July 2007 - openSUSE Users - openSUSE Mailing Lists

[opensuse] opensuse-bugs email limit?
by Hylton Conacher (ZR1HPC) 29 Jul '07

29 Jul '07

Hi, I am subscribed to opensuse-bugs(a)opensuse.org after raising an enhancement request(293100). This item is still open and whilst I am waiting for it to be worked on, I am receiving notice on all new bugs founds as well as when each bug is commented on ie close on 250-> a day I have browsed the help sent via email but so far this does not answer my question. Does anyone know how to limit the number of emails received from the bugs list to those on your own bugs only? Tnx Hylton -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 5

[opensuse] DNS Error Log - Solved
by Richard Creighton 29 Jul '07

29 Jul '07

If you run a DNS server on your system you probably have been plagued with external sites trying to forward queries through your DNS server. Even though you probably have told your named.conf to allow-query {"localnets";}; or a list of valid IP's you probably still have a bunch of unnecessary probing that adds to your bandwidth consumption even if you reject the queries and send 'refused' packets back, it ties up your line. I got tired of literally hundreds, sometimes thoussands of such queries which I considered a form of attack and thought that "fail2ban" could be a solution. I know about as much about writing filters as I do about the differance between my posterior and a hole in the ground, but a fellow fail2ban list member took pity on me and in private E-mail, helped me develop a filter we call 'named-refused'. On 7/24 I installed it into fail2ban and started testing it. The results are in the log summary below. You will notice on the 24th, the filter 'named-refused was innvoked "a lot" and by the next day, it was back to the normal fighting off the sshd worm, and even that has gone way down since fail2ban was installed. I didn't post my entire log, but it is just as impressive to note that as of the 24th, fail2ban as reduced my DNS attack bandwidth to zero because whoever those badguys are have apparantly decided that because I no longer appear to exist that it isn't worth wasting their time trying anymore. As long as I responded to all of their attempts, even though they got 'refused' each time, they kept trying. Yay fail2ban and thank you Cyril (the author) for a fine product and our fellow list member for your patience and time. The log below shows how effective it can be. BTW, the exerpt from /messages was extracted BEFORE fail2ban was turned on with the new filter :) Because it is so effective and because a lot of SUSE users do use SSHd and DNS and experience worms and attacks, I want to document the effectiveness of fail2ban in solving the problem we face when we run those server/demons. I, for one, have my machine back! I run SUSE 10.2 and 10.3a6 and I am more than willing to zip up my /etc/fail2ban local files which should work with little or no modification on other distros. The gentleman that assisted me with the filter runs Debian and said he will submit a patch for Debian to Cyril (the Author of Fail2ban) to consider for distribution. BTW, the report below can be produced by: grep "Ban " /var/log/fail2ban.log | awk '{print $1,$5,$7}' | sort |uniq -c assuming your log file is in that directory with that name. Substitute your log file name if you don't use that name. Richard This is an exerpt from /var/log/messages It shows literally thousands of attempts to induce my DNS to forward a query Jul 24 09:22:05 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:05 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:05 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:05 raid5 named[3935]: client 195.135.221.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:05 raid5 named[3935]: client 195.135.221.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.15#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.15#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 sshd[5243]: Invalid user admin from 200.226.124.15 Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:06 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.221.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.221.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:07 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 sshd[5246]: Invalid user user from 200.226.124.15 Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.15#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:08 raid5 named[3935]: client 195.135.220.15#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.221.2#34166: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.221.2#34166: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.220.2#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:09 raid5 named[3935]: client 195.135.220.2#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:10 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied Jul 24 09:22:10 raid5 named[3935]: client 195.135.220.15#32768: query 'ns2.ricreig.com/AAAA/IN' denied Jul 24 09:22:10 raid5 named[3935]: client 195.135.220.15#32768: query 'ns1.ricreig.com/AAAA/IN' denied This is a summary of the Fail2ban log for the dates 7/23 to 7/27. Attacks Date Filter IP of Attacker 1 2007-07-23 [ssh-iptables] 165.230.95.44 2 2007-07-24 [named-refused] 128.110.124.120 1 2007-07-24 [named-refused] 130.57.22.201 1 2007-07-24 [named-refused] 130.57.22.6 1 2007-07-24 [named-refused] 137.65.1.1 1 2007-07-24 [named-refused] 137.65.1.2 6 2007-07-24 [named-refused] 148.160.29.6 2 2007-07-24 [named-refused] 155.101.98.155 2 2007-07-24 [named-refused] 155.101.98.156 1 2007-07-24 [named-refused] 165.230.69.67 1 2007-07-24 [named-refused] 165.230.81.231 1 2007-07-24 [named-refused] 165.230.84.227 1 2007-07-24 [named-refused] 165.230.95.119 3 2007-07-24 [named-refused] 165.230.95.90 2 2007-07-24 [named-refused] 204.127.192.82 2 2007-07-24 [named-refused] 204.127.192.85 2 2007-07-24 [named-refused] 204.127.193.31 1 2007-07-24 [named-refused] 204.127.193.32 1 2007-07-24 [named-refused] 204.127.193.33 1 2007-07-24 [named-refused] 204.127.193.36 1 2007-07-24 [named-refused] 204.127.200.81 1 2007-07-24 [named-refused] 204.127.200.82 1 2007-07-24 [named-refused] 204.127.200.83 2 2007-07-24 [named-refused] 204.127.200.84 1 2007-07-24 [named-refused] 204.127.201.29 1 2007-07-24 [named-refused] 204.127.201.31 1 2007-07-24 [named-refused] 204.127.201.32 1 2007-07-24 [named-refused] 204.127.201.33 1 2007-07-24 [named-refused] 204.127.201.35 1 2007-07-24 [named-refused] 204.127.201.36 1 2007-07-24 [named-refused] 216.148.226.32 1 2007-07-24 [named-refused] 216.148.226.33 1 2007-07-24 [named-refused] 216.148.226.34 1 2007-07-24 [named-refused] 216.148.226.36 1 2007-07-24 [named-refused] 216.148.227.153 3 2007-07-24 [named-refused] 63.240.77.32 1 2007-07-24 [named-refused] 63.240.77.81 1 2007-07-24 [named-refused] 63.240.77.85 1 2007-07-24 [named-refused] 65.110.190.249 1 2007-07-24 [ssh-iptables] 222.107.187.2 1 2007-07-25 [ssh-iptables] 200.61.47.165 1 2007-07-25 [ssh-iptables] 213.176.96.5 1 2007-07-25 [ssh-iptables] 61.185.220.249 1 2007-07-26 [ssh-iptables] 61.200.49.40 1 2007-07-27 [ssh-iptables] 202.172.229.16 1 2007-07-27 [ssh-iptables] 61.172.200.150 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 10

[opensuse] can not update webcam drivers
by Gustav Degreef 29 Jul '07

29 Jul '07

Any pointers would be appreciated on this issue. After much googling and reading I have a working webcam. I have Suse 10.1 I have installed uvcvideo-kmp-smp-r87_2.6.16.27_0.6-3.1 which allows me to get choppy video from my laptop's built-in webcam my kernel is 2.6.16.27-0.9-smp via YOU when I try to install an updated driver from the site where I got the original: http://download.opensuse.org/repositories/drivers:/webcam/SUSE_Linux_10.1/i… rpm -Uvh uvcvideo-kmp-smp-r117_2.6.16.13_4-1.1.i586.rpm I get: error: Failed dependencies: kernel(mm) = f858df994e08fe9f is needed by uvcvideo-kmp-smp-r117_2.6.16.13_4- 1.1.i586 kernel(kernel) = d9af8540e83840db is needed by uvcvideo-kmp-smp-r117_2.6.16.13_4-1.1.i586 kernel(drivers_media_video) = 6d991b763ae0a8c6 is needed by uvcvideo-kmp-smp-r117_2.6.16.13_4-1.1.i586 kernel(drivers_base) = fa5f9fe6e778a7fe is needed by uvcvideo-kmp-smp-r117_2.6.16.13_4- 1.1.i586 kernel(fs) = 77b985c5db992d0e is needed by uvcvideo-kmp-smp-r117_2.6.16.13_4-1.1.i586 There is no documentation on the site. And I can not find any on the Suse wiki. How can I solve the failed dependencies? Thanks, Gustav -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] gcc Linking Problem
by Daniel Feiglin 29 Jul '07

29 Jul '07

Hello folks! During the course of trying to build an app from the tgz sources, I received an odd looking message that gcc could not create an executable. After a little research, I tried to compile the canonical "Hello, world" program with this: gcc -o hello hello.c and I got this: daniel@danny:~> gcc -o hello hello.c /usr/lib/gcc/i586-suse-linux/4.1.2/../../../crt1.o: In function `_start': (.text+0xc): undefined reference to `__libc_csu_fini' /usr/lib/gcc/i586-suse-linux/4.1.2/../../../crt1.o: In function `_start': (.text+0x11): undefined reference to `__libc_csu_init' collect2: ld returned 1 exit status I've never seen anything like that before (since SuSE 6.1). Can anyone tell me what's going on here & how to fix it? Environment: openSUSE 10.2, kernel 2.6.18.8-0.3-default. I'm using gcc as provided. gcc -v gives: Using built-in specs. Target: i586-suse-linux Configured with: ../configure --enable-threads=posix --prefix=/usr --with-local-prefix=/usr/local --infodir=/usr/share/info --mandir=/usr/share/man --libdir=/usr/lib --libexecdir=/usr/lib --enable-languages=c,c++,objc,fortran,obj-c++,java,ada --enable-checking=release --with-gxx-include-dir=/usr/include/c++/4.1.2 --enable-ssp --disable-libssp --disable-libgcj --with-slibdir=/lib --with-system-zlib --enable-shared --enable-__cxa_atexit --enable-libstdcxx-allocator=new --program-suffix=-4.1 --enable-version-specific-runtime-libs --without-system-libunwind --with-cpu=generic --host=i586-suse-linux Thread model: posix gcc version 4.1.2 20061115 (prerelease) (SUSE Linux) ld -v gives: GNU ld version 2.17.50.0.5 20060927 (SUSE Linux) Cheers, Daniel

1 1

[opensuse] postfix smtp auth
by Chuck Payne 28 Jul '07

28 Jul '07

Hi, I got a question. I need to set my server up so that users can auth before sending because easier that adding the couple hunder ip for access. Do I have to install courier or cyrus-sasl? I am looking at a simple way of setting it up. I have looked on how to forge and google, but most point to using those programs. -- -- Command, n.: Statement presented by a human and accepted by a computer in such a manner as to make the human feel as if he is in control. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Ldap nub needs a little help
by ka1ifq 28 Jul '07

28 Jul '07

I am trying to setup an ldap server for email info ( Kmail and Outlook ). I did do quite a bit of reading but still can't get the hang of it yet. I just downloaded a couple of gui programs ( myldapklient and luma ) but these do not let me do an initial directroy setup ( if it's needed ) and with no data there (yet) they are not of much use. What am I missing? Opensuse 10.2x86-64 Openldap luma myldapklient ldap is started : /usr/lib/openldap/slapd -h ldap:/// -u ldap -g ldap -o slp=on Thanks, Mike -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Network
by Eric Gies 28 Jul '07

28 Jul '07

I am trying to connect a SUSE and XP network together and are not having much luck. I am using TCP/IP. Any help would be appreciated. Thanks. Eric -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 4

[opensuse] K torrant autostart
by Carl Spitzer 28 Jul '07

28 Jul '07

Recently I used ktorrant for the first and second time. it worked correctly but after the second time when I log in as <user> ktorrant automagically starts under kde. It completed the last task. Where can I go to stop this behavior. Suse 10.0 -- ___ _ _ _ ____ _ _ _ | | | | [__ | | | |___ |_|_| ___] | \/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] openSuSE10.1 autofs 4.1.4 RPM update? (mtab corruption)
by Monia TEK 27 Jul '07

27 Jul '07

Hi all, The latest info I can seem to find specific to SuSE is http://www.mail-archive.com/autofs@linux.kernel.org/msg05668.html from Matthias Koenig, but at that time there was no patch for openSuSE. I'm hoping he reads this list or someone knows more about where this autofs/util-linux issue stands for openSuSE. Many thanks for any pointers. Monia -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Evolution + Exchange 2007
by John 27 Jul '07

27 Jul '07

Morning, Wondering if there is an "easy" solution to connecting to an Exchange 2007 server from Evolution, on Suse10.2? The default packages don't support Exchange 2007, and I have been having issues trying to install the latest source for Evolution + Exchange connector.. Have got to this point: checking for CAMEL... yes checking for CAMEL_GROUPWISE... configure: error: Package requirements (camel-provider-1.2 libedataserver-1.2 >= 1.9.4 libegroupwise-1.2 >= 1.9.4) were not met: Requested 'libedataserver-1.2 >= 1.9.4' but version of libedataserver is 1.8.2 Requested 'libegroupwise-1.2 >= 1.9.4' but version of libegroupwise is 1.8.2 Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables CAMEL_GROUPWISE_CFLAGS and CAMEL_GROUPWISE_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. when trying to configure. Must admit, don't even know if the latest version (evolution-2.10.2.tar + evolution-exchange-2.10.0) will support 2007, anyway?? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0