September 2006 - openSUSE Users - openSUSE Mailing Lists

[opensuse] openSUSE 10.1 - Probably a bug within netfilter/iptables
by 1977-Hamlet＠gmx.at 29 Sep '06

29 Sep '06

Hi everyone! I've got an openSUSE 10.1 up and running. Kernel (uname -srvmpio): ------------------------ Linux 2.6.16.21-0.25-default #1 Tue Sep 19 07:26:15 UTC 2006 i686 athlon i386 GNU/Linux iptables --version: ------------------- iptables v1.3.5 Now I want the system to do some redirection of IP traffic. Redirection of IP traffice from port 80 to 8080 works. Everything else seems not to work. I have the following "/etc/sysconfig/SuSEfirewall2": ---------------------------------------------------- <NOTE_1: This SuSEfirewall2 is based on an original for SuSE 9.2.> <NOTE_2: Of course I do have real MAC adresses there.> FW_DEV_EXT="eth-id-XX:XX:XX:XX:XX:XX" FW_DEV_INT="eth-id-XX:XX:XX:XX:XX:XX" FW_MASQ_NETS="\ 192.168.1.0/24,0/0,tcp,53 \ 192.168.1.0/24,0/0,udp,53 \ 192.168.1.0/24,0/0,tcp,80 \ 192.168.1.0/24,0/0,tcp,443 \ 192.168.1.0/24,0/0,tcp,3048 \ 192.168.1.0/24,0/0,udp,3048 \ " FW_SERVICES_EXT_TCP="44424" FW_SERVICES_EXT_UDP="" FW_SERVICES_INT_TCP="21 22 25 110 1812 8443 6666 8080 44424" FW_SERVICES_INT_UDP="" FW_FORWARD_MASQ="" FW_REDIRECT="\ 192.168.1.0/24,0/0,tcp,80,8080 \ 192.168.1.0/24,0/0,tcp,25,25 \ 192.168.1.0/24,0/0,tcp,21,21 \ 192.168.1.0/24,0/0,tcp,110,110 \ " FW_QUICKMODE="no" FW_DEV_DMZ="" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_MASQ_DEV="$FW_DEV_EXT" FW_PROTECT_FROM_INTERNAL="yes" FW_AUTOPROTECT_SERVICES="yes" FW_SERVICES_EXT_IP="" FW_SERVICES_EXT_RPC="" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_DMZ_RPC="" FW_SERVICES_INT_IP="" FW_SERVICES_INT_RPC="" FW_SERVICES_DROP_EXT="" FW_SERVICES_REJECT_EXT="" FW_SERVICES_QUICK_TCP="" FW_SERVICES_QUICK_UDP="" FW_SERVICES_QUICK_IP="" FW_TRUSTED_NETS="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="" FW_ALLOW_INCOMING_HIGHPORTS_UDP="" FW_FORWARD="" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="yes" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="yes" FW_LOG_LIMIT="" FW_LOG="" FW_KERNEL_SECURITY="yes" FW_ANTISPOOF="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="no" FW_ALLOW_PING_EXT="yes" FW_ALLOW_FW_TRACEROUTE="yes" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_ALLOW_FW_BROADCAST="no" FW_ALLOW_CLASS_ROUTING="no" FW_CUSTOMRULES="" FW_REJECT="no" FW_HTB_TUNE_DEV="" FW_IPv6="" FW_IPv6_REJECT_OUTGOING="no" FW_IPSEC_TRUST="no" FW_PROTECT_FROM_INT="no" FW_FORWARD_ALWAYS_INOUT_DEV="" FW_ALLOW_FW_BROADCAST_EXT="" FW_ALLOW_FW_BROADCAST_INT="" FW_ALLOW_FW_BROADCAST_DMZ="" FW_IGNORE_FW_BROADCAST_EXT="yes" FW_IGNORE_FW_BROADCAST_INT="no" FW_IGNORE_FW_BROADCAST_DMZ="no" For whatever reason, the redirect of port 80 to port 8080 works fine. But the other redirects seem to don't work. I've tried a telnet from a machine with IP 192.168.1.3 to www.gmx.at port 25 ("telnet www.gmx.at 25") and the machine simply tries to connect to 213.165.64.215. Of course without success because that is no SMTP server. If I try the same telnet (www.gmx.at) with port 80, it works as expected. It gets redirected to a virus scanner which acts as a proxy. Later on I tried some DNAT to check the whole netfilter/iptables stuff. I simply stopped the susefirewall2 and tried the following: <--- Script starts here ---> #! /bin/bash #################### # # # IP tables leeren # # # #################### iptables -t mangle --flush PREROUTING iptables -t mangle --flush POSTROUTING iptables -t nat --flush INPUT iptables -t nat --flush OUTPUT iptables -t nat --flush FORWARD iptables -t filter --flush INPUT iptables -t filter --flush OUTPUT iptables -t filter --flush FORWARD #################### # # # IP Weiterleitung # # # #################### # Weiterleitung aktivieren echo 1 > /proc/sys/net/ipv4/ip_forward # Protocoll TCP iptables -t filter --append FORWARD --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 -j ACCEPT iptables -t nat --append POSTROUTING --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 -j SNAT --to-source 10.0.0.10 # Protocol UDP iptables -t filter --append FORWARD --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 -j ACCEPT iptables -t nat --append POSTROUTING --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 -j SNAT --to-source 10.0.0.10 ############ # # # REDIRECT # # # ############ # Protocoll TCP iptables -t nat --append PREROUTING --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 80 -j REDIRECT --to-ports 8080 iptables -t nat --append PREROUTING --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 21 -j REDIRECT --to-ports 21 iptables -t nat --append PREROUTING --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 110 -j REDIRECT --to-ports 110 # Protocol UDP iptables -t nat --append PREROUTING --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 80 -j REDIRECT --to-ports 8080 iptables -t nat --append PREROUTING --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 21 -j REDIRECT --to-ports 21 iptables -t nat --append PREROUTING --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 110 -j REDIRECT --to-ports 110 ######## # # # DNAT # # # ######## # Protocoll TCP iptables -t nat --append PREROUTING --protocol tcp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 25 -j DNAT --to-destination 192.168.1.3:25 # Protocol UDP iptables -t nat --append PREROUTING --protocol udp --source 192.168.1.0/24 --destination ! 192.168.1.0/24 \ --dport 25 -j DNAT --to-destination 192.168.1.3:25 <--- Script ends here ---> Just the same result. Redirection for port 80 works but not for any of the other ports. Even the DNAT didn't work. Normaly I would expact the IP packets to go from my 192.168.1.3 to my 192.168.1.254 (Gateway) and back to 192.168.1.3 port 25. Any help welcome. Kind regards, Leonhard. -- GMX DSL-Flatrate 0,- Euro* - Überall, wo DSL verfügbar ist! NEU: Jetzt bis zu 16.000 kBit/s! http://www.gmx.net/de/go/dsl --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

SoundBlaster X-Fi Xtreme on SUSE10.1
by Jose Thadeu Cavalcante 29 Sep '06

29 Sep '06

Hi, A friend install SUSE 10.1, your first linux installation, in a computer (DELL Computer) having Creative SoundBlaster X-Fi Xtreme. During the hardware setup a sound card is recognize as not configured, after clicking the label to configure it no more sound card is showed in the card list. There is a chance to install such card in SUSE? If yes, how can I proceed? Thank you Thadeu

2 1

evolution: please hold my email for a while!
by 张韡武 29 Sep '06

29 Sep '06

Hello. I am pretty used to Outlook Express with a good feature (or, I call it a good feature) that when I send an email, the email is not directly going out, it stay in the local out-going-email folder for a while, giving me time to think about it or cancel it. I am spoiled. Now I often press 'send' button, and go on working, two minutes later I suddenly start to think the email has a wrong digit or sent to the wrong person, or one more person should be 'cc'ed. But it's too late, the email is already gone. I am spoiled by Outlook Express that I have the chance to further work on the email even after I sent it. I know it's so much better to be able to think carefully before I send it, for me what I need is the same feature (delay email for 10 minutes, or only send email at round clock) for evolution. I checked all the preferences settings, I didn't find such setting. Is this feature missing or is it hidden? -- 锐业软服（国内业务） http://www.realss.cn Real SoftService http://www.realss.com 销售咨询(Sales Department): 0086 592 20 99987 (Chinese, German, English) 国际业务(International Sales): 0086 10 8460 6011 (German and English) 联系：厦门大学科技园，嘉庚二号楼6楼邮政：厦门大学2312号信箱（邮编361005）

6 6

Re: [SLE] Where's the Wiki, or the FAQ?
by PerfectReign 29 Sep '06

29 Sep '06

On Thu, September 28, 2006 12:42 pm, Felix Miata wrote: > If there's one thing that makes this list different from most mailing lists, it's the absence complete help links at the bottom of each list post. <snip> I can't answer to that. The FAQ would, I imagine, be more list-oriented than distro-oriented. There are many articles and how-to's on opensuse.org as well as various articles at novell.com > > I installed 10.0 from the box DVD. I would have thought this type of KDE > install would automatically give me access to common standard file types. I was obviously assuming to much. Playing devil's advocate, you realize SUSE does pretty much support "common standard file types" as listed here (http://www.fileinfo.net/common.php) and other search engines. There are some it doesn't support, but then one could make the claim that Wintendo doesn't support .dgw, .123 or .bin files out of the box, either. Your frustration probably is with the encoder of the .mpg file. Keep in mind that most motion picture extensions - .mpg/.avi/.mov - are simply container files. For any one of them, you need a CODEC to actually play the movie. Because everyone and her sister has a different idea what a CODEC should be, there is zero standardization. Also, because everyone just LOVES sleezeballs - I mean, Lawyers - no one except for the Borg wants to ship these CODEC files. Here's how to get them installed: http://www.tweakhound.com/linux/suse/101/installing_1.htm You want to upgrade the supplied versions of your software with: Amarok, amarok-xine, flash-player, k3b (upgrade it and add k3b-mad), kaffeine, lame, MPlayer, RealPlayer, xine-ui, xmms. Then you will be able to play pretty much every multimedia file out there. GSM excepted. Okay, now back to my discovery work. The depositon is due on Friday at 5:00.... ...did I say I don't like lawyers? -- Kai Ponte www.perfectreign.com || www.4thedadz.com remember - a turn signal is a statement, not a request -- Kai Ponte www.perfectreign.com || www.4thedadz.com remember - a turn signal is a statement, not a request

4 3

[opensuse] I can't burn DVDs in 10.1
by Carlos E. R. 29 Sep '06

29 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have an image file that I want to burn to a dvd using a procedure that worked with this machine when it had SuSE 9.3, but not now. K3b complains when I start it with: cdrecord = 2.6.8 <-- in red color Since Linux kernel 2.6.8 cdrecord Solution: Use K3bSetup to solve this problem. Notice that the message doesn't really says what is the problem, and that there is no K3bSetup program. Anyhow, I'm not interested in k3b at the moment, the problem is somewhere else, read ahead. I try the command line - a command line known to work previously in this machine: nimrodel:~ # time growisofs -Z /dev/hdc=/file3 -speed=4 Executing 'builtin_dd if=/file3 of=/dev/hdc obs=32k seek=0' /dev/hdc: "Current Write Speed" is 4.1x1385KBps. 1114112/4699717632 ( 0.0%) @0.0x, remaining 351:26 RBU 100.0% 1114112/4699717632 ( 0.0%) @0.0x, remaining 562:18 RBU 100.0% 1114112/4699717632 ( 0.0%) @0.0x, remaining 773:10 RBU 100.0% ... 4676747264/4699717632 (99.5%) @1.1x, remaining 0:09 RBU 68.5% 4693065728/4699717632 (99.9%) @3.4x, remaining 0:02 RBU 19.8% builtin_dd: 2294784*2KB out @ average 1.7x1385KBps /dev/hdc: flushing cache :-[ SYNCHRONOUS FLUSH CACHE failed with SK=3h/ASC=A0h/ACQ=80h]: Input/output error real 33m12.927s user 0m1.512s sys 0m19.525s I can not mount it (fstab is irrelevant, it is a read error, see later): nimrodel:~ # mount /mnt/dvd.crypta2/ Password: mount: wrong fs type, bad option, bad superblock on /dev/loop4, missing codepage or other error In some cases useful info is found in syslog - try dmesg | tail or so (the image is encrypted, but that is irrelevant for the problem) And kernel log shows the error: Sep 27 01:41:35 nimrodel kernel: hdc: media error (bad sector): status=0x51 { DriveReady SeekComplete Error } Sep 27 01:41:35 nimrodel kernel: hdc: media error (bad sector): error=0x34 { AbortedCommand LastFailedSense=0x03 } Sep 27 01:41:35 nimrodel kernel: ide: failed opcode was: unknown Sep 27 01:41:35 nimrodel kernel: end_request: I/O error, dev hdc, sector 0 Sep 27 01:41:35 nimrodel kernel: Buffer I/O error on device hdc, logical block 0 Sep 27 01:41:42 nimrodel kernel: hdc: media error (bad sector): status=0x51 { DriveReady SeekComplete Error } Sep 27 01:41:42 nimrodel kernel: hdc: media error (bad sector): error=0x34 { AbortedCommand LastFailedSense=0x03 } Sep 27 01:41:42 nimrodel kernel: ide: failed opcode was: unknown Sep 27 01:41:42 nimrodel kernel: end_request: I/O error, dev hdc, sector 0 Sep 27 01:41:42 nimrodel kernel: Buffer I/O error on device hdc, logical block 0 Sep 27 01:41:42 nimrodel kernel: EXT3-fs: unable to read superblock If I try to read back the disk: nimrodel:/biggy # time nice dd if=/dev/hdc of=cdimage dd: reading `/dev/hdc': Input/output error 0+0 records in 0+0 records out 0 bytes (0 B) copied, 13.8115 seconds, 0.0 kB/s real 0m13.905s user 0m0.000s sys 0m0.008s And the kernel log shows: Sep 27 02:48:47 nimrodel kernel: hdc: media error (bad sector): status=0x51 { DriveReady SeekComplete Error } Sep 27 02:48:47 nimrodel kernel: hdc: media error (bad sector): error=0x34 { AbortedCommand LastFailedSense=0x03 } Sep 27 02:48:47 nimrodel kernel: ide: failed opcode was: unknown Sep 27 02:48:47 nimrodel kernel: end_request: I/O error, dev hdc, sector 0 Sep 27 02:48:47 nimrodel kernel: Buffer I/O error on device hdc, logical block 0 Sep 27 02:48:53 nimrodel kernel: hdc: media error (bad sector): status=0x51 { DriveReady SeekComplete Error } Sep 27 02:48:53 nimrodel kernel: hdc: media error (bad sector): error=0x34 { AbortedCommand LastFailedSense=0x03 } Sep 27 02:48:53 nimrodel kernel: ide: failed opcode was: unknown Sep 27 02:48:53 nimrodel kernel: end_request: I/O error, dev hdc, sector 0 Sep 27 02:48:53 nimrodel kernel: Buffer I/O error on device hdc, logical block 0 The above was using TDK DVD+R Media, 4.7Gb 1*16 speed, a box I bought today. I have three new tea dishes :-/ I then tried with Emtec DVD-R 8x media, that I had used previously - in fact, the SuSE 10.1 dvd was burnt in one of them using SuSE 9.3. Again, no go: nimrodel:~ # time growisofs -Z /dev/hdc=/biggy/crypta.bck.file3 -speed=4 Executing 'builtin_dd if=/biggy/crypta.bck.file3 of=/dev/hdc obs=32k seek=0' /dev/hdc: "Current Write Speed" is 4.1x1385KBps. 0/4699717632 ( 0.0%) @0x, remaining ??:?? RBU 100.0% 0/4699717632 ( 0.0%) @0x, remaining ??:?? RBU 100.0% 0/4699717632 ( 0.0%) @0x, remaining ??:?? RBU 100.0% 0/4699717632 ( 0.0%) @0x, remaining ??:?? RBU 100.0% 0/4699717632 ( 0.0%) @0x, remaining ??:?? RBU 100.0% :-[ WRITE@LBA=10h failed with SK=3h/ASC=02h/ACQ=00h]: Input/output error :-( write failed: Input/output error /dev/hdc: flushing cache :-[ SYNCHRONOUS FLUSH CACHE failed with SK=3h/ASC=A0h/ACQ=80h]: Input/output error real 1m16.412s user 0m0.004s sys 0m0.128s Again, I got three new tea dishes with a hole in the middle :-/ What on earth is the matter? The only thing different is that now it is SuSE 10.1. :-(( Shall I have to reinstall 9.3 in a partition in order to burn dvds? :-/ - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFFGkH8tTMYHG2NR9URAtg4AJwMOer/cdU4uzRR5b/0nJn/3534cgCbBBE/ tKWWbGzA6LCHRkvH4nHs2g8= =X7TB -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 11

Moving text from Emacs to KDE
by Paul Abrahams 28 Sep '06

28 Sep '06

The KDE applications are nicely integrated with respect to text movement: you can copy text from one application and paste it into another one. The same holds true within Emacs. But is there a way to copy text from an Emacs buffer and paste it into a KDE application? If I do an ordinary copy in Emacs and a paste in KDE, the paste doesn't see the Emacs text at all. I know of one way but it's not very elegant: highlight the Emacs area with the mouse and then paste it with the middle mouse button. I'd much rather do it with an Emacs command if that's possible. I think I once found such a command, but I don't remember what it is. Paul

3 3

loop devices run out
by Trenton Carr 28 Sep '06

28 Sep '06

Hello all, On suse10.0 I use to mount dvd ISO's with, mount -o loop '/what(1)' '/where' and point MPlayer to the right place. If I needed to chance a dvd I just did a new mount -o loop '/what(2)' '/where' and the new movie will play no problem. I do the same in 10.1 but the movie does not change. A couple more mount commands, 8 in total, and a error pops up about no more loop devices. The loop(name escapes me now) command shows /dev/loop0-7 all full, -d complains about device busy although I did unmount the iso's. Mplayer only plays the dvd mounted on /dev/loop0 Any help getting the previous effect or how to set other loop device, ie /dev/loop1-7 to my dvd mount point? Kind Regards Trenton -- Changing the face of mathematics. Master Maths George Postnet Suite #109 Private Bag X6590 George 6529 South Africa +27(0)82 871 6125

4 5

[opensuse] Howto enable mpg ou wmv files on 10.1
by Joao Paulo Pires 28 Sep '06

28 Sep '06

Hi, How can I enable mpg or wmv files on 10.1 ? With libdvdcss ? Theora or XviD can READ that files ? Best regards, Joao.

4 4

Evolution floats? Or rather, won't sync...
by Simon Roberts 28 Sep '06

28 Sep '06

Hi all, I'm trying to get Evolution to talk to my palm pilot. I'm using Suse 10.1, and I find that when I tell the palm to sync, the /dev/pilot device does appear but Evolution ignores it... I've told Evolution that it's using /dev/pilot and that it's USB, but to no avail. Any suggestions? TIA Simon "You can tell whether a man is clever by his answers. You can tell whether a man is wise by his questions." Naguib Mahfouz __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

some yast modules broken
by Trenton Carr 28 Sep '06

28 Sep '06

Hello all After a online update some yast modules ie: bootloader, does not load, neither the console or the gui work. Tried to reload the specific yast modules but this does not fix. Is this a known problem? Is there a fix? Kind regards Trenton -- Changing the face of mathematics. Master Maths George Postnet Suite #109 Private Bag X6590 George 6529 South Africa +27(0)82 871 6125

1 0