OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] [SUSE 9.2] SuSEfirewall2 Problem

From: Philippe Vogel (filiaapfreenet.de)
Date: Thu Feb 24 2005 - 20:31:48 CST


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Carlos E. R. schrieb:

| The Thursday 2005-02-24 at 21:24 +0100, Philippe Vogel wrote:
|
|>>> FW_DEV_EXT="wlan-bus-pcmcia"
|>>> FW_DEV_DMZ="eth-id-00:50:04:d2:71:9e"
|>>
|>>
|>> I still have SuSE 9.1, and I don't know if things have changed
|>> that much in 9.2. But in 9.1 that syntax would be incorrect: it
|>> expects devices names like "eth0", "ppp0", "ippp1", "tr0",
|>> "auto", etc.
|>
|> Depending on where device is mapped to. If you know your
|> ethernet-id you can check this via ifconfig and look which
|> devices are listed. Above syntax is for kernel 2.6 and it's
|> provided iptables and is generated by yast.
|>
|> Both syntaxes are allowed, but sometimes by using similar or same
|> cards kernel switches devices after reboot. For that you have to
|> set kerneloptions at module loadtime via /etc/modules.conf or the
|> new modules.conf-file provided with kernel 2.6.
|
|
| Mmm. Interesting. But the "/etc/sysconfig/SuSEfirewall2" file
| comments don't mention that in SuSE 9.1, and it uses kernel 2.6.
| What about SuSE 9.2, is this new syntax mentioned on the firewall
| file?

I was wondering, too. But it worked fine, except switched nics after
reboot.

I fixed this by changing modprobe.conf.local:

alias etho tulip
alias eth1 8193too

After a reboot order was correct.

I wonder why this wasn't fixed. after beta-testing. Thx to google for
finding a propper solution.

Philippe

- --
Diese Nachricht ist digital signiert und enthält weder Siegel noch
Unterschrift!

Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt
gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin vom 2.8.1998 Az:
16 O 201/98). Jede kommerzielle Nutzung der übermittelten
persönlichen Daten sowie deren Weitergabe an Dritte ist ausdrücklich
untersagt!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
 
iQD1AwUBQh6OE0Ng1DRVIGjBAQLGPgb9FWT1ev4IJMlg2KI3kyxAhqV0ROUBemEQ
mR81k2wu4d+SDfHNUdvz48DTSBvPgsiaAAZ2m9clODtMb0pv+RRjDZsDqgluYeNk
xZyfgxA1cojOwGBaaDr3GRr8dWS3oFxgvIV4WjYWBy6YDWXwyiHY7ahXZK/BqJrC
O740IVqYU5PT1C6rJdpZOPdiPqivMFD3OAC0ZVRIjeOek3NGWb0nHdK+vqxma0Fl
LxpRQjwTXJQEA7xcsyP4c1M8q4VhQuqNcCke2pCwvY0lbsrIzrDZMdPgAanmu/4R
8xEWX2hk8kc=
=lVt8
-----END PGP SIGNATURE-----

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here