July 2007 - openSUSE Users - openSUSE Mailing Lists

[opensuse] dictionary attacks
by Richard Creighton 30 Jul '07

30 Jul '07

Just about every day, often several times a day, my logs include hours of log entries that look like this: Jul 16 00:35:25 raid5 sshd[6966]: Invalid user admin from 83.18.244.42 Jul 16 00:35:30 raid5 sshd[6968]: Invalid user admin from 83.18.244.42 Jul 16 00:35:35 raid5 sshd[6972]: Invalid user admin from 83.18.244.42 Jul 16 00:35:40 raid5 sshd[6974]: Invalid user admin from 83.18.244.42 Jul 16 00:35:56 raid5 sshd[6981]: Invalid user test from 83.18.244.42 Jul 16 00:36:01 raid5 sshd[6983]: Invalid user test from 83.18.244.42 Jul 16 00:36:06 raid5 sshd[6985]: Invalid user webmaster from 83.18.244.42 Jul 16 00:36:11 raid5 sshd[6987]: Invalid user username from 83.18.244.42 Jul 16 00:36:16 raid5 sshd[6989]: Invalid user user from 83.18.244.42 Jul 16 00:36:26 raid5 sshd[6994]: Invalid user admin from 83.18.244.42 Jul 16 00:36:31 raid5 sshd[6996]: Invalid user test from 83.18.244.42 Jul 16 00:36:51 raid5 sshd[7017]: Invalid user danny from 83.18.244.42 Jul 16 00:36:56 raid5 sshd[7019]: Invalid user alex from 83.18.244.42 Jul 16 00:37:01 raid5 sshd[7022]: Invalid user brett from 83.18.244.42 Jul 16 00:37:06 raid5 sshd[7024]: Invalid user mike from 83.18.244.42 Jul 16 00:37:12 raid5 sshd[7027]: Invalid user alan from 83.18.244.42 Jul 16 00:37:18 raid5 sshd[7029]: Invalid user data from 83.18.244.42 Jul 16 00:37:22 raid5 sshd[7031]: Invalid user www-data from 83.18.244.42 Jul 16 00:37:28 raid5 sshd[7033]: Invalid user http from 83.18.244.42 Jul 16 00:37:33 raid5 sshd[7037]: Invalid user httpd from 83.18.244.42 Jul 16 00:37:38 raid5 sshd[7040]: Invalid user pop from 83.18.244.42 ..... and so on, ad nausium. Obviously, someone is trying to break in to my system via SSH. So far as I can tell from examining my logs and my systems (usually at least 4 other systems on my LAN are under simultaneous attacks from the same source(s), the daemon is successsfully withstanding the assault and the system is not compromised. My question is what, if any firewall rule could I write that could detect such attacks and automatically shut down forwarding packets from the offending node or domain? That would give me an additional layer of defense as well as freeing up a significant amount of log file space. Thanks in advance, Richard -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

19 51

[opensuse] NO kernel sources in KOTD
by Michael Riess 30 Jul '07

30 Jul '07

hi kernel-repo-build gurus, the newer rpms in Kernel:/HEAD/openSUSE_Factory are completely without sources and Kernel:/HEAD/openSUSE_Factory/src is a version mix -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] NetworkManager: DHCP transaction took too long (>45s), stopping it.
by Oscar Curero 30 Jul '07

30 Jul '07

Hi, I own a T60 Thinkpad with a Intel PRO/Wireless 3945ABG under Opensuse 10.2. The card is succesfully detected and works fine under WinXP. My network: ESSID: Hidden (flores) 802.11 mode: Mixed Channel: 06 2437MHz WEP Encryption: 128 bit WEP Key1: Key2: Key3: Key4: 121212317???? When connecting to this AP from camelia (the client), the dhcp daemon fails because there's no response. If I disable the WEP security in the AP config, I can connect without problems. I don't know if the problem is in the dhcp part or in the security part (i'm using the kde frontend, if that matters). This is the relevant log: Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) scheduled... Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) started... Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 2 of 5 (Device Configure) scheduled... Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) complete. Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 2 of 5 (Device Configure) starting... Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1/wireless): access point 'flores' is encrypted, and a key exists. No new key needed. Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'INTERFACE_ADD eth1 wext /var/run/wpa_supplicant ' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'AP_SCAN 1' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'ADD_NETWORK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was '0' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'SET_NETWORK 0 ssid 666c6f726573' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'SET_NETWORK 0 scan_ssid 1' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'SET_NETWORK 0 key_mgmt NONE' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'SET_NETWORK 0 wep_key0 <key>' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'SET_NETWORK 0 wep_tx_keyidx 0' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: sending command 'ENABLE_NETWORK 0' Jul 29 23:08:32 camelia NetworkManager: <info> SUP: response was 'OK' Jul 29 23:08:32 camelia NetworkManager: <info> Activation (eth1) Stage 2 of 5 (Device Configure) complete. Jul 29 23:08:35 camelia NetworkManager: <info> Activation (eth1/wireless) Stage 2 of 5 (Device Configure) successful. Connected to access p oint 'flores'. Jul 29 23:08:35 camelia NetworkManager: <info> Activation (eth1) Stage 3 of 5 (IP Configure Start) scheduled. Jul 29 23:08:35 camelia NetworkManager: <info> Activation (eth1) Stage 3 of 5 (IP Configure Start) started... Jul 29 23:08:36 camelia NetworkManager: <info> Activation (eth1) Beginning DHCP transaction. Jul 29 23:08:36 camelia NetworkManager: <info> Activation (eth1) Stage 3 of 5 (IP Configure Start) complete. Jul 29 23:08:36 camelia NetworkManager: <info> DHCP daemon state is now 12 (successfully started) for interface eth1 Jul 29 23:08:37 camelia NetworkManager: <info> DHCP daemon state is now 1 (starting) for interface eth1 Jul 29 23:09:21 camelia NetworkManager: <info> Device 'eth1' DHCP transaction took too long (>45s), stopping it. Jul 29 23:09:22 camelia NetworkManager: <info> Activation (eth1) Stage 4 of 5 (IP Configure Timeout) scheduled... Jul 29 23:09:22 camelia NetworkManager: <info> DHCP daemon state is now 14 (normal exit) for interface eth1 Jul 29 23:09:22 camelia NetworkManager: <info> DHCP daemon state is now 11 (unknown) for interface eth1 Jul 29 23:09:22 camelia NetworkManager: <info> DHCP daemon state is now 14 (normal exit) for interface eth1 Jul 29 23:09:22 camelia NetworkManager: <info> Activation (eth1) Stage 4 of 5 (IP Configure Timeout) started... Jul 29 23:09:22 camelia NetworkManager: <debug> [1185743362.978182] real_act_stage4_ip_config_timeout(): Activation (eth1/wireless): could no t get IP configuration info for 'flores', asking for new key. Jul 29 23:09:22 camelia NetworkManager: <info> Activation (eth1) New wireless user key requested for network 'flores'. Jul 29 23:09:22 camelia NetworkManager: <info> Activation (eth1) Stage 4 of 5 (IP Configure Timeout) complete. Thanks in advance! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

Re: [opensuse] Re: Baby Shower for Silvia and Zahari's baby
by Sunny 30 Jul '07

30 Jul '07

On 7/30/07, Patrick Shanahan <ptilopteri(a)gmail.com> wrote: > > You would really be aiding all and presenting a courteous nature if > you would translate non-english language posts you respond for those > of us who are linguistically deficient :^) > I really have no idea how pressing reply in gmail did send this to opensuse list. sorry for the noise, my mistake. Cheers P.S. Now I see how it happen - I use this address mostly for this list, and my habit is once I hit reply, to change the TO: field to opensuse :) Sorry again for the mistake. -- Svetoslav Milenov (Sunny) Even the most advanced equipment in the hands of the ignorant is just a pile of scrap. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] k3b cue bin files
by primm 30 Jul '07

30 Jul '07

I have a .cue file and a large .bin file of 806Mb How do I burn this onto a blank DVD using K3b? BTW the combination plays fine in vlc. I just want it playable on my home video machine. Things I've tried: I've tried new video dvd project dropping the cue file into the VIDEO_TS folder but I get the error 'not all fules available to burn' owtte. I've tried as a data dvd burning the cue and bin directly but it won't play in my domestic player. I've tried bchunk but get two iso files both les than 8Mb so something is wrong there too. Endless google. Any ideas? cheers. steve. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 6

[opensuse] Re: Baby Shower for Silvia and Zahari's baby
by Sunny 30 Jul '07

30 Jul '07

On 7/30/07, Maria M Totev <mmtotev(a)ra.rockwell.com> wrote: > Silvia ne e registrirana nikade, no predpolagam 4e vsi4ki vie znaete ot > kakvo ima nujda v edno semeisvo s novo bebe. > Bi bilo po-dobre da se registrira, shtoto vseki znae, ama na neia ne i triabvat 3 kolichki i 4 prohodilki primerno. -- Svetoslav Milenov (Sunny) Even the most advanced equipment in the hands of the ignorant is just a pile of scrap. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Request for creating ntfs-config package.
by Krupanský Rastislav 30 Jul '07

30 Jul '07

Hello. I don´t know who and how creates packages for http://download.opensuse.org/repositories/filesystems/ repo. And i don´t have any experience with creating of packages, so i´d like to ask for favour, whether someone would be able to created a package ntfs-config (from http://flomertens.free.fr/ntfs-config/).Of course, if it is possible. I think it is very good tool for ntfs-3g driver. Thanks. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

Re: [opensuse] opensuse.org site updates
by jpff 30 Jul '07

30 Jul '07

I thought that the substantial problem was why some of us have the Novel line cut off, and remains cutoff as it is resized. Only tried on Seamonkey so far ==John ffitch -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Networking problems
by Willem Grooters 30 Jul '07

30 Jul '07

SUSE 10.1, 10.2, fresh install, on Compaq EVO 600 (laptop). In my network, I have a DHCP server that supplies all non-server systems (Windows XP, Linux) with IP information: IP address, DNS servers, default gateway, Internet domain etc). The client will supply the nodename. No problem for the XP machines, but SUSE seems to have a problem. NOTHING is returned as it seems, the IP address of the NIC is an address as if it was a non-connected Windows machine, NO DNS servers, NO default gateway and No domain information - these are all zeroed/blanked. NO error message. It's NOT the network itself, because if the NIC is confugured by hand (static data) everthing works as intended, but I consider thsi inappropiate. I looked in the mailing list and documentation but could not find an anser on the issue. How do I force this machine to act (in this matter) as a Windows box? Willem -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 4

[opensuse] USB Camera and SuSE 9.2
by Ruben Safir 30 Jul '07

30 Jul '07

Does anyone know why my Sony Cybershot Camera seems to not be able to find a superblock on the FATS filesystem and get IO buffer problems on SuSE Linux 9.2 (i586). If I keep turning the camera on and off it seems to 'catch' but it works flawlessly on other SuSE boxes in the house. Ruben -- http://www.mrbrklyn.com - Interesting Stuff http://www.nylxs.com - Leadership Development in Free Software So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://fairuse.nylxs.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 "Yeah - I write Free Software...so SUE ME" "The tremendous problem we face is that we are becoming sharecroppers to our own cultural heritage -- we need the ability to participate in our own society." "> I'm an engineer. I choose the best tool for the job, politics be damned.< You must be a stupid engineer then, because politcs and technology have been attacted at the hip since the 1st dynasty in Ancient Egypt. I guess you missed that one." © Copyright for the Digital Millennium -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0