this looks like attack against samba server. Is that true? Jul 20 03:50:37 dodin smbd[7775]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7775]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody Jul 20 03:50:37 dodin smbd[7776]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7776]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody Jul 20 03:50:37 dodin smbd[7777]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7777]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody the server is not functionning correctly (but by the way it don't serve the things it should to the internals), but anyway it's not open (AFAIK) to the external in the susefirewall2 :-() thanks jdd -- http://www.dodin.net http://dodin.org/galerie_photo_web/expo/index.html http://lucien.dodin.net http://fr.susewiki.org/index.php?title=Gérer_ses_photos -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
I have lost X. I updated xorg-x11 via smart to: xorg-x11-7.1-283.1@x86_64 xorg-x11-Xvnc-6.9.0-48@x86_64 xorg-x11-driver-video-7.1-72.3@x86_64 xorg-x11-fonts-7.1-47.19@noarch xorg-x11-libICE-7.1-11.1@x86_64 xorg-x11-libSM-7.1-12.1@x86_64 xorg-x11-libX11-7.1-20.1@x86_64 xorg-x11-libXau-7.1-13.1@x86_64 xorg-x11-libXdmcp-7.1-14.1@x86_64 xorg-x11-libXext-7.1-10.3@x86_64 xorg-x11-libXfixes-7.1-9.2@x86_64 xorg-x11-libXmu-7.1-14.2@x86_64 xorg-x11-libXp-7.1-7.3@x86_64 xorg-x11-libXpm-7.1-11.2@x86_64 xorg-x11-libXprintUtil-7.1-9.1@x86_64 xorg-x11-libXrender-7.1-8.2@x86_64 xorg-x11-libXt-7.1-12.2@x86_64 xorg-x11-libXv-7.1-8.2@x86_64 xorg-x11-libfontenc-7.1-10.1@x86_64 xorg-x11-libs-7.1-104.2@x86_64 xorg-x11-libs-32bit-6.9.0-48@x86_64 xorg-x11-libxkbfile-7.1-8.2@x86_64 xorg-x11-server-7.1-28.2@x86_64 ?? Shouldn't there be a *glx* file here somewhere ??? /var/log/Xorg.0.log is viewable: http://wahoo.no-ip.org/~pat/Xorg.0.log /etc/X11/xorg.conf is viewable: http://wahoo.no-ip.org/~pat/xorg.conf note: there is *no* startx in /usr/X11R6/bin/ any other information available upon request. Please note that I may be down intermittently. I am seriously considering kubuntu :^( I have a new box that will run the SUSE 10.1 live dvd and several other live dvds, but SUSE 10.1 and 10.0 installs will *not* progress past the usb check during hardware identification unless I unplug my epson 2400 scanner. And after 10.1 install, I can not see usb devices with the exception of the printer, epson 925, and it only part of the time. Motherboard is K8Triton nForce4sli GA-k8n Ultra-SLI 4GB w/2 400GB SATA (seagate) drives. GForce 7300 256mb Linux wahoo 2.6.16.21-0.13-smp #1 SMP Mon Jul 17 17:22:44 UTC 2006 x86_64 x86_64 x86_64 GNU/Linux amd x86_64 X2 4200+ Pause for hair pulling (but not much left!). -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery2 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Jul 20, 06 20:03:45 -0400, Patrick Shanahan wrote:
I updated xorg-x11 via smart to:
xorg-x11-7.1-283.1@x86_64 xorg-x11-Xvnc-6.9.0-48@x86_64
1st this is a mixture of 6.9 and 7.1 - bad idea. 2nd Xorg-7.1 is very very very alpha at the moment. Expect missing packages, breakage, etc. any time. This will stabilize soon.
any other information available upon request. Please note that I may be down intermittently. I am seriously considering kubuntu :^(
Why do you want to change from an unstable SUSE alpha version to a stable Kubuntu? Try stable SUSE first... BTW - SLED/SLES is much more stable than SL10.1, and you *can* install the missing packages of SL10.1 afterwards. Matthias -- Matthias Hopf <mhopf@suse.de>, SuSE labs, Zimmer 3.2.06, Tel. 74053-715 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
* Matthias Hopf <mhopf@suse.de> [07-21-06 09:26]:
1st this is a mixture of 6.9 and 7.1 - bad idea. 2nd Xorg-7.1 is very very very alpha at the moment. Expect missing packages, breakage, etc. any time. This will stabilize soon.
I have returned all to Xorg 6.9 and have X back. Thanks. but screensaver never blanks and sax2 will not run. Using nvidia's generated xorg.conf. Sax2's log indicates that a "fixed" font cannot be found. Xorg's web site indicates non-existing font, but I see none and all font directories listed in xorg.conf exist. tks, -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery2 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Jul 26, 06 08:15:44 -0400, Patrick Shanahan wrote:
I have returned all to Xorg 6.9 and have X back. Thanks.
but screensaver never blanks and sax2 will not run. Using nvidia's generated xorg.conf. Sax2's log indicates that a "fixed" font cannot be found. Xorg's web site indicates non-existing font, but I see none and all font directories listed in xorg.conf exist.
If fixed is not found, your installation is broken. Check the fonts rpms, maybe their version don't fit. Do 'sax2 -r', this will create a new config file without rereading your old one. Matthias -- Matthias Hopf <mhopf@suse.de>, SuSE labs, Zimmer 3.2.06, Tel. 74053-715 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
* Matthias Hopf <mhopf@suse.de> [07-26-06 15:57]:
If fixed is not found, your installation is broken. Check the fonts rpms, maybe their version don't fit. Do 'sax2 -r', this will create a new config file without rereading your old one.
tail /var/log/Xorg.99.log (II) Mouse[1]: ps2EnableDataReporting: succeeded Could not init font path element unix/:7100, removing from list! Fatal server error: could not open default font 'fixed' Please consult the The X.Org Foundation support at http://wiki.X.Org for help. Please also check the log file at "/var/log/Xorg.99.log" for additional information. 09:42 wahoo:~ > rpm -qa | grep -i font efont-serif-ttf-20010312-501 freefont-0.20040227-82 free-ttf-fonts-1.0-170 agfa-fonts-2003.03.19-28 ghostscript-fonts-std-8.15.2rc1-20 xorg-x11-fonts-75dpi-6.9.0-48 tv-fonts-1.1-226 fontconfig-32bit-2.3.94-18.4 ghostscript-fonts-other-8.15.2rc1-20 fonts-config-20060703-5.1 susefont-1.26.2-731 fontpage-2.0-1.guru.suse101 fontforge-20050803-17 dejavu-fonts-ttf-2.8-1.guru.suse101 sgi-fonts-1.0-725 terminus-font-4.12-16 fontconfig-devel-2.3.94-17 fonttools-2.0b1-255 efont-unicode-0.4.2-19 fontconfig-2.3.94-18.4 tkfont-1.1-811 xorg-x11-fonts-scalable-6.9.0-48 xorg-x11-fonts-100dpi-6.9.0-48 perl-Font-AFM-1.19-59 09:42 wahoo:~ > ls -la /usr/X11R6/lib/X11/fonts/ total 200 drwxr-xr-x 12 root root 4096 2006-07-22 13:38 . drwxr-xr-x 35 root root 4096 2006-07-21 10:01 .. drwxr-xr-x 2 root root 65536 2006-07-21 00:22 100dpi drwxr-xr-x 2 root root 65536 2006-07-21 00:22 75dpi drwxr-xr-x 7 root root 4096 2006-07-21 10:01 CID drwxr-xr-x 3 root root 4096 2006-07-21 10:01 encodings drwxr-xr-x 2 root root 4096 2006-07-21 10:01 local drwxr-xr-x 3 root root 20480 2006-07-21 10:01 misc lrwxrwxrwx 1 root root 23 2006-07-22 13:38 Speedo -> /usr/share/fonts/Speedo drwxr-xr-x 2 root root 12288 2006-07-22 09:58 truetype drwxr-xr-x 2 root root 4096 2006-07-21 00:22 Type1 drwxr-xr-x 2 root root 4096 2006-07-06 08:37 uni lrwxrwxrwx 1 root root 28 2006-07-04 13:34 URW -> /usr/share/ghostscript/fonts drwxr-xr-x 2 root root 4096 2006-07-21 10:01 util 09:45 wahoo:~ > grep FontPath /etc/X11/xorg.conf FontPath "/usr/X11R6/lib/X11/fonts/truetype/" FontPath "/usr/X11R6/lib/X11/fonts/URW/" FontPath "/usr/X11R6/lib/X11/fonts/uni/" FontPath "/usr/X11R6/lib/X11/fonts/misc/" FontPath "/usr/X11R6/lib/X11/fonts/local" FontPath "/usr/X11R6/lib/X11/fonts/75dpi" FontPath "/usr/X11R6/lib/X11/fonts/100dpi" FontPath "/usr/X11R6/lib/X11/fonts/encodings" FontPath "/usr/X11R6/lib/X11/fonts/util" FontPath "/usr/X11R6/lib/X11/fonts/Type1" FontPath "/usr/X11R6/lib/X11/fonts/CID" FontPath "/usr/X11R6/lib/X11/fonts/Speedo" FontPath "/opt/kde3/share/fonts" thanks, -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery2 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
jdd sur free wrote:
Jul 20 03:50:37 dodin smbd[7775]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7775]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody Jul 20 03:50:37 dodin smbd[7776]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7776]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody Jul 20 03:50:37 dodin smbd[7777]: [2006/07/20 03:50:37, 0] smbd/service.c:make_connection(798) Jul 20 03:50:37 dodin smbd[7777]: 213.19.163.33 (213.19.163.33) couldn't find service ipc$%nobody
the server is not functionning correctly (but by the way it don't serve the things it should to the internals), but anyway it's not open (AFAIK) to the external in the susefirewall2 :-() You really should NOT use words "firewall" and "AFAIK" in the same sentence... ;)
If your network is set up correctly, then this connection was made from the outside world, therefore your firewall allowed it. Please use some port-scanning tools (like ShieldsUp from grc.com) and check your ports, especially 139 and 445 (and it might be a good idea to check other ports also, while your at it). robert -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
participants (5)
-
jdd sur free -
Matthias Hopf -
Patrick Shanahan -
Robert Manfreda -
suse_gasjr4wd＠mac.com