July 2007 - openSUSE Users - openSUSE Mailing Lists

[opensuse] searching for and installing a package
by Denis 16 Jul '07

16 Jul '07

People, how can I search for g77 compiler and isntall it? The packages for opensuse Runs on enterprise server? Tanx. Exist any way to make a search for a package by a file that I know that should be in the packege, but I dont know the name of the package? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 3

[opensuse] Setting Kmail to run message filters automatically
by Adam Jimerson 16 Jul '07

16 Jul '07

Is there a way to get Kmail to run message filters automatically instead of having to run them myself?

2 2

Re: [opensuse] Windows don't wobble
by primm 16 Jul '07

16 Jul '07

On Sunday 15 July 2007 09:56, Fernando Costa wrote: > Hi, > > Not a big issue but I like the effect, I have activated the desktop > effects and all are working fine except that windows don't wobble when > you drag them, I use openSUSE 10.2 with KDE 3.5.7 and nVidia drivers.... > > Thanks in advance for your help, This is probably what you want: http://en.opensuse.org/Beryl It has wobbly windows and loadsa other fun stuff too. hth Steve. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 3

[opensuse] snmpd: Error opening specified endpoint
by David Barr 16 Jul '07

16 Jul '07

OpenSuSE 10.2 + updates net-snmp-5.4.rc2-4 /etc/init.d/snmpd start gives a successful start indication, but /var/ log/net-snmpd.log says Error opening specified endpoint "161" Server Exiting with code 1 I tried modifying the endpoint: Error opening specified endpoint "161@eth-id-00:0b:db:83:95:0e" Server Exiting with code 1. Has anyone hit this and figured out the problem? Searching on the error message hasn't got me much. Thanks! David -- David - Offbeat http://dafydd.livejournal.com dafydd - Online http://pgp.mit.edu/ Battalion 4 - Black Rock City Emergency Services Department Integrity*Commitment*Communication*Support ----5----1----5----2----5----3----5----4----5----5----5----6----5----7-- Failure is not an option. It comes bundled with the software. --unknown -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Re: dictionary attacks
by Joachim Schrod 16 Jul '07

16 Jul '07

G T Smith wrote: >> >> Then I can recommend fail2ban, >> http://www.fail2ban.org/wiki/index.php/Main_Page >> It works for several log files, not just for ssh. > > DenyHosts looks like another way of shooting oneself in the foot. It is > a naive approach with the potential that a spoofed dictionary attack > could end up blocking of large chunk of address space (or a particular > address) from accessing your server, effectively allowing yourself to > create your own vector for a kind of DoS attack. (I would be rather > surprised if this had not been attempted already). You're right and it should also be noted that many tools have a rather poor log parsing routine, where one can run insertion attacks rather easily against them. fail2ban up to version 0.8 was also vulnerable to that. http://www.ossec.net/en/attacking-loganalysis.html is a very nice presentation of that problem. One can forgive the author that he touts his own horn, the OSSEC Host Intrusion Detection System (HIDS). But for many small installations, OSSEC or other HIDSes is too big a hammer, IMHO. Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod(a)acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] Slow Motion KDE Open Folder Animation
by Ken Jennings 16 Jul '07

16 Jul '07

openSUSE 10.2, 2.6.18.8-0.3-default x86_64 KDE 3.5.5 "release 45.5" When Konqueror opens a folder there's a short animation of an expanding box drawn with a dashed line superimposed over the icon. On most systems it plays too fast for most people to really see it. On this particular system it plays in slow motion. I can see the box and watch it expanding in discrete steps -- tick, tick, tick -- before the folder opens. It does not matter if the folder has 0 files in it or a hundred files. It still takes just as long to open. (three or four seconds.) Is there something I can do to control this animation, or even just turn it off? Thanks, Ken. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4

[opensuse] update kernel via yast
by Hans Linux 16 Jul '07

16 Jul '07

how do i update opensuse10.2 kernel via Yast? is it risky to update kernel since i dont know much about linux? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 3

[opensuse] Re: dictionary attacks
by Joachim Schrod 16 Jul '07

16 Jul '07

koffiejunkie wrote: > Matthew Stringer wrote: >> After having a similar problem I was recommended DenyHosts, swear by >> it now, blocks all these lamers. >> >> http://www.howtoforge.com/preventing_ssh_dictionary_attacks_with_denyhosts >> > I'll vote for this too, although I would like to get something that uses > iptables instead - taking the load off sshd. But denyhosts works pretty > good. Then I can recommend fail2ban, http://www.fail2ban.org/wiki/index.php/Main_Page It works for several log files, not just for ssh. It does also proper unblocking automatically, otherwise the deny-list tends to get very long. (You have very seldomly attacks from the same IP address several times.) It only falls short when the ssh-login host is in a DMZ, the logs are actually stored and processed on a different host, and the firewall is a 3rd system. But even though I once thought that this is the canonical secure setup, this situation seems to be quite rare; I don't see requests for an SSH-blocker in that scenario. Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod(a)acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] How can I tell susefirewall not to log about a certain port?
by Carlos E. R. 16 Jul '07

16 Jul '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, In the /etc/sysconfig/SuSEfirewall2 file I have: FW_SERVICES_EXT_TCP="4662" But entries to that port are logged: Jul 15 14:07:25 nimrodel kernel: SFW2-INext-ACC-TCP IN=eth0 OUT= MAC=00:40:f4:2e:b1:21:00:30:da:70:d7:ea:08:00 SRC=189.... DST=192.168.1... LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=6454 DF PROTO=TCP SPT=50867 DPT=4662 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (0204058401010402) As it is a port I opened, I understand it should not be logged, it is not a "critical" port. I have: FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="yes" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" What could I do so that they are not logged? I want other ports logged, but not those I explicitly opened myself. In other words, I want to the firewall to consider 4662 as "not critical". - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGm2HDtTMYHG2NR9URAkHkAJ9z9oamb3bh3F/wKTkGLaBGDuC8gACgl9XT lc16ibdI+ISQvsUvAMc9Zpo= =bE6d -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

Re: [opensuse] konqueror browser [SOLVED]
by Gavin Chester 16 Jul '07

16 Jul '07

On Sun, 2007-07-15 at 07:29 +0200, Raymond wrote: > On Sunday 15 July 2007 06:02:29 you wrote: > > On Sat, 2007-07-14 at 20:30 -0400, Michael Derek Barnett wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > Gavin Chester wrote: > > > > I know this is a shot in the dark for you all, but I am at a loss > > > > completely ... > > > > > > > > No matter what settings I try I can't get konqueror to connect to the > > > > web. No problems with any other browser or transfer process, just > > > > konqueror. -SNIP- > Yet Another Shot In The Dark > > I have found that knetworkmanager blocks konqueror and kde apps from internet > access. If this is the case, quiting knetworkmanager using its systemtray > entry or killing it allow normal internet access once again. Alternatively, > setting your network interfaces in Yast to "User controlled with Network > Manager" may also solve the problem. > > Best of luck! > > Raymond BRILLIANT deduction, Raymond!! :-) :-) That was it. In the first instance, I simply shut down knetworkmanager and then konqueror was instantly able to load web pages as normal. FANTASTIC. It's a double-edged sword having all kde's app integration. Much appreciation to all who quickly and ably contributed suggestions to my problem that I had given up on before. Great work. Gavin -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1