February 2005 - openSUSE Users - openSUSE Mailing Lists

internet time ?
by perlcgi2000 28 Feb '05

28 Feb '05

Is there a way to make my suse 9.1 machine update its time from the Internet ? Thanks, Digsy Send instant messages to your online friends http://uk.messenger.yahoo.com

5 6

Apache doesn;t restart
by John 28 Feb '05

28 Feb '05

Hello all I have recently installed apache 2.0.50 and its patches. (on Suse 9.2 Pro) The problem is that i cannot restart apache. If i make a configuration in a file (say /etc/apache2/vhosts.d/secure.conf) then it cannot "see" the changes i made to that file. However, if i make i "type" a mistake then apache warns me that the syntax is not ok. After that i run rcapache2 restart and the new configurations cannot be seen by apache. Do you know why this happening?

2 1

ltagere SUSE9.1 AMD issue
by Chadley Wilson 28 Feb '05

28 Feb '05

Greetings, I have a Lucent Agere modem in an AMD Sempron 2400+ system. I have installed the driver rpm from the SUSE9.1 discs, it on disc 5 slmodem.XXX.rpm When I querie the modem on /dev/ttyLT0 it responds, I then create a symbolic link to dev modem. I requerie it on dev modem and it responds. When I try dial it initializes the modem and the whole system hangs up while the modem tries to dial. Yet it doesn't even open the line. If I pickup the receiver while it claims its dialing I get a dial tone. Speaking of which I have also tried to disable detect dial tone. The funny thing is if I put the modem into a Intel machine also SUSE9.1 it works flawlessly. How would you suggest I start to trouble shoot this one? TIA Chadley

3 2

Postfix policy greylist package.
by Guillermo Ballester Valor 28 Feb '05

28 Feb '05

Hello, As a fruit of my battle with spammers, virus et al. I also implemented the greylist policy server in an rpm package form. The core, is a simple perl script wich is included in the postfix package docs and examples. The trick of greylist is first time a client tries to send an e-mail it is responded as 'Service Unavailable' if it were accepted, so actually is not distributed nor accepted. Next time the same client tries to send the same mail, greylist response is 'DUNNO' so the mail follows its normal process, and it can suffer other resrictions. The positive site is that most of spammers and virus will not try to send the mail a second time, where all the usual MTA will try to send again the same mail after few minutes. The astonish result is we kill the most part of undesired mail. The negative part is we introduce a small delay in mail delivery. To implement this policy into postfix 2.1.x, you need to install the package postfix-policyd-greylist you can get for SuSE 8.2, 9.0 and 9.2 here: ftp://ftp.gwdg.de/pub/linux/misc/suser-gbv/rpms And then add the line from /etc/postfix/master.cf: policy-greylist unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/smtpd-policy-greylist.pl in file '/etc/postfix/master.cf' and you also have to add the 'check_policy_service unix:private/policy-greylist' restriction in file '/etc/postfix/main.cf'. Tipically you should add it to 'smtpd_recipient_restrictions' list as is in the following lines smtpd_recipient_restrictions = ... reject_unknown_sender_domain reject_unauth_destination check_policy_service unix:private/policy-greylist ... NOTE: specify check_policy_service AFTER reject_unauth_destination or else your system can become an open relay. Once you've modified the files, you can load the new configuration with rcpostfix reload if you already had your postfix running. This greylist policy can run with SPF policy you can find in the same directory. Today I've also released a new SPF package release with some more docs. Hope this help you in the battle against undesired mail. Guillermo. -- Guillermo Ballester Valor gbv(a)oxixares.com Ogijares, Granada SPAIN Linux user #117181. See http://counter.li.org/ Public GPG KEY http://www.oxixares.com/~gbv/pubgpg.html

1 0

SPF plugin for postfix
by Guillermo Ballester Valor 28 Feb '05

28 Feb '05

Hello, Tired of my domain being spoofed by spammers, zombies and so on, I worked a bit to try to reduce this problem. IMHO the proper answer is, among other, SPF. To read more, you can visit Meng Wong site http://spf.pobox.com In this site you can find a wizard that helps you to create a TXT record you should put in your domain DNS server. SPF record is a plain DNS TXT record, with an easy special format. So, I created an SPF record for my site in my DNS server, (after changing this server because my registar didn't allow to set TXT records in its DNS server). Once done that, any mail server wich receives a mail FROM anyone@my_domain can check whether this mail is actually from my domain or it is lying. And now we arrive to the subject of the mail. The mail server (MTA) have to implement the SPF controls to take any advantage of this. The SPF developer (Meng Weng Wong) has made a Perl Module to make this functionality easy. Wietse Venema, the creator of postfix, recommends to implement this fuctionality by mean of policy access daemons, better to patch the postfix code itself. Meng also wrote the policy daemon for postfix. I packaged the needed perl modules and the policy daemon in several rpms. The SPF policy daemon is working great in my server without problems and stopping many spoofed mails :-). The postfix plugin package is named 'postfix-policyd-SPF'. It needs to install at least the package 'perl-Mail-SPF-Query' I also built. Some other perl modules may be needed, I built the ones that are not in SuSE distribution or outdated. I did it for SuSE 8.2, 9.0 and 9.2. I have not any 9.1 development system available, sorry. Once instaled, to make the SPF policy working, you only need to include three lines in the postfix configuration files and reload, as explained below in the file README_SPF.SUSE I wrote for the package. You can download them from: ftp://ftp.gwdg.de/pub/linux/misc/suser-gbv/rpms apt users can get it from suser-gbv component. Remember I build the packages with the aim of help, I'm not from SuSE, no guaranties :-). And this is the readme file ----- This documentation assumes you have read Postfix's README_FILES/SMTPD_POLICY_README file To run this from postfix, add the line from /etc/postfix/master.cf: policy unix - n n - - spawn user=nobody argv=/usr/bin/perl /usr/lib/postfix/smtpd-policy-spf.pl in file '/etc/postfix/master.cf' and you also have to add the 'check_policy_service unix:private/policy' restriction in file '/etc/postfix/main.cf'. Tipically you should add it to 'smtpd_recipient_restrictions' list as is in the following lines smtpd_recipient_restrictions = ... reject_unknown_sender_domain reject_unauth_destination check_policy_service unix:private/policy ... NOTE: specify check_policy_service AFTER reject_unauth_destination or else your system can become an open relay. Once you've modified the files, you can reload the new configuration with rcpostfix reload if you already had your postfix running. ----- Guillermo. -- Guillermo Ballester Valor (gbv) Ogijares, Granada SPAIN http://www.oxixares.com/~gbv/ Linux user #117181. See http://counter.li.org/ Public GPG KEY http://www.oxixares.com/~gbv/pubgpg.html

1 1

Re: [SLE] Samba setup
by Mike Dewhirst 28 Feb '05

28 Feb '05

David At 05:15 pm 26/02/2005, david rankin wrote: > it is a piece of cake. I'm finding it a piece of rock-cake. My brain is bruised. >My office has run on it since 2000. Just like anything else, you have to >make friends with it, but it is relatively painless. Maybe I need a chemical enhancer - a stiff single malt or three :( >After you set it up, it is bulletproof. That will keep me going :) >See www.samba.org for docs and setup. No magic, just follow the steps........ OK - I can see the samba server from both my Win XP machines and I can see both Win XP machines from SuSE. BUT none of them let me login anywhere. They all put up a login prompt OK - but all of them deny access. I did create a new user mdewhirst on every machine including the Novell server and all have the same password - different than root on SuSE. I just restarted my SuSE box to see if that would help and now it won't let me put in a password. So I'm stumped. I can tab the cursor into the password field for either root or mdewhirst but it won't accept any password characters. Any ideas? Apart from looking for a bottle .... yet TIA Mike

5 6

DVD on hard disk
by Mirko Perak 28 Feb '05

28 Feb '05

HI, What should I do to perform installation of applications from hard disk? Of cours to copy DVD to HDD, but like ISO image or just to copy content? YaST refusing to install apps. I`ve changed source of installation to HDD but YaST asking for DVD anyway. -- Mirko

3 2

NFS setup problem
by James Hatridge 28 Feb '05

28 Feb '05

Hi all... I'm trying to get NFS working between two systems, both run 9.2. I can ping to and from both systems and ssh works for both. BUT when I use yast to setup a client on either machine it can not find the other's server. On both systems I have setup (using yast) the NFS server and made sure that it is on in the run level editor. BUT when I reboot either system, it always says that its skipped NFS. I have tried turning off the firewall, I've tried turning it on, I've tried configuring it. Nothing works. Any ideas? TIA JIM -- Jim Hatridge Linux User #88484 ------------------------------------------------------ WartHog Bulletin Info about new German Stamps http://www.fuzzybunnymilitia.org/~hatridge/bulletin/index.php Viel Feind -- Viel Ehr' Anti-US Propaganda stamp collection http://www.fuzzybunnymilitia.org/~hatridge/collection/index.php

4 5

Portal and CMS recommendations
by Togan Muftuoglu 27 Feb '05

27 Feb '05

Hi, I am in need of selecting a Portal and CMS( content management system). I have found quite a bit of them and as a result I need some recommendations. 1) Ease of install : It would be great if rpms for SUSE were available. Should not need to install packages that are not in the SUSE DVD. That way I do not need to track bugreports for lots of tiny small packages 2) Ease of management: For the System administrator it would be highly beneficial if click and go style management interface was available. I currently do not have any ideas on the experience of system admin so it should be something with the KISS principle :-) 3) Content update: The software would be used by adult learners. It should be fairly easy to add documents and update the content. It should work flawlessly with Internet Explorer allowing documents to be uploaded via browser. No need of knowing HTML or else should be needed. It should be like a simple text editor so users can use it without learning something new. 4) Search facilities: It should be able search the documents base 5) Forums, maillinglist, RSS/RDF, polls, calender of events should be available. ( these are the minimum other possibilities are welcomed) 6) It should be as secure as possible and in stable status with continuing development. No need to say that it should be in Open Source License I would very much appreciate if you can recommend packages along with your comments what made you choose that particular one Thanks in advance -- Togan Muftuoglu | Unofficial SUSE FAQ Maintainer | Please reply to the list; http://susefaq.sf.net | Please don't put me in TO/CC. Nisi defectum, haud refiecendum

9 10

Problems with susefirewall2
by Stephen Furlong 27 Feb '05

27 Feb '05

Hi y'all, Im running suse9.2 on my server box connected via wireless to my desktop machine. Im trying to poke through certain ports from my suse box onto my desktop machine. When I use the firewall wizard in yast and use the "expert options" to open the ports (4000:4200) shields up! Lists them as "closed". When I run the command iptables -t nat -A PREROUTING -i $OUTIF -p tcp --dport 1000:1010 -j DNAT --to 193.168.0.2 iptables -A INPUT -i $OUTIF -d 0/0 -p tcp --dport 22 -j ACCEPT where $OUTIF is the the outside interface and where 193.168.0.2 is the address of my desktop machine, suse closes them off. Any ideas? If you want my iptables-L dump I can post that :-) djXtreme (newbie)

4 11