- luv-main - luv.asn.au

Re: Power outage today, system fscked
by Andrew Greig 23 Oct '19

23 Oct '19

Further information: On trying to mount the RAID file-system it failed because the fs was readonly. I normally have mc installed on every computer but it has disappeared on the desktop computer and I cannot install mc as the system is readonly. I figured I may have to edit the fstab and I use mc as I am not familiar with vim or vi. No luck there. Cheers Andrew

1 0

Linux.conf.au 2020
by Andrew Pam 13 Oct '19

13 Oct '19

I've just booked my early bird tickets and flights to LCA2020 on the Gold Coast. Flights are cheap right now, get 'em while they last! Accommodation on the other hand is expensive as this year's conference is being held at the Gold Coast Convention Centre and not at a University, so there is no student accommodation available this year. Is anyone else going and would like to share a hotel room? Cheers, Andrew

4 5

Renaming files
by Andrew Greig 10 Oct '19

10 Oct '19

Hi all, My camera has just ticked over 10,000 images in around 8 months, and so another folder has opened up on the SD card, prior to today the file folder was 100EOS5D, the new folder is 101EOS5D, but the counter has reset from 6H9A9999 to 6H9A0001. At this rate I cannot afford to have the same file numbers repeating in the same calendar year. I can go into the Camera and change the file numbering to 6J9Axxxx, but how can I run a bulk renaming of my Raw Files - not being a scripter I am at a (self imposed) disadvantage, I have tried to understand the several ways to achieve this,but I have not grasped it. Rename 6H9A0001.CR2 6J9A0001.CR2 Rename 6H9A0002.CR2 6J9A0002.CR2 Rename 6H9A0003.CR2 6J9A0003.CR2 Rename 6H9A0004.CR2 6J9A0004.CR2 to Rename 6H9A0085.CR2 6J9A0085.CR2 Any help would be gratefully received. Andrew Greig

8 26

Re: Running a public DNS server at home - Is this safe?
by Rick Moen 08 Oct '19

08 Oct '19

Quoting David Zhan (david.zhan.list(a)gmail.com) > Hi everyone, Everyone: 'Hi!' > I am thinking about running a public DNS server (with Pi-Hole) at > home, but not sure if that's safe. Safe against what? In the security field, we tend to use concepts like 'threat model' and 'attack surface'. You may want to look those up and consider what your concerns are and how to articulate them. Exposing any network daemon to remote networks, not to mention the public Internet, necessarily expands your attack surface. This is why you should (1) not run public-facing software without compensating benefit, (2) be picky about which software option you elect to run and how it's configured, and (3) maintain your system, e.g., roll out necessary fixes that may addresss security problems in a timely manner. Relevant to that, you may be pondering choice of software. Here are some good maintained open-source DNS daemons available for Linux: Authoritative-only: ------------------ Knot DNS NSD for small/medium-sized deployments PowerDNS Authoritative Server for large sites YADIFA Recursive-only: -------------- Deadwood dnscache from djbdns/dbndns, which appears to be the best-maintained fork of djbdns PowerDNS Recursor Unbound Generally, I prefer NSD (auth-only) and Unbound (recursive-only). Notably absent from that list is BIND9. Some more details about that are in my DNS software bestiary: http://linuxmafia.com/faq/Network_Other/dns-servers.html If the category distinctions (authoritative, recursive, etc.) are unfamilary, my somewhat puckish allegory about the 'Village of Lan' (that I penned in 2010) may help: http://linuxmafia.com/~rick/lan.html > I planned to share this server with my friends in Melbourne but I > don't want them be able locate my home. Well, far be it from me to criticise what you say you want to do, but, FWIW, I long ago decided that, for my _own_ Internet presence, I would pointedly take the opposite approach, e.g., in the (totally discretionary) LOC (location) reference records I publish in my domain zones, e.g.: $ dig -t LOC linuxmafia.com. @ns1.linuxmafia.com. +short 37 25 53.825 N 122 11 52.128 W 15.00m 1m 10000m 10m $ In fact, to lampshade the joke, I also publish an 'ICBM address' on my personal Web page, accurate to about a centimetre, giving the exact location of my favourite chair in my living room. ICBM: 122.204196°W, 37.430410°N, 49.28 metres elevation I have it on good authority that my 'Here, let me make it trivial for you to determine the exact physical location of me and my computing gear' spooked at least a couple of people who set out to 'doxx' me and found it worrying that I rolled out the red carpet for them. ;-> > Questions: > > Will my user be able to locate my home accurately? > (To suburb is acceptable, but street is a bit scary......) Assuming you don't do as I do and flamboyantly publish that information in LOC records and ICBM address data, then the user's ability to do that would be limited to the accuracy of geoIP data, which also tends to cost money to the consumers of that data. Ever notice that Google News makes a guess at your physical location based on your public IP address? That's using geoIP services. But notice that it's fairly approximate, at most isolating the IP's location to a neighbourhood. and sometimes it's comically wrong, depending. > Will I be facing other risks? Of course you will. This is where you start studying security, the way we sysadmins do. One modest starting point, a piece I wrote about a LinuxWorld Expo security talk in 2000: http://web.archive.org/web/20080427075329/http://security.itworld.com/4352/… > P.S.: I will put that server behind a properly configured firewall, so > the server itself should be alright. {headdesk} Nope. Most people use 'firewall' to mean 'set of IP/port filter rulesets'. Consider a hypothetical example server. It has a minimally configured instance of NSD for authoritative nameservice to the public Internet, it runs Portable OpenSSH for remote administrative access, runs atop Linux, and has no other network services whatsoever. Therefore, the attack surface consists of: o code exposed on port 22 (SSH) o code exposed on port 53 (NSD) o Linux TCP/IP stack Add to that a 'properly configured firewall'. What does your attack surface now consist of? Answer: the same, except there is additional possible exposure to stack congestion on account of the netfilter rules. > > _______________________________________________ > luv-main mailing list > luv-main(a)luv.asn.au > https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-main

2 2

modern anti-spam
by Russell Coker 05 Oct '19

05 Oct '19

I currently have SpamAssassin set to reject anything over 5.0, but I'm still getting a lot of spam. Are there any other good options? I haven't tweaked SA much, just used mostly the default Debian settings with a few whitelist entries (which are not responsible for the spam). It could be that I'm not running SA properly, if anyone has some quick tips on how to optimise it then I'm interested. I'm not so interested in detailed configuration changes because I don't want to go down the path of SA tweaking and because the server I run has lots of people from different regions and some use of multiple languages so I can't just tweak it for me personally. I guess I could try the Bayes stuff, does that give much of a benefit and how easy is it to setup? CRM-114 is said to be good, does it do things better than SA in some significant way? At this stage I'm even considering challenge-response. I figure if everything below a SA score of 3.0 was let through, everyone who I've ever sent mail to or who I've received good mail from was let through, and everything with a SA score over 5.0 was rejected then there wouldn't be too many challenges sent out (only challenges for unknown senders with scores between 3.0 and 5.0). Also if I do CR I'll set things up so that mail from known good lists (like this one) gets the reply-to added to the whitelist, of course challenges won't go out in response to precedence:bulk mail. Some years ago I ran a CR mail system for about 50,000 users and have memorised the design as well as having a copy of some of the code. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Free hardware
by Russell Coker 01 Oct '19

01 Oct '19

2 MSI N1996 motherboards with CPUs. Believed to be working but not tested recently. They take 2 DDR2 DIMMs and I can supply 2G DIMMs for a capacity of 4G. Not sure what CPUs, but you know the speed of CPUs that work with DDR2. Radeon HD6970 video card. Gamer card from a while ago, so takes lots of power but isn't really fast by today's standards. DVI, HDMI, and mini DP. Had a cooling problem on Windows even after compressed air had removed the dust, maybe a windows driver issue. Gigabyte GV-N56GOC-1GI video card. Does only FullHD on mini-HDMI and does 1440p on DVI. Nice card if you want only FullHD or up to 1440p on DVI. -- Sent from my Huawei Mate 9 with K-9 Mail.

1 0

Planet Aggregation
by Russell Coker 01 Oct '19

01 Oct '19

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940982 Planet-venus is being removed from Debian. What's a good replacement? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

debian bullseye and nbn problem
by bnis＠fastmail.fm 15 Sep '19

15 Sep '19

Hello everyone, I've just connected to the nbn (FTTC) but can't get my debian computer onto the internet. I tried changing /etc/resolv.conf to: search gateway nameserver 8.8.8.8 nameserver 8.8.4.4 but it failed. If I write into the file: domain gateway "gateway" appears red, and it fails. Before this nbn, the adsl modem was 10.0.0.138, which was in the resolv.conf but that didn't work, so it had to be deleted. The new modem has printed on its label: http://mymodem It's a Telstra Smart Modem Generation 2. I tried to bring up http://mymodem in the browsers firefox and w3m but both failed. My /etc/network/interfaces is: auto lo iface lo inet loopback allow-hotplug enp3s0 iface enp3s0 inet6 auto I've searched for info to help, but haven't succeeded. There are some GUI tools on ubuntu I saw, but I don't have them and I want to get the configuration that works into the relevant files. So my question is, how can I get onto the internet with my debian computer with right configs? Thanks. ben -- bnis(a)fastmail.fm

4 8

Software Freedom Day - 21st of September 2019
by PuZZleDucK 04 Sep '19

04 Sep '19

Free Software Melbourne and Linux Users Victoria are celebrating the 16th annual Software Freedom Day celebrations in Melbourne and we're going to be hosting a series of talks about using Free and Open Source Software in the real world. We're going to be talking about what even is Free and Open Source software and why is Free Software so important we want to dedicate a whole day to it. We're also going to talk about using free software for audio production, and how open source is used in the development of open hardware and some demonstrations of projects you could even build yourself. We'll also be having plenty of networking opportunities and introductions to many of Melbourne's Free and Open Source technology groups and organizations. Entry is free any time and Software Freedom Day is a family friendly event welcoming to anyone, pass on the word to help make it a great day for everyone. We do have a code of conduct on our website, but in short: Be respectful. Be mindful. Work together. We'll have light snacks and sodas available gratis throughout the afternoon and at the conclusion of the day we usually continue discussions over dinner along the nearby Errol st, so feel free to join us if you're enjoying the conversations. Hope to see you all at Electron Workshop on the 21st for another exciting Software Freedom Day! Details Date: Saturday the 21st of September Time: Talks starting at 1:00pm and wrapping up about 5:30pm Location: Electron Workshop co-working space Address: 31 Arden Street, North Melbourne Map: https://www.openstreetmap.org/node/2556615434 Travel Tips: http://www.electronworkshop.com.au/map/ Parking: On street parking in the area Code of Conduct: http://freesoftware.org.au/code-of-conduct/ Time Table (further details to be announced shortly): 1:00 - 1:15 Welcomes and Introductions 1:15 - 5:30 Presentations and Community Get Together 5:30 Official event ending 6:00 Dinner at Errol St SFD announce blog: https://freesoftware.org.au/blog/software-freedom-day-21st-of-september-201…

1 0

Fan-less PC - Proxy Server + Fibre NBN | identify hosts on wireless
by Piers 31 Aug '19

31 Aug '19

Hi there, I'm looking for a fan-less box to put into my home manage kids' access to the internet. (Internet) --- NBN RJ45 --- [This Box] --- Wireless access point ---- ***clients*** Q1: Any ideas of a good, affordable system Q2: Can I bridge the wireless so I can trace / manage MAC addresses (Or some other solution) Thanks P For the avoidance of doubt - I'm asking technical questions and not ones about kids on the internet.

4 16