May 2015 - openSUSE Users - openSUSE Mailing Lists

[opensuse] How do I make DMZ using virtual machines?
by Ted Byers 09 May '15

09 May '15

I have been googling, and reading about using a DMZ. But I have yet to find information adequate to allow me to simulate use of a DMZ using virtual machines. I find it easy to make virtual machines, and have no space for extra hardware. What I want to do is set up a couple virtual machines, representing a web server hosting code that represents the business logic layer and UI of a web application, and since it is data driven, the other hosts the database server. I then want to set up a small VM representing the inner firewall, separating the DMZ from the BL and DB server. Then there would be another web server set up in the DMZ, and another small VM to serve as the outer firewall (providing a boundary between the rest of the machines on my LAN and the DMZ). The sources of information I have found so far appear to have presented the concepts well, but they provide little practical information on how to actually make a DMZ. There are several things that are not clear to me. 1) I assume that the two small VMs that serve as my inner and outer firewalls would also act as a kind of bridge, providing routing between my LAN (192.168.2.*) and a subnet (such as 192.168.1.*), represents either my DMZ or the virtual LAN behind the inner firewall; but how is that configured? What tool would I use for that? 2) Does the web server in the DMZ just get configured as some kind of proxy (meaning I only need to configure forwarding in the apache conf files), or do I need to put CGI code on it to validate request data and then forward the request on to the BL server? 3) How do I make ssh work with the DMZ so that I can actually log into the BL and DB servers, for the purpose of administering them? As an aside, how would I ensure that ssh uses only TLS 1.2 or later? This is for my own experimentation, eventually to support my own coding, for the very near term. But, when I deploy to a real host, I suppose I'd have to consult with the hosting provider to configure the provider's firewall(s) to support a DMZ; but doing this with virtual machines here I would expect to help me understand whatever issues are involved in properly using a DMZ to secure a website. I would appreciate any links to resources that show how to do all this, or at least a 'to do list' and a list of tools that could be used to complete each task that must be done. Thanks Ted -- R.E.(Ted) Byers, Ph.D.,Ed.D. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] What GRUB recovery option do you use?
by Keith Roberts 09 May '15

09 May '15

Hi all. Following on from my post about GRUB hanging, I just wondered what - if any - disaster recovery options you use to fix a broken GRUB boot loader? I’m in the process of adding a failsafe GRUB boot process to my DR list of options. Kind Regards, Keith-- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] manual install openoffice in openSUSE
by Arup Rakshit 09 May '15

09 May '15

Hi, I have downloaded the openOffice from this url - https://www.openoffice.org/download/index.html . But I am not finding a way to install it manually. I am using suse 13.1. Any help on this ? -- ================ Regards, Arup Rakshit ================ Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it. --Brian Kernighan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 9

[opensuse] IPv6 and SuSEfirewall2 question
by Carlos E. R. 09 May '15

09 May '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I saw this entry in the firewall log: <0.4> 2015-05-08 15:16:05 minas-tirith kernel - - - [175655.346891] SFW2-INext-DROP-DEFLT IN=wlan0 OUT= MAC=33:33:00:00:00:fb:00:1e:0b:08:4c:cb:86:dd SRC=fe80:0000:0000:0000:021e:0bff:fe08:4ccb DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=667 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=UDP SPT=5353 DPT=5353 LEN=627 Port 5353 is mdns. I want to allow this and see what happens. So I added a line to FW_TRUSTED_NETS, like this: FW_TRUSTED_NETS="192.168.1.14,tcp,ftp 192.168.1.14,tcp,ftp-data \ 192.168.1.14,tcp,imap 192.168.1.14,tcp,imaps \ 192.168.1.14,tcp,nfs \ fe80:0000:0000:0000:021e:0bff:fe08:4ccb,udp,mdns" But it produces an error: minas-tirith:~ # SuSEfirewall2 SuSEfirewall2: Setting up rules from /etc/sysconfig/SuSEfirewall2 ... iptables-batch v1.4.21: host/network `fe80:0000:0000:0000:021e:0bff:fe08:4ccb' not found Try `iptables-batch -h' or 'iptables-batch --help' for more information. SuSEfirewall2: Error: iptables-batch failed, re-running using iptables iptables v1.4.21: host/network `fe80:0000:0000:0000:021e:0bff:fe08:4ccb' not found Try `iptables -h' or 'iptables --help' for more information. iptables v1.4.21: host/network `fe80:0000:0000:0000:021e:0bff:fe08:4ccb' not found Try `iptables -h' or 'iptables --help' for more information. SuSEfirewall2: Firewall rules successfully set minas-tirith:~ # I also tried fe80:0:0:0::/64,udp,mdns" and I got: minas-tirith:~ # SuSEfirewall2 SuSEfirewall2: Setting up rules from /etc/sysconfig/SuSEfirewall2 ... iptables-batch v1.4.21: invalid mask `64' specified Try `iptables-batch -h' or 'iptables-batch --help' for more information. SuSEfirewall2: Error: iptables-batch failed, re-running using iptables iptables v1.4.21: invalid mask `64' specified Try `iptables -h' or 'iptables --help' for more information. iptables v1.4.21: invalid mask `64' specified Try `iptables -h' or 'iptables --help' for more information. SuSEfirewall2: Firewall rules successfully set minas-tirith:~ # Doesn't SuSEfirewall accept IPv6 rules, or is support incomplete, or am I doing it wrong? It is the first time I try to add a rule for IPv6, and I know very little about it. - -- Cheers Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlVNDyAACgkQja8UbcUWM1y7DAD/adKkFtntp2w5X3VcJy4puH9t b76egBph1iVv8DPzwEIA/RNivRNmuipUU/9IJFSCrwqSvvGCMOpEgm4f9ABEP6y2 =MvxG -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 5

[opensuse] Not able to update packages in suse 13.1
by Arup Rakshit 09 May '15

09 May '15

Hi, I got a pop-up of 113 updates needed. I opened it inside the Apper window, and clicked on the "Apply" button and keep getting the below error : There was a (possibly temporary) problem connecting to a software origins. Please check the detailed error for further details. **Error** is : File './i586/git-core-2.3.7-244.1.i586.rpm' not found on medium 'http://download.opensuse.org/repositories/devel:/tools:/scm/openSUSE_13.1' How to fix it ? -- ================ Regards, Arup Rakshit ================ Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it. --Brian Kernighan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

[opensuse] gs command for saving scanned stuff to pdf file
by Istvan Gabor 08 May '15

08 May '15

Hello: I would like to scan some documents and save them as pdf files (1 file/page is OK). I'd like to use xsane copy function for this. xsane has a direct save to pdf option but the resulted pdf files are very big. But for copy function a literal command can be given, and xsane forwards the scanned data to the command. I thought that I could use i gs command which compresses the scanned image and saves it as pdf file, but I don't know how to use gs. An example gs command that could be used for this would be appreciated. Thanks in advance, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 13

[opensuse] how to install a printing repository
by buhorojo 08 May '15

08 May '15

13.2 Hi I'd like to install cups 2.0.2 from the printing repository. I went to yast - software - software repositories - add The only understandable guide I found was http://opensuse-guide.org/repositories.php But no printing anywhere. 1. what is printing repository? 2. where is it? 3. how do I get it? Stupid questions I know but if anyone has any idea what I'm on about, please help. Part of the problem is that I know what I want to do, but I don't know where to start or how to ask in linux vocab. tia -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 11

[opensuse] Mysterious un-deletable file : ?gvfs in /run/user/1000
by ellanios82 08 May '15

08 May '15

Hello List , - in /run/user/1000 there is a file " ?gvfs " - the command : ls -la shows :: d????????? ? ? ? ? ? gvfs .................. - is this benevolent , or , malevolent , &, how can it be Deleted ?? ......... thanks regards -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 11

[opensuse] Docking station problem
by Koenraad Lelong 08 May '15

08 May '15

Hi, I recently installed OpenSuse 13.2 on my laptop. It was running 13.1 before. I did the installation at home, when my laptop was sitting on it's docking station (a real one, not a USB-one). All was fine. When I took my laptop to work and mounted it on the docking station there, also a real-docking station, I could not get to the login-screen. It hung at the "green" boot-screen (imagine the login screen without any text, or images). I took the docking-station from home to work, but that had the same problem. After some fiddling I discovered that unpugging the network cable fixed my problem. When I had the login screen I could plug the network cable and log in and work. I did not try to ssh when the login-screen did not appear. Any insight what could be the problem ? When the laptop was running OS 13.1, there was no problem. Thanks, Koenraad -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] gnome3 and wayland
by blue hut 08 May '15

08 May '15

Hello there, I am using a Macbook, and have retina resolution on it. On my external monitors I only have HD. So the things on the external monitor look quite big. People told me this is because X Server uses the same DPI on all displays. So I thought about trying out wayland. Zypper shows me gnome-session-wayland and gnome-shell-wayland. I installed both, but not sure how to start it now. Can someone help me with that? Is gdm to be started anyways or does this already mean that X server is running? regards, Michael -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0