June 2016 - Talk - lists.gtalug.org

dinner before June meeting: Basil Box?
by D. Hugh Redelmeier 14 Jun '16

14 Jun '16

Reference material: <http://wiki.gtalug.org/pre-meeting_dinner> Please help maintain and improve this wiki page. If you went to May's dinner, consider adding a comment about Thai on Yonge. I tentatively suggest we go with Miles' suggestion from last month: I'm interested in Basil Box. This is Thai (I think), just like last month. This is a consequence of nobody else making a suggestion. But if you are quick we can decide on another location. <https://wiki.gtalug.org/pre-meeting_dinner#basil_box> Address: 351 Yonge St. (part of Ryerson SLC building, opposite Elm St.) <https://www.yelp.ca/biz/basil-box-toronto> <http://www.blogto.com/restaurants/basil-box-toronto> Do read the reviews to understand what this is: - food is (intentionally) cold - you choose what goes into your "box" - apparently this is like Chipotle (I've never been to one)

2 3

Yahoo/Rogers/Outlook and GTALUG (was We are having DMARC/DKIM troubles)
by Myles Braithwaite 13 Jun '16

13 Jun '16

tl;dr Hopefully this issue is fixed. I have added `REMOVE_DKIM_HEADERS = Yes` to the `mm_cfg.py` file. This basically removes the sender's DKIM email header when sending the message to the subscribers. This should stop the issues.

1 0

Re: [GTALUG] We are having DMARC/DKIM troubles ...
by Alvin Starr 13 Jun '16

13 Jun '16

On 06/12/2016 02:23 AM, ac(a)main.me wrote: > On Sat, 11 Jun 2016 18:24:43 -0400 > CLIFFORD ILKAY <clifford_ilkay(a)dinamis.com> wrote: > <snip> >> This is obviously a problem for non-technical users. They simply do >> not understand any of this and it all becomes too complicated for >> them. Most users do not know how to add anything to their address >> book or create message filters/rules and they think the list server >> is broken and should be "fixed" when in fact, it's their email >> provider. >> I never see these issues with subscribers who have Gmail accounts, by >> the way. >> Email is dying a slow death. The alternatives, like Twitter direct >> messaging, Slack (ugh!), WhatsApp (double ugh!), and various instant >> messaging schemes are worse. Those will eventually be polluted by >> spammers, too. >> > Would like to start my reply by saying that I received my first spam in > 1987, from CompuServ and that imnsho email will never die, it is too > well suited to human nature. > > These days, I am trying all sorts of new ways of trapping new spam bots > and figuring out how to get more spam, more data, more bots. > Huge multi nationals like Google etc do not share their data > > To understand the small spam problem in 2016, one has to > understand the differences in modern email. > > Mass email providers like @gmail.com @yahoo.com @hotmail.com are > hard/difficult to block - and they know that - so some of them, like > yahoo.com for example, does not spend as much money as say google.com > does - to fight abuse. > > If @dinamis.com would dare to send spam - @dinamis.com would simply end > up in a rbl > > Our rbl's commonly block at least 100 yahoo servers for each single > google.com server and the blocks last anything from an hour to weeks, > depending if they stop their spam > > Interestingly, if Google is blocked for spam they bounce back to their > user with : technical error at the receiver - this is kinda evil as it > implies that their is a problem at the receiving server, when Google > full well knows that their is an admin restriction due to Google being > abusive... > > branding I guess, users have to be kept as mushrooms for as long as > possible so that the large guys can dominate and take over the world :) > > All you need to end up on an RBL is one hacked user. Been there. Cleaned up after that. If you have a few tens to hundreds of million of clients(like the big guys) you will have lots who are compromised and now sources of spam. Its amazing the the big guys don't have all their mail servers blocked all the time. Your right that its annoying that the big guys seem to get by without paying attention to the rest of us. As an aside some times I get the feeling RBLs are getting close to being extortionist in their tactics. I have had clients with mail servers that get black listed and they find themselves having to pay to get off some of the RBL's. -- Alvin Starr || voice: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin(a)netvel.net ||

3 2

OT: Cisco SP112 Vs Grandstream HT702
by Ivan Avery Frey 13 Jun '16

13 Jun '16

Which is the better VOIP adapter?

2 2

We are having DMARC/DKIM troubles ...
by Stewart C. Russell 12 Jun '16

12 Jun '16

If replies seem patchy, we've just had a bunch of people - mostly Yahoo and Rogers users - auto-kicked from the list due to DMARC. This is an ongoing pain for list admins. The reason given by Yahoo is this: https://help.yahoo.com/kb/postmaster/SLN7253.html Yeah, they're advising Reply-To mungeing as an industry standard. Joy! cheers, Stewart

8 8

pfsense
by James Knott 10 Jun '16

10 Jun '16

Lack of support for dhcpv6-pd caused me to change my firewall/router from openSUSE to pfsense. The more I work with pfsense, the more I like it. I installed it a couple of weeks ago and am impressed with the features in it. Of course, since they also sell hardware running on it, I'd expect pfsense to be professional grade. It certainly appears to be. I know this is a Linux list, but I strongly recommend pfsense, which runs on FreeBSD. The only thing missing is I haven't got Wireshark running on it (yet). https://www.pfsense.org/ Anyone using IPv6 on Rogers or many other providers needs something that supports dhcpv6-pd. Pfsense does.

1 0

Bob Young (former Red hat CEO) is giving a talk at DemoCampHamilton25
by Myles Braithwaite 09 Jun '16

09 Jun '16

DemoCampHamilton25 - 16 June 2016 at 6pm - Registration is Required McMaster Innovation Park - 175 Longwood Road South - Hamilton <http://www.eventbrite.ca/e/democamphamilton25-tickets-24971188497> DemoCamp is an event for the regional technology and startup community to come together and share what they've built, give each other feedback, and connect with one another. The event involves a series of 5 minute live tech demos + 5 minutes of audience Q&A.

3 2

firewalls and iptables
by Darryl Moore 07 Jun '16

07 Jun '16

So on a customers network I was having issues with what looked like port blocking based on the source address of my UDP packets. Weird eh? Basically whenever a remote SIP client registered with my asterisk box it would work for a while, then eventually the responses from asterisk would get blocked. I put this down to a defective router somewhere in the communication path. My work around which seemed to work was to change the UDP port asterisk was using for SIP and use iptables to reroute from the original port to the new port. This way the response would come from the new port and not get blocked. And it worked to!! This is what I did to move the ports /sbin/iptables -t nat -F /sbin/iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5060 -j REDIRECT --to-ports $port sed -i "s/bindport.*/bindport=$port/" /etc/asterisk/sip.conf /etc/init.d/asterisk restart buuuuuuut....., the iptables flush doesn't work, and there is nothing that seems to make it work. after a while see this with tcpdump 14:37:20.064722 IP 192.168.10.97.5060 > 192.168.10.59.5067: SIP, length: 4 14:37:20.064772 IP 192.168.10.97.5060 > 192.168.10.59.5062: SIP, length: 4 14:37:20.064783 IP 192.168.10.97.5060 > 192.168.10.59.5064: SIP, length: 4 14:37:20.064800 IP 192.168.10.97.5060 > 192.168.10.59.5065: SIP, length: 4 14:37:20.064834 IP 192.168.10.97.5060 > 192.168.10.59.5066: SIP, length: 4 14:37:20.064990 IP 192.168.10.97.5060 > 192.168.10.59.5063: SIP, length: 4 14:37:20.065025 IP 192.168.10.97.5060 > 192.168.10.59.5060: SIP, length: 4 It looks like the packets get cloned multiple times (each time I move the port). What is worse is I cannot switch back to port 5060 because of it. I've done just about everything I can imagine to get iptables to behave properly. Putting aside my original issue with the external source port blocking, has anybody seen anything like this before? The only thing I can do to restore the kernel firewall is to reboot.

1 0

Used computers
by Tim Tisdall 06 Jun '16

06 Jun '16

Where's a good place to get a used computer for relatively cheap? I have a uncle who's struggling with a fairly old machine (I'm not sure what it is, but it has a CRT monitor) and I was hoping to replace it with something slightly newer. Maybe someone knows a good spot to get off-lease computers? What does UofT do with their hand-me-downs?

13 24

hello community
by ac 05 Jun '16

05 Jun '16

thank you for the off list replies, welcome messages, etc. I look forward to contributing and being part of this community My name is Andre Coetzee, I am a linux sysadmin, coder, tinkerer, new tech innovator wannabe. I am controversial mainly because I am direct (not so much of a BOFH as I claim to be) I firmly believe: in Linux and the Linux philosophy and family (http://south.me) I know: that people are messy, that there is black, white and a lot of grey, that life is very very short. I love life. I joined this group as I am a future expat, my wife's family is in the US and mine in Toronto. I am in love with the idea of America and the American dream and the US Constitution (and have actually contributed to Wikipedia on improving the accuracy of the constitutional amendments) The US diversity and strength of the people of the USA is magnetic. I love the Canadian people, the duality of the Canadian culture and I am firmly convinced that the Canadian people are the greatest people on the planet. my favorite things are C, PHP, Python, Bash, Maria, PostgreSQL, Apache, Exim, Postfix, Sendmail, Bind, DNS, I meddle in Java, C#, hadoop, asm and a few other things I work at an ISP, sysadmin, abuse, support, develop systems (like EPP domain registration, etc) also develop anti abuse system tech (spam/phish/bots) using limited AI with distributed node design, I am involved with RIPE, SpamCop.net and of course SpamID.net and Ascams.com, and have many new and interesting ventures, some which are open and free and some to make money. and that, I guess, is me :) Andre

1 0