Re: [GTALUG] Backing up Windows Machines to Linux NAS,

[Bob Jonkman via talk]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have one Windows box left, on which I've installed the UnxUtils
package (in the Windows sense of package, not .rpm or .deb) That box
uses a batch file to push its files to a GNU/Linux backup server using
rsync.exe. On other Windows boxes I've used Scheduled Tasks to run
batch files, although I'm not doing so here.

I used the Windows tool DeltaCopy for a while, but it was too finicky.
But it did generate a useful command line for rsync.exe, which I now
use with UnxUtils.

- --Bob.


On 2017-06-27 10:03 PM, ted leslie via talk wrote:
> I use spider oak for this. I believe there is a opensource
> non-hosted alternative. Google for open source alternatives to
> spider-oak one. SO1 has encryption, and  its only client side
> placed, hosting co. doesn't even have key. This violates your
> "google results" stipulations, but this is a good email topic to
> intro people to SO1 and SO1 alternatives, and you may find exactly
> what you want. For now I am fine with hosted solution, as its also
> offsite. But eventually wouldn't mind non-hosted, and started to
> look for that, and there were some claims that there is stuff out
> there.
> 
> -tl
> 
> On Tue, Jun 27, 2017 at 9:23 PM, Scott Sullivan via talk
>  wrote:
> 
>> I'm sure many of us have friends and family with Windows
>> Machines. And the savvy among us run our own Linux Backup server
>> / NAS boxes.
>> 
>> How do you get regular, automated copies of data off said Windows
>> machines?
>> 
>> I would like to only hear from folks that actively using a
>> solution. Not a list of 'exercise for the reader' google
>> results.
>> 
>> 
>> # Goal:
>> 
>> To recover from a ransom-ware infection, by pulling the last
>> clean snapshot of user data from the NAS.
>> 
>> # Assumptions:
>> 
>> Snapshots are handled by the Backup Server / NAS at a FS layer
>> (ZFS / BTRFS), or by the server side backup software.
>> 
>> # Nice to haves:
>> 
>> * In-transit encryption.
>> 
>> # Not an Acceptable Answers:
>> 
>> Open Samba on the windows box, mounting it on the backup server,
>> and running rsync regularly.
>> 
>> 
>> Thanks in advance! -- Scott Sullivan --- Talk Mailing List 
>> talk@gtalug.org https://gtalug.org/mailman/listinfo/talk
>> 
> 
> 
> 
> --- Talk Mailing List talk@gtalug.org 
> https://gtalug.org/mailman/listinfo/talk
> 

- -- 
Bob Jonkman   Phone: +1-519-635-9413
SOBAC Microcomputer Services http://sobac.com/sobac/
Software   ---   Office & Business Automation   ---   Consulting
GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
Comment: Ensure confidentiality, authenticity, non-repudiability

iEYEARECAAYFAllTH0IACgkQuRKJsNLM5eq6WACgz+Gx/++ghbPFF5dVTN+gnuho
52cAoP5cZACIns/HrGB0+DG7j004FmeJ
=lVXw
-END PGP SIGNATURE-
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

Re: [GTALUG] Backing up Windows Machines to Linux NAS,

[ted leslie via talk]

I use spider oak for this. I believe there is a opensource non-hosted
alternative.
Google for open source alternatives to spider-oak one. SO1 has encryption,
and  its only client side placed,
hosting co. doesn't even have key.
This violates your "google results" stipulations, but this is a good email
topic to intro people to SO1 and
SO1 alternatives, and you may find exactly what you want. For now I am fine
with hosted solution, as its also offsite.
But eventually wouldn't mind non-hosted, and started to look for that, and
there were some claims that there is stuff out there.

-tl

On Tue, Jun 27, 2017 at 9:23 PM, Scott Sullivan via talk 
wrote:

> I'm sure many of us have friends and family with Windows Machines. And the
> savvy among us run our own Linux Backup server / NAS boxes.
>
> How do you get regular, automated copies of data off said Windows machines?
>
> I would like to only hear from folks that actively using a solution.
> Not a list of 'exercise for the reader' google results.
>
>
> # Goal:
>
> To recover from a ransom-ware infection, by pulling the last clean
> snapshot of user data from the NAS.
>
> # Assumptions:
>
> Snapshots are handled by the Backup Server / NAS at a FS layer (ZFS /
> BTRFS), or by the server side backup software.
>
> # Nice to haves:
>
> * In-transit encryption.
>
> # Not an Acceptable Answers:
>
> Open Samba on the windows box, mounting it on the backup server, and
> running rsync regularly.
>
>
> Thanks in advance!
> --
> Scott Sullivan
> ---
> Talk Mailing List
> talk@gtalug.org
> https://gtalug.org/mailman/listinfo/talk
>
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

Re: [GTALUG] Backing up Windows Machines to Linux NAS,

[Alvin Starr via talk]

On 06/27/2017 09:23 PM, Scott Sullivan via talk wrote:
> I'm sure many of us have friends and family with Windows Machines. And
> the savvy among us run our own Linux Backup server / NAS boxes.
>
> How do you get regular, automated copies of data off said Windows
> machines?
>
> I would like to only hear from folks that actively using a solution.
> Not a list of 'exercise for the reader' google results.
>
>
> # Goal:
>
> To recover from a ransom-ware infection, by pulling the last clean
> snapshot of user data from the NAS.
>
> # Assumptions:
>
> Snapshots are handled by the Backup Server / NAS at a FS layer (ZFS /
> BTRFS), or by the server side backup software.
>
> # Nice to haves:
>
> * In-transit encryption.
>
> # Not an Acceptable Answers:
>
> Open Samba on the windows box, mounting it on the backup server, and
> running rsync regularly.
>
>
> Thanks in advance!

rdiff-backup will run on windows and claims to be able to store windows
file attributes.
I have used it  and it works but not being much for windows I did not do
a whole lot with it.
rdiff-backup uses ssh for communication so the link is encrypted but the
data on the storage end is not.

-- 
Alvin Starr   ||   voice: (905)513-7688
Netvel Inc.   ||   Cell:  (416)806-0133
al...@netvel.net  ||

---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

[GTALUG] Backing up Windows Machines to Linux NAS,

[Scott Sullivan via talk]

I'm sure many of us have friends and family with Windows Machines. And 
the savvy among us run our own Linux Backup server / NAS boxes.


How do you get regular, automated copies of data off said Windows machines?

I would like to only hear from folks that actively using a solution.
Not a list of 'exercise for the reader' google results.


# Goal:

To recover from a ransom-ware infection, by pulling the last clean 
snapshot of user data from the NAS.


# Assumptions:

Snapshots are handled by the Backup Server / NAS at a FS layer (ZFS / 
BTRFS), or by the server side backup software.


# Nice to haves:

* In-transit encryption.

# Not an Acceptable Answers:

Open Samba on the windows box, mounting it on the backup server, and 
running rsync regularly.



Thanks in advance!
--
Scott Sullivan
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

Re: [GTALUG] Linux hardening question

[Kevin Cozens via talk]

On 2017-06-27 07:37 PM, Truth Hacker via talk wrote:

I am starting to go down the road to harden a Linux server, I am using
the Ubuntu server image as my starting point.

[snip]

Q: What service should I consider disabling from starting automatically.


Disable any service you won't need for what you are going to be doing with 
the machine. :)



I am reading up on iptable and also know about ufw, but not sure how
to setup a good firewall, like what to block and not.


It depends on the extent to which you want to harden the machine. One way to 
set up a firewall is deny everything by default then open the holes for the 
services you need. firewalld is also a firewall related package I've been 
running across lately.


Install logwatch and have it send the logs to you on a daily basis.
Use fail2ban to automatically firewall any machine who fails too many times 
to login via SSH.


You may also want to "chmod 711 /etc", FWIW.

If you are really serious about hardening a machine read up on SELinux.

--
Cheers!

Kevin.

http://www.ve3syb.ca/   |"Nerds make the shiny things that distract
Owner of Elecraft K2 #2172  | the mouth-breathers, and that's why we're
| powerful!"
#include  | --Chris Hardwick
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

[GTALUG] Linux hardening question

[Truth Hacker via talk]

Hi All,

I am starting to go down the road to harden a Linux server, I am using
the Ubuntu server image as my starting point.

I searched a few articles and compiled a list of things to do, so far
the stuff is a bit dated. So I was wondering if anyone has stuff ideas
to help me harden my system which I plan to use to host my website
using a VPS host.

So far I've got step for the following:

SSH / No root login, public key login
Using DenyHost to reduce brute force password hacking
Block port scanning
Disable PING response
Closing unused ports

Q: What service should I consider disabling from starting automatically.

Q: What program should I remove like (telnet) from my system.

I am reading up on iptable and also know about ufw, but not sure how
to setup a good firewall, like what to block and not.

Any other ideas or checklist would be appreciated.

Thanks,
TH
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

Re: [GTALUG] Package Problem

[Stephen via talk]

On 2017-06-27 03:22 PM, Ivan Avery Frey via talk wrote:



On Tue, Jun 27, 2017, 15:10 Stephen via talk > wrote:


I am running Ubuntu 16.10

The last system update has run into problems. The Ubuntu Software GUI
program hangs.

I tried an apt-get and fount that there is a problem in:

libssl1.0.0:amd64

This is the important part of the output:

dpkg: error processing package libssl1.0.0:amd64 (--configure):
   package is in a very bad inconsistent state; you should
   reinstall it before attempting configuration
No apport report written because the error message indicates its a
followup error from a previous failure.

How do I fix this?


To reinstall libssl:
apt-get --reinstall install libssl.

I can't guarantee that this will fix this.


Thank you!

I had to use sudo apt-get --reinstall install libssl1.0.0:amd64

but that was easy to figure out :)

--
Stephen
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

Re: [GTALUG] Package Problem

[Ivan Avery Frey via talk]

On Tue, Jun 27, 2017, 15:10 Stephen via talk  wrote:

> I am running Ubuntu 16.10
>
> The last system update has run into problems. The Ubuntu Software GUI
> program hangs.
>
> I tried an apt-get and fount that there is a problem in:
>
> libssl1.0.0:amd64
>
> This is the important part of the output:
>
> dpkg: error processing package libssl1.0.0:amd64 (--configure):
>   package is in a very bad inconsistent state; you should
>   reinstall it before attempting configuration
> No apport report written because the error message indicates its a
> followup error from a previous failure.
>
> How do I fix this?
>

To reinstall libssl:
apt-get --reinstall install libssl.

I can't guarantee that this will fix this.

>
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk

[GTALUG] Package Problem

[Stephen via talk]

I am running Ubuntu 16.10

The last system update has run into problems. The Ubuntu Software GUI 
program hangs.


I tried an apt-get and fount that there is a problem in:

libssl1.0.0:amd64

This is the important part of the output:

dpkg: error processing package libssl1.0.0:amd64 (--configure):
 package is in a very bad inconsistent state; you should
 reinstall it before attempting configuration
No apport report written because the error message indicates its a 
followup error from a previous failure.


How do I fix this?

Thanks in advance.

--
Stephen
---
Talk Mailing List
talk@gtalug.org
https://gtalug.org/mailman/listinfo/talk