE SE PS N/O Sales Central Europe Deutschland Professional Service Nord / Ost Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 (511) 84 89 - 18 08 Telefax: +49 (511) 84 89 - 25 18 08 Mobile: +49 (170) 22 10 781 Email: mailto:dirk.laurenz@fujitsu-siemens.com Internet: http://www.fujitsu-siemens.com http://www.fujitsu-siemens.de/services/index.html ******************************************************************************************************************* -| -----Original Message----- -| From: Angus Beath [mailto:abeath@gmail.com] -| Sent: Tuesday, February 22, 2005 4:58 AM -| To: suse-linux-e(a)suse.com -| Subject: [SLE] Installing SuSE 9.2 onto Adaptec HostRaid -| -| Hi guys, -| -| I'm trying to install 9.2 onto a hardware raid setup. The RAID -| controller is an Adaptec 39320A and I've got two 74GB SCSI -| disks in a -| RAID 1 setup. -| -| The problem is - SuSE doesn't even see the hard drives! I -| checked the -| modules loaded by the Kernel and it had what seemed to be the -| appropriate modules loaded. Whether they are properly -| configured or not -| is another questions. I've googled for an answer on this and haven't -| really found one - any gurus out there know how to do this? -| -| Regards, -| -| Angus Beath -| -| -| -- -| Check the headers for your unsubscription address -| For additional commands send e-mail to suse-linux-e-help(a)suse.com -| Also check the archives at http://lists.suse.com -| Please read the FAQs: suse-linux-e-faq(a)suse.com -| -|

1 0

POP3s running, but will not allow connections
by Keith 22 Feb '05

22 Feb '05

I'm running SuSE 9.1 Pro with all updates installed. Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Connection closed by foreign host. postfix/sendmail/pop3 all work 100% . Is there a configuration file I need to modify or something? FYI, I also have used a mail client with ssl support and the connection is refused. TNX

5 10