November 2023 - openSUSE Users - openSUSE Mailing Lists

Help Deciphering smtp invalid pipeline attempt from an AWS IP
by David C. Rankin 03 Nov '23

03 Nov '23

All, This is a follow-on to the SASL knocking thread yesterday. I have an AWS relay attempt that tried to execute a pipeline command and I would like to try and decipher what appears to be shell-code (but it isn't). The journal captured the following attempt from an AWS IP: Nov 02 03:11:16 valkyrie dovecot[842]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=44.200.193.16, lip=192.168.6.14, TLS, session=<dZiS7iYJ+rksyMEQ> Nov 02 03:11:16 valkyrie postfix/smtpd[48294]: connect from ec2-44-200-193-16.compute-1.amazonaws.com[44.200.193.16] Nov 02 03:11:16 valkyrie postfix/smtpd[48294]: improper command pipelining after CONNECT from ec2-44-200-193-16.compute-1.amazonaws.com[44.200.193.16]: \026\003\001\000\352\001\000\000\346\003\003\220\344/J\037\342\365\271\277ZvW\023\205\242\260"\020:l6\361\033j\256U\030\334\326?7\234 \333\2111\270\3050\a\311i\2325\3302\244\366g\244\366\332\225\234uy\223{B\220\205\203\303\317\360\000&\300+\300/\300,\3000\314\251\314\250\300\t\300\023\300\n\300\024\000\234 Nov 02 03:11:16 valkyrie postfix/smtpd[48294]: warning: non-SMTP command from ec2-44-200-193-16.compute-1.amazonaws.com[44.200.193.16]: \023\001\023\002\023\003\001\000\000w\000\005\000\005\001\000\000\000\000\000 Nov 02 03:11:16 valkyrie postfix/smtpd[48294]: disconnect from ec2-44-200-193-16.compute-1.amazonaws.com[44.200.193.16] unknown=0/1 commands=0/1 The server did nothing with it and disconnected as it should, but how would I suss out what the command pipeline attempted was? It appears to be a string of octal digits until you hit /J and ZvW which doesn't make much sense. Any easy way to back out what the command was? -- David C. Rankin, J.D.,P.E.

2 3

15.4 - 'Main Update Repository' metadata expired since 2023-11-01 05:05:30 CDT.
by David C. Rankin 02 Nov '23

02 Nov '23

Full warning: Loading repository data... Warning: Repository 'Main Update Repository' metadata expired since 2023-11-01 05:05:30 CDT. Warning: Repository metadata expired: Check if 'autorefresh' is turned on (zypper lr), otherwise manualy refresh the repository (zypper ref). If this does not solve the issue, it could be that you are using a broken mirror or the server has actually discontinued to support the repository. ?? -- David C. Rankin, J.D.,P.E.

4 8

[oS-EN] Foxit reader doesn't work well in Plasma-X11
by Carlos E. R. 02 Nov '23

02 Nov '23

Hi, As you know, I'm trying out switching to KDE, having being an XFCE user for many years. I have bumped into a major (for me) hurdle. Foxit reader doesn't work in Plasma-X11 After it loads the PDF, it stops reacting. It can not redraw, no reaction to menu keys or mouse. Doesn't work. I have version 2.4.5.0727 > -rwxr-xr-x 1 root root 88672789 Jul 27 2022 FoxitReader.enu.setup.2.4.5.0727(rb70e8df).x64.run > -rw-r--r-- 1 cer users 73812318 Sep 15 17:52 FoxitReader.enu.setup.2.4.5.0727.x64.run.tar.gz And after starting it maybe six times, and trying under another user with XFCE, it works. Go figure. But not completely: I can not take snapshots (graphical photos). I can select all, and that does work (as photo). But draw a rectangle, doesn't work if Foxit is under KDE. It works under XFCE. On KDE it pastes whatever text I paste before the current operation. Fortunately, Okular seems to work. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.5 (Laicolasse))

3 3

Fwd: openSUSE infrastructure migration
by Carlos E. R. 02 Nov '23

02 Nov '23

For those that didn't know ;-) -------- Forwarded Message -------- Subject: openSUSE infrastructure migration Date: Mon, 30 Oct 2023 15:57:35 +0100 From: Georg Pfuetzenreuter <...> To: heroes(a)lists.opensuse.org, project(a)lists.opensuse.org Hi everyone, this week are starting to migrate various machines to our new location in Prague. This will cause intermittent outage of affected services. I will be updating https://status.opensuse.org/ where possible. If there are any issues not correlating to a report on status.opensuse.org, please reach out in #opensuse-admin (on ircs://irc.libera.chat) or open a ticket [1] in order for us to investigate. Note that the status and ticket systems are going to be temporarily affected as well. Cheers, Georg [1] https://progress.opensuse.org/projects/opensuse-admin/issues

1 0

[oS-en] Joe question.
by Carlos E. R. 02 Nov '23

02 Nov '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 When telling joe to reformat a paragraph, it uses two spaces after a stop: Aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa. Aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd aaaaa. Aaaaaa aaaaa bbbb ccccc ddddd aaaaa aaaaaa aaaaa bbbb ccccc ddddd I don't like this style. Is there a way to disable it? I want a single space. (google foo is fine, I just don't know how to phrase the question in "short") - -- Cheers Carlos E. R. (from openSUSE Leap 15.3 at Legolas) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZT4yzBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVEpkAn2rf0cB9Q7RjTjO3GaMx S3zqOge9AJ0RNF4ILE1/aJ7OHBPzhUcE8KjWVA== =bf/U -----END PGP SIGNATURE-----

4 7

sieve or pigeonhole on LEAP 15.5?
by joe a 01 Nov '23

01 Nov '23

For dovecot 2.3 and roundcube on opensuse LEAP 15.5, seeking "sieve" or "pigeonhole" to install. Any experiences insight to share?

1 0