Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Remco Rijnders
On Tue, Dec 08, 2020 at 11:18:49PM -0700, thelma wrote in <94662af9-b159-65ca-371d-1521ab4fa...@sys-concept.com>: Steve, suggested a good alternative database of IP's with two letter country beside them. It can be sorted by country in a spreadsheet. This 16MB file would seem like an ideal

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
On 12/08/2020 05:25 PM, Steve Wilson wrote: > > On 09/12/2020 00:01, Grant Taylor wrote: >> On 12/8/20 4:44 PM, Steve Wilson wrote: >>> I use this as the first step to limit ssh access to one of my >>> servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! >>> --src-cc GB -m comment

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
P.S. You might also be interested in some of the feeds that Team Cymru has to offer. I think they are more friendly to scripted querying. Link - IP to ASN Mapping Service - https://team-cymru.com/community-services/ip-asn-mapping/ -- Grant. . . . unix || die

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 9:59 PM, the...@sys-concept.com wrote: I'll write a script to check, all the IP's from at text file with "whois" and write the output out to another file, just to be sure. I don't know how long will it take, the file contains 26611-entries (IP addresses). ProTip: Don't parse the

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 8:50 PM, the...@sys-concept.com wrote: Creating ACL based on those internet sources eg. https://www.countryipblocks.net/acl.php is not reliable. I pulled a list of Russian and Ukrainian IPs from the above link and checking some of them, I found these two (and possibly more) are

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
On 12/08/2020 08:50 PM, the...@sys-concept.com wrote: [snip] > Creating ACL based on those internet sources eg. > https://www.countryipblocks.net/acl.php > is not reliable. I pulled a list of Russian and Ukrainian IPs from the > above link and checking some of them, I found these two (and

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 6:17 PM, the...@sys-concept.com wrote: so it might be easier to for apache, am I correct? Apache vs iptables is somewhat a preference. Though with Apache, chances are good that you would need to ban in multiple locations, possibly multiple VHOSTs or server wide. (See more

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
On 12/08/2020 05:25 PM, Steve Wilson wrote: > > On 09/12/2020 00:01, Grant Taylor wrote: >> On 12/8/20 4:44 PM, Steve Wilson wrote: >>> I use this as the first step to limit ssh access to one of my >>> servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! >>> --src-cc GB -m comment

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
On 12/08/2020 05:25 PM, Steve Wilson wrote: > > On 09/12/2020 00:01, Grant Taylor wrote: >> On 12/8/20 4:44 PM, Steve Wilson wrote: >>> I use this as the first step to limit ssh access to one of my >>> servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! >>> --src-cc GB -m comment

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Steve Wilson
On 09/12/2020 00:01, Grant Taylor wrote: On 12/8/20 4:44 PM, Steve Wilson wrote: I use this as the first step to limit ssh access to one of my servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! --src-cc GB -m comment --comment "Drop SSH from outside GB" -j DROP` Has the geoip

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 4:44 PM, Steve Wilson wrote: I use this as the first step to limit ssh access to one of my servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! --src-cc GB -m comment --comment "Drop SSH from outside GB" -j DROP` Has the geoip match extension been updated to take into

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Steve Wilson
On 08/12/2020 22:55, the...@sys-concept.com wrote: What are my options apache blocking access based on country? So fare I run onto something "geoip" or ACL (long list of IP's provided by eg:) https://www.ip2location.com/free/visitor-blocker We geoip I think I will need to install some module

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
On 12/08/2020 03:55 PM, the...@sys-concept.com wrote: > What are my options apache blocking access based on country? > So fare I run onto something "geoip" or ACL (long list of IP's provided by > eg:) > https://www.ip2location.com/free/visitor-blocker > > We geoip I think I will need to install

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 3:55 PM, the...@sys-concept.com wrote: What are my options apache blocking access based on country? Do you want to block connections to /just/ Apache and /nothing/ else on the system? Or do you want to block connections from specified sources to anything and everything on the

[gentoo-user] apache blocking access based country

2020-12-08 Thread thelma
What are my options apache blocking access based on country? So fare I run onto something "geoip" or ACL (long list of IP's provided by eg:) https://www.ip2location.com/free/visitor-blocker We geoip I think I will need to install some module for apache (apache 2.2). It is using geoip.dat so it

Re: [gentoo-user] ghostview (gv) doesn't seem to work

2020-12-08 Thread n952162
On 12/8/20 7:08 PM, n952162 wrote: I always get a blank page, even with the output of groff.  Or, just a watch-face. No relevant USE flags. Anybody have an idea? Okay, I figured it out.  gv doesn't have any relevant USE flags, but ghostscript does.  And trying to emerge ghostscript won't

[gentoo-user] ghostview (gv) doesn't seem to work

2020-12-08 Thread n952162
I always get a blank page, even with the output of groff.  Or, just a watch-face. No relevant USE flags. Anybody have an idea?

Re: [gentoo-user] portage blocking portage update

2020-12-08 Thread Walter Dnes
On Tue, Dec 08, 2020 at 10:38:43AM +0100, Arve Barsnes wrote > On Tue, 8 Dec 2020 at 10:07, Walter Dnes wrote: > > I just did an "emerge --sync", and was told to update portage. But it > > seems that portage 3.0.8 built with python 3.7 is blocking portage 3.0.9 > > with python 3.8. I

Re: [gentoo-user] eselect news read new

2020-12-08 Thread hitachi303
Am 08.12.2020 um 14:41 schrieb Dr Rainer Woitok: Greetings, running the command eselect news read new always returns "No news is good news" regarless of whether I run it from my own account or from "root". And running eselect news list currently lists 17 news items, none of which

Re: [gentoo-user] eselect news read new

2020-12-08 Thread Dr Rainer Woitok
Greetings, On Tuesday, 2020-12-08 14:48:40 +0100, netfab wrote: > ... > > Where does it store what's already read? > > /var/lib/gentoo/news/ Thank you for the quick response. Sincerely, Rainer

Re: [gentoo-user] eselect news read new

2020-12-08 Thread netfab
Le 08/12/20 à 14:41, Dr Rainer Woitok a tapoté : > Where does it store what's already read? /var/lib/gentoo/news/

[gentoo-user] eselect news read new

2020-12-08 Thread Dr Rainer Woitok
Greetings, running the command eselect news read new always returns "No news is good news" regarless of whether I run it from my own account or from "root". And running eselect news list currently lists 17 news items, none of which is flagged "N" even though I cannot remember having

Re: [gentoo-user] portage blocking portage update

2020-12-08 Thread Peter Humphrey
On Tuesday, 8 December 2020 09:38:43 GMT Arve Barsnes wrote: > On Tue, 8 Dec 2020 at 10:07, Walter Dnes wrote: > > I just did an "emerge --sync", and was told to update portage. But it > > > > seems that portage 3.0.8 built with python 3.7 is blocking portage 3.0.9 > > with python 3.8. I

Re: [gentoo-user] Gentoo on Raspberry Pi 400?

2020-12-08 Thread Peter Humphrey
On Tuesday, 8 December 2020 00:34:53 GMT Neil Bothwick wrote: > On Tue, 8 Dec 2020 00:30:12 +0100, Teru Yuu wrote: > > As long as you boot into any system, you will be able to install gentoo. > > For rpi4 I used alpine linux (mainly because it already had write-up > > on wiki for headless boot

Re: [gentoo-user] Gentoo on Raspberry Pi 400?

2020-12-08 Thread Peter Humphrey
On Tuesday, 8 December 2020 06:51:25 GMT Andrew Lowe wrote: > There is always this option: > > https://github.com/sakaki-/gentoo-on-rpi-64bit Nope. Tried that first. As I said, the boot process in Pi 400 differs from the others. -- Regards, Peter.

Re: [gentoo-user] portage blocking portage update

2020-12-08 Thread Arve Barsnes
On Tue, 8 Dec 2020 at 10:07, Walter Dnes wrote: > I just did an "emerge --sync", and was told to update portage. But it > seems that portage 3.0.8 built with python 3.7 is blocking portage 3.0.9 > with python 3.8. I obviously can't remove portage to fix the block . > Note "grep -i python

[gentoo-user] portage blocking portage update

2020-12-08 Thread Walter Dnes
I just did an "emerge --sync", and was told to update portage. But it seems that portage 3.0.8 built with python 3.7 is blocking portage 3.0.9 with python 3.8. I obviously can't remove portage to fix the block . Note "grep -i python /etc/portage/make.conf" shows no output at all. In