Re: [Discuss] PIVPN DNS problems -- I think

2023-06-10 Thread Matthew Gillen
On 6/9/2023 11:55 AM, Rich Pieri wrote: I'm trying to upgrade my Pi VPN box from an old Pi 2/32-bit to a new Pi 4/64-bit using PIVPN and Wireguard. I followed the backup, new setup, and restore instructions. My endpoints connect to the new server and I see traffic (pivpn -c) but all DNS lookups f

Re: [Discuss] physical hard drive destruction

2022-07-25 Thread Matthew Gillen
ERI is pretty good. They'll even come to your site: https://eridirect.com/services/data-destruction/ Unsure where they are exactly (they list some recycling centers on the web site, but I think they have the data destruction services more places). Matt On 7/25/2022 9:40 AM, David Smith wrote

Re: [Discuss] vlans and arp

2022-07-01 Thread Matthew Gillen
akes everything work. I had noticed that the (suspected) bad port on the NUC wouldn't negotiate a 1Gbps speed with the Netgear, but when I forced it to 100Mbps the link would show as 'up'. I guess that failure to auto negotiate was probably indicative of a bigger problem.

[Discuss] vlans and arp

2022-07-01 Thread Matthew Gillen
I'm pulling my hair out. I have a fedora box (serv1) that is my network management hub. It has a physical interface with no address, and a series of vlans configured (via NetworkManager). This is plugged into a netgear switch that sends vlan tagged packets to serv1. This works great. (side

Re: [Discuss] 3d... stuff?

2022-01-31 Thread Matthew Gillen
Daniel, For doing 3d modeling of the structures, blender is a good choice: https://www.blender.org/ There's lot of options for how to do the ray-tracing, it's been a staple of computer graphics for a long time. To help you get started: https://en.wikipedia.org/wiki/Ray_tracing_(graphics) https

Re: [Discuss] OT - Comcast abandoning data caps for Northeast region

2021-12-15 Thread Matthew Gillen
On 12/15/2021 7:31 PM, Dan Ritter wrote: Edward wrote: Great news. The actual news appears to be "we have no plans to begin beating you in the upcoming year". They'll offer you a 1000 Mb/s download speed, but they might charge you extra for using more than 4 Mb/s of it on average. You can g

Re: [Discuss] Abolish DST (was This year's Beowulf Bash is not for the lily-livered)

2021-11-23 Thread Matthew Gillen
On 11/23/2021 11:29 AM, grg wrote: and we're supposed to teach computers to deal with this garbage?? what a colossal waste of time (measured in which standard?;) - even if necessary if we want computers to interact with these inconsistent and mercurial humans. (do I sound bitter about this?;)

Re: [Discuss] fc35 installation issues

2021-11-19 Thread Matthew Gillen
After the error, check some of the other virtual terminals (cntl-alt-F[2,3,4,5,6]) to see if there's something useful in the textual logs. https://docs.fedoraproject.org/en-US/fedora/rawhide/install-guide/install/Installing_Using_Anaconda/ ("Accessing Consoles") Are you having it create a new

Re: [Discuss] nfs in virtual machines

2021-10-21 Thread Matthew Gillen
On 10/21/2021 1:35 AM, Rich Pieri wrote: On Thu, 21 Oct 2021 00:11:12 -0400 Matthew Gillen wrote: The guest VM is set up for NAT. Any ideas on where to look or things to try? Probably NAT making RPC unhappy. Simple solution: don't use NFS. That would be a fix, but I have a lot more

[Discuss] nfs in virtual machines

2021-10-20 Thread Matthew Gillen
All this talk of virtual machines reminded me that there might be some experts out there that could help with a problem that's been with me for a while. I have a server that is on all the time and serves NFS. I have a linux VM that runs on windows host (virtualbox), and the linux guest mounts

Re: [Discuss] SSH and Server OS Migration

2021-09-08 Thread Matthew Gillen
On 9/8/2021 10:32 AM, jbk wrote: > On 9/8/21 9:51 AM, Eric Chadbourne wrote: >> >> On 9/8/21 9:26 AM, jbk wrote: >>> I am migrating my home file and backup server from SL 7 to Rocky 8 in >>> a dual boot arrangement. It serves three or four other notebooks and >>> workstation. The backup program

Re: [Discuss] SSL problems with imapfilter after upgrade to Debian 11

2021-08-28 Thread Matthew Gillen
On 8/28/2021 10:21 AM, Rich Pieri wrote: > On Sat, 28 Aug 2021 01:54:15 -0400 > Matthew Gillen wrote: > >> will tell you a fair bit about what the server is presenting to >> clients. (check the expiration on the cert; LetsEncrypt is only valid >> for 90 days; mayb

Re: [Discuss] SSL problems with imapfilter after upgrade to Debian 11

2021-08-27 Thread Matthew Gillen
On 8/27/2021 5:03 PM, Rich Pieri wrote: > Server is behind firewall. It gets SSL certificates from letsencrypt. > Dovecot is configured to use these certs. imapfilter had been working > perfectly for a long time. Since upgrading to Debian 11 earlier this > week I get these errors: > > $ imapfil

Re: [Discuss] btrfs tip

2021-07-04 Thread Matthew Gillen
On 7/4/2021 12:46 PM, Ian Kelling wrote: > > Matthew Gillen writes: > >> Came back from vacation to a dead disk in my main linux server. Disk >> had been dying for a while, and we had a power outage at some point >> while I was gone which must have finished it

[Discuss] btrfs tip

2021-07-03 Thread Matthew Gillen
Came back from vacation to a dead disk in my main linux server. Disk had been dying for a while, and we had a power outage at some point while I was gone which must have finished it off. Kernel had been stuck trying to initialize the disks on boot for 3 days. Protip: if you use btrfs as your roo

Re: [Discuss] work search question

2021-06-07 Thread Matthew Gillen
On 6/2/2021 2:23 PM, Eric Chadbourne wrote: > On June 1, 2021 at 9:51 PM, wor...@alum.mit.edu wrote: > > > From: Eric Chadbourne > > Solid standard English?? Who's standard?? Usually I don't use caps or > double space.? This is about as adult and standard as I can get.? ;-) > > But my point

Re: [Discuss] resolved and DNSSEC

2021-04-13 Thread Matthew Gillen
On 4/13/2021 3:07 PM, Gregory Galperin wrote: > On Tue, Apr 13, 2021 at 02:38:14PM -0400, Matthew Gillen wrote: >> So the issue seems to be that the systemd-resolved stub resolver doesn't >> support giving the full signed record to delv like the nss-resolver does. > >

[Discuss] resolved and DNSSEC

2021-04-13 Thread Matthew Gillen
I did a system upgrade the other day of my main home server/firewall, and for once the problem wasn't email, it was DNS. Fedora 33 moved to resolved, which does some interesting things compared to what I was used to. Amazingly, it maintained the basic contours of the system I had before: systemd-

Re: [Discuss] bluetooth

2021-03-17 Thread Matthew Gillen
On 3/11/2021 5:44 PM, Eric Chadbourne wrote: > I left fedora around 5 when they purposely broke proprietary video > drivers.  Are they more stable now? I would characterize the situation a little differently; the distro had rules about mainline, and for kernel modules that couldn't be in mainline

Re: [Discuss] Running things from initramfs

2021-03-05 Thread Matthew Gillen
On 3/5/2021 9:07 PM, Dale R. Worley wrote: > Here's a messy problem. I suspect the answer is simple, but obscure: > > I have an Oracle Linux (a Red Hat derivative) computer and I'd like to > run "xfs_repair /dev/mapper/ol-root". The problem of course > is that partition is the root partition and

Re: [Discuss] Question About Spam

2021-02-24 Thread Matthew Gillen
On 2/24/2021 6:04 PM, Kent Borg wrote: > I recently started getting spam sent to an address that I supplied to an > online vendor and no one else. I contacted them, and tried to send an > example of the spam, but Google (who handles their e-mail) bounced my > e-mail. > > If this vendor is interest

Re: [Discuss] Tonight's BLU meeting is livestreaming

2021-02-18 Thread Matthew Gillen
On 2/17/2021 7:02 PM, John Abreau wrote: > Tonight's BLU meeting on CentOS is in session. The YouTube live stream can > be viewed at > > https://youtu.be/aERk-mW980k Great meeting last night! I watched after the fact on youtube (have too many little ones to be dealing with during the live broad

Re: [Discuss] html lock

2021-01-26 Thread Matthew Gillen
On 1/26/2021 6:03 PM, Kent Borg wrote: > On 1/26/21 8:09 AM, MC wrote: >> any hope to lock html code? to prevent wholesale download and content >> theft? let's bypass the "don't post it" strategy. Don't want a >> username/passcode option either. these websites must surface on >> standard google

Re: [Discuss] Scripting IMAP for large numbers of messages?

2021-01-07 Thread Matthew Gillen
On 1/7/2021 9:32 AM, Daniel Barrett wrote: > > Has anyone done any scripting to manipulate email on a remote IMAP > server? I'd like to select about 50,000 emails from an Inbox of > ~80,000 (say, all emails from 2020) and move them to a different > folder on the same IMAP server. I'm wondering if

[Discuss] PSA: no root login for SSH

2020-12-22 Thread Matthew Gillen
Since we were talking about services globally accessible recently, just wanted to share a public service announcement. Below is a pretty typical /daily/ count of failed logins on a publicly accessible ssh server under my purview. Seeing as how root has 10 times the hits of the next biggest target

Re: [Discuss] Wireguard [Was Re: dovecot: "Disconnected (no auth attempts in 0 secs)"?]

2020-12-18 Thread Matthew Gillen
On 12/18/2020 12:07 PM, Dan Ritter wrote: > Matthew Gillen wrote: >> On 12/18/2020 10:29 AM, Dan Ritter wrote: >>> That's one of many possible ways to use it. >>> >>> Other uses: >>> >>> - point-to-point VPN tunnel >>>

Re: [Discuss] Wireguard [Was Re: dovecot: "Disconnected (no auth attempts in 0 secs)"?]

2020-12-18 Thread Matthew Gillen
On 12/18/2020 10:29 AM, Dan Ritter wrote: > That's one of many possible ways to use it. > > Other uses: > > - point-to-point VPN tunnel > - hub-and-spoke VPN with routing > - site-to-site VPN with routing > - full-mesh VPN (requires external tools to keep all the config > manageable) > >> Howe

[Discuss] Wireguard [Was Re: dovecot: "Disconnected (no auth attempts in 0 secs)"?]

2020-12-18 Thread Matthew Gillen
On 12/17/2020 12:47 PM, Kent Borg wrote: > P.S. I get *lots* of break in attempts (that's how I know my connection > is live), but my system has very few users, all with good passwords, so > I don't worry. I've struggled with this; with so few users it seems silly to expose certain things to th

Re: [Discuss] Facebook games on linux

2020-12-15 Thread Matthew Gillen
On 12/15/2020 12:45 PM, Jerry Feldman wrote: > Thanks Matt, > What she didn't tell me is that her game will no longer be played on > facebook, it is not a Windows Executable, so that changes the game. Ah, I see. Looks like development stopped on GNASH (https://www.gnu.org/software/gnash/) about 1

Re: [Discuss] Facebook games on linux

2020-12-15 Thread Matthew Gillen
On 12/15/2020 11:53 AM, Jerry Feldman wrote: > My wife plays several Facebook games on Linux. But these are flash based > and will no longer work on January 1 as I have been told. She uses Chrome > as her browser. I'm willing to install a hack to retain flash either on > Chrome or Firefox. > > I a

[Discuss] btrfs on fedora

2020-11-30 Thread Matthew Gillen
I got a little ahead of the curve and used btrfs for one of my fedora 31 installs (which had upgraded to 32 at some point), with separate subvolumes for / and /home. Fedora 33 came along and there was enough cruft built up on it (not to mention a horrible kmod-nvidia mess that I ran out of patienc

Re: [Discuss] linux video editors?

2020-11-15 Thread Matthew Gillen
On 11/14/2020 4:19 PM, Dan Ritter wrote: > R. Luoma wrote: >> >> Would someone have recommendations >> for software to edit video files >> on linux? > > kdenlive > shotcut > flowblade > and blender has a video editor component > > Different people will swear by and at each of these. kdenlive wa

[Discuss] firewalld rant

2020-11-04 Thread Matthew Gillen
Maybe I'm getting cranky in my old age, but after giving up on my manually maintained iptables scripts that were 20 years old and trying to build everything in firewalld (and running mostly successfully for a couple years), I'm considering going back. I'm writing this to hopefully keep you from hu

[Discuss] Network manager fun

2020-08-30 Thread Matthew Gillen
I do some things that usually aren't done on DHCP hosts, so I needed to know when my IP address changed or if my ISP updated their DNS servers provided via DHCP. Should be a simple cron job right? Sort of. A few years ago I stopped fighting against the current and not only gave in and started usi

Re: [Discuss] mount problem

2020-08-30 Thread Matthew Gillen
On 8/28/2020 10:26 AM, dan moylan wrote: > > On Thu, August 27, 2020 11:11 am, dan moylan wrote: >>> i have two computers running: >>> arcturas, an intel nuc10, running fc31, and >>> aldeberon, an asus aspire E1-472P, also running fc31. >>> >>> my memory sticks always mount on /run/media/moyla

Re: [Discuss] OT - Increased WiFi Speeds After DNS Change

2020-07-21 Thread Matthew Gillen
On 7/18/2020 6:27 PM, Dan Ritter wrote: > e...@null.net wrote: >> I decided to try out Cloudflare's DNS service (1.1.1.1). As the Comcast >> gateway will not let the user change the DNS settings in it, I plugged a >> router into the gateway and input Cloudflare's addresses into it. For added

Re: [Discuss] Simple, unintrusive firewall solution?

2020-06-15 Thread Matthew Gillen
On 6/15/2020 4:06 PM, Daniel Barrett wrote: > > tl;dr: Seeking help preventing one network from seeing another. > > I have two routers -- call them R1 and R2 -- and would like to define a > firewall rule so clients of R2 can't see clients of R1. Something like: > > iptables -A INPUT -s -d

Re: [Discuss] email server in Linux

2020-06-13 Thread Matthew Gillen
On 6/13/2020 12:26 PM, Kent Borg wrote: > On 6/12/20 10:29 PM, Tom Luo wrote: >> Does anyone have experience setting a private email server in Ubuntu? > > If you like Ubuntu I would recommend Debian instead. It is what Ubuntu > was based on and they haven't ruined it as badly as they have Ubuntu.

Re: [Discuss] sound

2020-05-06 Thread Matthew Gillen
On 4/27/2020 10:56 AM, Dan Ritter wrote: > dan moylan wrote: >> >> as i wrote in my last missive to blu, i have two >> computers: >> >> arcturas, an intel nuc10, running fc31, and >> aldeberon, an asus aspire E1-472P, also running fc31. >> >> i run dnf upgrade on each every week. >> >> i use timid

[Discuss] conditional forwarding with bind

2019-12-13 Thread Matthew Gillen
I've got bind running on my home network, and I black-hole a bunch of stuff that is general internet hygiene. Looking at setting up a kid-friendly subnet, I quickly came to the conclusion that the most bang for my buck was blocking DNS for 'bad' sites. (I know that there's a bunch of stuff that c