Search results for

Re: [opensuse-factory] Firewall not consistent..

by M9.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 jdd schreef: > M9. wrote: > > so, if I understand well you have only one lan (192.168.1.x) with all > the PC on it. Yes that is correct ;-) > > previously you said: > > "This morning i had to shut down the firewall to enter my Lan. > Printing was impossible, and also accessing the other pc's and laptops > in the network. > > What i do not understand is why this firewall prevents me from entering > other pc's in the network, while others can acces mine easily?" > > It looks like you (or any event) swapped the internal and external > network in the config > > try setting with defaults - usually defaults are good I used the defaults, after putting back the network interface back to the external zone again. > >> About /etc/scripts/SuSEfirewall2, there are many files there, i do not >> know which one you want to see. > > it's not a folder but a file in my computer (but the one I have just at > hand is a 10.1, may be the file was spread in several ones later) > > this file is commented internally, and the comments are the only > firewall notice I know of > >> IMHO should a firwall be configured once, and work in silence, >> protecting a pc or laptop against attack fro 'outside'. > > it's what SuSEfirewall2 do usually :-) > >> It should not block the trusted hosts, and block the untrusted ones. > > not clear in your config wich is what In my config there are only trusted hosts... (in a windows case there are constantly hosts that are informed by dataminers, in windows one should be able to block them...) > >> A warning should be displayed, with an option to grant or denie an >> attempt to enter the pc, with a discription of the host and the ip >> adress, so that one can decide to let pass once or forever, which does >> not mean that 'forever' can not be changed to denie. > > it's really too easy to clic on "yes" without caution and very difficult > to go back after, and should any user be allowed to do so? Normaly, if you have a good firewall, there is a discription of the host, its ip adress, and the purpose for entering from or towards the pc. The streams are visible if you want: in, out, and which ports are used. each programm is listed, and the ports they use. > >> >> A realy good firewall can work with passwords, just as a server can. > > I think somewhat your definition of "firewall" is wrong. a firewall is > used to open or close "ports" exactly! , not communication yes it has to let me know who is going out and going in, and i must be able to shut whatever port i like, in principle.. (your firewalls don't > do NAT, as you have an other router). > > whatever you do with these ports is irrelevant. If some host wants to enter my pc, i want to know this, and be able to close the gate (port) if i do not want it entering for whatever reason i have. If i give a password to a host, it can enter without noticing me, as long as i want to let the firewall exept the password. > > a firewall works at the packet level, not at the logical one, it knows > nothing of passwords. It protect networks, so if you want a part with > trusted pc, it must be the internal and untrusted the external or the > dmz if they are in your house, but this needs an other net card (an > other lan). A good firewall can handele this perfectly, with just one card. > > you can set some filtering based on IP, but I'm not sure it's secure and > anyway it's difficult to setup. > > finally you said "This morning i had to shut down the firewall to enter > my Lan.", so the day before the firewall was nice, what did change in > between? Not one thing, that is why i call the firewall inconsistent.. > > I beg you use an samba network and windows samba is buggy and needs to > open nearly anything to work as was said from the beginning by an other > writer. I use samba on the Linux-side, > > http://lists.opensuse.org/opensuse-factory/2007-09/msg00335.html > > but if I understand well, doing so is nearly the same as stopping the > firewall. As i understand, only for the ports used by samba for the LAN? > > use of samba server on suse fixes the permission problem. Samba server i did not use before... > > jdd > If you want to know what i mean, you should download the free sygate firewall from norton, and use it on a windows box. - -- Have a nice day, M9. Now, is the only time that exists. OS: Linux 2.6.22.5-10-default x86_64 Huidige gebruiker: monkey9@tribal-sfn2 Systeem: openSUSE 10.3 (X86-64) Beta3 KDE: 3.5.7 "release 58" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFG6/6WX5/X5X6LpDgRAk/MAKDHiYPzxAqnJA1sqEvChupx03ySHQCghFAw K7nudtOjDVT7Uz2in5rMOUA= =PE8L -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] Firewall not consistent..

by joe

jdd wrote: > M9. wrote: >> no, in windows, a firewall can do that.. > > then it have some functions more than a firewall Linux firewalls can do all that and much more. Your imagination is the limit, once you start looking into the iptables commands and options. Don't let the fact that SuSEfirewall2 is only a very rudimentary and limited graphical shell for a subset of those commands fool you. Joe --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] Firewall not consistent..

by Rajko M.

On Saturday 15 September 2007 12:38:53 pm jdd wrote: > M9. wrote: > >> informed? > > > > spyware and datamining.. ;-) > > ( i know this is unknown to linux :-) Not yet, but when LSB kick in and it would be easy to install any program to any distro, situation may change. > if you let your computer infected, there is nothing a firewall can do. > it should be some sort of "apparmor" for Windows, monitoring wich > application do what. That is what most 'firewalls' for windows do. They call it firewall, as it sounds good, but it is actually proxy that monitors all traffic. ... > default openSUSE install are usually quite defensives and allow little > open ports and little running servers (I'm not even sure that sshd is > running by default) It is not enabled by default. > >> access must be done on the host: > >> > >> * by a standard protocol (smb, ssh, ftp, http...) accepted by a server > >> * by two applications sharing the same port > > > > yes that is the procedures.. > > so what is the server you fear to be broken? ... Don't forget that there is few computers in M9 network wireless. and problem can come from that side too. They are part of internal network, they probably have enabled ad hoc wireless and if some neighbor has no wireless access point it can without knowing what he is doing connect to any windows computers in range. If he has viruses they will find the way in. Taking how easy most of windows users dismiss firewall popups it opens unlimited possibilities. -- Regards, Rajko. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] online updates in beta3

by Robin Knapp

Robin Knapp schrieb: > Zitat von Stanislav Visnovsky <visnov(a)suse.cz>: > >>> - updates do not use delta RPMs (kernel update, kdepim update), neither >>> using zypper, nor yast >> >> Please, file a bug report. > > https://bugzilla.novell.com/show_bug.cgi?id=309124 > Now that is has been fixed according to the bug entry (not verified yet) I wonder if the "deltarpm" package will be included in the 1CD installation media. AFAIK it is needed for the deltarpm functionality but it is missing in the beta3 KDE CD. It's only 169K... Maybe it's also worth to add a requirement for the libzypp rpm. What do you think? cheers, Robin --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] bcm43xx wireless

by Kenneth Schneider

On Sun, 2007-09-16 at 22:17 -0400, Kenneth Schneider wrote: > Linksys PCMCIA wpc54g ver. 1.2 card. > > Just upgraded to 10.3 b3plus and the wireless is broken AGAIN! Worked > with A5 a I recall. Upgraded to factory to see if any fixes might have > taken place but no luck. I can't be the only one in the world that > experiences this on a continuous basis. > > Now I get the following: > > bcm43xx driver > PCI: Enabling device 0000:03:00.0 (0000 -> 0002) > ACPI: PCI Interrupt 0000:03:00.0[A] -> Link [LNKD] -> GSI 10 (level, > low) -> IRQ 10 > PCI: Setting latency timer of device 0000:03:00.0 to 64 > bcm43xx: Chip ID 0x4306, rev 0x3 > bcm43xx: Number of cores: 5 > bcm43xx: Core 0: ID 0x800, rev 0x4, vendor 0x4243 > bcm43xx: Core 1: ID 0x812, rev 0x5, vendor 0x4243 > bcm43xx: Core 2: ID 0x80d, rev 0x2, vendor 0x4243 > bcm43xx: Core 3: ID 0x807, rev 0x2, vendor 0x4243 > bcm43xx: Core 4: ID 0x804, rev 0x9, vendor 0x4243 > bcm43xx: PHY connected > bcm43xx: Detected PHY: Analog: 2, Type 2, Revision 2 > bcm43xx: Detected Radio: ID: 2205017f (Manuf: 17f Ver: 2050 Rev: 2) > bcm43xx: Radio turned off > bcm43xx: Radio turned off > Adding 787176k swap on /dev/sda2. Priority:-1 extents:1 across:787176k > device-mapper: ioctl: 4.11.0-ioctl (2006-10-12) initialised: > dm-devel(a)redhat.com > loop: module loaded > fuse init (API version 7.8) > powernow: This module only works with AMD K7 CPUs > bcm43xx: set security called, .level = 0, .enabled = 0, .encrypt = 0 > ieee80211_crypt: registered algorithm 'WEP' > bcm43xx: set security called, .active_key = 0, .level = 1, .enabled = > 1, .encrypt = 1, .auth_mode = 0 > SoftMAC: Associate: Scanning for networks first. > SoftMAC: Associate: failed to initiate scan. Is device up? > bcm43xx: PHY connected > bcm43xx: Microcode rev 0xef, pl 0xe (2003-07-10 18:59:06) > bcm43xx: Radio turned on > bcm43xx: Radio enabled by hardware > bcm43xx: Chip initialized > bcm43xx: 30-bit DMA initialized > bcm43xx: Keys cleared > bcm43xx: Selected 802.11 core (phytype 2) > Shouldn't the radio be turned on and enabled BEFORE scanning for networks? > Hopefully this can be fixed before the final release. > > Also, a bug report has been opened and closed numerous times on this > problem. > -- Ken Schneider UNIX since 1989, linux since 1994, SuSE since 1998 --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

[opensuse-factory] software.o.o not responding

by Andreas Vetter

Hi, software.opensuse.org does not respond (at least since Sunday evening german time). Did I miss something or is it broken? -- Andreas Vetter Fakultaet fuer Physik und Astronomie Universitaet Wuerzburg --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] software.o.o not responding

by Clayton

> software.opensuse.org does not respond (at least since Sunday evening > german time). Did I miss something or is it broken? It's been off all weekend. You missed something :-) There are a couple other threads on the go on the main user list about the same topic. C --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] software.o.o not responding

by Andreas Vetter

On Mon, 17 Sep 2007, Clayton wrote: > > software.opensuse.org does not respond (at least since Sunday evening > > german time). Did I miss something or is it broken? > > It's been off all weekend. You missed something :-) There are a > couple other threads on the go on the main user list about the same > topic. That explains ... I'm not subscribed to the other list Thanks -- Andreas Vetter Fakultaet fuer Physik und Astronomie Universitaet Wuerzburg --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

[opensuse-factory] novell ati driver

by Florin Samareanu

Hi, Do you think that the new opensource ati driver developed by novell will make it in 10.3? i`m asking because with my card (ati x1600 mobility) vesa driver does not support more than 800x600, while my native lcd resolution is 1680x1050. Also, in order to make more pleasant the installation steps on 10.3 , you could try including avivo driver (http://gitweb.freedesktop.org/?p=avivo/xf86-video-avivo.git) . A small offtopic question: is there a git/cvs/something repository of this driver or is it developed internally? --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

17 years, 1 month

Re: [opensuse-factory] novell ati driver

by Andreas Jaeger

Florin Samareanu <florin(a)sitnet.ro> writes: > Hi, > > Do you think that the new opensource ati driver developed by novell will > make it in 10.3? i`m asking because with my card (ati x1600 mobility) It's not mature enough yet for the 10.3 release. Once it gets mature enough, I expect to see the driver in our build service. > vesa driver does not support more than 800x600, while my native lcd > resolution is 1680x1050. Also, in order to make more pleasant the > installation steps on 10.3 , you could try including avivo driver > (http://gitweb.freedesktop.org/?p=avivo/xf86-video-avivo.git) . Andreas -- Andreas Jaeger, Director Platform / openSUSE, aj(a)suse.de SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126

17 years, 1 month

openSUSE Factory search results for query "a"