- Talk - lists.gtalug.org

We are having DMARC/DKIM troubles ...
by Stewart C. Russell 12 Jun '16

12 Jun '16

If replies seem patchy, we've just had a bunch of people - mostly Yahoo and Rogers users - auto-kicked from the list due to DMARC. This is an ongoing pain for list admins. The reason given by Yahoo is this: https://help.yahoo.com/kb/postmaster/SLN7253.html Yeah, they're advising Reply-To mungeing as an industry standard. Joy! cheers, Stewart

8 8

pfsense
by James Knott 10 Jun '16

10 Jun '16

Lack of support for dhcpv6-pd caused me to change my firewall/router from openSUSE to pfsense. The more I work with pfsense, the more I like it. I installed it a couple of weeks ago and am impressed with the features in it. Of course, since they also sell hardware running on it, I'd expect pfsense to be professional grade. It certainly appears to be. I know this is a Linux list, but I strongly recommend pfsense, which runs on FreeBSD. The only thing missing is I haven't got Wireshark running on it (yet). https://www.pfsense.org/ Anyone using IPv6 on Rogers or many other providers needs something that supports dhcpv6-pd. Pfsense does.

1 0

Bob Young (former Red hat CEO) is giving a talk at DemoCampHamilton25
by Myles Braithwaite 09 Jun '16

09 Jun '16

DemoCampHamilton25 - 16 June 2016 at 6pm - Registration is Required McMaster Innovation Park - 175 Longwood Road South - Hamilton <http://www.eventbrite.ca/e/democamphamilton25-tickets-24971188497> DemoCamp is an event for the regional technology and startup community to come together and share what they've built, give each other feedback, and connect with one another. The event involves a series of 5 minute live tech demos + 5 minutes of audience Q&A.

3 2

firewalls and iptables
by Darryl Moore 07 Jun '16

07 Jun '16

So on a customers network I was having issues with what looked like port blocking based on the source address of my UDP packets. Weird eh? Basically whenever a remote SIP client registered with my asterisk box it would work for a while, then eventually the responses from asterisk would get blocked. I put this down to a defective router somewhere in the communication path. My work around which seemed to work was to change the UDP port asterisk was using for SIP and use iptables to reroute from the original port to the new port. This way the response would come from the new port and not get blocked. And it worked to!! This is what I did to move the ports /sbin/iptables -t nat -F /sbin/iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5060 -j REDIRECT --to-ports $port sed -i "s/bindport.*/bindport=$port/" /etc/asterisk/sip.conf /etc/init.d/asterisk restart buuuuuuut....., the iptables flush doesn't work, and there is nothing that seems to make it work. after a while see this with tcpdump 14:37:20.064722 IP 192.168.10.97.5060 > 192.168.10.59.5067: SIP, length: 4 14:37:20.064772 IP 192.168.10.97.5060 > 192.168.10.59.5062: SIP, length: 4 14:37:20.064783 IP 192.168.10.97.5060 > 192.168.10.59.5064: SIP, length: 4 14:37:20.064800 IP 192.168.10.97.5060 > 192.168.10.59.5065: SIP, length: 4 14:37:20.064834 IP 192.168.10.97.5060 > 192.168.10.59.5066: SIP, length: 4 14:37:20.064990 IP 192.168.10.97.5060 > 192.168.10.59.5063: SIP, length: 4 14:37:20.065025 IP 192.168.10.97.5060 > 192.168.10.59.5060: SIP, length: 4 It looks like the packets get cloned multiple times (each time I move the port). What is worse is I cannot switch back to port 5060 because of it. I've done just about everything I can imagine to get iptables to behave properly. Putting aside my original issue with the external source port blocking, has anybody seen anything like this before? The only thing I can do to restore the kernel firewall is to reboot.

1 0

Used computers
by Tim Tisdall 05 Jun '16

05 Jun '16

Where's a good place to get a used computer for relatively cheap? I have a uncle who's struggling with a fairly old machine (I'm not sure what it is, but it has a CRT monitor) and I was hoping to replace it with something slightly newer. Maybe someone knows a good spot to get off-lease computers? What does UofT do with their hand-me-downs?

13 24

hello community
by ac 05 Jun '16

05 Jun '16

thank you for the off list replies, welcome messages, etc. I look forward to contributing and being part of this community My name is Andre Coetzee, I am a linux sysadmin, coder, tinkerer, new tech innovator wannabe. I am controversial mainly because I am direct (not so much of a BOFH as I claim to be) I firmly believe: in Linux and the Linux philosophy and family (http://south.me) I know: that people are messy, that there is black, white and a lot of grey, that life is very very short. I love life. I joined this group as I am a future expat, my wife's family is in the US and mine in Toronto. I am in love with the idea of America and the American dream and the US Constitution (and have actually contributed to Wikipedia on improving the accuracy of the constitutional amendments) The US diversity and strength of the people of the USA is magnetic. I love the Canadian people, the duality of the Canadian culture and I am firmly convinced that the Canadian people are the greatest people on the planet. my favorite things are C, PHP, Python, Bash, Maria, PostgreSQL, Apache, Exim, Postfix, Sendmail, Bind, DNS, I meddle in Java, C#, hadoop, asm and a few other things I work at an ISP, sysadmin, abuse, support, develop systems (like EPP domain registration, etc) also develop anti abuse system tech (spam/phish/bots) using limited AI with distributed node design, I am involved with RIPE, SpamCop.net and of course SpamID.net and Ascams.com, and have many new and interesting ventures, some which are open and free and some to make money. and that, I guess, is me :) Andre

1 0

Re: [GTALUG] Recommended Linux Password Lengths
by Myles Braithwaite 04 Jun '16

04 Jun '16

On Fri, Jun 3, 2016 at 11:53 PM, ac <ac(a)main.me> wrote: > [ i unsubscribed after discovering it is a moderated list, Steward - I > am already a big fully grown man and not a little child :) ] Just to clarify we only moderate the first message that is sent so non-related messages don't get sent to the mailing list. One of the moderators forgot to check the "clear moderate" checkbox. Because of some very unique mail server configs that our members have (i.e. running a mailserver on a dynamic ip address, not having a ptr record, etc.), we can't run most traditional mail server protection.

2 1

Re: [GTALUG] Recommended Linux Password Lengths
by Stewart C. Russell 03 Jun '16

03 Jun '16

[you might want to post from an account that subscribes to the list, André] On 2016-06-03 12:22 AM, ac wrote: > > … i require more info to process what you > are saying - many, many people make accounts for you at Amazon/Ebay/$GamingSite > with your gmail addy and then you go and create passwords? No, due to this, which Google claim is a feature: https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-more-from-your.ht… Essentially, anyone e-mailing the regex s\.?c\.?r\.?u\.?s\.?s\+.* (with some limitations on the last bit) at gmail.com gets to me. I have one repeat offender setting up ebay accounts that even a family intervention failed to stop. Another was a chancer who really wanted the scruss@ address, so they signed up for an expensive all-access gaming site pass with it, then expected me to give them the account. In both cases, I randomized the password to something I couldn't know (piping the password into xclip so I can't see it helps) and moved on. cheers, Stewart

2 1

Recommended Linux Password Lengths
by Ivan Avery Frey 03 Jun '16

03 Jun '16

What is the recommended Linux password length today?

7 10

Web Site Locks up FF on Ubuntu
by Stephen 02 Jun '16

02 Jun '16

FF 46.0.1 Ubuntu 14.04 http://www.chicagotribune.com/news/opinion/editorials/ct-edit-president-cli… I have to do a soft reboot. This site is handled perfectly by Chromium and cause no problems for FF on Win 10. Can others check and report? Suggestions? Thank you -- Stephen

10 11