- luv-main - luv.asn.au

tor etc
by Russell Coker 16 Oct '17

16 Oct '17

https://www.usenix.org/legacy/events/leet11/tech/full_papers/LeBlond.pdf Here is an interesting paper about deanonymising Tor users. It covers some deficiencies in Tor (reusing circuits) as well as some problems with the way it's used. https://en.wikipedia.org/wiki/TorChat https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Tor_Browser Here are URLs about TorChat and TorBrowser which I mentioned in my talk. At the hands-on workshop I'll cover these things in more detail. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

dynamic IPs, remote access, poor internet
by cory seligman 11 Oct '17

11 Oct '17

Hi all, I'm about to deploy a small server (raspberry pi) in a remote location (outback WA). The site has satellite internet, which I believe is reliable but laggy. I'd like to set up my server so I have remote shell access, but the problem I'm struggling with is the two layers of dynamic IP. The site as a whole has some satellite modem that gets a dynamic IP, but then my server will get a NATted dynamic IP from the router. I don't have control over the router, so I can't implement port forwarding with a static IP. Does anyone know what the "correct" solution might be? I've only gotten as far as very hacky solutions such as a reverse tunnel via an ssh cron job (hourly?) to my local IP. The server is in hourly communication with an Amazon S3 service to upload its collected data, so another possibility is that it periodically checks the S3 drive for a file to execute. If i place a script there it could run it and pipe the results back to me. Nasty and not very interactive. Anyone? Cory

6 6

Melbourne linux.conf.au in 2020?
by Andrew Pam 10 Oct '17

10 Oct '17

Melbourne started what is now the annual linux.conf.au with CALU in 1999, then held it again in 2008. We haven't hosted one since then, though there was Ballarat in 2012 and Geelong in 2016. Megan Cockroft from the Melbourne Convention Bureau has been put in touch with us to check if there is any interest in Linux Australia and LUV hosting a joint linux.conf.au and GNOME Asia Summit in Melbourne in 2020. Are there any LUV member who would be interested in organising? Cheers, Andrew

1 0

Sending Bulk Mail - Own SMTP mail server on VPS vs 3rd Party Mail Service
by Wen Lin 01 Oct '17

01 Oct '17

One of the associations I'm in (besides LUV) have been experiencing difficulties sending bulk emails to members on a monthly basis (for announcements, newsletters purposes). This is because when you are trying to send bulk emails via your free web mail account (in this case, GMail), there is a limit imposed by Google (or any other webmail service providers) on the number of email addresses we can mail out to, within a period of time - and this limit can get ever stricter as time goes by. So the whole mailout process becomes unmanageable after a while. While the Ctte is looking into various alternatives, including several of the 3rd party mail services / transactional mail services in the market, I am offering them another option: Setup a SMTP mail server (e.g. Postfix) on a VPS hosted by a web hosting company, and handle the whole bulk mailout ourselves. I am willing to help them setting up a VPS, hardening the Linux, installing & configuring all the mail software, etc, and then take care of the regular maintenance. For VPS hosting service - I had looked at one hostwinds.com (Editor's Choice of au.pcmag.com 2017) (~ US$ 14 / mth). Will check out others to compare - basically I'm after a reasonably priced and reputable VPS web hosting company. I would like to hear any recommendation, or any first-hand experience dealing with any particular web hosting company - which I'm sure many of LUV members certainly have. For domain name (.org.au) - About $48 for 2 years. Any reputable Domain Registrar that you would recommend? For SSL Certificate - I can install one from Let's Encrypt, which will be free. Any major cost/charges that I have missed? I also intend to follow all the bulk mail best practices, SPF/DKIM settings, MX records, security measures, email etiquette, etc, to make sure that our organisation normal notification/newsletter to our members, would not be treated as SPAM. The 3rd party mail service providers that I had found so far: MailChimp, MailJet, Amazon-SES, SendGrid, MailGun (and many others). Did lots of google searches, trying to compare (Advantages & Disadvantages) between managing own SMTP mail server and using 3rd party mail services. The results were mix and varied. I myself certainly have much more faith in opting for a self-managed mail server solution over the commercial mail service ones. Some of the advantages: - Have full control over most aspect of the mailing process. More flexible. Not constraint by the ever-changing rules imposed by 3rd party mail services. - Using all free & open source software - have all the freedom, and can tap into the large FOSS Community out there for various kinds of help and support. - Cost-wise, the mail server option is generally on the lower end of the price spectrum, as compared to many of the 3rd party mail services in the market. - No doubt the own mail server option would involve more work, more time to manage the whole thing - but I'm quite happy to take up this challenge, and to learn a lot from this hands-on experience. I would be delighted if any of you who are experienced in managing a linux-based mail server can kindly share with us some more real-life examples and hands-on experiences - so that I can gather more solid evidence & cases, hopefully to strengthen my case for a self-managed mail server solution. Some points that I had read somewhere that I would like to quote below to seek your comment: "*What a commercial mailing list operator does, and which you cannot easily replicate, is build and maintain a reputation as a responsible and reputable source of bulk email. If you are not going to be getting into that, perhaps you could benefit from getting help from a commercial mailer. ... * *Abuse handling, bounce handling etc are important to get right, but until you have significant experience, your reputation is going to remain zero, if not negative (which is a reasonable starting point for unknown domains in this day and age). A lot of the reputation-based stuff like SPF, DKIM etc will help only if you have a reputation to defend. On the other hand, it does send the right signals to somebody who is deciding on whether or not a sender is to be treated as reputable (or rather, their absence is not a good sign; neither, in my book, is anything to suggest you are using homegrown and/or prerelease software to send email). *..." I also read somewhere which seemed to point to a 3rd option: Still use own mail server, but direct the outbound mails to an external Mail Relay service. What do you think? When this whole project (if accepted by my Ctte) is done and implemented successfully, I intend to share my experience in this whole process, in one of LUV talks. In the mean time, I have a lot of work to do, and lots to learn ... Cheers, Wen

6 10

Re: **SPF problems detected ** Re: Sending Bulk Mail - Own SMTP mail server on VPS vs 3rd Party Mail Service
by Andrew McGlashan 25 Sep '17

25 Sep '17

Recieved-SPF: permerror (darrenwurf.com: Unknown mechanism type 'aaaa' in 'v=spf1' record) receiver=luv.asn.au; identity=mailfrom; envelope-from="darren(a)darrenwurf.com"; helo=mail.darrenwurf.com; client-ip=43.229.63.47 https://vamsoft.com/support/tools/spf-policy-tester 46.4.124.163 darren(a)darrenwurf.com PARAMETERS DNS server: 8.8.8.8 (Google Public DNS) Evaluation time limit: 20 seconds (default, see RFC7208 Section 4.6.4) Maximum number of void DNS lookups: 2 (default, see RFC7208 Section 4.6.4) Standards compliance: RFC7208 (April 2014) Test is queued, please wait... +0 msSPF check starting. IP: 46.4.124.163 Sender: darren(a)darrenwurf.com Domain: darrenwurf.com EHLO/HELO domain: +0 msRetrieving DNS TXT record for "darrenwurf.com". +37 msTXT record found. Line #1: "v=spf1 mx mx:darrenwurf.com mx:secure.darrenwurf.com mx:smtp.darrenwurf.com a:darrenwurf.com a:docker4.darrenwurf.com aaaa:darrenwurf.com -all" +0 msStarting SPF policy evaluation. Policy: "v=spf1 mx mx:darrenwurf.com mx:secure.darrenwurf.com mx:smtp.darrenwurf.com a:darrenwurf.com a:docker4.darrenwurf.com aaaa:darrenwurf.com -all" +1 msSyntax error in the SPF policy. Returning SPF "permerror". Domain: darrenwurf.com At character: 119 Length: 19 Token: "aaaa:darrenwurf.com" Error: Unknown term "aaaa". +0 msFinished SPF policy evaluation. DNS limits status: DNS terms 0 of 10 allowed. Void lookups 0 of 2 allowed. See RFC7208 Section 4.6.4. +0 msThere was an error during the policy evaluation. Error message: "Syntax error in SPF policy for "darrenwurf.com" at character 119: Unknown term "aaaa"." +0 msPolicy evaluation finished with SPF "permerror". TEST SUMMARY The evaluation completed in 38 ms, with 2 errors and 0 warning. Result: SPF permerror Permanent error. Fixing the problem requires intervention of the policy publisher. Error message: "Syntax error in SPF policy for "darrenwurf.com" at character 119: Unknown term "aaaa"."

2 2

Re: Sending Bulk Mail - Own SMTP mail server on VPS vs 3rd Party Mail Service
by Wen Lin 24 Sep '17

24 Sep '17

Hi Arjen, Thanks for your info. I will check out this Binary Lane. BTW, I noticed a few of our LUV members have VPS hosted by Digital Ocean. They seem quite active in hosting various Linux related forums and tutorials. However, Digital Ocean is also American, but they do have DCs outside of US, e.g. Canada. Cheers, Wen On 23 Sep. 2017 5:00 pm, "Arjen Lentz" <arjen(a)lentz.com.au> wrote: Hi For our VPS hosting needs in Australia we use Binary Lane. They're Australian owned as well, which I regard as an advantage (also in legal terms). Stuff just works and their support has been very prompt and technically competent. Linode is very good and we've used them for years, but they are American and thus directly subject to US legal leverage. Even if you used a Linode DC in Japan or Singapore, ultimately it would be open to US legal frivolities. This may not be a consideration for some needs, but I'm just putting it out there. Data sovereignty is a thing. Regards, Arjen.

1 0

test message
by zlinw＠mcmedia.com.au 12 Sep '17

12 Sep '17

Test message to see if I can finally post to luv from my luv registered email adress Lindsay

1 0

Re: device naming (was Re: Ethernet port setup part2)
by Erik Christiansen 08 Sep '17

08 Sep '17

On 08.09.17 22:22, Craig Sanders via luv-main wrote: > except that udev will **always* run before any NIC is up, while ifrename > may not - and will bail if the NIC is in use. which, IIRC, provided the > motivation for me to finally switch from ifrename to udev years after > udev had the capability. Whatever works best in the use case, of course, but from "man ifrename": "Ifrename must be run before interfaces are brought up, which is why it's mostly useful in various scripts (init, hotplug) but is seldom used directly by the user." Sounds like mdev will be worth a look once it matures a bit. (Will have to try to remember.) Erik

1 0

Re: device naming (was Re: Ethernet port setup part2)
by Russell Coker 08 Sep '17

08 Sep '17

On Thursday, 7 September 2017 11:02:52 PM AEST Rick Moen via luv-main wrote: > I would never recommend for a business as file server with simultaneous > use of motherboard SATA ports, a PCI-E SAS card, and USB things on an > ongoing basis. That seems like poor component selection, IMVAO. [0] Sometimes you just have to do such things. I run a server which has as it's main purpose preparing SD card images for embedded PCs. The images are made by the people who install the embedded PCs on-site (who wear high-visibility clothing). Getting them to unplug USB devices during system boot isn't a viable option. I just have to make the system work with a SD card being sda and hard drives being sde and sdf if it boots with the USB device connected. As for Ethernet device names, here are the device names I chose for one of my systems: ethbl ethbr gethm getht lo mb0 The sockets on PCI boards are bottom-left, bottom-right, middle (gig-e), and top (gig-e). The motherboard has a single socket. Udev naming worked for me and didn't need any special configuration. Now I use files in /etc/systemd/ network and again it works without any special configuration. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Re: Ethernet port setup part2
by Rick Moen 08 Sep '17

08 Sep '17

I just remembered: > I vaguely recall that a system swapped eth0 and eth1 when replacing a > 2.0.x kernel with a 2.2.x kernel (or 2.4 to 2.6, or something like > that). Which didn't surprise me much, and is why God made rc files > editable. > > And ifrename is cool. I've encountered _zero_ instances of network interfaces changing their device nodes on RHEL/CentOS, under any circumstances, for the simple reason of DEVICE and HWADDR directives being used in the default /etc/sysconfig/networking/devices/ifcfg-* files. DEVICE=eth0 HWADDR=11:22:33:44:55:66 Which can optionally be used to assign devices names of your choosing such as 'lan' and 'wan'. I guess the 'network interfaces have come up in a different order' scenario seems to be primarily a Debian/*buntu, etc. one (that has never arisen in my use-cases), and mostly involves USB (and other equally flaky hotplug hardware schemes). Did I mention that ifrename is cool? ;->

2 1