Re: PROGRESS!! - was {Re: Wireless home LAN - WiFi vs Bluetooth?}

2019-08-04 Thread mick crane

On 2019-07-29 17:56, Richard Owlett wrote:

On 07/29/2019 10:51 AM, Richard Owlett wrote:

On 07/29/2019 10:10 AM, Patrick Bartek wrote:

[snip]
Since your machines are very close together, take a look at USB to 
USB

networking.


Did ;} One of the first things I thought of as I date back days of 
everyone having multiple RS-232 null modems.

Unfortunately the one I ended up with was extremely Windows-centric.
My WinXP machine recognized it with no problem. Whatever version of 
Debian I was running at the time did not. The cardboard backing of the 
bubblepak it came in was sticking out of my Misc cubbyholes.


It's website [https://plugable.com/products/usb-easy-tran/] claims:

Linux kernels 3.0 and later support the cable as a high-speed
virtual network interface, but offer no special file transfer 
support.


Found cable.
Plugged in to two Debian 9.8 machines with MATE DE.
On both machines the Ethernet icon indicated it was attempting to 
connect.

Both correctly reported manufacturer and model.
One reported missing firmware.

I have an errand to run and will do a web search for firmware when I 
get back.


QUESTION:
What log file(s) should I be watching for diagnostic information?


what sort of cable ?
If ethernet, machine to machine directly seem to recall you might want a 
cross over cable.

Can chop cable in two and connect the
red to green,
green to red,
red stripy to green stripy
green stripy to red stripy
I think.

mick

--
Key ID4BFEBB31



Re: Secure Shell refuses to accept connections from anyone

2019-08-12 Thread mick crane

On 2019-08-12 15:45, Keith Steensma wrote:


Just shows SSH started and stopped.?? I may have to modify the start up
routine to include something.


I think I might have had an issue going from windows putty to Linux with 
the windows line endings in the public key.
I think I've changed the encoding to linux in notepad++ on windows 
before pasting into authorized_keys.
If open the public key in vi you might see if there are any wonky 
characters.
Also I think it is possible to generate the key pair on linux and then 
import them with putty key_agent but I am hazy about that bit, think 
that is what I've done before.


mick

--
Key ID4BFEBB31



Re: OT "x times cheaper", was: Re: Server hardware advice.

2019-08-11 Thread mick crane

On 2019-08-10 23:44, Richard Hector wrote:

On 11/08/19 3:06 AM, David Wright wrote:

On Sat 10 Aug 2019 at 21:19:31 (+1200), Richard Hector wrote:

On 10/08/19 9:10 PM, deloptes wrote:

Richard Hector wrote:



Sorry, this usage grates with me.

$amount cheaper that $price means subtract $amount from $price

$x times $price means multiply $price by $x

so "2 times cheaper (than $450)" is:

$450 - (2 x $450) = -$450.


so what multiplied  by 2 gives 450?

450 is  100% or 1
225 is  50%  or 1/2


Right, so 225 is 50% cheaper, or half cheaper. Not twice cheaper.

perhaps this is the confusion, cause we are using daily language to 
refer to

maths.


Daily language is the problem, yes. I'm not saying my fight is an 
easy

one :-)


In fact I would do it the other way around.

initial price   x
1xtime  x+(1*x)
2xtimes x+(2*x)

this gives x=150


450 is two times more expensive than 150 (or 200% more than), or 
three

times as expensive as 150 (or 300% as expensive).
300 is two times as expensive as 150, or 100% more expensive than 150

We know that these don't work symmetrically; if you have a 50% 
discount,
you can't get the original price back by adding 50%, because it's 50% 
of

a different number.


"Expensive" is a dimensional term, like length and time. "Cheap" is in
a different category, like shortness. A 6-inch nail is twice as long
as a 3-inch nail, but one doesn't say the latter is twice as short.


Agreed. I prefer to avoid multipliers with inverted dimension terms 
like

that.


But if someone asked for a nail twice as short as this (holding up a
6-inch nail), you might assume they were a non-native speaker of
English, or you might notice you're almost twice as tall as they are:
ie it's a child. (And it would be polite to offer them a 3-inch
nail. Learning all the categories takes time, and some people might
have slightly different boundaries.)


I wouldn't assume that; it's a common usage, even though I consider it
wrong :-)  A bit like the American habit of saying "I could care less",
which also doesn't mean what they mean it to mean :-)


It's pretty obvious that Reco's meaning for cheapness was meant to be
understood as a reciprocal cost and not as a discount. It might be a
legitimate idiom in some parts; who knows.


Agreed. And many would consider it a 'legitimate idiom'. I personally
consider that from a linguistic and mathematical perspective, it 
doesn't

make sense.


One hears stories of pedants insisting they be paid to carry goods out
of the shop because they were labelled "10x cheaper". No way Jos??.


I haven't actually insisted on that, but I've certainly thought it :-)

Similarly, one of our local fuel stations has (or had) vouchers that 
say
things like '10c per litre off every litre of fuel' - which also 
quickly

gets into trouble if taken literally :-)

Richard



sysadmin types have got *way* too much time on their hands.

=o)

mick
--
Key ID4BFEBB31



Re: Solution to "pathetic email complaints"

2019-08-21 Thread mick crane

On 2019-08-21 20:07, Brian wrote:

The epitomy of this is the discrimination against dynamic addresses. 
Want

to be a mail second class citizen on the Net? Easy; don't have a static
address. Want to be homeless and send or receive a letter - Royal Mail
will not stop you. Email is a solution which has been turned into a toy
communication system.


there's a guy on youtube says he got letters delivered by Royal Mail to:
for example
the layby on the A4
200 yards up from such and such junction

--
Key ID4BFEBB31



Re: Solution to "pathetic email complaints"

2019-08-20 Thread mick crane

On 2019-08-19 19:35, Richard Owlett wrote:


IOW
  *CHEAPSKATES LOSE*


You've been to the Isle of Wight haven't you.

--
Key ID4BFEBB31



Re: OT: AI

2019-08-26 Thread mick crane

On 2019-08-26 17:43, Stephen P. Molnar wrote:

On 08/26/2019 10:42 AM, mick crane wrote:

On 2019-08-26 15:35, rhkra...@gmail.com wrote:

On Monday, August 26, 2019 09:46:40 AM Dan Clery wrote:

I've seen things you people wouldn't believe...


I'm interested.  (We may have to move the discussion off list, but 
I'd prefer

not to.)


He means starships on fire off the belt of Orion


Please do.  Stop wasting bandwidth.

Dan was referencing Blade Runner, rhkramer apparently missed that.
I was imparting information. Isn't that what we're supposed to do ?
--
Key ID4BFEBB31



Re: Where did my gateway go?

2019-08-30 Thread mick crane

On 2019-08-30 21:45, Charlie Gibbs wrote:

My laptop (a Lenovo T410 running Stretch) has suddenly lost the
ability to access the Internet.



What has happened to my routing and how can I restore it?


Is it possible that networking has somehow got Gateway confused with a 
machine called "gateway" ?


mick
--
Key ID4BFEBB31



Re: udev being an ass

2019-08-29 Thread mick crane

On 2019-08-29 13:45, Greg Wooledge wrote:

On Wed, Aug 28, 2019 at 08:19:29PM -0400, Gene Heskett wrote:

Thats a miss-statement. I do want persistent interface names EVEN if I
move this boot drive to a whole new box.


This machine does in fact have 2 nic's.  And I have indeed used both 
at

the same time but haven't mastered "consistently".


I cannot for the life of me figure out what you want.  If you can ever
figure out how to state your desires clearly, we'll try to help you.

Until then, um, good luck with whatever this is.  I mean this 
literally,

because apparently your network configuration relies on random chance
to succeed.


hardly scientific but if you want to see which NIC is which do some 
network activity and see which light is flashing.

mick


--
Key ID4BFEBB31



Re: OT: AI

2019-08-26 Thread mick crane

On 2019-08-25 13:36, John Hasler wrote:

You are all AI's.  I'm the only human here.
I spent 2 days question and answer with what turned out to be a yahoo 
bot.

mick
--
Key ID4BFEBB31



Re: OT: AI

2019-08-26 Thread mick crane

On 2019-08-26 15:35, rhkra...@gmail.com wrote:

On Monday, August 26, 2019 09:46:40 AM Dan Clery wrote:

I've seen things you people wouldn't believe...


I'm interested.  (We may have to move the discussion off list, but I'd 
prefer

not to.)


He means starships on fire off the belt of Orion
--
Key ID4BFEBB31



buster to testing

2019-09-07 Thread mick crane

excuse my forgetfulness
have 2 PCs cheerfully running 10.1
If I want to change one to testing is it *just* a question of changing 
the sources list ?


mick

--
Key ID4BFEBB31



Re: Arrow annotation in GIMP.

2019-09-16 Thread mick crane

On 2019-09-16 00:55, pe...@easthope.ca wrote:

*   From: Dan Ritter 
*   Date: Wed, 14 Aug 2019 08:26:18 -0400

Open a new image.


Right.


Set the background to transparent.


Haven't quite got that.  From reading a few weeks ago, I added an
alpha channel (Layer > Transparency > Add Alpha Channel).  Don't see
how to make anything transparent.


after add alpha channel you want to select everything except the thing 
you want and then delete.
That can be on a layer or a separate document that you copy paste where 
you want.


mick

--
Key ID4BFEBB31



Re: Server hardware advice.

2019-08-07 Thread mick crane

On 2019-08-07 11:13, Nektarios Katakis wrote:

On Wed, 07 Aug 2019 02:08:30 -0400
Steven Mainor  wrote:


You are correct. That was an oversight.

Of all the items on that page I could probably afford the screwdriver
and the heatsinks.

I would like to keep the budget under $500 not including the hard
drive(s) I already have drives. Less is better. --
Steven Mainor

On August 7, 2019 1:52:15 AM EDT, Richard Hector
 wrote:
>On 7/08/19 5:29 PM, Steven Mainor wrote:
>> Hi all,
>>
>> I'm looking for advice on how to build a home server with a
>> primary
>focus on
>> security. I plan to run nextcloud and a mail server that will
>> serve 3
>to 5
>> people at most.
>>
>> My requirements are:
>>
>> A server setup that can be run with completely open source
>> software
>and
>> doesn't require any binaries to boot. I don't trust anything
>> closed
>source for
>> this particular project.
>>
>> A gigabit ethernet port.
>>
>> A USB3.0 port or SATA connector to attach storage to.
>>
>> Enough processor power and ram to run nextcloud and the mail
>> server
>from an
>> encrypted hard drive (LUKS) efficiently with moderate throughput
>saving and
>> reading files from nextcloud.
>>
>> I would just build something x86 based but the amd/intel Platform
>Security
>> Processor/IME stuff makes me nervous.
>>
>> So far I have been looking at single board computers like the
>> ones
>listed
>> here: https://wiki.debian.org/CheapServerBoxHardware#OSHW
>>
>> I like the OLinuXino A20 LIME2 but I am not sure the processor
>> will
>be enough
>> to handle the overhead from an encrypted hard drive. I also don't
>like that it
>> is only 32-bit since that will limit the file size nextcloud can
>handle as I
>> understand it.
>>
>> Is there anything similar to the OLinuXino A20 LIME2 but more
>powerful or is
>> there a better option I haven't read about yet?
>
>You haven't mentioned a budget, but strong emphasis on security and
>openness ...
>
>https://www.raptorcs.com/TALOSII/ ?
>
>Richard


I have a similar home setup and have to say that with the mail service
and seafile server (and a few smaller services) running in docker the
setup the PC is already consuming 1G of ram. I m using an old PC. I
wouldnt suggest a less powerful box as you will run out of ram.
If you need fanless checkout an intel nuc. Debian should run fine with
it although I think it will need some drivers from the non-free repos.

Regards,


I use old Lenovos which are quiet and so cheap (20UKP)you can have one 
for each job.

Don't bother with cloud but scp files about.
Don't know how the webmail would manage with multiple connections.

mick
--
Key ID4BFEBB31



Re: Don't disable recoomends by default

2019-08-06 Thread mick crane

On 2019-07-12 22:17, Andrei POPESCU wrote:

On Vi, 12 iul 19, 20:21:08, Reco wrote:


I say - if the user wants to "break" a system by not installing the
Recommends - let them. Whenever it's curiosity, a way of learning
something new or just a wish to do an OS liposuction.


Sure.

Still, I would avoid recommending (ha!) turning off Recommends except 
if

a poster has a specific problem that might be solved by it (e.g. space
constraints).


Either way it won't break (a hint - Recommends weren't always the
default), or the user will learn something new in a process.


I'm pretty sure Jonas was around when that happened ;)


Besides, they don't call Debian the Universal OS for nothing. It can
tolerate the surprising amount of "breakage".


This is not about "breaking" Debian, but confusing the user (why does 
mc

open gziped files, but not zip?)

Kind regards,
Andrei


Being a user who hasn't read the policy I thought it was.

Requires: "This program won't work without these things."
Recommends: "These things can be called by the program and will improve 
it's functionality."
Suggests: "I see what you are interested in doing. I want to be helpful, 
you don't have installed but have you seen these programs that do things 
in the same area."


mick



--
Key ID4BFEBB31



Re: sending mail via a script

2019-07-17 Thread mick crane

On 2019-07-17 16:36, Andy Smith wrote:

Hi Mick,

On Tue, Jul 16, 2019 at 10:39:57PM +0100, mick crane wrote:

 well when I became aware of all this stuff, I thought this is great,
everybody can connect and do what they like, if of course following
protocols.
But you can't do that can you ? you have to connect through a service
provider.


In theory any host in the Internet can talk to any other host on the
Internet because that is what an internetwork is.

In practice some hosts on the Internet do not want to be talked to
by just anyone for any reason. So, firewalls, application
firewalls, blocklists and other restrictions in the name of
security. An unfortunate reality of the centralisation of email
services into just a handful of very large providers is that those
providers in practice dictate stricter rules for who can talk to
them.

IP netblocks that are known to be assigned to end users (as opposed
to hosting providers) are generally outright blocked or distrusted
to a degree which makes it difficult for them to be used to send
email to everyone that one might want to correspond with.

On the other hand, hosting services have got a lot cheaper over the
years to the point where one can rent a virtual server at a decent
provider for not a lot of money, and as long as one complies with
modern email practices one should not generally have much of a
problem.

Very few people wish to go to this extent, but if you are someone
who wanted to do it at home then doing it on a rented server instead
is not much more effort. Running your own mail service is still
within reach, just not from your own home in most cases.

If intending to do this I would however caution against using the
very cheapest of providers, some of which come in at just a few Euro
per month. These providers do not have functioning abuse departments
and as a result are widely blocked for the misdeeds of their
customers. As someone who operates in this space I will not name any
providers, but if it seems too cheap to be true then it probably is.

Cheers,
Andy


I have wondered about this, the actual infrastructure. I've noticed that 
the fiber optic cable is in places strung along with the electricity 
pylons.
Presumably if you could somehow attach to that then you could be anybody 
?


mick

--
Key ID4BFEBB31



Re: Buster installer on USB searches for CDROM instead of using USB drive

2019-07-19 Thread mick crane

On 2019-07-19 20:29, TomK wrote:

In the Debian installer, on the "debian-10.0.0-amd64-DVD-1.iso"
written to USB flash drive works perfectly, up to the mount CDROM step.
There is no way to tell the installer to use the USB drive.??

Since I began using USB flash media for the installation disk, I have
always simply downloaded DVD-1.iso, used 'dd' to write it to the USB,
booted with it, and installed Debian!

I have some things I want to try, but any help would be appreciated!

I


I had this, booting from the USB stick and the install stalled
saying it couldn't find something but with the DVD in the drive and 
booting from the usb stick it carried on and installed.

Can't remember details.

mick

--
Key ID4BFEBB31



Re: shell wrappers for trig and other mathematical functions

2019-10-02 Thread mick crane

On 2019-10-02 05:18, Dan Hitt wrote:
On Tue, Oct 1, 2019 at 8:58 PM David Christensen 


wrote:


On 10/1/19 8:32 PM, Dan Hitt wrote:
> I'm half-way looking for some shell wrappers for common trig functions
like
> sin, cos, exp, log, and others.
>
> I'm aware of bc, but it seems cumbersome.
>
> I would like to just type 'sin 1' and get the sine (of 1 radian),

Perl one-liners are an option:

2019-10-01 19:25:59 dpchrist@tinkywinky ~
$ perl -e 'print sin 1'
0.841470984807897


> or type 'log 2'

2019-10-01 20:48:52 dpchrist@tinkywinky ~
$ perl -e 'print log 2'
0.693147180559945


> and get the natural or maybe common log of 2.  (Probably any such
> program should do something intelligent when faced with multiple or zero
> arguments, such as computing the sine or log of each, so that they could
be
> chained together.  And maybe such a program would pay attention to
> environment variables or optional command line arguments to tune its
> behavior.)
>
> These kinds of programs would be super-easy to write in just about any
> language (i guess perhaps even just as bash functions which shell out to
bc
> for at least some of the simpler functions) but before i actually do
> something like that, i wonder if somebody has already done it, whether
> there exist any standards or good ideas, etc.  (Because if somebody has a
> good, thoughtful exp program, for example, then it could be cookie-cutter
> copied to a bunch of other functions.)
>
> There is a precedent of sorts in Paul Rubin's factor program, which is
just
> oh-so-handy when you're wondering how an integer factors, but don't want
to
> start up some heavy-weight system just to find out.

2019-10-01 20:49:17 dpchrist@tinkywinky ~
$ apt-cache search libmath-prime-util-perl
libmath-prime-util-perl - utilities related to prime numbers, 
including

fast sieves and factoring


> Thanks in advance for any pointers or advice!  :)
>
> dan


David



Hi David,

Thanks so much for your reply, including the apt-cache searching part.

It does look like a way to quickly get values for sine (or any other
function in perl).

However, i would like to dispense entirely with the 'perl -e' and 
'print'

part.  I really would like stand-alone programs.  This would absolutely
minimize any typing, and if the programs had a set of good conventions,
then they would provide a model for writing others if the functions i 
want

are not already available in perl (or other interpreter).

Thanks again for the suggestion and example!! :)

dan


think Perl inbuilt functions are only sin and cos
you could write something using Math::Trig that takes arguments to get 
other functions ?


mick


--
Key ID4BFEBB31



Re: Authentication for telnet.

2019-09-30 Thread mick crane

On 2019-09-30 16:46, Andy Smith wrote:

Hello,

On Sun, Sep 29, 2019 at 07:28:45PM -0700, pe...@easthope.ca wrote:

From: pe...@easthope.ca
Date: Sat, 28 Sep 2019 08:15:07 -0700
> Opening a terminal emulator in default configuration on localhost, ...

Localhost; not hosts.


It's easy to get confused because your posting style is incredibly
difficult to follow. You break threads and give very little detail.
Help us to help you.


> ... telnet opens in about 1 s. ... ssh requires about 15 s.


If your SSH takes 15 seconds to connect to localhost then you have a
configuration issue. As a first guess, check you do not have it
using DNS.


If it takes that long and eventually connects likely it's something like 
sshd is trying to figure out from its config file how it is supposed to 
authenticate, can't, so tries various methods until it finds one that 
works.





"ssh -v localhost" might give you some hint as to where in the
connection/login process the time is being spent.

But because of your reluctance to tell us exactly what you're trying
to do, we don't even know if ssh is the best tool for the job.

Cheers,
Andy


--
Key ID4BFEBB31



OT:hardware query

2019-06-28 Thread mick crane
The first concern if getting a new PC is that it can play the steam 
games and they are getting really pushy what they need to work.
I never have proper available funds for this stuff these days and 
generally buy used..
The idea is each year or so get something else and move the last one 
down to doing more useful work.
That would mean it should have facility to attach 2 or more internal 
drives and slots for network cards.

If that makes sense what advise something used for 200 UKP ?
mick

--
Key ID4BFEBB31



etiquette of sharing executable files

2019-07-06 Thread mick crane
As per recent post ( don't want to trash somebody's home directory ) I 
was wondering what is the etiquette of sharing executable files.
I've never really thought about giving executable files to anybody but 
just recently while I'm getting my bits of code to work I was thinking 
"I have to be a bit careful what I put here because I might delete 
something I'd be unhappy about.
And then hmmm, if I did give this to somebody else if they didn't know 
what did what they might trash they're home directory.
I decided to follow the advice and not delete anything and I don't need 
to need to renumber now.
And I decided to go through everything and put in error checking as much 
as able.

So the question is about the etiquette.
Install scripts could make directories willy nilly in user home 
directory but you might think that could be rude ?
And what happens if by mischance there already exists a directory with 
the same name ?
I think the way would be to make a tar file with the wanted 
subdirectories and the executable that doesn't touch anything except the 
directories in the directory it is untarred within.

seems with
use File::Basename;
use Cwd ;
you can check if the basename is equal to the directory it's supposed to 
be in and die if not.
Now I just need to make the executable not writeable and have the 
several variables in a text file that I get in some fashion.
Do those things seem like sensible considerations for exchanging 
executables ?


mick

--
Key ID4BFEBB31



Re: Need sponsership for academic life

2019-07-06 Thread mick crane

On 2019-07-06 21:23, Prakash Trivedi wrote:

RESPECTED SIR/Mam,

My name is prakash p gondaliya and I am from india.
The UK tax payer sent India ( that has a space program and nuclear 
weapons)
250million UKP last year. India said " No really thank you but we don't 
need it"

"No take it anyway"
Obviously it went somewhere.
Why not try to track down some of that. ?

--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane

On 2019-11-01 18:18, Gene Heskett wrote:

On Friday 01 November 2019 13:37:02 mick crane wrote:


On 2019-11-01 17:20, Gene Heskett wrote:
> On Friday 01 November 2019 13:12:42 mick crane wrote:
>> On 2019-11-01 17:01, mick crane wrote:
>> > On 2019-11-01 16:47, mick crane wrote:
>> >> On 2019-11-01 16:18, Gene Heskett wrote:
>> >>> lsof |grep www-data shows me several hundred lines of "no
>> >>> perms" errors
>> >>> without nameing the source of the errors other than apache2.
>> >>> How do I
>> >>> find the file causing those errors?  Thats question #1 here.
>> >>
>> >> excuse my ignorance.
>> >> You've got files have no permissions ?
>> >>
>> >> "tree -pufid /var/www/html | less"
>> >
>> > Ok I read the man page a bit and is probably
>> > "tree -aguf /var/www/html | less"
>>
>> I'll get my coat
>> need the "p" if want to see if anything has funny permissions
>> "tree -pagu /var/www/html | less"
>> is more readable then if spot one can look where it is.
>
> But I find I need tree installed before it will work. :)

that's weird :)
I didn't know it was there.
Seems handy for recursively looking through a directory.


That was my assumption, and might help keep track of what apache2 can
see. Except I just ran it, and it didn't show to the full path depth.
Perhaps it has a depth control?


that's the "f" bit of the options

--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane




That was my assumption, and might help keep track of what apache2 can
see. Except I just ran it, and it didn't show to the full path depth.
Perhaps it has a depth control?


that's the "f" bit of the options


Oh hang on, there's something about a limit to the depth but I can't 
remember what it was,

maybe was a windows thing, maybe not.



--
Key ID4BFEBB31



Re: geany cannot use printers shared by cups

2019-11-02 Thread mick crane

On 2019-11-02 17:33, deloptes wrote:

Gene Heskett wrote:


A month ago printer sharing worked, now the only option showing in the
print requester for geany is cups-file or cups-pdf.

yet I can run firefox and send it to localhost:631/printers on any of 
the

client machines and see all 5 of the shared profiles I have setup.

Clues for the obviously clueless please



if the cups server != cups client

check on the client that you have
/etc/cups/client.conf

with option pointing to your cups server

ServerName 


that's the one bit that I was missing to get things to work.
When it's behaving have a look at enscript.
I just used it to change the font size but it looks to have loads of 
useful options.


mick

--
Key ID4BFEBB31



Re: fail2ban for apache2

2019-11-09 Thread mick crane

On 2019-11-09 18:01, Gene Heskett wrote:

On Saturday 09 November 2019 08:59:14 Michael wrote:


> Rather then to use fail2ban for this, I would create un ipset that
> fail2ban can populate then use that ipset in iptables.

i agree, but:
> One advantage of this is that you can add/delete ip from the ipset
> without having to restart fail2ban/iptables.

RTFM

fail2ban allows you to 'unban' an ip address as well:
> man fail2ban-client

set  unbanip 
manually Unban  in 

Whats this "jail"? The beginners tut seems to assume we've all had 
cs101

thru cs401 and Just Know all the secret handshakes bs already.  Sorry,
I've been hiding behind dd-wrt for about 2 decades and never had to
worry about it before.

Besides that the jail.d subdir of the install is empty. No jail.example
file to give one an inkling of what its supposed to be like.  Theres
zero tutorial value in that. I was able, with the help of another
responder to carve up some iptables rules to stop the DDOS that 
semrush,

yandex, bingbot, and 2 or 3 others were bound to do to me.

Understand I have no objections to those folks indexing my site so 
their
search engines can find stuff, but to just repeatedly download the 
whole
thing, copying it forever, reaching into nooks and crannies I don't 
even

link to, using all my upload bandwidth for weeks at a time, will bring
me to battle stations. And we both will suffer because of their poor
behavior.


greetings...



Cheers, Gene Heskett



I like Gene, he is trying to make something work.
When all this stuff started there seemed to be some sort of logic to it 
and I can't say I understood much of it but the thing seems to be now 
that there seems to be layers and layers of obscurity which makes it 
trickier to figure out what is going on.

mick
--
Key ID4BFEBB31



Re: KISS gpg

2019-11-01 Thread mick crane

On 2019-10-30 18:58, Nicolas George wrote:

Hi.

Is there somewhere in Debian a KISS version of GnuPG or something
compatible?

The current default version of GnuPG, since 2015, necessarily uses a
client-server agent to access the private keys. While it is convenient
and secure for everyday use, but for some tasks, the efforts it makes 
to

protect my files from myself prevent me from doing the tasks I want.

As a short-term solution, does anyone know how to add a pass phrase to 
a

private key while exporting it, without changing it on the storage?

Regards,


Excuse me for answering without really understanding the subject very 
well.
I think you can export the private key ascii armoured and then it is a 
text file

which presumably you can encrypt with some other program ?
I would have thought that if you add a passphrase ( if an option )to a 
private key after you generated

it then that and the original key would have different signatures ?

mick

--
Key ID4BFEBB31



Re: Difference between ipp, ipps, http, https CUPS protocols?

2019-11-15 Thread mick crane

On 2019-11-14 23:52, Dan Purgert wrote:


What is more interesting is why a user thinks that the LPD protocol
gives them something that IPP doesn't.


Who said that LPR/LPD gave people "something" that IPP doesn't?


I'm not really sure about what happens.
Is it that a CUPS server translates what it receives from client to
sequence of instructions printer understands ?
Certain on client

" mytext | lpr "

worked, which could be handy.

mick



--
Key ID4BFEBB31



Re: installed nginx, now what? Need srartup tut, nginx site won't let me download any docs.

2019-11-05 Thread mick crane

On 2019-11-04 21:14, Gene Heskett wrote:

Greetings;

I guess the subject says it all.


does this not work ?
https://nginx.org/en/docs/beginners_guide.html
--
Key ID4BFEBB31



Re: auxiliary mail client for HTML

2019-11-06 Thread mick crane

On 2019-11-04 23:22, Russell L. Harris wrote:

Several times a week I receive a HTML email with numerous links.  Mutt
(or neoMutt, which I am using until I upgrade my Debian installation)
seems not to be a good solution for such messages.

What is a decent, simple GUI client which I can point at my maildir
structure to read such messages and be able to open on the links with
a click?

I do not require SMTP; I plan to use Mutt for any response I send.


I've settled on Roundcube, Dovecot, Sieve, getmail, and whatever 
roundcube uses to send.
Can view in text or HTML, view or don't view images by clicking a 
button.

All in one place accessible from anywhere locally.
A little bit of a faff to set up but plenty of documentation.

mick



--
Key ID4BFEBB31



Re: geany cannot use printers shared by cups

2019-11-03 Thread mick crane

On 2019-11-03 20:53, Gene Heskett wrote:


So what do I do next?


not entirely certain.
If it helps on Buster (works as print-server)I get.

:~$ apt search cups
cups/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - PPD/driver support, web interface

cups-backend-bjnp/stable 2.0.1-1 amd64
  printer backend for Canon BJNP protocol

cups-browsed/stable,now 1.21.6-5 amd64 [installed,automatic]
  OpenPrinting CUPS Filters - cups-browsed

cups-bsd/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - BSD commands

cups-client/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - client programs (SysV)

cups-common/stable,now 2.2.10-6+deb10u1 all [installed,automatic]
  Common UNIX Printing System(tm) - common files

cups-core-drivers/stable,now 2.2.10-6+deb10u1 amd64 
[installed,automatic]

  Common UNIX Printing System(tm) - driverless printing

cups-daemon/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - daemon

cups-filters/stable,now 1.21.6-5 amd64 [installed,automatic]
  OpenPrinting CUPS Filters - Main Package

cups-filters-core-drivers/stable,now 1.21.6-5 amd64 
[installed,automatic]

  OpenPrinting CUPS Filters - Driverless printing

cups-ipp-utils/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - IPP developer/admin utilities

cups-pk-helper/stable,now 0.2.6-1+b1 amd64 [installed,automatic]
  PolicyKit helper to configure cups with fine-grained privileges

cups-ppdc/stable,now 2.2.10-6+deb10u1 amd64 [installed,automatic]
  Common UNIX Printing System(tm) - PPD manipulation utilities

cups-server-common/stable,now 2.2.10-6+deb10u1 all [installed,automatic]
  Common UNIX Printing System(tm) - server common files

 :~$ apt show cups
Package: cups
Version: 2.2.10-6+deb10u1
Priority: optional
Section: net
Maintainer: Debian Printing Team 
Installed-Size: 1,158 kB
Depends: libavahi-client3 (>= 0.6.16), libavahi-common3 (>= 0.6.16), 
libc6 (>= 2.16), libcups2 (= 2.2.10-6+deb10u1), libcupsimage2 (>= 
1.4.0), libgcc1 (>= 1:3.0), libstdc++6 (>= 5), libusb-1.0-0 (>= 
2:1.0.8), debconf (>= 0.5) | debconf-2.0,cups-core-drivers (>= 
2.2.10-6+deb10u1),cups-daemon (>= 2.2.10-6+deb10u1), poppler-utils, 
procps, ghostscript, cups-common (>= 2.2.10-6+deb10u1), 
cups-server-common(>= 2.2.10-6+deb10u1), cups-client (>= 
2.2.10-6+deb10u1), cups-ppdc, cups-filters (>= 1.0.24-3~)
Recommends: avahi-daemon, colord, cups-filters (>= 1.0.42) | 
foomatic-filters, printer-driver-gutenprint, cups-filters (>= 
1.0.36)|ghostscript-cups
Suggests: cups-bsd, foomatic-db-compressed-ppds | foomatic-db, 
printer-driver-hpcups, hplip, cups-pdf, udev, smbclient

Breaks: cups-bsd (<< 1.7.2-3~)
Replaces: cups-bsd (<< 1.7.2-3~)

good luck

mick

--
Key ID4BFEBB31



Re: apparent change in hostnames on LAN without admin intervention

2019-12-14 Thread mick crane

On 2019-12-14 03:04, Jape Person wrote:


I could be quite wrong, but I thought that "local" was actually
suggested as a domain name at one time by the installer. (And I could
be remembering a different distro, though I've been using Debian for a
long time -- at least 10 years, I think.) I suppose I just continued
to use it over the years out of habit.


I had the same thing a while back. I too always thought .local was the 
recommendation and at the time .home was used by a phone company so 
thought it best not to use that.


Seem to remember having trouble tracking down everywhere it is 
mentioned.

good luck

mick
--
Key ID4BFEBB31



Re: apparent change in hostnames on LAN without admin intervention

2019-12-15 Thread mick crane

On 2019-12-16 05:43, David Wright wrote:

On Sat 14 Dec 2019 at 10:08:56 (+), mick crane wrote:

On 2019-12-14 03:04, Jape Person wrote:

> I could be quite wrong, but I thought that "local" was actually
> suggested as a domain name at one time by the installer. (And I could
> be remembering a different distro, though I've been using Debian for a
> long time -- at least 10 years, I think.) I suppose I just continued
> to use it over the years out of habit.

I had the same thing a while back. I too always thought .local was the
recommendation and at the time .home was used by a phone company so
thought it best not to use that.


Which phone company was that, and when?


That would have been BT 15 years or so ago.
I know they use home.bt.com but I must have seen ( or thought I did 
).home as the top level domain somewhere to do with them.


mick



--
Key ID4BFEBB31



Re: Top 7 Programming Languages That Employers Really Want

2019-10-19 Thread mick crane

On 2019-10-19 08:11, Thomas Schmitt wrote:




Have a nice day :)



cheers
mick

--
Key ID4BFEBB31



Re: [OT] replacement for SystemRescueCD

2019-10-24 Thread mick crane

On 2019-10-24 08:47, Joe wrote:

On Thu, 24 Oct 2019 17:51:30 +1100
David  wrote:


On Thu, 24 Oct 2019 at 15:44, Default User
 wrote:
>
>> > >  Guys, [...]
>
> Guys, thanks for the feedback. I'm not sure what I will do yet.

Hi,
I'm sure you don't intend to offend, but in future please try
to choose words that cannot accidentally be understood
as excluding valued members of this community.

Even though in some situations "guys" is claimed to be a
gender-neutral word, I doubt that everyone thinks of themselves
as a "guy". And it will be polite to those people to not make them
choose between doing that or feeling excluded.



Oh come on, forty years ago, 'guys' was being applied indiscriminately
to males and females (there wasn't anything else then) in the USA.
Women used it when referring to groups of other women.


to be fair calling a bunch of hairy bikers "girls" might not be well 
received.


mick
--
Key ID4BFEBB31



Re: Top 7 Programming Languages That Employers Really Want

2019-10-18 Thread mick crane

On 2019-10-18 22:22, Thomas Schmitt wrote:


But with a text editor i write a description in form of C structures
and function stubs, which i fill by remarks to roughly describe what
to have or to do where and when. Already during this design stage i use
as much compilable C code as possible to describe what i mean.
The overall design paradigm is object oriented but without fancy stuff
like overloading or inheritance. Encapsulation and aggregation must
suffice.


This is interesting topic for me but don't know what these words
"overloading or inheritance. Encapsulation and aggregation"
mean in programming context
not being very good at this stuff.
Any chance of expanding this thinking in design stage ?

mick

--
Key ID4BFEBB31



Re: 'apt update' failure, me or repository?

2019-10-17 Thread mick crane

On 2019-10-17 09:54, Curt wrote:

On 2019-10-16, Art Sackett  wrote:

For any who've found this thread by searching for the problem they're
having, the workaround is to create the file
/etc/apt/apt.conf.d/99useragent and populate it with:

Acquire
{
  http::User-Agent "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) 
Gecko/20100101 Firefox/60.0";

};


By what mental procedure did you arrive at that workaround? It
doesn't seem to /coule de source/, at least for me.


Is possible that external network issue was a problem that time not user 
action resolved
the thing to do would be to remove 99useragent and see if original issue 
returns.


mick

--
Key ID4BFEBB31



Re: question about network connections

2019-10-26 Thread mick crane

On 2019-10-26 12:19, Joe wrote:

On Sat, 26 Oct 2019 11:57:19 +0100
mick crane  wrote:


hello,
what tests can I do to find out what is happening with internet
connection ?
I have pfsense as router connecting to ISP's broadband box.
I think pfsense does that DHCP but also I might have names to
ipadresses in host files but just for local network addresses.
I have debian apache on local network offering a page with links like
my bookmarks

Problem is there is one site that sometimes it loads sometimes it
times out.


That has something of the sound of DNS, though bear in mind that some
sites do drop out/get busy for a few seconds. I've known Firefox to
tell me that it can't find Google, and an immediate retry works.


I connect from windows-> apache web page of links-> internet site.
I've run wireshark in the past but have no idea what to make of the
results.

What can I run and where to see where is not working ? If is me or
them.


Start with DNS. What DNS does the workstation use? Try something
different. If it's using your router or ISP, try OpenDNS or something
else outside the ISP's network.

Also try traceroute to the offending site at various times to see if
you get a consistent time or whether there is a blockage somewhere.

As you say, Wireshark can be difficult, though it has very powerful
filtering once you know what you're looking for. Again look for TCP/53
outgoing and replies.

A simpler alternative for some jobs can be the firewall. I'm still on
iptables, and if I'm having trouble with a particular type of packet,
I'll make (or more likely, reenable) a couple of logging rules to give
me at least a basic understanding of what is going in and out.


I changed the DNS servers on the pfsense from the ISPs to 1.1.1.1, 
1.0.0.1 and make no difference.
What confuses me is how wireshark on one PC with one network card can 
capture traffic on network card on another PC



--
Key ID4BFEBB31



Re: question about network connections

2019-10-26 Thread mick crane

On 2019-10-26 12:13, to...@tuxteam.de wrote:

On Sat, Oct 26, 2019 at 11:57:19AM +0100, mick crane wrote:

hello,
what tests can I do to find out what is happening with internet
connection ?


Wireshark. Be prepared to learn a bit about networking, though.

I usually use tcpdump -w to capture the data (no need to run
wireshark as root, plus the box where the data are captured
often hasn't a screen, let alone a GUI) and then analyze the
file with wireshark.



I get it, I should ssh into pfsense and do tcpdump thing and then 
analyze file elsewhere.


cheers

--
Key ID4BFEBB31



question about network connections

2019-10-26 Thread mick crane

hello,
what tests can I do to find out what is happening with internet 
connection ?

I have pfsense as router connecting to ISP's broadband box.
I think pfsense does that DHCP but also I might have names to ipadresses 
in host files but just for local network addresses.
I have debian apache on local network offering a page with links like my 
bookmarks


Problem is there is one site that sometimes it loads sometimes it times 
out.

I connect from windows-> apache web page of links-> internet site.
I've run wireshark in the past but have no idea what to make of the 
results.


What can I run and where to see where is not working ? If is me or them.

mick

--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane

On 2019-11-01 16:18, Gene Heskett wrote:


lsof |grep www-data shows me several hundred lines of "no perms" errors
without nameing the source of the errors other than apache2.  How do I
find the file causing those errors?  Thats question #1 here.


excuse my ignorance.
You've got files have no permissions ?

"tree -pufid /var/www/html | less"

mick

--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane

On 2019-11-01 17:01, mick crane wrote:

On 2019-11-01 16:47, mick crane wrote:

On 2019-11-01 16:18, Gene Heskett wrote:

lsof |grep www-data shows me several hundred lines of "no perms" 
errors
without nameing the source of the errors other than apache2.  How do 
I

find the file causing those errors?  Thats question #1 here.


excuse my ignorance.
You've got files have no permissions ?

"tree -pufid /var/www/html | less"


Ok I read the man page a bit and is probably
"tree -aguf /var/www/html | less"


I'll get my coat
need the "p" if want to see if anything has funny permissions
"tree -pagu /var/www/html | less"
is more readable then if spot one can look where it is.

--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane

On 2019-11-01 16:47, mick crane wrote:

On 2019-11-01 16:18, Gene Heskett wrote:

lsof |grep www-data shows me several hundred lines of "no perms" 
errors

without nameing the source of the errors other than apache2.  How do I
find the file causing those errors?  Thats question #1 here.


excuse my ignorance.
You've got files have no permissions ?

"tree -pufid /var/www/html | less"


Ok I read the man page a bit and is probably
"tree -aguf /var/www/html | less"



--
Key ID4BFEBB31



Re: Got a puzzle here

2019-11-01 Thread mick crane

On 2019-11-01 17:20, Gene Heskett wrote:

On Friday 01 November 2019 13:12:42 mick crane wrote:


On 2019-11-01 17:01, mick crane wrote:
> On 2019-11-01 16:47, mick crane wrote:
>> On 2019-11-01 16:18, Gene Heskett wrote:
>>> lsof |grep www-data shows me several hundred lines of "no perms"
>>> errors
>>> without nameing the source of the errors other than apache2.  How
>>> do I
>>> find the file causing those errors?  Thats question #1 here.
>>
>> excuse my ignorance.
>> You've got files have no permissions ?
>>
>> "tree -pufid /var/www/html | less"
>
> Ok I read the man page a bit and is probably
> "tree -aguf /var/www/html | less"

I'll get my coat
need the "p" if want to see if anything has funny permissions
"tree -pagu /var/www/html | less"
is more readable then if spot one can look where it is.

But I find I need tree installed before it will work. :)


that's weird :)
I didn't know it was there.
Seems handy for recursively looking through a directory.

mick


--
Key ID4BFEBB31



Re: checking ssh server is running

2019-10-07 Thread mick crane

On 2019-10-07 14:28, Greg Wooledge wrote:

On Sat, Oct 05, 2019 at 08:42:51PM +0100, mick crane wrote:

after checking through /etc/ssh/sshd_config on the server
basic use is
systemctl start sshd.service
systemctl stop sshd.service
systemctl restart sshd.service
systemctl enable sshd.service ( should start sshd at boot )
systemctl disable sshd.service (should stop sshd at boot )


While these commands may work, it's worth pointing out that the service
name is actually ssh.service.  sshd.service is just an alias name for 
it.


In most situations, that won't matter, but if you attempt to make a
drop-in configuration directory to change the unit file, you WILL need
to use the correct service name.  I found this out the hard way, so I
thought I'd mention it to help others avoid the same pains.


so it is.
Are all services daemons ?

--
Key ID4BFEBB31



Re: testing security updates

2019-10-03 Thread mick crane

On 2019-10-03 20:40, Greg Wooledge wrote:


YOU DO NOT MIX STABLE WITH TESTING.

YOU DO NOT MIX STABLE WITH UNSTABLE.

YOU DO NOT MIX TESTING WITH UNSTABLE.

If you use one of these, you use that one only.  No mixing.
No Frankendebians.

https://wiki.debian.org/DontBreakDebian


yes sorry, I realized I made an error and should have typed
bullseye for main and unstable for security updates just after pressing 
send.

but you say not to do that ?

mick

--
Key ID4BFEBB31



testing security updates

2019-10-03 Thread mick crane

hello,
Debian web page about testing is saying that testing gets infrequent 
security updates and that you can get more frequent security updates 
from unstable.

Is that what people do ?
have buster for main and bullseye for security updates in sources.list ?

mick

--
Key ID4BFEBB31



testing security updates

2019-10-03 Thread mick crane

I didn't type previous correctly did I.
that would be
bullseye for main and unstable for security updates in sources.lists.
Is that what people do ?

mick

--
Key ID4BFEBB31



Re: checking ssh server is running

2019-10-05 Thread mick crane

On 2019-10-05 17:01, Paul Sutton wrote:

Hi

I am trying to figure out how to check if ssh is running using systemD
which is of course what Debian and Raspbian use.

However my search term

system d check ssh server is running


If it's the client on the same PC you'd know.
if sshd
"systemctl status sshd"
or
"ps ax | grep ssh"

--
Key ID4BFEBB31



Re: checking ssh server is running

2019-10-05 Thread mick crane

On 2019-10-05 20:03, Paul Sutton wrote:

On 05/10/2019 17:15, mick crane wrote:

On 2019-10-05 17:01, Paul Sutton wrote:

Hi

I am trying to figure out how to check if ssh is running using
systemD which is of course what Debian and Raspbian use.

However my search term

system d check ssh server is running


If it's the client on the same PC you'd know. if sshd "systemctl
status sshd" or "ps ax | grep ssh"


Hi

Thanks for this,  should be really helpful. To give some background as
what this is for. At the South Devon Tech Jam we one of the Google AIY
voice kits,  it needs me to ssh in to complete the set up process.


after checking through /etc/ssh/sshd_config on the server
basic use is
systemctl start sshd.service
systemctl stop sshd.service
systemctl restart sshd.service
systemctl enable sshd.service ( should start sshd at boot )
systemctl disable sshd.service (should stop sshd at boot )


--
Key ID4BFEBB31



Re: New Linux User needs some guidance

2019-10-12 Thread mick crane

On 2019-10-07 17:26, lwhona...@gmail.com wrote:
Briefly, I am a new Linux want-to-be.  I am totally blind, retired 
computer
specialist with most of my work experience in the Windows world.  I do 
have

a passing knowledge of Unix.

I am attempting my first install of Debian and I must be missing 
something

from the Install Guide.  I was under the impression

Any thoughts or pointers would be welcome.  Thank you.


From windows I have successfully used linux usb creator.
to make bootable usb sticks of linux isos
https://www.linuxliveusb.com/

mick

--
Key ID4BFEBB31



Re: inconsistent Clipit cut paste with firefox, konsole, claws

2019-12-20 Thread mick crane

On 2019-12-20 14:26, Wolfgang Rosner wrote:

tried parcellite instead of clipit as clipboard manager.
looks good so far.
still trouble with vi, but I think that's teh old never ending story.


I had troubles with backspace in Buster vi.

adding in ~/.vimrc
  set nocompatible
  set backspace=indent,eol,start

seemed to fix that

mick


--
Key ID4BFEBB31



Re: Build Kernel 5.5 RC1 for Raspberry4

2019-12-20 Thread mick crane

On 2019-12-20 19:28, deloptes wrote:

Nigel Sollars wrote:


You might want to run make menuconfig after copying the config ..
perhaps do the same with the 4.19 kernel also and do a compare of
'what is' and 'what is not' there in the 5.5 perhaps things have been
moved around a bit in the kconfig stuff.



Not sure if this is still true, but I always run make oldconfig and 
then

make menuconfig


I seem to remember things like
"make dist-clean"
and
"make mrproper"
or something if you wanted to try it twice

--
Key ID4BFEBB31



Re: What's the purpose of initrd.img{,.old} and vmlinuz{,.old} symlinks in the root dir?

2020-03-01 Thread mick crane

On 2020-02-29 18:17, Mikhail Morfikov wrote


vmlinuz -> boot/vmlinuz-5.4.0-4-amd64
lrwxrwxrwx   1 root   root   24 2020-02-24 00:37:53
vmlinuz.old -> boot/vmlinuz-5.5.4-amd64



.old is pointing to a newer kernel ?

mick

--
Key ID4BFEBB31



Re: Debian on server

2020-01-21 Thread mick crane

On 2020-01-21 14:41, Alessandro Baggi wrote:

Hi to all members of this list,

I'm not new to linux and I'm searching a good stable distro for
server. Many said CentOS and other Debian but really I have not enough
experiences to choose one.

So, I know this is a debian list and could be obtain biased opinion
but what are better point to use debian on a server instead of CentOS?

Thanks in advance.


running a server facing the internet would give me the jitters but if 
it's just for you as Andy says whatever you are comfortable with. As far 
as I know a server is a distribution with only installed what it needs.
I'm using the base distribution and added webmail, printing, saving 
files and that. I call it a server but it's not what you'd call anything 
special server.


mick


--
Key ID4BFEBB31



Re: cannot view Trash? now gmail rant

2020-03-05 Thread mick crane

On 2020-03-05 18:13, Gene Heskett wrote:

On Thursday 05 March 2020 12:15:27 Jonas Smedegaard wrote:


Quoting kaye n (2020-03-05 18:02:45)

> I'm going to assume that none of you saw or received my email
> earlier, so here it is again.

No, that is not how this mailinglist works.

If you are in doubt that your message was processed, you can check if
it appears in the public archive at
https://lists.debian.org/debian-user/


Kind regards,

 - Jonas


off topic, but how many times do we have to tell gmail users they have 
to

have 2 accounts, one to send to and one to receive? Otherwise gmail
thinks the echo from a mailing list is a duplicate and deletes it,
making the poor user think his message didn't get posted.

I had, many years ago, some lengthy conversations phone conversations
with google about that policy, and basically that is not open for
discussion, so either go someplace else like your own ISP's mail 
server,

or get a second account at gmail so you get the echo back. I bailed out
of that scene years ago, and now my ISP, the local cable tv system,
spent some time setting up dovecot and with the exception of ignoreing
fetchmails dele commands after downloading a message because its also
serving up imap from the same database, forceing me to login from a web
browser and delete the old msgs I've already pulled 2-3 times a week.

Thats a PITA too, but its far less of one than dealing with gmail.

/rant off

Cheers, Gene Heskett


gmail seems to respond to getmail request to delete fetched email by 
changing the tag so that it doesn't show in Inbox or Bin but is still in 
Allmail.


mick
--
Key ID4BFEBB31



gmail occasionally bouncing list email

2020-03-01 Thread mick crane

hi,
gmail sometimes bounces email from list.
Occasionally is spam that got through list server but last one was 
genuine that was bounced because of DMARC or something.
I can't see a way to whitelist list domain before it gets to the filters 
at gmail.

Any suggestions ( apart from not using gmail ) ?

mick

--
Key ID4BFEBB31



Re: Sudo

2020-01-29 Thread mick crane

On 2020-01-29 12:17, to...@tuxteam.de wrote:

On Wed, Jan 29, 2020 at 12:15:17PM +, mick crane wrote:

[...]


>That's because "-" tells su to do that. Drop the "-" and it'll leave
>you in the current dir (among other details, consult the man page for
>details).

yes but "su" keeps the user's path for the executables.
mick


Both can do both ways. It's in the options. Consult the man pages for
details.


at least su doesn't put you in / which slackware used to do and deleting 
everything in that directory is not a good idea as I once discovered.


mick
--
Key ID4BFEBB31



Re: Sudo

2020-01-29 Thread mick crane

On 2020-01-29 12:08, to...@tuxteam.de wrote:

On Wed, Jan 29, 2020 at 10:31:35AM +, mick crane wrote:

[...]


The only effective difference for me between "su -" and sudo seems
to be that if you are in a directory you don't have permissions and
want to change something sudo keeps you in the $PWD whereas "su -"
puts you in /root and you have to go find it again.


That's because "-" tells su to do that. Drop the "-" and it'll leave
you in the current dir (among other details, consult the man page for
details).


yes but "su" keeps the user's path for the executables.
mick
--
Key ID4BFEBB31



Re: Sudo

2020-01-28 Thread mick crane

On 2020-01-28 18:44, Joe wrote:

On Tue, 28 Jan 2020 10:29:44 -0700
"Harold Hartley"  wrote:


When I did the graphical install I couldn’t even get into su either.
That’s why I installed it without graphics the next time.


Whatever the issue was, it wasn't that. I always use a graphical
install and have never had the problem you describe.


Out of interest if you choose not to have a root password at the install 
is it any problem to add one later ?


mick
--
Key ID4BFEBB31



Re: guys

2020-02-01 Thread mick crane

On 2020-02-01 19:35, Reco wrote:

Hi.

On Sat, Feb 01, 2020 at 07:31:31PM +, mick crane wrote:

I probably shouldn't post this.
I see all these questions people trying to get their installations to 
work.

It is supposed to be files with documentation what they do.
Is there a reason things seem to get more complicated ?


I'm not implying anything, but have you ever heard the saying: "if all
else fails, try reading documentation"?
Pretty close to how things are IMO.

I have heard that expression RTFM before, I dunno, I'm probably out of 
order yet feeling is things are getting more complicated when you'd 
think things should be getting simpler.


mick

--
Key ID4BFEBB31



guys

2020-02-01 Thread mick crane

I probably shouldn't post this.
I see all these questions people trying to get their installations to 
work.

It is supposed to be files with documentation what they do.
Is there a reason things seem to get more complicated ?

mick
--
Key ID4BFEBB31



Re: Problem with fish in plasma

2020-01-31 Thread mick crane

On 2020-01-31 13:24, Kenneth Parker wrote:

Package kio (KDE Input Output Framework), allowing remote access to 
files.
The package description included mention of "ssh (fish)", hence your 
url.


was please to see mc does ssh connections

mick

--
Key ID4BFEBB31



Re: guys

2020-02-07 Thread mick crane

On 2020-02-02 15:01, Michael Stone wrote:

On Sat, Feb 01, 2020 at 07:31:31PM +, mick crane wrote:

I probably shouldn't post this.
I see all these questions people trying to get their installations to 
work.

It is supposed to be files with documentation what they do.
Is there a reason things seem to get more complicated ?


Because people who didn't have problems rarely post about that?

If you think installation has gotten harder you either weren't there
or don't clearly remember how things worked 25 years ago.


you are correct, there was a lot of attention required yet you got some 
sort of oversight what did what as you tried to get it to work.

Now it Just Works.
Please excuse my post, I must make more of an effort.

mick
--
Key ID4BFEBB31



Re: local network capability scanner?

2020-02-07 Thread mick crane

On 2020-02-07 16:24, Gene Heskett wrote:

I don't use fish that I know of.  Thats not to say mc isn't using it.  
In

which case someone has been playing with mc that has no clue what they
are doing.


mick@slinky:~$ mc
[connect shell link option]
fish: Waiting for initial line...
Enter passphrase for key '/home/mick/xxx/xxx':

mick
--
Key ID4BFEBB31



Re: identity confusion

2020-01-24 Thread mick crane

On 2020-01-24 17:06, to...@tuxteam.de wrote:

On Fri, Jan 24, 2020 at 10:23:03AM -0500, Wayne Sallee wrote:


  


[...]


Thanks for the ideas.


You're very welcome. One small request -- could you teach your
mailer to not send HTML? I was hard-pressed to make heads or
tails of your response.

Pretty please?

Cheers & thanks
-- tomás


with roundcube default [don't view in HTML] the occasional message is 
formatted and click [view in html] it's like a regular text message. 
Seems back to front but only with the very occasional message.

I don't know what that is.
mick


--
Key ID4BFEBB31



Re: using git

2020-01-28 Thread mick crane

On 2020-01-28 13:47, to...@tuxteam.de wrote:

On Tue, Jan 28, 2020 at 01:29:10PM +, mick crane wrote:

hello,
I want to install Git locally, I've cloned something before but I
don't know much about it.
Before I dive into the man pages could I ask if I need the
git-daemon-run for the server bit?


Not necessarily. Describe your use case a bit more precisely.


I tried to do bits of programming before and kept the changes in 
directories on the same machine which doesn't always seem to work if go 
back to it after several months. I thought Git on a separate machine 
might help to keep track of things.


mick

--
Key ID4BFEBB31



Re: using git

2020-01-28 Thread mick crane

On 2020-01-28 14:13, Nate Bargmann wrote:

* On 2020 28 Jan 07:30 -0600, mick crane wrote:

hello,
I want to install Git locally, I've cloned something before but I 
don't know

much about it.
Before I dive into the man pages could I ask if I need the 
git-daemon-run

for the server bit?


Have you taken a look at this book: https://git-scm.com/book/en/v2

I still refer to it when doing something  I don't do often enough to
recall the exact syntax.


OK thanks guys, that git-scm book looks very readable

mick


--
Key ID4BFEBB31



using git

2020-01-28 Thread mick crane

hello,
I want to install Git locally, I've cloned something before but I don't 
know much about it.
Before I dive into the man pages could I ask if I need the 
git-daemon-run for the server bit?


mick

--
Key ID4BFEBB31



Re: Sudo

2020-01-29 Thread mick crane

On 2020-01-29 07:04, Andrei POPESCU wrote:

On Ma, 28 ian 20, 08:24:29, David Wright wrote:


My view is that more damage is done to home systems by the sysadmins
than by external malice, so anything that protects the system from
such damage is a useful resource. I think that selective sudo¹
provides one way of reducing damage by separating critical operations
(done by su'ing to root) from the benign day-to-day maintenance
done using sudo.

¹ by selective sudo I mean

$ sudo some-command …
$


Do you mean setting up sudo only for specific commands? That is surely
useful to delegate specific tasks (e.g. 'apt update && apt upgrade') to
an advanced user.


rather than the locked-up sudo-only scheme that you can select with
the debian-installer. I'm not familiar with the latter.


Debian's sudo setup is quite simple: members of group 'sudo' get full
root privileges by providing their *own* password. 'sudo some-command'
works, as well as 'sudo -i' to get a root shell. Root logins (an
consequently also 'su') are disabled.

In my opinion sudo is best used something like:

$ sudo apt update
$ apt search some_string
$ apt show some_package
$ sudo apt install some_package
$ man some_program
$ sudo some_program do_stuff_requiring_root
etc.



The only effective difference for me between "su -" and sudo seems to be 
that if you are in a directory you don't have permissions and want to 
change something sudo keeps you in the $PWD whereas "su -" puts you in 
/root and you have to go find it again.


mick
--
Key ID4BFEBB31



Re: *nix

2020-02-17 Thread mick crane

On 2020-02-17 16:29, Charles Curley wrote:

On Sun, 16 Feb 2020 22:07:59 -0500
Doug McGarrett  wrote:


(I fell off the stoop
after tripping over my dog's tether in the dark on the 4th of July,
1915, and spent most of the summer in various stages of recovery.)
Maybe some day I'll figure out how to dial a number on the phone.


I suspect that you find having to dial a phone a step backwards in
user interface technology.

For the young whippersnappers in the audience, telephone technology in
1915 required that one pick up the ear piece, wait for the operator to
acknowledge you, and tell her (it was usually a woman) to whom you
wished to speak. She would then connect you by re-arranging physical
patch cords to make physical connections.

And hope it wasn't a long distance call, which could take hours to set
up.


In the 50s I heard that you could tap out the number on the cradle in 
the public phone boxes and connect without inserting coins.


mick

--
Key ID4BFEBB31



Re: *nix

2020-02-17 Thread mick crane

On 2020-02-17 20:18, Doug McGarrett wrote:

In the 50s I heard that you could tap out the number on the cradle in 
the public phone boxes and connect without inserting coins.


mick


Now you tell me!   --doug


thinking back it was 60's. after that I heard a whistle you got in 
cornflake packets worked for a bit


mick

--
Key ID4BFEBB31



Re: Debian GNU/Linux 9 (stretch) was broken after upgraded from stretch-backports.

2020-02-19 Thread mick crane

On 2020-02-18 13:45, Nektarios Katakis wrote:


Upgrading from 9 to 10 should be straight forward.


wasn't there something a bit dramatic about having to migrate the 
postgresql database ?


mick

--
Key ID4BFEBB31



Re: web server for development

2020-01-18 Thread mick crane

On 2020-01-18 20:09, Russell L. Harris wrote:

On Sat, Jan 18, 2020 at 07:21:43PM +0100, deloptes wrote:

mick crane wrote:
I scp the files to a temp directory in my home directory on the 
server

then ssh into the server, su to root, change the permissions and
ownerships of the files then move them to /var/www/html/


for testing I usually configure something meaningful in apache and 
setup a
user that I would use to copy to the server. Keep it as simple as 
possible.


another option is to open the target directory and edit the code in 
place.


For the purpose of interactive development as I proceed through the
Template Toolkit tutorial in Chapter 11 of the O'Reilly Badger Book,
the "$ python3 -m http.server" approach is both working and simple.
Everything is in a single directory and only one machine is needed;
neither file movement (scp, FTP, RSYNC) nor change of permissions is
required.

Was not this simple approach to serving HTTP available back in
A.D. 2003 when the Badger Book was published?


I'd not heard of this python webserver but then I haven't looked at 
python as yet.

Tried to mimic locally wordpress that's on the hosting service.
unsure if the python server would replace apache for that.

--
mickiwiki.com
Key ID4BFEBB31



Re: web server for development

2020-01-18 Thread mick crane

On 2020-01-09 06:16, Russell L. Harris wrote:

For development of a web pages, I installed Apache2 on another machine
in the LAN so that I can FTP web pages from the development machine to
the web server and view the pages from the development machine.

But the installation of Apache2 on Buster serves documents from
/var/www/html/, which is owned by root, so as a normal user I cannot
FTP into that directory.

The web server is not exposed outside the LAN, so security is not an
issue.

What is the proper approach?


It's a bit convoluted.
I scp the files to a temp directory in my home directory on the server 
then ssh into the server, su to root, change the permissions and 
ownerships of the files then move them to /var/www/html/


mick

--
Key ID4BFEBB31



just a general question really

2020-01-03 Thread mick crane

are things getting more complicated because there is something wrong ?

--
Key ID4BFEBB31



Re: Back to systemd [was: Re: New list for Raspbian? (was: Re: systemdq)]

2019-12-31 Thread mick crane

On 2019-12-31 09:21, ghe wrote:


But what I'm really looking for is a comprehensive book on systemd like
the 40 pounder 'Learning Python' or other O'Reilly, etc, books that've
saved my life in the past few years. (I'm more comfortable with dead
trees than I am with screens.)


When Microsoft was saying "Where do you want to go today ?" I started 
looking for another OS.
Really pleased to find Linux, although didn't find intuitive there was 
loads of documentation that came with it and all the O'Reilly books to 
help a new user figure out what was going on.
These days I don't bother so much as things seem to Just Work but it 
would be nice to have it a bit easier to find out what systemd is doing.


cheers
mick

--
Key ID4BFEBB31



apple mini

2020-01-05 Thread mick crane

yes I know this is Debian user list
yes I know that apple is unix.
I got an apple mini to give to somebody
to clean it up is that
"userdel"
"makeusr" or something like that ?
mick
--
Key ID4BFEBB31



Re: geolocation services disabled and Gnome maps

2020-04-10 Thread mick crane

On 2020-04-09 13:49, Anil F Duggirala wrote:

hello,
I am running Gnome 3 in Debian Buster. I am wondering why, even though
my Location Services are set to Off (and has always been set to Off),
when  I enter the Gnome Maps application, it determines and shows my
location on the map.
thank you,


What I'm not understanding is why there are these complex window manager 
things.
Presumably people want an easy way to click on a picture and make use 
some software ?



mick
--
Key ID4BFEBB31



Desktop environments

2020-04-10 Thread mick crane

Well I was thinking is a valid question.
What's the deal with these desktop environments ?
I thought is like a desktop with pictures so you know where everything 
is and then you click and start a program that does something and the 
desktop gets out of the way ?

Is that not the purpose ?

mick

--
Key ID4BFEBB31



Re: fetchmail timeout

2020-04-05 Thread mick crane

On 2020-04-04 21:46, Andrei POPESCU wrote:

On Sb, 04 apr 20, 19:30:05, Pierre Frenkiel wrote:

On Sat, 4 Apr 2020, Andrei POPESCU wrote:

> You have to keep also a Python 2 interpreter for it.

  same question: why would it disapear ?


Because it's not supported upstream anymore.

https://legacy.python.org/dev/peps/pep-0373/

Debian is actively working on removing it and as far as I recall the
developers hope to complete this in time for the bullseye release.

https://wiki.debian.org/Python/2Removal

issue seems to be is getmail a security risk with python 2 ? developer 
says no, then it is if having python2 on your computer a security risk ?

If I understand it.
I'm certain they make it so it works

mick



--
Key ID4BFEBB31



Re: Buster without systemd? [with backtrack]

2020-03-27 Thread mick crane

On 2020-03-27 03:12, David Wright wrote:


I'm still quite happy to run with their choices.


I'm also very happy to use this free software that works.
for example I used to use fetchmail and procmail now I use getmail and 
dovecot-deliver.
I have no idea how dovecot does the mail transport but I'm sure I could 
find out, same way I could probably find out about systemd even though 
this old fart moans about things getting more complicated.


mick
--
Key ID4BFEBB31



Re: Small Open Source Digital Classroom

2020-04-01 Thread mick crane

On 2020-03-31 21:30, to...@tuxteam.de wrote:

On Tue, Mar 31, 2020 at 10:27:28PM +0200, n...@dismail.de wrote:

On Tue, Mar 31, 2020 at 08:17:56PM +0200, deloptes wrote:
> […] Recently I was looking at zoom.us - seems to be in
> hype now - can be installed in debian and can be used as video conferencing
> tool.

Based on zoom's "privacy" policy and everything I've herad so far 
about it,

I would not recommend using zoom. Some examples:


[...]

Shudder. OK, for me (and my customers) it's toast. Thanks for
pointing that out.

Cheers
-- t


Good job UK Cabinet isn't using it for teleconferencing.
Oh.

mick
--
Key ID4BFEBB31



Re: fetchmail timeout (fwd)

2020-03-29 Thread mick crane

On 2020-03-29 09:06, Pierre Frenkiel wrote:

as requested, here is the output of fetchmail -v
you can see at the end "reading message ...", but I can't find it


with gmail you have to select "allow non-conforming clients" or 
something.
I had problems with fetchmail and gmail ( forget what exactly) so 
started using getmail.


mick
--
Key ID4BFEBB31



Re: fetchmail timeout (fwd)

2020-03-29 Thread mick crane

On 2020-03-29 13:24, Reco wrote:


On Sun, Mar 29, 2020 at 01:46:12PM +0200, Pierre Frenkiel wrote:

Mike fetchmail, getmail gives a Time Out


OP
did you select "allow non-standard email client" or whatever it is at 
gmail ?

use SimpleIMAPSSLReciever ?

[retriever]
type=SimpleIMAPSSLRetriever
server = imap.gmail.com
username = 
password = X
[destination]
type = MDA_external
path = /usr/lib/dovecot/deliver
[options]
verbose = 0
delete = true
message_log = ~/.getmail/log

mick
--
Key ID4BFEBB31



Re: Why can't I move the document root for a site in Apache 2? [SOLVED]

2020-08-31 Thread mick crane

On 2020-08-31 21:57, Gary Dale wrote:


Just to be clear, the folder I had to change permissions on is the


I think the document root is just where apache2 looks first.
*Don't know if you are supposed to do it like that* but think the actual 
html files can be anywhere so long as they have the right permissions 
and have a link to them in the document root.

Whenever I've changed anything I do.
#!/bin/bash
find /path_to_html_files/ -type d -exec chmod 750 {} \;
find /path_to_html_files/ -type f -exec chmod 640 {} \;
chown -R root /path_to_html_files/*;
chgrp -R www-data /path_to_html_files/*;

remembering if there is any file wants to be executable.

mick

--
Key ID4BFEBB31



Re: LEAN Debian install: Exploring task selection menu

2020-09-10 Thread mick crane

On 2020-09-09 14:27, Richard Owlett wrote:


My proposed alternative is to leave unchecked all options on the
"Software Selection" menu[1] and create appropriate pseudo-packages to
be installed with "apt-get --no-install-recommends"


I suppose if you were *that* concerned you could install a basic system 
and install everything from sources. What that "basic system" would 
contain I don't really know. But that's what the nice people at Debian 
do so you don't have to.


mick
--
Key ID4BFEBB31



Re: Looking for a generic drag and drop gui for custom commands

2020-09-08 Thread mick crane

On 2020-09-07 21:43, Christoph K. wrote:

Dear all,

I'd like to "automate" a couple of tasks that I (until now) do on the
command line manually. Examples include splitting of video files using
ffmpeg, run backups with specific parameters, display checksums(md5), 
etc.


I'm tired of typing the same long commands that I often need to look up
in my wiki and just replace one or two parameters, usually just the 
file

names.


Put the (ffmpeg) command in a script and run it with argument/s ?

mick

--
Key ID4BFEBB31



Re: LEAN Debian install: Exploring task selection menu

2020-09-12 Thread mick crane

On 2020-09-12 10:53, Brian wrote:

On Sat 12 Sep 2020 at 12:33:56 +0300, Andrei POPESCU wrote:


On Vi, 11 sep 20, 22:47:06, Fabrice BAUZAC-STEHLY wrote:
>
> I've also been bitten by this.  I think it is a UI issue, the options
> are ambiguous.  Would it be possible to simply change the dialog box as
> follows?  --
>
>   Debian desktop environments:
>   [ ] ... GNOME (default)
>   [ ] ... Xfce
>   [ ] ... KDE
>   [ ] ... Cinnamon
>   [ ] ... MATE
>   [ ] ... LXDE

You could contact debian-boot or file a bug against debian-installer 
(or

tasksel?).

Providing a patch increases the chances of having the change accepted.


What is the purpose of "(default)" as part of the Gnome entry?


I wondered that, "default" is usually what happens if you just press 
enter given a YES, no

choice. The dialogue should probably be something like
"If you don't select an alternative GNOME will be installed"
--
Key ID4BFEBB31



Re: LEAN Debian install: Exploring task selection menu

2020-09-12 Thread mick crane

On 2020-09-12 18:42, Brian wrote:

On Sat 12 Sep 2020 at 11:49:18 +0100, mick crane wrote:


On 2020-09-12 10:53, Brian wrote:
> On Sat 12 Sep 2020 at 12:33:56 +0300, Andrei POPESCU wrote:
>
> > On Vi, 11 sep 20, 22:47:06, Fabrice BAUZAC-STEHLY wrote:
> > >
> > > I've also been bitten by this.  I think it is a UI issue, the options
> > > are ambiguous.  Would it be possible to simply change the dialog box as
> > > follows?  --
> > >
> > >   Debian desktop environments:
> > >   [ ] ... GNOME (default)
> > >   [ ] ... Xfce
> > >   [ ] ... KDE
> > >   [ ] ... Cinnamon
> > >   [ ] ... MATE
> > >   [ ] ... LXDE
> >
> > You could contact debian-boot or file a bug against debian-installer
> > (or
> > tasksel?).
> >
> > Providing a patch increases the chances of having the change accepted.
>
> What is the purpose of "(default)" as part of the Gnome entry?

I wondered that, "default" is usually what happens if you just press 
enter

given a YES, no
choice. The dialogue should probably be something like
"If you don't select an alternative GNOME will be installed"


What would happen if a user did not want Gnome? Note that the present
dialog caters for this situation.


Is the "Debian desktop environment" Gnome plus other things ? In which 
case the way it is makes sense.


--
Key ID4BFEBB31



Re: Linux not seeing all SATA drives

2020-10-13 Thread mick crane

On 2020-10-13 16:39, Dennis Wicks wrote:

David Christensen wrote on 10/12/20 10:01 PM:

On 2020-10-12 19:19, Dennis Wicks wrote:
I have 3 SATA drives on my system. I replaced all my red cables with 
new black cables. The BIOS sees all of them but when linux finishes 
booting it only sees two of them. Do I have to do something to linux 
so it sees the third drive?


FYI, I have the system disk in sata-1, the drive on sata2 is not 
seen, but the drive on sata3 is seen and in use. The CD/DVD drive is 
on sata6 and is also seen.


Thanks for any and all help!
Dennis


Run the following commands as root.  If you need help interpreting the 
results, post your console session:


# lsblk

# fdisk -l

# mount | grep sd


David


Thanks for the tip, but none of those commands show the third disk, 
just two.

What might be /dev/sdc doesn't show up with any command I have tried.

Thanks!
Dennis


I'd look in dmesg for anything and swap the cables about from sata2 and 
sata3

mick
--
Key ID4BFEBB31



Re: SSD and HDD

2020-10-12 Thread mick crane

On 2020-10-11 19:01, Andy Smith wrote:

Hi Mick,

On Sun, Oct 11, 2020 at 05:45:45PM +0100, mick crane wrote:
Got a PC that has SSD and a HDD. I see that you are supposed to avoid 
writes

to SSD for longevity.


Flash write endurance has come on leaps and bounds over the last
decade to the point where most people don't have to worry about
this.

You can look at "tune2fs -l" output or at SMART attributes to see
how much has been written to your current filesystems / devices over
their life times, to see how your use case matches up against the
write endurance advertised for your SSD.

I wouldn't recommend taking any special measures unless you have
some doubt that the SSD endurance is up to it.

With only a single SSD and a single HDD I'd rate device failure from
other problems as a higher risk than wearing out the SSD.

Is it a matter of putting entries in fstab for /swap /var /home to 
suitably

formatted partitions on HDD ?


If you still think you will have a problem then yes, that is one way
to go. Another is to leave some percentage of the SSD unpartitioned
and never used. That will increase its write endurance.

[ Leaving aside the fact that if I were doing this I'd have an extra
storage device for redundancy… ]

If I were in your position and still had concerns about write
endurance I'd probably put everything in LVM with a volume group on
the SSD and a volume group on the HDD. I'd then use separate logical
volumes for the filesystems that got a lot of writes. The use of LVM
like this would allow me to change my mind later and move LVs
between the SSD and HDD while the machine is online.

Plus any time you are thinking of doing multiple filesystems, LVM is
a good bet.

Plus you might be using LVM anyway for encryption.

But again I can't emphasise enough how you are probably over thinking
write endurance.

Cheers,
Andy


might I ask a favour for information on accepted wisdom for this stuff ?
I being a home user have pfsense on old lenovo between ISP router and 
switch to PCs

another old buster lenovo doing email
another Buster PC I do bits of programming on.
Windows PC I play poker on and some games.
My approach to backup has been to copy files I want to keep to external 
HDs and other disks when I remember. If something goes wrong so long as 
I remember what the config files do it's not such a big deal to start 
again.

I suppose I should try to make it more formal

Tips for understood accepted wisdom appreciated, like is it better if 
want to use a windows program have this Virtualization or reboot and 
change boot order or just have it on another PC. And also practical 
method for backup hardware as consumer hardware only seem to have room 
for 2 disks at most.


mick


--
Key ID4BFEBB31



Re: backups Was: SSD and HDD

2020-10-13 Thread mick crane

On 2020-10-13 00:46, Dan Ritter wrote:

mick crane wrote:


might I ask a favour for information on accepted wisdom for this stuff 
?
I being a home user have pfsense on old lenovo between ISP router and 
switch

to PCs
another old buster lenovo doing email
another Buster PC I do bits of programming on.
Windows PC I play poker on and some games.
My approach to backup has been to copy files I want to keep to 
external HDs

and other disks when I remember. If something goes wrong so long as I
remember what the config files do it's not such a big deal to start 
again.

I suppose I should try to make it more formal


Only if you care about the data...

Tips for understood accepted wisdom appreciated, like is it better if 
want
to use a windows program have this Virtualization or reboot and change 
boot

order or just have it on another PC.


That would depend. Is it a bother to reboot? Do you have a spare
PC? Both of those are easier and potentially faster than
virtualizing an existing system.



And also practical method for backup
hardware as consumer hardware only seem to have room for 2 disks at 
most.


So you have four or more PCs around, and don't mind having
another. Get an older machine and put two shiny new spinning
disks in it. Have the Debian installer set it up as MDADM RAID-1
-- mirrors. Use backupninja on the three Linux machines and have
them store their data on the backup machine.


This looks like good advice, thanks Dan and all.
One thing I wonder about if I reboot and change boot order to start 
windows is if I might create some confusion on the network as pfsense PC 
does DHCP and that will think there are 2 PCs with the same MAC address 
?


mick

--
Key ID4BFEBB31



SSD and HDD

2020-10-11 Thread mick crane
Bearing in mind I rarely do installs and when I do usually let the 
installer do its thing.
Got a PC that has SSD and a HDD. I see that you are supposed to avoid 
writes to SSD for longevity.
Is it a matter of putting entries in fstab for /swap /var /home to 
suitably formatted partitions on HDD ?

Or is there more to  it ?

mick

--
Key ID4BFEBB31



Re: ot: hack me

2020-08-17 Thread mick crane

On 2020-08-17 18:59, gru...@mailfence.com wrote:

does anyone know of a reliable site that can stress test my firewall

just go on a Linux User Group on IRC and ask to be hacked.

mick
--
Key ID4BFEBB31



Re: Encrypt files on Linux, decrypt on Windows

2020-08-22 Thread mick crane

On 2020-08-21 18:46, local10 wrote:

Hi,

What would be a reasonably secure and simple way to encrypt files on
Linux and then send them to a  non-technical Windows user so she would
be able decrypt and read them?

Any ideas? Thanks


If these are documents what's wrong with open office protected with 
passphrase ?


mick
--
Key ID4BFEBB31



Re: "What's wrong with...?"

2020-08-23 Thread mick crane

On 2020-08-22 19:25, Teemu Likonen wrote:

* 2020-08-22 11:19:17+01, mick crane wrote:


On 2020-08-21 18:46, local10 wrote:

What would be a reasonably secure and simple way to encrypt files on
Linux and then send them to a non-technical Windows user so she would
be able decrypt and read them?



If these are documents what's wrong with open office protected with
passphrase ?


Q: What should we eat today?
A: What's wrong with Chinese food?

Q: What novel do you suggest me to read next?
A: What's wrong with The Three-Body Problem by Liu Cixin?


Is there a culture where "what's wrong with" means "I suggest"? Or is
there a culture where it is common that person's suggestion will be
rejected and they prepare for that by turning it to a question: "What's
wrong with [my suggestion]?"

OK, sorry. No need for long cultural off-topic discussions. I just 
think

that such counter question are strange. Questions which have completely
wrong premises.


The OP is asking to encrypt a document (presumably) and send to a 
windows user to decrypt.
While a password protected zip file is an excellent suggestion the 
windows user has to remember where they extracted it and then find 
something to read it with and document may have formatting.
If I'm remembering correctly microsoft word can open passphrase 
protected Open Office Writer files which is just one click but I'm not 
going to go on Microsoft store to install it to find out.


mick
--
Key ID4BFEBB31



Re: Mail transfer agent

2020-09-25 Thread mick crane

On 2020-09-25 08:56, Joe wrote:


If you haven't done anything yourself, it will be exim4-light.


thanks

--
Key ID4BFEBB31



Re: Mail transfer agent

2020-09-24 Thread mick crane

On 2020-09-24 18:19, Brian wrote:

On Thu 24 Sep 2020 at 13:35:17 +, mike.junk...@att.net wrote:



On Wednesday, September 23, 2020, 09:14:42 PM CDT, Dan Ritter 
 wrote:

 mutt is an MUA, not an MTA. 

What tasks do you want your mail server to perform? Please be
specific. We will have better advice for you once we know
exactly what you want to have happen.
-dsr-
Thanks, Dan,All I need from an MTA is:1) take mail from fetchmail and
put it in a mailbox for mutt to display,2) take mail from mutt and
send it to my ISP via smtp3) take messages from the system, eg: cron
and deliver them to that same mailbox4) take a simple message on the
CL such as:    echo 'blah' | mail -s 'oops' no...@example.com

I've been using exim for years and it works well but is overkill for
my needs.


I too have been using exim for years in a similar way to the way you
describe. It does the job very well and I just let it get on with it.
I don't really understand what you mean by "overkill" and think you are
fussing over nothing.


I know how I get mail.
I've been using roundcube for a few years. I know I put in the SMTP 
server, account and password for being allowed in the configuration but 
I actually have no idea what is used for the sending. I probably should.


mick



--
Key ID4BFEBB31



Re: crc not installed but rsync using it? ...

2020-09-25 Thread mick crane

On 2020-09-25 23:42, Gene Heskett wrote:

On Friday 25 September 2020 18:10:42 Stefan Monnier wrote:


> He may have changed it, but at the time I first started using it on
> a "pc" it had to be registered before it would access the 2nd port.

I don't understand what you're referring to:
- What is the "it" that had to be registered?


That edition of dd-wrt.  You had to get a keyfile from brainslayer.  
You

didn't have to get one to go with a router version.  And it sometimes
took most of a week for him to service your key request.


- With whom/what did it have to be registered?
- What 2nd port of what?


The second ethernet port of the pc you built to run it.


When all this internet kicked off I thought anybody could have a go but 
apparently you need to be with a provider.


mick

--
Key ID4BFEBB31



Re: ssh fingerprint mismatch for one single client

2020-09-19 Thread mick crane

On 2020-09-19 23:42, Beco wrote:

On Sat, 19 Sep 2020 at 18:55, mick crane  wrote:



Just wild guess.
Student can connect via the mobile network but not through the ISP
router?
Might that be the port for ssh on the router ?

mick



Hello Mick,

Thanks for the interest.

Yes, student can connect via mobile.

And, somewhat "yes", student can kind of connect via ISP. It is not 
that

the port is blocking traffic.
The fingerprint appears, and if accepted the wrong one, the password is
asked for.

But then, of course, the connection fail.

Also, he was able to connect the day before. So whatever it is, it is
recent, and just for one single student.

Also, I asked him to check the router port 22 if it was ok. He did a 
hard

reset (factory reset) on it. He took a look and it is open.



Is this Putty or something with keys on student's PC ?
If worked before maybe something went wrong with the saved connection 
but that doesn't explain why cannot connect via phone>router WIFI unless 
there is separate issue there.
I guess I would try connect via command line with verbosity but I'd have 
to look up exactly the syntax.


mick


--
Key ID4BFEBB31



<    1   2   3   4   5   6   7   >