July 2009 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Issue with Bind
by Chuck Payne 30 Jul '09

30 Jul '09

Guys, Do you guys recommend adding this to the firewall set for the issue with bind (DNS)? iptables -A INPUT -p udp --dport 53 -j DROP -m u32 --u32 '30>>27&0xF=5' How can I add this to the firewall rule set. The issue is list below. BIND 9 is an implementation of the Domain Name System (DNS) protocols. named daemon is an Internet Domain Name Server for UNIX like operating systems. Dynamic update messages may be used to update records in a master zone on a nameserver. When named receives a specially crafted dynamic update message an internal assertion check is triggered which causes named to exit. An attacker which can send DNS requests to a nameserver can cause it to exit, thus creating a Denial of Service situation. configuring named to ignore dynamic updates is NOT sufficient to protect it from this vulnerability. This exploit is public. Please upgrade immediately. Our hosting provider seems to come under DoS attack too at the same time and their DNS server went down for couple of hours. So you may see some part of our site may not working, especially our css, js and image files comes from our service providers servers which are affected by BIND server problem. -- ---------------------------------------- Old utilities do not die they just slowly fade away! ----------------------------------------- OpenSUSE -- http://en.opensuse.org/User:Terrorpup OpenSuSE Ambassador OpenSuSE Member Skype -- terrorpup twitter -- terrorpup -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Brasero hangs when trying to locate iso on hard drive...
by Dan Goodman 30 Jul '09

30 Jul '09

I have downloaded an iso image onto my harddrive from a known good internal source, and confirmed the md5sum matches. But when I fired up Brasero and chose "Burn an Existing Image", and attempted to change dirs from my homedir to /root/isoz where I have my (SLES 10 SP2) iso stored, and I get the "whirling globe" endlessly, starting as soon as I try to navigate to /root. What am I doing wrong, or is there a known bug I don't know about. Any help would be appreciated, as I have to get this done before I can get out of here and go on a much needed vacation. TIA. Dan Notice: This communication, including attachments, may contain confidential or proprietary information to be conveyed solely for the intended recipient(s). If you are not the intended recipient, or if you otherwise received this message in error, please notify the sender immediately by return e-mail and promptly delete this e-mail, including attachments, without reading or saving them in any manner. The unauthorized use, dissemination, distribution, or reproduction of this e-mail, including attachments, is strictly prohibited and may be unlawful. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 1

[opensuse] y2controlcenter: cannot connect to X server :0.0 ??
by Clayton 30 Jul '09

30 Jul '09

Hmmm I broke something on my latest update. The YaST GUI will no longer start... it just coughs out this error: linux-tliy:/usr/lib64 # yast2 No protocol specified y2controlcenter: cannot connect to X server :0.0 I can run the ncurses yast... Other symptoms of the update that I haven't traced down yet... Running a python application spits out errors like this: File "/usr/lib64/python2.6/site-packages/gtk-2.0/gtk/__init__.py", line 48, in <module> from gtk import _gtk ImportError: /usr/lib64/libgtk-x11-2.0.so.0: undefined symbol: g_array_unref Any tips on what to look at to fix this? C. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 1

[opensuse] isc bind is dos vulnerable via dynupd - any eta for patches?
by cagsm 30 Jul '09

30 Jul '09

hi there, isc bind is dos vulnerable when receiving dynupdates packages. see: https://www.isc.org/node/474 http://www.kb.cert.org/vuls/id/725188 any eta for patches? thanks. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 7

Re: [opensuse] setting up SMB printer using Yast - Suse 11.1
by Johannes Meixner 30 Jul '09

30 Jul '09

Hello, On Jul 30 11:31 jdd (kim2) wrote: > Johannes Meixner a écrit : > >> I am afraid, this functionality is not yet re-implemented. > > most of the time detection don't work (neither under windows, by the way) Could you describe more explicite what you mean. Is "most of the time" just your personal experience or could you provide information about possible reasons why it does not work "most of the time" - i.e. what changes from time to time so that it does sometimes work but most of the time it does not work. I ask because I am not in a Windows-like environment so that I like to learn what I must have in mind when I re-implement it. If it does not work I would like to show a meaningful error message to the user instead of leaving the user alone with an empty list of remote SMB printer shares. I am not talking about autodetection of the actual printer "behind" a remote SMB printer share. I only like to autodetect the values of remote SMB printer shares i.e. SMB host name, SMB printer share name, SMB workgroup. Kind Regards Johannes Meixner -- SUSE LINUX Products GmbH, Maxfeldstrasse 5, 90409 Nuernberg, Germany AG Nuernberg, HRB 16746, GF: Markus Rex

5 7

[opensuse] repository for oo with text to columns
by kanenas＠hawaii.rr.com 30 Jul '09

30 Jul '09

Is there a repository where i can find a version of oo that can actually do a text to columns import? that would be for suse 11.1, 64 bit. This "upgrade" nonsense has really taken it's toll on me for the past year or so, almost everything linucs has been coming out with basic functionality issues. conspiracy plots anyone? tia. d -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] FollowSymlink
by jdd 30 Jul '09

30 Jul '09

I have a web site dodin.org working. I have some time to time to setup folders with big files, so I want to have them on an other partition. for example the moodyblue files should be on /data/moodyblue and the web server have a link in htdocs moodyblue->/data/moodyblue the vhost if like this: <VirtualHost *:80> ServerAlias dodin.org # *.domain.tld DocumentRoot /home/www/htdocs Options +Includes +FollowSymLinks AddType text/html .shtml AddOutputFilter INCLUDES .shtml </VirtualHost> but http://dodin.org/moodyblue/index.html gives error 403 lrwxrwxrwx 1 root root 26 Jul 29 18:32 moodyblue -> /data/moodyblue/ most files in htdocs are "drwxr-xr-x 4 root root" and perfectly accessible drwxr-xr-x 5 root root 4096 Apr 2 08:32 moodyblue and all files a read for all what can be the problem? partition mount?? (fstab= /dev/hda8 /data ext3 defaults 1 2) thanks jdd -- http://www.dodin.net http://valerie.dodin.org http://news.opensuse.org/2009/04/13/people-of-opensuse-jean-daniel-dodin/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 5

[opensuse] package repository copying
by Roger Oberholtzer 30 Jul '09

30 Jul '09

I have one machine that usually has set up the specific set of package repositories that I want to use. It is not uncommon that I want this exact same set of repositories on a few other machines. To date, I have edited the list for each system in YaST. Yes, a real time killer. How are others doing this? I would expect there to be an export command that makes something that can be imported on another system. I have not found it. For example, the zypper command (that I know about) to list the repositories does so in a way that cannot be imported elsewhere. What trick has not found itself up my sleve? -- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 8-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

7 8

[opensuse] Three different browsers can't access website, fourth can
by Stan Goodman 30 Jul '09

30 Jul '09

A few hours ago a specific website <http://www.jpost.com> became inaccessible in Firefox, and began to behave as if unrecognized by the DNS. Calling its URL caused my own home page to be displayed instead (this is what happens when a non-existent URL is entered in the navigation field). When this continued for so long as to become suspicious, I logged into WinXP in VirtualBox, and found that the same website is accessed normally, so there is nothing wrong with the website, which made me think that I needed a new profile. The new profile is also unable to access the website. The same thing happens on Opera and on Konqueror, so the problem has nothing to do with a specific browser. There is also no problem with other websites. I am behind two separate firewalls (hardware in my router and openSuSE software. I am out of ways to diagnose the problem. Does it make sense to anyone? -- Stan Goodman Qiryat Tiv'on Israel -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

11 26

[opensuse] Postfix: masquerade_domains does not work
by Rainer Blaes 30 Jul '09

30 Jul '09

Dear all! We are using a SLES 10 SP2 system where we installed a Mail Server according to this tutorial: http://www.novell.com/coolsolutions/feature/16264.html Everything is running fine except for the Masquerading feature. For instance the e-mail sender should have this "user(a)example.com" form but it appears as "user@mail-s. example.com". Here is now the relevant /etc/postfix/main.cf entry: ............... ............... masquerade_domains=ldap:/etc/postfix/ldapmasquerade_domains.cf ................. ldapmasquerade_domains.cf has this content: # This file was created by yast2-mail-server. Please do not edit it! server_host=localhost query_filter=(&(objectclass=suseMailDomain)(zoneNa me=%s) (suseMailDomainMasquerading=yes)) search_base=ou=DNS,dc=example,dc=com timeout=20 result_attribute=zoneName bind=no server_port=389 scope=sub # By using "masquerade_domains=example.com" in the main.cf file, the sender is now as we want to see it ie. "user(a)example.com". Any idea what's wrong with the ldapmasquerade_domains.cf configuration? THX, Rainer This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------- Astrium GmbH Vorsitzender des Aufsichtsrates: Thomas Mueller - Geschaeftsfuehrung: Evert Dudok (Vorsitzender), Dr. Reinhold Lutz, Guenter Stamerjohanns, Josef Stukenborg Sitz der Gesellschaft: Muenchen - Registergericht: Amtsgericht Muenchen, HRB Nr. 107 647 Weitere Informationen ueber EADS Astrium @ http://www.astrium.eads.net/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1