January 2023 - openSUSE Users - openSUSE Mailing Lists

Firewalld and port knocks
by Marc Chamberlin 15 Jan '23

15 Jan '23

Hi - I am running an OpenSuSE 15.4 x64 using Firewalld with iptables as the backend. firewall-cmd -V 0.9.3 I also use Knockd and port knocks to open and close various ports on this system. (and yes I understand the drawbacks of using port knocking!) The trouble is, Firewalld is blocking the knocks and preventing the knockd.service daemon from hearing them. Looking through log files, the only thing I see of serious interest is this error message, I get when I turn debug on, in the firewalld.log file - 2023-01-09 13:24:28 DEBUG1: Applying policy (zone_ANY_public) derived from zone 'public' 2023-01-09 13:24:28 DEBUG1: Applying policy (zone_public_ANY) derived from zone 'public' 2023-01-09 13:24:28 DEBUG1: Applying used policies 2023-01-09 13:24:28 DEBUG1: Applying policy 'allow-host-ipv6' 2023-01-09 13:24:28 DEBUG1: modprobe: FATAL: Module nf_nat_netbios_ns not found in directory /lib/modules/5.14.21-150400.24.38-default 2023-01-09 13:24:28 DEBUG1: Setting policy to 'ACCEPT' 2023-01-09 13:24:28 DEBUG1: GetAll('org.fedoraproject.FirewallD1') 2023-01-09 13:24:28 DEBUG1: config.icmptype.0.GetAll('org.fedoraproject.FirewallD1.config.icmptype') Google provides zero results when I use it to search for "nf_nat_netbios_ns" and YaST2 does not come up with anything either. I don't know if these two issues are related or not, but I need to get Firewalld to allow the knockd.service daemon to hear the knocks. If I stop the Firewalld service, then all works well as far as the knockd.service daemon is concerned and it does hear the knocks then. There is one other thing I see in the firewalld.log file that "looks" ominous, but I have no idea what it means to Overload a zone and whether that is a good thing or a bad thing - 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/drop.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/external.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/home.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/internal.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/nm-shared.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/public.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/trusted.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/usr/lib/firewalld/zones/work.xml' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/block.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'block' ('/usr/lib/firewalld/zones/block.xml') 2023-01-09 13:24:28 DEBUG1: Setting zone of interface 'eth2' to 'block' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/cameras.xml' 2023-01-09 13:24:28 DEBUG1: Setting zone of interface 'eth3' to 'cameras' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/dmz.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'dmz' ('/usr/lib/firewalld/zones/dmz.xml') 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/docker.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'docker' ('/usr/lib/firewalld/zones/docker.xml') 2023-01-09 13:24:28 DEBUG1: Setting zone of interface 'docker0' to 'docker' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/drop.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'drop' ('/usr/lib/firewalld/zones/drop.xml') 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/external.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'external' ('/usr/lib/firewalld/zones/external.xml') 2023-01-09 13:24:28 DEBUG1: Setting zone of interface 'eth1' to 'external' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/home.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'home' ('/usr/lib/firewalld/zones/home.xml') 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/internal.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'internal' ('/usr/lib/firewalld/zones/internal.xml') 2023-01-09 13:24:28 DEBUG1: Setting zone of interface 'eth0' to 'internal' 2023-01-09 13:24:28 DEBUG1: Loading zone file '/etc/firewalld/zones/nm-shared.xml' 2023-01-09 13:24:28 DEBUG1: Overloads zone 'nm-shared' ('/usr/lib/firewalld/zones/nm-shared.xml') Thanks in advance for helping me with these questions/issues! Marc... -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)

7 17

[oS-en] Strange networking problem.
by Carlos E. R. 15 Jan '23

15 Jan '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hii, Mi ISP has replaced my router, and suddenly, all the machines behind the switches do not work. I power cycled router and switches. hgu router | \--------------- laptop (with full connection) | Switch 8 ports |\ | -- chromecast (without internet connection, does not work) || Switch 16 ports | | | | \ ---- desktop computer (partial connectivity) | | | | | | | Several computers, printer, etc. - From the laptop, when connected directly to the router, I have full connectivity. If I connect the laptop to the first switch: - I get IP from the router via DHCP. - I can't ping the router or connect to its web at 192.168.1.1 or outside. - I can connect to the desktop computer On the desktop computer: - I cannot ping the router nor connect to router config web at 192.168.1.1 or outside. - I can connect to the laptop and any other machine, except the router. On the router, I can see the map of all computers. On the switches, all LEDs are green. Since I can connect from the laptop to the desktop (and vice versa) via ssh, it means that all cabling and switches are working perfectly. There is connection from the computers to the router, as they get IP address by DHCP. - From the laptop, connected directly to the router, I can ping the switches. But I can't connect to the router configuration through the switch, ping 192.168.1.1, or connect to the internet. The router is blocking these connections, somehow. laptop: cer@Legolas:~> ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 1c:83:41:1b:d8:33 brd ff:ff:ff:ff:ff:ff altname enp3s0 inet 192.168.1.127/16 brd 192.168.255.255 scope global noprefixroute eth0 valid_lft forever preferred_lft forever inet6 fe80::f8a0:12a3:7a65:18ab/64 scope link noprefixroute valid_lft forever preferred_lft forever 3: wlan1: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000 link/ether 86:8e:bd:76:ea:47 brd ff:ff:ff:ff:ff:ff permaddr a0:d3:7a:a5:1d:4c altname wlp2s0 cer@Legolas:~> ip route default via 192.168.1.1 dev eth0 proto static metric 100 192.168.0.0/16 dev eth0 proto kernel scope link src 192.168.1.127 metric 100 cer@Legolas:~> cer@Legolas:~> route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default router.valinor 0.0.0.0 UG 100 0 0 eth0 192.168.0.0 0.0.0.0 255.255.0.0 U 100 0 0 eth0 cer@Legolas:~> Desktop: cer@Telcontar:~> ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 00:d8:61:a1:5a:bd brd ff:ff:ff:ff:ff:ff altname enp34s0 inet 192.168.1.14/16 brd 192.168.255.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::2d8:61ff:fea1:5abd/64 scope link valid_lft forever preferred_lft forever cer@Telcontar:~> ip route default via 192.168.1.1 dev eth0 192.168.0.0/16 dev eth0 proto kernel scope link src 192.168.1.14 cer@Telcontar:~> cer@Telcontar:~> route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default router.valinor 0.0.0.0 UG 0 0 0 eth0 192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 cer@Telcontar:~> When I connect the laptop via dhcp, I get: Legolas:~ # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default router.valinor 0.0.0.0 UG 100 0 0 eth0 192.168.0.0 0.0.0.0 255.255.0.0 U 100 0 0 eth0 Legolas:~ # ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 1c:83:41:1b:d8:33 brd ff:ff:ff:ff:ff:ff altname enp3s0 inet 192.168.2.6/16 brd 192.168.255.255 scope global dynamic noprefixroute eth0 valid_lft 43170sec preferred_lft 43170sec inet6 fe80::830d:8dec:3a05:4af3/64 scope link noprefixroute valid_lft forever preferred_lft forever 3: wlan1: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000 link/ether 86:8e:bd:76:ea:47 brd ff:ff:ff:ff:ff:ff permaddr a0:d3:7a:a5:1d:4c altname wlp2s0 Legolas:~ # - -- Cheers Carlos E. R. (from openSUSE Leap 15.3 at Legolas) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCY8GVExwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVn04AnRIp+0JMrp+zmqKEVqph AgKqY6gSAKCNrmaNOrJ/sEHENzVVFRCzvkyh8Q== =MZdT -----END PGP SIGNATURE-----

8 20

stop team restarting
by jdd＠dodin.org 14 Jan '23

14 Jan '23

Hello, I have every month to attend a meeting using microsoft team. I do so by clicking on a link provided. For this I had to install the team linux client. I use 15.3/kde it works without problem, but... at any session login team start again: at start it adds itself to the autologin system of kde, I can see it in the kde setup. I can also remove it fir there, but it come back each time I use team... is there a way to forgive team to write it's autoload system? thanks jdd -- mon serveur usenet: dodin.fr.nf c'est quoi, usenet? http://www.dodin.org/wiki/pmwiki.php?n=Usenet.Usenet

5 11

Upgrading motherboard
by Marc Chamberlin 13 Jan '23

13 Jan '23

Hi - I am about to embark on a new adventure and am going to install/upgrade a new motherboard, with new processor, on-board graphics, and memory. (The old one is about 15 years old, dating back to the Pentium 2 core processor days.) I want to keep my OpenSuSE 15.4 x64 system and all the custom application configurations as is. Is there any hiccups or other roadblocks I should prep my system for, before doing this massive hardware change-over? I just want to make this adventure go as smooth as possible and looking for advice from the schools of hard knocks! Thanks as always, in advance... Marc.. -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)

11 19

VirtualBox Quits
by Robin Klitscher 13 Jan '23

13 Jan '23

openSUSE Leap 15.4 KDE Plasma Version: 5.26.4 KDE Frameworks Version: 5.101.0 Qt Version: 5.15.7 Kernel Version: 5.14.21-150400.24.38-default (64-bit) VirtualBox 7.0.4. I'd been running Windows 10 as guest for several years, successful and solid. Recently upgraded to Windows 11 as guest, also successfully. Now, all of a sudden and for no reason I can account for, VBox flatly refuses to run. I can't even start it to re-install guest(s). Calling it from a commandline produces this (sorry about the line wrap): Qt WARNING: QObject::connect: No such signal UITabBar::currentChanged(int) Qt WARNING: QObject::connect: No such signal UITabBar::tabMoved(int,int) Qt WARNING: QObject::connect: No such signal UITabBar::tabBarClicked(int) Qt WARNING: QObject::connect: No such signal UITabBar::tabBarDoubleClicked(int) /usr/bin/VirtualBox: line 70: 15387 Segmentation fault (core dumped) LD_LIBRARY_PATH="/usr/lib/virtualbox${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" /usr/lib/virtualbox/VirtualBox6 $@ Is there anything (simple!) I can do about that? -- Robin K Wellington "Harbour City" New Zealand

4 18

Lost KDE network manager after update
by James Knott 12 Jan '23

12 Jan '23

Last night, several packages were updated on my ThinkPad E520. Today, I see I no longer have a network manager nor WiFi. Was there a package that might have caused this? Any idea on how I can restore network manager? tnx jk BTW, WiFi still works in Windows 10, so it's not a hardware issue.

8 39

Multiple Instances of Linux Malware Distributed via PyPi in Last 30 Days
by David C. Rankin 10 Jan '23

10 Jan '23

All, I'm not sure how openSUSE looks at packages or libraries obtained from PyPi, but I've followed a couple of fairly shocking stories in the past two weeks alone related to python malware distributed via packages obtained from PyPi. The Register summarizes in: https://www.theregister.com/2023/01/09/pypi_aws_malware_key/?utm_source=dai… with PyTorch story on Jan 5: https://www.theregister.com/2023/01/04/pypi_pytorch_dependency_attack/?utm_… I don't do a lot with python, other than keep up with it and marvel at how the includes and libraries have grown like weeds in a vacant lot for Python3. I know enough to know that pulling libraries via PyPi is an often used and convenient way to handle dependencies. That raises the question - is there anything specific, or any tool openSUSE has looked at that may help prevent pulling in bad dependencies that are infected? (other than discourage this manner of obtaining python code?) -- David C. Rankin, J.D.,P.E.

3 3

SpamAssassin problem
by Carlos E. R. 09 Jan '23

09 Jan '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2023-01-07 a las 14:54 +0100, Carlos E. R. escribió: > El 2023-01-07 a las 13:01 +0100, Per Jessen escribió: >> Carlos E. R. wrote: ... > Anyway, grepping on /var/log/mail-202301*.xz doesn't find "spamhaus" or > "open resolver", so that is not my problem. But it is! I just looked in my spam folder, which contains only 8 emails after that long processing, and one of them has: Date: 30 Nov 2022 02:40:30 -0800 From: opensuse.org <no-reply(a)opensuse.org> To: opensuse-project(a)opensuse.org Subject: (8) Incoming mails are pending ... Content analysis details: (7.4 points, 5.0 required) pts rule name description - ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [195.135.221.145 listed in zen.spamhaus.org] - -0.4 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, medium trust [195.135.221.145 listed in list.dnswl.org] - -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] - -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence 0.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.2 HTML_MESSAGE BODY: HTML included in message 0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [84.21.172.201 listed in zen.spamhaus.org] 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS - -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager 2.7 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website + no rDNS 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: w3s.link] 0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: ipfs.io, w3s.link] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: w3s.link] Ok, so the score is zero, which in a way does not affect me, but I'm wasting time doing such queries. spamhaus and URIBL. This must be affecting any openSUSE user that uses SA in default configuration. - -- Cheers, Carlos E. R. (from openSUSE 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCY7l8HRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVtcgAoIYeW78zX5Zv89hreiG0 7Q1R5UThAJ4xVKEUrzagvvWWbczk9SPLZNMMNA== =ypOx -----END PGP SIGNATURE-----

6 29

Does anybody experience time out when retriving POP3 via Akonadi recently?
by Stakanov 09 Jan '23

09 Jan '23

I have a problem with a provider were I am using POP3 with Kontact/Akonadi. Operating System: openSUSE Tumbleweed 20230105 KDE Plasma Version: 5.26.4 KDE Frameworks Version: 5.101.0 Qt Version: 5.15.7 Kernel Version: 6.1.2-1-default (64-bit) Graphics Platform: X11 Processors: 4 × AMD FX(tm)-4300 Quad-Core Processor Memory: 31.3 GiB of RAM Graphics Processor: AMD Radeon Pro W5500 Manufacturer: Gigabyte Technology Co., Ltd. Akonadi and Kontact are 5.22.0 The issue presents one day yes, one day no. I contacted also the provider but I would like to know if anybody experience the "POP3 server socket timeout during operation" problem too. Thank you.

3 11

Fancy climbing into ALP over New Year's? Fresh preview versions of SUSE's distro and NetBSD 10 are here
by J Leslie Turriff 08 Jan '23

08 Jan '23

This may or may not clarify the direction that SuSE is taking: https://www.theregister.com/2022/12/23/new_preview_versions_of_suses/ Leslie -- Platform: Linux Distribution: openSUSE Leap 15.4 x86_64

9 17