- Talk - lists.gtalug.org

firewalls and iptables
by Darryl Moore 07 Jun '16

07 Jun '16

So on a customers network I was having issues with what looked like port blocking based on the source address of my UDP packets. Weird eh? Basically whenever a remote SIP client registered with my asterisk box it would work for a while, then eventually the responses from asterisk would get blocked. I put this down to a defective router somewhere in the communication path. My work around which seemed to work was to change the UDP port asterisk was using for SIP and use iptables to reroute from the original port to the new port. This way the response would come from the new port and not get blocked. And it worked to!! This is what I did to move the ports /sbin/iptables -t nat -F /sbin/iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5060 -j REDIRECT --to-ports $port sed -i "s/bindport.*/bindport=$port/" /etc/asterisk/sip.conf /etc/init.d/asterisk restart buuuuuuut....., the iptables flush doesn't work, and there is nothing that seems to make it work. after a while see this with tcpdump 14:37:20.064722 IP 192.168.10.97.5060 > 192.168.10.59.5067: SIP, length: 4 14:37:20.064772 IP 192.168.10.97.5060 > 192.168.10.59.5062: SIP, length: 4 14:37:20.064783 IP 192.168.10.97.5060 > 192.168.10.59.5064: SIP, length: 4 14:37:20.064800 IP 192.168.10.97.5060 > 192.168.10.59.5065: SIP, length: 4 14:37:20.064834 IP 192.168.10.97.5060 > 192.168.10.59.5066: SIP, length: 4 14:37:20.064990 IP 192.168.10.97.5060 > 192.168.10.59.5063: SIP, length: 4 14:37:20.065025 IP 192.168.10.97.5060 > 192.168.10.59.5060: SIP, length: 4 It looks like the packets get cloned multiple times (each time I move the port). What is worse is I cannot switch back to port 5060 because of it. I've done just about everything I can imagine to get iptables to behave properly. Putting aside my original issue with the external source port blocking, has anybody seen anything like this before? The only thing I can do to restore the kernel firewall is to reboot.

1 0

Used computers
by Tim Tisdall 05 Jun '16

05 Jun '16

Where's a good place to get a used computer for relatively cheap? I have a uncle who's struggling with a fairly old machine (I'm not sure what it is, but it has a CRT monitor) and I was hoping to replace it with something slightly newer. Maybe someone knows a good spot to get off-lease computers? What does UofT do with their hand-me-downs?

13 24

hello community
by ac 05 Jun '16

05 Jun '16

thank you for the off list replies, welcome messages, etc. I look forward to contributing and being part of this community My name is Andre Coetzee, I am a linux sysadmin, coder, tinkerer, new tech innovator wannabe. I am controversial mainly because I am direct (not so much of a BOFH as I claim to be) I firmly believe: in Linux and the Linux philosophy and family (http://south.me) I know: that people are messy, that there is black, white and a lot of grey, that life is very very short. I love life. I joined this group as I am a future expat, my wife's family is in the US and mine in Toronto. I am in love with the idea of America and the American dream and the US Constitution (and have actually contributed to Wikipedia on improving the accuracy of the constitutional amendments) The US diversity and strength of the people of the USA is magnetic. I love the Canadian people, the duality of the Canadian culture and I am firmly convinced that the Canadian people are the greatest people on the planet. my favorite things are C, PHP, Python, Bash, Maria, PostgreSQL, Apache, Exim, Postfix, Sendmail, Bind, DNS, I meddle in Java, C#, hadoop, asm and a few other things I work at an ISP, sysadmin, abuse, support, develop systems (like EPP domain registration, etc) also develop anti abuse system tech (spam/phish/bots) using limited AI with distributed node design, I am involved with RIPE, SpamCop.net and of course SpamID.net and Ascams.com, and have many new and interesting ventures, some which are open and free and some to make money. and that, I guess, is me :) Andre

1 0

Re: [GTALUG] Recommended Linux Password Lengths
by Myles Braithwaite 03 Jun '16

03 Jun '16

On Fri, Jun 3, 2016 at 11:53 PM, ac <ac(a)main.me> wrote: > [ i unsubscribed after discovering it is a moderated list, Steward - I > am already a big fully grown man and not a little child :) ] Just to clarify we only moderate the first message that is sent so non-related messages don't get sent to the mailing list. One of the moderators forgot to check the "clear moderate" checkbox. Because of some very unique mail server configs that our members have (i.e. running a mailserver on a dynamic ip address, not having a ptr record, etc.), we can't run most traditional mail server protection.

2 1

Re: [GTALUG] Recommended Linux Password Lengths
by Stewart C. Russell 03 Jun '16

03 Jun '16

[you might want to post from an account that subscribes to the list, André] On 2016-06-03 12:22 AM, ac wrote: > > … i require more info to process what you > are saying - many, many people make accounts for you at Amazon/Ebay/$GamingSite > with your gmail addy and then you go and create passwords? No, due to this, which Google claim is a feature: https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-more-from-your.ht… Essentially, anyone e-mailing the regex s\.?c\.?r\.?u\.?s\.?s\+.* (with some limitations on the last bit) at gmail.com gets to me. I have one repeat offender setting up ebay accounts that even a family intervention failed to stop. Another was a chancer who really wanted the scruss@ address, so they signed up for an expensive all-access gaming site pass with it, then expected me to give them the account. In both cases, I randomized the password to something I couldn't know (piping the password into xclip so I can't see it helps) and moved on. cheers, Stewart

2 1

Recommended Linux Password Lengths
by Ivan Avery Frey 02 Jun '16

02 Jun '16

What is the recommended Linux password length today?

7 10

Web Site Locks up FF on Ubuntu
by Stephen 02 Jun '16

02 Jun '16

FF 46.0.1 Ubuntu 14.04 http://www.chicagotribune.com/news/opinion/editorials/ct-edit-president-cli… I have to do a soft reboot. This site is handled perfectly by Chromium and cause no problems for FF on Win 10. Can others check and report? Suggestions? Thank you -- Stephen

10 11

pulling the plug on home phone
by Dave Cramer 02 Jun '16

02 Jun '16

So rogers has a pretty good deal 90 a month for internet, phone, TV for 2 years. I pay more than that for my home phone alone. Any horror stories using rogers for internet. I have my own voip phone so I'm not so worried about LD Dave Cramer

6 20

[GTALUG-Announce] Tuesday, 14 June at 7:30pm - Nerd Money with Warren McPherson (was Tuesday, 7 June at 7:30pm - Nerd Money with Warren McPherson)
by Myles Braithwaite 02 Jun '16

02 Jun '16

The previous email had an error. The correct date is Tuesday, **14** June 2016 at 7:30pm. On Thu, Jun 2, 2016 at 9:27 AM, Myles Braithwaite <me(a)mylesbraithwaite.com> wrote: > <http://gtalug.org/meeting/2016-06/> > > # Nerd Money with Warren McPherson > > The outrage, the greed, the cryptography, the possibilities! > > **Crypto Literacy** - a quick kindergarten class of the foundational > ideas that enable the current crop of "Applied Cryptography" > applications. > > **Innovation of Bitcoin** - After a hundred failed attempts to create > digital money the innovations of Hashcash and Bitcoin Mining turn out > to be the enablers for a new internet epoch. > > **Blockchains and Society** - Polarizing emotional debates where > people arguing contradictory positions all imagine themselves to be > defending the little guy. > > The dichotomy between open Bitcoin community and advocates of private, > permissioned blockchains. > > ## Location > > George Vari Engineering and Computing Centre > 245 Church Street, Room 203 > Ryerson University > > <http://goo.gl/maps/16oJ2> > > <http://www.openstreetmap.org/way/23447525> > > ## Schedule > > * 6:00 pm - Please discuss on the general mailing list (i.e. > <talk(a)gtalug.org>) where you want to go for dinner. > * 7:30 pm - Meeting and presentation. > * 9:00 pm - After each meeting a group of GTALUGers move to the The > Imperial Pub (54 Dundas St East) for refreshments and more > socializing. > > # Code of Conduct > > We want a productive happy community that can welcome new ideas, > improve every process every year, and foster collaboration between > individuals with differing needs, interests and skills. > > We gain strength from diversity, and actively seek participation from > those who enhance it. This code of conduct exists to ensure that > diverse groups collaborate to mutual advantage and enjoyment. We will > challenge prejudice that could jeopardize the participation of any > person in the community. > > The Code of Conduct governs how we behave in public or in private > whenever the Linux community will be judged by our actions. We expect > it to be honored by everyone who represents the community officially > or informally, claims affiliation, or participates directly. It > applies to activities online or offline. > > We invite anybody to participate. Our community is open. > > Please read more about the GTALUG Code of Conduct here: > <http://gtalug.org/about/code-of-conduct/>. > > If you have any questions, comments, or concerns about the GTALUG Code > of Conduct please contact the GTALUG Board @ <board(a)gtalug.org>. -- Myles Braithwaite | http://mylesb.ca/e --- GTALUG Announce mailing list announce(a)gtalug.org https://gtalug.org/mailman/listinfo/announce

1 0

[GTALUG-Announce] Tuesday, 7 June at 7:30pm - Nerd Money with Warren McPherson
by Myles Braithwaite 02 Jun '16

02 Jun '16

<http://gtalug.org/meeting/2016-06/> # Nerd Money with Warren McPherson The outrage, the greed, the cryptography, the possibilities! **Crypto Literacy** - a quick kindergarten class of the foundational ideas that enable the current crop of "Applied Cryptography" applications. **Innovation of Bitcoin** - After a hundred failed attempts to create digital money the innovations of Hashcash and Bitcoin Mining turn out to be the enablers for a new internet epoch. **Blockchains and Society** - Polarizing emotional debates where people arguing contradictory positions all imagine themselves to be defending the little guy. The dichotomy between open Bitcoin community and advocates of private, permissioned blockchains. ## Location George Vari Engineering and Computing Centre 245 Church Street, Room 203 Ryerson University <http://goo.gl/maps/16oJ2> <http://www.openstreetmap.org/way/23447525> ## Schedule * 6:00 pm - Please discuss on the general mailing list (i.e. <talk(a)gtalug.org>) where you want to go for dinner. * 7:30 pm - Meeting and presentation. * 9:00 pm - After each meeting a group of GTALUGers move to the The Imperial Pub (54 Dundas St East) for refreshments and more socializing. # Code of Conduct We want a productive happy community that can welcome new ideas, improve every process every year, and foster collaboration between individuals with differing needs, interests and skills. We gain strength from diversity, and actively seek participation from those who enhance it. This code of conduct exists to ensure that diverse groups collaborate to mutual advantage and enjoyment. We will challenge prejudice that could jeopardize the participation of any person in the community. The Code of Conduct governs how we behave in public or in private whenever the Linux community will be judged by our actions. We expect it to be honored by everyone who represents the community officially or informally, claims affiliation, or participates directly. It applies to activities online or offline. We invite anybody to participate. Our community is open. Please read more about the GTALUG Code of Conduct here: <http://gtalug.org/about/code-of-conduct/>. If you have any questions, comments, or concerns about the GTALUG Code of Conduct please contact the GTALUG Board @ <board(a)gtalug.org>. --- GTALUG Announce mailing list announce(a)gtalug.org https://gtalug.org/mailman/listinfo/announce

1 0