- luv-main - example.com

Kit, free to a good home
by Andrew Pam 15 Dec '20

15 Dec '20

LUV member Peter McMullen has a full-size rack and servers that he wishes to give away. No splitting - please take the whole lot: 1 IBM 24 unit server rack with glass front door and mesh rear door. Dimensions are (HWD) 1180x590x880 1 rack mounted keyboard with touchpad 2 Compaq 8 port KVM switches 1 24 port switch 3 IBM 330 servers (one only good for parts) 2 Compaq Prolient 360 Servers 1 Dell Poweredge 2550 1 IBM @Server - unknown model 1 2-unit empty case 1 4-unit generic case for ATX boards 1 APC UPS + assorted cable tidies etc. This kit is heavy, so you will need a trailer, a ute or a van to pick it up from Eltham. Contact: Peter McMullen ph: 0409 214 390 em: peter(a)mcmullen.net.au Cheers, Andrew -- mailto:andrew@sericyb.com.au Andrew Pam https://sericyb.com.au/ Manager, Serious Cybernetics https://glasswings.com.au/ Partner, Glass Wings

2 1

Planet Linux Australia etc
by Russell Coker 12 Dec '20

12 Dec '20

https://planet.luv.asn.au/ Above is the current address of Planet Linux Australia. Hopefully the Linux Australia people will point the DNS entry for planet.linux.org.au to the LUV server so it can go back to the old name. Also I recently setup a Tor gateway node (that transports encrypted data between other nodes - doesn't talk to the clearnet or to clients) on the LUV server. The host OS of the VM has been running a Tor gateway node for a while and was running at 100% of a CPU core for most of the day, due to the design of Tor there is no possibility of using threading. Now we have 2 copies of Tor on the same hardware each using about 80% of a CPU core so that machine is giving 1.6 CPU cores of an i7-930 to the transfer of encrypted data. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

IPv4 email
by Russell Coker 10 Dec '20

10 Dec '20

For a few days the LUV mail server hadn't been accepting mail via IPv4. As my monitoring scripts were run from IPv6 connected systems and the mail server hosting my personal mail is on IPv6 I hadn't noticed it. Thanks Brian May for reporting this. I've fixed it and have started work on improving my monitoring scripts. I now have SSL certificates checked on all IP addresses (both IPv4 and IPv6) of the DNS names and I've uploaded a package to Debian/Unstable with that (not worth a regular release yet). The IMAP checks will be a little more complex and the basic SMTP checks should be easy enough. Hopefully by the end of the weekend all likely combinations of this sort of thing will be monitored and the source uploaded. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

[Brian May] IPv6 Linux question
by Brian May 10 Dec '20

10 Dec '20

I have posted this question here with some minor updates here: https://unix.stackexchange.com/questions/623274/ipv6-addresses-on-interface… -------------------- Start of forwarded message -------------------- From: Brian May <brian(a)linuxpenguins.xyz> To: luv-main(a)luv.asn.au Subject: IPv6 Linux question Date: Sat, 05 Dec 2020 15:06:24 +1100 >From a given computer, if I do the following: canidae# ip add dummy0 type dummy Command "dummy0" is unknown, try "ip address help". canidae# ip link add dummy0 type dummy canidae# ip addr add dev dummy0 2001:44b8:4112:8a02::55 canidae# ip addr add dev dummy0 192.168.2.55 canidae# ip link set dummy0 up Now from another computer on the network, I can ping 192.168.2.55. It does not matter that the packets are coming in on enp3s0, not dummy0 because the IP address is global. But I cannot ping 2001:44b8:4112:8a02::55 from a remote host unless I assign the address to enp3s0. My understanding is that this is suppose to work for IPv6 the same as IPv4, but it doesn't. This computer has no ip6tables that might be blocking something. This computer is: canidae# uname -a Linux canidae 5.9.0-3-amd64 #1 SMP Debian 5.9.9-1 (2020-11-19) x86_64 GNU/Linux But I have seen similar behaviour with: root@kube-node-3:~# uname -a Linux kube-node-3 4.19.0-12-amd64 #1 SMP Debian 4.19.152-1 (2020-10-18) x86_64 GNU/Linux How do I fix? -- Brian May <brian(a)linuxpenguins.xyz> https://linuxpenguins.xyz/brian/ -------------------- End of forwarded message -------------------- -- Brian May <brian(a)linuxpenguins.xyz> https://linuxpenguins.xyz/brian/

1 0

ZFS
by Russell Coker 08 Dec '20

08 Dec '20

https://www.itwire.com/open-sauce/openzfs-has-released-an-update,-but-how-m… A new version of ZFS was released. I don't think it's a big deal as the old version was pretty good and the new features didn't excite me (the 1 feature I wanted isn't in it). Sam gave a reference to my ZFS training in his article, unfortunately almost no-one clicked on the link. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

testing
by Brian May 07 Dec '20

07 Dec '20

Recently I sent an email to luv-main(a)luv.asn.au, but it hasn't shown up in the archives. Testing... -- Brian May <brian(a)linuxpenguins.xyz> https://linuxpenguins.xyz/brian/

1 0

Matrix chat room
by Russell Coker 02 Dec '20

02 Dec '20

The room luv_chat:luv.asn.au is now visible to federated servers. Please join it for random LUV discussions. I will create something equivalent to luv-main on Matrix later if there's a need. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Upgrading Ubuntu with a RAID drive
by Andrew Greig 30 Nov '20

30 Nov '20

Hi all, I have been running extremely well since taking the advice and receiving the support of many on this list. I am grateful those members everyday for its stability. Ed Chan has been an amazing support in creating some backup solutions which have automated the process of achieving efficient data redundancy. I have a Ubuntu 18.04.5 LTS distro with a RAID 1 pair under btrfs.And now I am considering upgrading to another LTS release. Will the commands relating to the RAID survive the upgrade, will the script work from Ed survive the upgrade? In my work as a photographer I find myself in need of GMIC in GIMP, but the latest iteration of GMIC is what I need to recover some work I recently shot. And the latest version of GMIC needs Ubuntu 20.10. Many thanks Andrew Greig

4 4

RE: Choosing an NBN RSP
by Anthony 30 Nov '20

30 Nov '20

> > So far I've narrowed the list to Aussie Broadband and Superloop, which > look reasonably on par. Any recommendations, or other suggestions? > I've been with Netspace/Westnet/iiNet since the 90s and they've been ok.. On NBN100/40 FTTN business account, according to Samknows/ACCC speed monitoring, I'm getting average of 96.4/36.8 with peaks in low demand times of 102/38. Now that iiNet's been absorbed by TPG, I might consider Aussie first if choosing from scratch.. > I'll also need to do an equipment upgrade in the near future. Thinking of > replacing our stopgap all-in-one device with Ubiquiti kit, e.g. an > EdgeRouter, POE AP, switch. Anyone have experience with this? Is it > overkill for a small home network? > I've been thinking about Ubiquiti myself - what gave me pause was that the UniFi USG with DPI enabled seems to be limited to 85Mbps throughput. Not sure I want to shave that off, but also not sure I want to turn off DPI. Am curious to hear how other folks have set themselves up. Have heard little bits about EdgeRouter etc.. Right now I'm using an Asus RT-AC5300 with some third party firmware mods.

1 0

SSL on LUV server
by Russell Coker 10 Nov '20

10 Nov '20

I've been doing some work on the LUV server and noticed that it was supporting old SSL protocols. I disabled TLS 1.1 as ssllabs will no longer give a rating higher than B to a site that uses it, with that change we get an A+! I think this is no big deal as this only prevents access from Android below version 5.0 (NB Chrome on Android 4.x works fine, it's the Android internal browser that no-one would ever want to use on our site that fails), and some particularly ancient versions of Safari and IE. https://www.ssllabs.com/ssltest/analyze.html? d=www.luv.asn.au&s=46.4.124.163&latest The above URL gives the test results. I disabled all the weaker ciphers that aren't being used. The cipher TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA is weak but is required to support IE11 on Windows versions before 10 and Safari versions before 9. Is it worth keeping? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 1