- zorp-hu - lists.balabit.hu

python hiba? [Fwd: [OpenPKG-SA-2003.006] OpenPKG Security Advisory (python)]
by narancs 23 Jan '03

23 Jan '03

sziasztok ez a zorp-ot erinti? deb csomag meg nem jott ki. -------- Original Message -------- Subject: [OpenPKG-SA-2003.006] OpenPKG Security Advisory (python) Date: Thu, 23 Jan 2003 11:38:46 +0100 From: OpenPKG <openpkg(a)openpkg.org> Reply-To: openpkg(a)openpkg.org Organization: The OpenPKG Project, http://www.openpkg.org/ To: bugtraq(a)securityfocus.com ________________________________________________________________________ OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org openpkg-security(a)openpkg.org openpkg(a)openpkg.org OpenPKG-SA-2003.006 23-Jan-2003 ________________________________________________________________________ Package: python Vulnerability: predictable filename allows arbitrary code execution OpenPKG Specific: no Affected Releases: Affected Packages: Corrected Packages: OpenPKG CURRENT <= python-2.2.1-20020820 >= python-2.2.2-20021015 OpenPKG 1.2 none N.A. OpenPKG 1.1 <= python-2.2.1-1.1.0 >= python-2.2.1-1.1.1 Affected Releases: Dependent Packages: none Description: Zack Weinberg discovered an insecure use of a predictable file name [0] in the Python programming language [1]. Python attempts to execute a file which is assumed to not exist just to find out what error the operating system returns in this situation. It uses a constant filename for this task which could lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures (CVE) project assigned the id CAN-2002-1119 [2] to the problem. Please check whether you are affected by running "<prefix>/bin/rpm -q python". If you have the "python" package installed and its version is affected (see above), we recommend that you immediately upgrade it (see Solution). [3][4] Solution: Select the updated source RPM appropriate for your OpenPKG release [5], fetch it from the OpenPKG FTP service [6] or a mirror location, verify its integrity [7], build a corresponding binary RPM from it [3] and update your OpenPKG installation by applying the binary RPM [4]. For the release OpenPKG 1.1, perform the following operations to permanently fix the security problem (for other releases adjust accordingly). $ ftp ftp.openpkg.org ftp> bin ftp> cd release/1.1/UPD ftp> get python-2.2.1-1.1.1.src.rpm ftp> bye $ <prefix>/bin/rpm -v --checksig python-2.2.1-1.1.1.src.rpm $ <prefix>/bin/rpm --rebuild python-2.2.1-1.1.1.src.rpm $ su - # <prefix>/bin/rpm -Fvh <prefix>/RPM/PKG/python-2.2.1-1.1.1.*.rpm ________________________________________________________________________ References: [0] http://mail.python.org/pipermail/python-dev/2002-August/027223.html [1] http://www.python.org/ [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1119 [3] http://www.openpkg.org/tutorial.html#regular-source [4] http://www.openpkg.org/tutorial.html#regular-binary [5] ftp://ftp.openpkg.org/release/1.1/UPD/python-2.2.1-1.1.1.src.rpm [6] ftp://ftp.openpkg.org/release/1.1/UPD/ [7] http://www.openpkg.org/security.html#signature ________________________________________________________________________ For security reasons, this advisory was digitally signed with the OpenPGP public key "OpenPKG <openpkg(a)openpkg.org>" (ID 63C4CB9F) of the OpenPKG project which you can find under the official URL http://www.openpkg.org/openpkg.pgp or on http://keyserver.pgp.com/. To check the integrity of this advisory, verify its digital signature by using GnuPG (http://www.gnupg.org/) For instance, pipe this message to the command "gpg --verify --keyserver keyserver.pgp.com". ________________________________________________________________________

2 1

Re: [zorp-hu] Ftp fiaskó
by Balazs Czigany 22 Jan '03

22 Jan '03

>On Tue, Jan 21, 2003 at 08:26:32PM +0100, Balazs Czigany wrote: >> >> Az fmirror sehogy sem bír átkeveredni a zorp-on. > >Biztosan nalad van valami problema, mert nekem mukodik. Vegre valami remeny :)))) > >> További tulajdonságok >> - wget-tel illetve sima ftp klienssel remekül megy aktív mód-ban >> - passive módban egyik kliens sem működik. Hasonlót produkál mint az >> fmirror > >A csomagszuro beallitasok? > Mivel Wget-el es normal ftp-vel atmegy szerintem ez a resze rendben van. Amikor tcpdump-pal nézem a forgalmat az ftp kliensen csak annyi látszik, hogy az ftp szerver küldött egy tcp reset-et, ami a zorp volt..... Még arra goldoltam, hogy a kernelem nincsen meg patch-elve. Nem okozhatja-e ez a problémát, például a tranzsparencia patch hiányzik? Üdv Czigi

5 13

Ftp fiaskó
by Balazs Czigany 21 Jan '03

21 Jan '03

Halihó! Van egy kis problémám a zorp ftp plugjával: Az fmirror sehogy sem bír átkeveredni a zorp-on. További tulajdonságok - wget-tel illetve sima ftp klienssel remekül megy aktív mód-ban - passive módban egyik kliens sem működik. Hasonlót produkál mint az fmirror zorp verzió: ii zorp 1.4.6-1 An advanced stateful proxy firewall ii zorp-doc 1.4.6-1 Zorp documentation. ii zorp-lib 1.4.6-1 Low level library for zorp ii zorp-modules 1.4.6-1 Proxy modules shipped with Zorp kernel verzió Linux 2.4.20 zorp konfig részlet (A zorp logban is benne van.) class IntraFtp(FtpProxy): def config(self): FtpProxy.config(self) self.transparent_mode = TRUE Mi az ötletetek, hol lehet a hiba?? Üdv Czigi fmirror ------------------------ log czigi@cache:~$ fmirror -l /home/czigi/1 -r /pub/updates -s ftp.esafe.com -d 10 19:45:17 Connecting to ftp.esafe.com... 19:45:17 Connected. 19:45:17 : 220 Apollo-3 Microsoft FTP Service (Version 5.0). 19:45:17 ---> SYST 19:45:17 : 500 Command is not allowed at this time 19:45:17 ---> USER anonymous 19:45:17 : 331 Anonymous access allowed, send identity (e-mail name) as password. 19:45:17 ---> PASS czigi@ 19:45:18 : 230-Welcome to the Aladdin FTP Archive . 19:45:18 : 230-Information on this server is proprietary, copyrighted software. 19:45:18 : 230-It cannot be distributed/used 19:45:18 : 230-without prior authorization. 19:45:18 : 230-Problem contact: ftpmanager(a)ealaddin.com 19:45:18 : 230 Anonymous user logged in. 19:45:18 ---> CWD /pub/updates 19:45:18 : 250 CWD command successful. 19:45:18 ---> TYPE A 19:45:18 : 200 Type set to A. 19:45:18 ---> PORT 192,168,64,8,19,63 19:45:18 Lost link to server on control connection: Connection reset by peer --------------------- zorp log ------------------ root@pluto:/usr/doc/zorp-doc# tail -f /var/log/messages |grep ftp Jan 21 19:34:57 localhost zorp-transparent[28856]: (zorp@pluto-transparent/intra_ftp): Connection accepted; client_address ='AF_INET(192.168.64.8:4928)' Jan 21 19:34:57 localhost zorp-transparent[28856]: (zorp@pluto-transparent/intra_ftp:35): Starting proxy instance; client_fd ='41', client_address='AF_INET(192.168.64.8:4928)', client_zone ='Zone(cache, 192.168.64.8/32)', client_local='AF_INET(192.168.104.1:21)' Jan 21 19:34:57 localhost zorp-transparent[28856]: (zorp@pluto-transparent/intra_ftp:35/ftp): Proxy starting; class ='IntraFtp', module='ftp' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): thread starting; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling __config__() event; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling config() event; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Attribute fetched; attribute ='request', value='<Zorp hash object at 80beff8>' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Attribute fetched; attribute ='response', value='<Zorp Multidimensional hash object at 80b0428>' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Attribute fetched; attribute ='response', value='<Zorp Multidimensional hash object at 80b0428>' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Attribute changed; attribute ='permit_unknown_command', newvalue='1' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Attribute changed; attribute ='transparent_mode', newvalue='1' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='max_hostname_length', value='128' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='target_port_range', value=''21'' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='request', value='<Zorp hash object at 80beff8>' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='timeout', value='300000' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='permit_unknown_command', value='1' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='transparent_mode', value='1' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='permit_empty_command', value='1' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='max_line_length', value='255' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='max_username_length', value='32' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='max_password_length', value='64' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='response_strip_msg', value='0' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='response', value='<Zorp Multidimensional hash object at 80b0428>' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config dump, attribute value; name='data_mode', value='0' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Config event done Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling __startup__() event; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling startUp() event; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Startup event done Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Server connection established; server_fd='42', server_addr='AF_INET(198.107.2.30:21)', server_zone ='Zone(internet, 0.0.0.0/0)', server_local='AF_INET(217.116.40.146:57164)' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='51' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='49', line='220 Apollo-3 Microsoft FTP Service (Version 5.0).' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='220 Apollo-3 Microsoft FTP Service (Version 5.0).' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='51' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='15' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='14', line='USER anonymous' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='USER anonymous' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`USER' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='16' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='72' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='70', line='331 Anonymous access allowed, send identity (e-mail name) as password.' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='331 Anonymous access allowed, send identity (e-mail name) as password.' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='72' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='12' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='11', line='PASS czigi@' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='PASS czigi@' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`PASS' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='13' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='43' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='41', line='230-Welcome to the Aladdin FTP Archive .^M' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer ='230-Welcome to the Aladdin FTP Archive .^M' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='43' Jan 21 19:34:57 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='221' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='70', line='230-Information on this server is proprietary, copyrighted software. ^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer ='230-Information on this server is proprietary, copyrighted software. ^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='72' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='34', line='230-It cannot be distributed/used^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='230-It cannot be distributed/used^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='36' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='33', line='230-without prior authorization.^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer ='230-without prior authorization.^M' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='35' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='45', line='230-Problem contact: ftpmanager(a)ealaddin.com' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer ='230-Problem contact: ftpmanager(a)ealaddin.com' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='47' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='29', line='230 Anonymous user logged in.' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='230 Anonymous user logged in.' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='31' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='5' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='4', line='SYST' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='SYST' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`SYST' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='6' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='28' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='26', line='215 Windows_NT version 5.0' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='215 Windows_NT version 5.0' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='28' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='9' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='8', line='MDTM foo' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='MDTM foo' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`MDTM' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='10' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='54' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='52', line='550 foo: The system cannot find the file specified. ' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='550 foo: The system cannot find the file specified. ' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='54' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='17' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='16', line='CWD /pub/updates' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='CWD /pub/updates' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`CWD' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='18' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='29' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='27', line='250 CWD command successful.' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='250 CWD command successful.' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='29' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='7' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='6', line='TYPE A' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Fetched; command='TYPE A' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Command fetched. Command=`TYPE' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Writing channel; fd='42', count='8' Jan 21 19:34:58 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in server side; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Reading channel; fd='42', count='20' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='S', line_length='18', line='200 Type set to A.' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Answer fetched; answer='200 Type set to A.' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='20' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Receiving in client side; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Channel read failed; attempt ='1', error='Connection reset by peer' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Reading channel; fd='41', count='0' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Line readed; side='C', line_length='255', line='200 Type set to A.' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Error reading from server; result='Connection reset by peer' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Writing channel; fd='41', count='48' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Channel write failed; attempt='1', error='Broken pipe' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling __shutdown__() event; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling shutDown() event; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): calling __destroy__() event; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Proxy destroy; class='IntraFtp', module='ftp' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Shutdown channel; fd='41', mode='2' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Shutdown failed; attempt ='1', error='Transport endpoint is not connected' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: Closing channel; fd='41' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Shutdown channel; fd='42', mode='2' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: Closing channel; fd='42' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Proxy ending; class='IntraFtp', module='ftp' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): client: accounting info; duration ='2', sent='518', received='65' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35): server: accounting info; duration ='2', sent='71', received='518' Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): Ftp Proxy bye; Jan 21 19:34:59 localhost zorp-transparent[3038]: (zorp@pluto-transparent/intra_ftp:35/ftp): thread exiting;

2 1

mssql proxy az 1.4-ben
by Kosa Attila 21 Jan '03

21 Jan '03

Hello! Letezik-e a $subject? Vagy csak a kettes sorozatban? Vagy egyaltalan nem jol emlekszem? -- Udvozlettel Zsiga

2 1

snmp
by Kosa Attila 21 Jan '03

21 Jan '03

Hello! Van snmp proxy, vagy csak sima plug-gal lehet atvinni? A /usr/share/zorp/pylib/Zorp konyvtarban nem talaltam. -- Udvozlettel Zsiga

3 6

zorp2.0 deb csomagok
by Szűcs Tibor 13 Jan '03

13 Jan '03

Üdv Mindenkinek! A 2.0 as deb csomagok sid-hez készültek ? Mert a woody ban levő libglib2.0-0 kevésnek tűnik a libzorpll nek. Ha igen elérhető valahol woody ra fordított változat? Üdv Robit

3 2

2.0 gpl - sid
by Nemeth Gyorgy 06 Jan '03

06 Jan '03

Jol latom, hogy ez meg nagyon messze van attol, hogy mukodjon is? Ha a tutorialban szereplo Service("intra_http", InbandChainer(), HttpProxy) modon probalom meg a service-t konfiguralni, kozli, hogy nincs InbandChainer (es a Chainer.py alapjan tenyleg nincs). Ha az 1.4 konfigjat probalom hasznalni, hiaba a transparent proxy patch, ugy tunik, hogy a destination address a tuzfal cime lesz, ez valahogy nagyon nem jo. Az iptables -t tproxy -A PREROUTING -s 192.168.1.1 -p tcp --dport 80 -j TPROXY --on-port 50080 parancsot probaltam transparent proxynak. -- --- Friczy --- 'Death is not a bug, it's a feature'

4 10

cttproxy
by Nemeth Gyorgy 27 Dec '02

27 Dec '02

Probalkozom a 2.4-es kernel tproxy patch felrakasaval, egyelore mersekelt sikerrel. A cttproxy patch felrakasanal az alabbi uzeneteket kapom (tobbek kozott): patching file net/ipv4/netfilter/ip_nat_core.c Hunk #3 FAILED at 795. Hunk #4 FAILED at 926. 2 out of 4 hunks FAILED -- saving rejects to file net/ipv4/netfilter/ip_nat_core.c.rej Jobban megnezve a patchet, a 40_snat_icmp_fix.diff es 50_ct_tproxy-12.diff file egyarant probalja patchelni az ip_nat_core.c file 795 es 926-os soratol kezdodo reszt (raadasul 10 sorral odebbcsuszva), nyilvan csak az egyik lesz sikeres. Ha jol lattam, galibat nem csinal, csak zavaro. (2.4.20-as vanilla kernel) -- --- Friczy --- 'Death is not a bug, it's a feature'

2 1

BalaBit Tanfolyamok!
by Gyorko Zoltan 26 Nov '02

26 Nov '02

Tisztelt Hölgyem/Uram! Ezúton szeretnénk felhívni figyelmét az év utolsó BalaBit tanfolyamaira. 1. TCP/IP Linux hálózat A tanfolyam időpontja: 2002. december 10-11. 2. Zorp Adminisztrátor A tanfolyam időpontja: 2002. december 16-17-18. A tanfolyamok helyszíne: Budapest, XI. Ker. Csurgói út 20/B (BalaBitHQ) A tanfolyamok díja: TCP/IP: 60.000 Ft Zorp Adm.: 100.000 Ft Kapcsolat: Szabó Gyöngyvér e-mail: szabo.gyongyver(a)balabit.hu tel: 1-371-0540 Bővebb információ és jelentkezési lap: http://www.balabit.hu/hu/support/training/ Üdvözlettel -- Györkő Zoltán BalaBit IT Biztonságtechnikai Kft. tel:(36-1)-371-0540 1116 Bp. Csurgói út 20/b http://www.balabit.hu

1 0

SNAT
by Ifj. Darvas Istvan 21 Nov '02

21 Nov '02

sziasztok, A tproxy patch-el megpatcheltem a 2.4.19-es kernelemet, leforditottam majd betoltottem a tproxy modulbol. majd feltettem a 1.4.8-as zorpot a deb csomagbol, ami fent van a lapon... elkovettem a kov konfigot: .... from Zorp.NAT import * ..... class Inter_SSH_Intra(PlugProxy): pass .... def Test(): Service("inter_SSH_intra", Inter_SSH_Intra, router=DirectedRouter(SockAddrInet ("192.168.0.100",22)), snat=ForgeClientSourceNAT()) Listener(SockAddrInet(IP_OUT,30000), "inter_SSH_intra") es azt vartam volna hogy bevisz SSH-n a belso gepre ugy, hogy latom a belso gepen a konnektalo gep IP-jet... valamit elcseszhettem, mert azt irja a zorp a logba, hogy nem tudja bindelni a cimet....pedig tproxy-val megpactheltem a kernelt ;-( Mit cseszhettem el? sziasztok, Istvan log: Nov 19 21:38:41 stargate Test[2807]: (zorp/nosession): Incoming connection; remote='AF_INET(195.38.103.132:1216)', fd='9' Nov 19 21:38:41 stargate Test[2807]: (Zorp@StarGate/inter_SSH_intra): Connection accepted; client_address='AF_INET(195.38.10 3.132:1216)' Nov 19 21:38:41 stargate Test[2807]: (Zorp@StarGate/inter_SSH_intra:0): Starting proxy instance; client_fd='9', client_addre ss='AF_INET(195.38.103.132:1216)', client_zone='Zone(internet, 0.0.0.0/0)', client_local='AF_INET(213.222.165.148:30000)' Nov 19 21:38:41 stargate Test[2807]: (Zorp@StarGate/inter_SSH_intra:0/plug): Proxy starting; class='Inter_SSH_Intra', module ='plug' Nov 19 21:38:41 stargate Test[2807]: (zorp/nosession): Module successfully loaded; module='plug', file='/usr/lib/zorp/libplu g.so' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): thread starting; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): calling __config__() event; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): calling config() event; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Config dump, attribute value; name='packet_stat s_interval', value='0' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Config dump, attribute value; name='copy_to_cli ent', value='1' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Config dump, attribute value; name='timeout', v alue='-1' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Config dump, attribute value; name='copy_to_ser ver', value='1' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): calling __startup__() event; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): calling startUp() event; Nov 19 21:38:41 stargate Test[2810]: (zorp/nosession): Connecting to remote host; local='AF_INET(195.38.103.132:0)', remote= 'AF_INET(192.168.0.100:22)' Nov 19 21:38:41 stargate Test[2810]: (zorp/nosession): Changing process capabilities; caps='= cap_net_bind_service+ep cap_ne t_admin+p' Nov 19 21:38:41 stargate Test[2810]: (zorp/nosession): Changing process capabilities; caps='= cap_net_bind_service,cap_net_a dmin+ep' Nov 19 21:38:41 stargate Test[2810]: (zorp/nosession): bind() failed; error='Cannot assign requested address' Nov 19 21:38:41 stargate Test[2810]: (zorp/nosession): Resetting process capabilities; caps='= cap_net_bind_service,cap_net_ admin+p' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Exception occurred during connection establishm ent; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): calling __destroy__() event; Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): Proxy destroy; class='Inter_SSH_Intra', module= 'plug' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0): client: Shutdown channel; fd='9', mode='2' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0): client: Closing channel; fd='9' Nov 19 21:38:41 stargate Test[2810]: (Zorp@StarGate/inter_SSH_intra:0/plug): thread exiting; Nov 19 21:38:41 stargate Test[2807]: (Zorp@StarGate/inter_SSH_intra:0/plug): Proxy ending; class='Inter_SSH_Intra', module=' plug' Nov 19 21:38:41 stargate Test[2807]: (Zorp@StarGate/inter_SSH_intra:0): client: accounting info; duration='0', sent='0', rec eived='0'

3 4