auto-kill process using too much memory

2018-08-23 Thread Frédéric
Hi,

It happens sometimes that someone launches a process that uses too
much memory. Then the computer starts swapping leaving the computer
completely out of use. When the swap is full (I guess), the process is
automatically killed and we can work again. But this can last 10-15
minutes.

Would it be possible to kill any process using more than some LIMIT
memory? The aim being to kill it before it starts swapping.

Note that I am using F27 for now.

Thanks in advance,

F
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/CJD6W6UBCSK3CBVE4NQAOE6P67MVGEZT/


Re: I need iptables ftp nat help

2018-08-23 Thread Todd Chester



On 08/23/2018 12:14 PM, Mike Wright wrote:

On 08/23/2018 11:50 AM, ToddAndMargo wrote:

On 08/23/2018 11:41 AM, Mike Wright wrote:

On 08/23/2018 11:23 AM, ToddAndMargo wrote:


Just ftp client and I want to support both active and passive mode



This covers both:

http://www.devops-blog.net/iptables/iptables-settings-for-outgoing-ftp

:m


Hi Mike,

That is a description of what is happening.

I am looking for Fedora specific iptables instructions.


iptables rules are processed by the kernel.  They are distribution 
agnostic.


:m


Yippee!!

I still the directions.  What worked on RHEL, does not
work on Fedora, so what am I doing wrong?

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/WADDN34MBMZJ4N4ZMUJ74EAMXS3VVZEY/


Script to wakeup monitor with speakers for cron mp3 alarm

2018-08-23 Thread None via users
Dear Fellow Fedora users,

I had a script called upon by cron which played music at a certain time, for 
example

30 08 * * 1-5 ~/.dalarm

And .dalarm had

#!/bin/sh

/usr/bin/xterm -e
/usr/bin/mplayer -really-quiet -shuffle -playlist ~/.playlist

It worked, but I did have speakers, now. I do not have external speakers, but a 
monitor with speakers, if there is no activity with the mouse, the speakers are 
not heard and while the script does work, the monitor is not active, it is on, 
but inactive.  I am using KDE and I do not know which screensaver is working, 
the screen blanks and the monitor goes to sleep.  How can I wake up the 
screen/monitor so I can hear the alarm playing.  I remember trying
$ xset dpms off
Or similar and turn off screen blankinh, but that does not work anymore.  How 
do I figure out a way to get it working?

Thanks in Advance,


Antonio

Sent from ProtonMail, encrypted email based in Switzerland.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/QFWSCLI2BCTUL4LWE2GRSRSGHO6XVHP6/


Re: F28 Parole needs H.264 (High Profile) Decoder

2018-08-23 Thread Cameron Simpson

On 21Aug2018 06:59, stan  wrote:

.mov is h264?  .mov is the old mpeg standard extension, now completely
off patent, yay!  What does file say about the file?For what it's
worth, parole played both mp4 (h264) and mov files on my system.


The .mov and .mp4 extensions should hold ISO14496 files; ISO14496 is a 
container format and doesn't prescribe a specific video data format.


I believe .mp4 files are ISO14496 files with H264 video inside them.

Cheers,
Cameron Simpson 
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/PVIXIM4A3AAY2K3CTSJHQ6GPXLUX26TX/


Re: plymouth vs. boot messages

2018-08-23 Thread stan
On Wed, 22 Aug 2018 15:41:54 + (UTC)
Beartooth  wrote:

> On Sun, 19 Aug 2018 10:15:15 -0700, stan wrote:
> 

> > Can you post your boot command line?
> 
>   In /etc/default/grub  I see
> GRUB_CMDLINE_LINUX="rd.lvm.lv=fedora/ root rd.lvm.lv=fedora/swap
> quiet" (all one line). Is that what you mean??

No, that's the template that grub-mkconfig uses.  I mean the lines in
the actual grub.cfg file in /boot.  That file will be in /boot/grub2,
or /boot/efi/EFI/fedora/grub.cfg, depending on whether you are using
bios boot or efi boot.

What I mean will look something like this:

linux16 /vmlinuz-4.18.0-0.rc8.git2.1.20180813.fc28.x86_64 
root=UUID=2fc9467a-303e-43db-91af-ba8807a581c2 ro SYSFONT=latarcyrheb-sun16 
LANG=en_US.UTF-8 consoleblank=0 fbcon=scrollback:128k KEYTABLE=uneaf
initrd16 /initramfs-4.18.0-0.rc8.git2.1.20180813.fc28.x86_64.img

> 
> > Have you tried rebuilding the
> > initramfs?
> 
>   I don't even know enough about that to tell which Wikipedia
> hit on "initramfs" I should read; I certainly have not done anything
> like "rebuild initramfs" .

It's probably not necessary, but what it will do is configure the
initramfs, the initial file system during boot, to match your hardware,
so that during boot everything that is necessary to get started is
present.

Rebuilding would look something like this, run in /boot, and using the
vmlinuz image you are targeting instead of 4.18.0.0 

/usr/bin/dracut -f -H -v --debug initramfs-4.18.0-0.fc28.x86_64.img 
4.18.0-0.fc28.x86_64

> 
> 
> > Have you changed disk configuration in any way?  That is,
> > does the /etc/fstab file match the actual hardware setup?  
> 
> I see:
> # cat /etc/fstab
> 
> #
> # /etc/fstab
> # Created by anaconda on Tue Oct 24 10:01:42 2017
> #
> # Accessible filesystems, by reference, are maintained under
> '/dev/disk' # See man pages fstab(5), findfs(8), mount(8) and/or
> blkid(8) for more info
> #
> /dev/mapper/fedora-root /   ext4
> defaults1 1
> UUID=c2e91ff3-3d84-44de-b69a-a1bbbef9a920 /boot
> ext4 defaults1 2
> /dev/mapper/fedora-home /home   ext4
> defaults1 2
> /dev/mapper/fedora-swap swapswap
> defaults0 0
> 
> but what I know of hardware would fit comfortably in a gnat's eye.

This looks OK.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/L7SRWVQBVHJ6YBGRHB57ZERMKLFFNGQK/


Re: Split tunnelling

2018-08-23 Thread Patrick O'Callaghan
On Wed, 2018-08-22 at 13:59 -0700, Samuel Sieb wrote:
> I would suggest trying to get your own openvpn config working if 
> possible.  There might be a script that the binary uses to configure the 
> routing, see if you can find that.  Try running "strings" on the binary. 
>   You could also just create your own script that starts up the VPN and 
> then modifies the routing table.  Remove those first two entries and 
> then add entries for whatever range you do want to go over the VPN.

Yes, that seems to be one option.

Another is to use network namespaces (ip-nets(8)) to isolate the VPN-
using app from everything else. There are several scripts out there to
do this but none of them run directly on Fedora, so some more digging
is required.

poc 
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/WCQEBZ4T22FZJ6KFSSOW5FCLMPU7356U/


Re: Device defaults -OT maybe

2018-08-23 Thread Bob Goodwin

On 08/23/18 13:10, Fred Erickson wrote:

Firefox can’t establish a connection to the server at 192.168.11.1.

My Viasat system quit working earlier and I've been unable to work on
this most of the day ... It is usually very reliable but it seems I
have offended the gods recently.


I was reading this thread and just out of curiosity, I typed"about:config"  in 
my Firefox and searched for my routers ip address. It returned a long line of data that I 
had to copy and paste in a text editor to read.

The beginning of the line read: "capability.policy.maonoscript.sites" followed by a long 
list of domain names, some I knew I had visited, some I didn't. Not knowing what 
"capability.policy.maonoscript.sites" meant, I did a web search on that. It is a No 
Script-Whitelist.

So, what I am wondering is, do you use an add on in you browser that may have 
black listed your routers ip address?. A real long shot I know...
___
An interesting thought, "uMatrix" would seem a possibility, I often have 
deal with that, but it gives notification that it is blocking a site ... 
I also tried Google Chrome which I have added nothing to, it fails with 
a similar message.


I've wasted a lot of time with this old router/bridge and I am about 
convinced it has died. It's supposed to have a dhcp server built in, I 
haven't seen anything from that, I even gave its MAC address a static 
address on my LAN on my main router, it never responds to anything I 
have tried.


I used it for a long time, perhaps 8 years and it was working several 
weeks ago, but not now. Ithink it's finished.


However it has kept me busy for a few days, more interesting than 
working crossword puzzles.


Thanks,

Bob

--
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
box10  FEDORA-27/64bit LINUX XFCE Fastmail POP3
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/7ML2KAXA2XIYL4RJHQ743M5WX2THFPGQ/


Re: new kernel?

2018-08-23 Thread Chris Murphy
On Tue, Aug 21, 2018 at 9:10 PM, Ranjan Maitra  wrote:
> Just curious, there has not been a kernel in testing for a while. When is the 
> next kernel expected to land in Fedora? I guess that it will be a 4.18.3 now 
> perhaps?

Rebasing Fedora 27 and Fedora 28 to kernel 4.18.x has already been
announced on kernel@ a week ago. The test day was yesterday, so I
rather expect to see 4.18.4 in updates-testing as soon as this
weekend.


-- 
Chris Murphy
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/G5MERVA24TJHJCSVP3IM5P7EKPPMJLTJ/


Re: I need iptables ftp nat help

2018-08-23 Thread Mike Wright

On 08/23/2018 11:50 AM, ToddAndMargo wrote:

On 08/23/2018 11:41 AM, Mike Wright wrote:

On 08/23/2018 11:23 AM, ToddAndMargo wrote:


Just ftp client and I want to support both active and passive mode



This covers both:

http://www.devops-blog.net/iptables/iptables-settings-for-outgoing-ftp

:m


Hi Mike,

That is a description of what is happening.

I am looking for Fedora specific iptables instructions.


iptables rules are processed by the kernel.  They are distribution agnostic.

:m
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/ZMEFIJQJVLHV63MMIJDFIASZVATVLTVI/


Re: I need iptables ftp nat help

2018-08-23 Thread ToddAndMargo

On 08/23/2018 11:41 AM, Mike Wright wrote:

On 08/23/2018 11:23 AM, ToddAndMargo wrote:


Just ftp client and I want to support both active and passive mode



This covers both:

http://www.devops-blog.net/iptables/iptables-settings-for-outgoing-ftp

:m


Hi Mike,

That is a description of what is happening.

I am looking for Fedora specific iptables instructions.

-T
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/CJXW6ZXHD5ZLNRJWOYHQVO5FYPRZHBZE/


Re: I need iptables ftp nat help

2018-08-23 Thread Mike Wright

On 08/23/2018 11:23 AM, ToddAndMargo wrote:


Just ftp client and I want to support both active and passive mode



This covers both:

http://www.devops-blog.net/iptables/iptables-settings-for-outgoing-ftp

:m
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/NB6VPGQL3AX2GKODKH2256E3ZSE7HSXN/


Re: I need iptables ftp nat help

2018-08-23 Thread Mike Wright

On 08/23/2018 11:23 AM, ToddAndMargo wrote:

On 08/23/2018 11:10 AM, Rick Stevens wrote:

On 08/22/2018 06:00 PM, ToddAndMargo wrote:

On 08/22/2018 04:37 PM, Ed Greshko wrote:

On 08/23/18 06:47, ToddAndMargo wrote:

Hi All,

My iptables firewall ported from RHEL won't connect to ftp sites
and throws this error (written by me years ago):


  WARNING: active FTP rules have been selected but one or
  more necessary modules have not been detected

  In /etc/sysconfig/iptables-config, you must add ip_nat_ftp
  and ip_conntrack_ftp to IPTABLES_MODULES. Delimiter is a
  space.  For example:
   IPTABLES_MODULES=ip_nat_ftp ip_conntrack_ftp

  To load changes, use:
   # /etc/rc.d/init.d/iptables restart
   # systemctl restart iptables

  To check if modules are loaded, use
   lsmod


1) is Fedora doing FTP differently in iptables?

2) where do I find
  ip_nat_ftp
  ip_conntrack_ftp
 now a days?



I can't locate my notes at the moment.  But I believe the way things
are done in the
netfilter framework has changed.

If memory servers me the nf_conntrack_ipv4 will load, as needed, the
necessary
"helper".  I use the standard firewall and these modules are loaded.

xt_conntrack   16384  21
nf_conntrack_ipv6  16384  12
nf_defrag_ipv6 20480  1 nf_conntrack_ipv6
nf_conntrack_ipv4  16384  11
nf_defrag_ipv4 16384  1 nf_conntrack_ipv4
nf_conntrack  147456  6
xt_conntrack,nf_conntrack_ipv6,nf_conntrack_ipv4,nf_nat,nf_nat_ipv6,nf_nat_ipv4 



libcrc32c  16384  2 nf_conntrack,nf_nat

and ftp works fine.

ip_nat_ftp does not exist on my system.  But I do have 
nf_conntrack_ftp.


I see nf_conntrack_ftp inserted

# lsmod | grep nf_conntrack_ftp
nf_conntrack_ftp   20480  1 nf_nat_ftp
nf_conntrack  147456  9
xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_ipv4,nf_nat,nf_nat_ftp,ipt_MASQUERADE,nf_nat_ipv4,xt_helper,nf_conntrack_ftp 





But it is not following the high ports that ftp uses:

Aug 22 16:12:09 rn6 kernel: dsl-out Everything Else IN= OUT=eno2
SRC=192.168.xxx.yyy DST=208.106.xxx.yyy LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=25991 DF PROTO=TCP SPT=59698 DPT=21023 WINDOW=29200 RES=0x00 SYN 
URGP=0


Perhaps I missed this, but are you trying to set up an FTP _server_ on
your machine or using it as an FTP client? The firewall rules for an
FTP server would be significantly different--especially if you wish to
provide both passive and normal FTP operations.


Just ftp client and I want to support both active and passive mode



The advice given here:

https://serverfault.com/questions/203546/client-side-iptables-rule-to-allow-active-ftp
might be relevant.

:m
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/NA7XRWAHPLHOBHBOPEKTQBED6SKK5TOS/


Re: I need iptables ftp nat help

2018-08-23 Thread ToddAndMargo

On 08/23/2018 11:10 AM, Rick Stevens wrote:

On 08/22/2018 06:00 PM, ToddAndMargo wrote:

On 08/22/2018 04:37 PM, Ed Greshko wrote:

On 08/23/18 06:47, ToddAndMargo wrote:

Hi All,

My iptables firewall ported from RHEL won't connect to ftp sites
and throws this error (written by me years ago):


  WARNING: active FTP rules have been selected but one or
  more necessary modules have not been detected

  In /etc/sysconfig/iptables-config, you must add ip_nat_ftp
  and ip_conntrack_ftp to IPTABLES_MODULES. Delimiter is a
  space.  For example:
   IPTABLES_MODULES=ip_nat_ftp ip_conntrack_ftp

  To load changes, use:
   # /etc/rc.d/init.d/iptables restart
   # systemctl restart iptables

  To check if modules are loaded, use
   lsmod


1) is Fedora doing FTP differently in iptables?

2) where do I find
  ip_nat_ftp
  ip_conntrack_ftp
     now a days?



I can't locate my notes at the moment.  But I believe the way things
are done in the
netfilter framework has changed.

If memory servers me the nf_conntrack_ipv4 will load, as needed, the
necessary
"helper".  I use the standard firewall and these modules are loaded.

xt_conntrack   16384  21
nf_conntrack_ipv6  16384  12
nf_defrag_ipv6 20480  1 nf_conntrack_ipv6
nf_conntrack_ipv4  16384  11
nf_defrag_ipv4 16384  1 nf_conntrack_ipv4
nf_conntrack  147456  6
xt_conntrack,nf_conntrack_ipv6,nf_conntrack_ipv4,nf_nat,nf_nat_ipv6,nf_nat_ipv4

libcrc32c  16384  2 nf_conntrack,nf_nat

and ftp works fine.

ip_nat_ftp does not exist on my system.  But I do have nf_conntrack_ftp.


I see nf_conntrack_ftp inserted

# lsmod | grep nf_conntrack_ftp
nf_conntrack_ftp   20480  1 nf_nat_ftp
nf_conntrack  147456  9
xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_ipv4,nf_nat,nf_nat_ftp,ipt_MASQUERADE,nf_nat_ipv4,xt_helper,nf_conntrack_ftp



But it is not following the high ports that ftp uses:

Aug 22 16:12:09 rn6 kernel: dsl-out Everything Else IN= OUT=eno2
SRC=192.168.xxx.yyy DST=208.106.xxx.yyy LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=25991 DF PROTO=TCP SPT=59698 DPT=21023 WINDOW=29200 RES=0x00 SYN URGP=0


Perhaps I missed this, but are you trying to set up an FTP _server_ on
your machine or using it as an FTP client? The firewall rules for an
FTP server would be significantly different--especially if you wish to
provide both passive and normal FTP operations.


Just ftp client and I want to support both active and passive mode

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/EWCECDB6Y7HA5SHYEMWM67FVKRAI6GSN/


Re: I need iptables ftp nat help

2018-08-23 Thread Rick Stevens
On 08/22/2018 06:00 PM, ToddAndMargo wrote:
> On 08/22/2018 04:37 PM, Ed Greshko wrote:
>> On 08/23/18 06:47, ToddAndMargo wrote:
>>> Hi All,
>>>
>>> My iptables firewall ported from RHEL won't connect to ftp sites
>>> and throws this error (written by me years ago):
>>>
>>>
>>>  WARNING: active FTP rules have been selected but one or
>>>  more necessary modules have not been detected
>>>
>>>  In /etc/sysconfig/iptables-config, you must add ip_nat_ftp
>>>  and ip_conntrack_ftp to IPTABLES_MODULES. Delimiter is a
>>>  space.  For example:
>>>   IPTABLES_MODULES=ip_nat_ftp ip_conntrack_ftp
>>>
>>>  To load changes, use:
>>>   # /etc/rc.d/init.d/iptables restart
>>>   # systemctl restart iptables
>>>
>>>  To check if modules are loaded, use
>>>   lsmod
>>>
>>>
>>> 1) is Fedora doing FTP differently in iptables?
>>>
>>> 2) where do I find
>>>  ip_nat_ftp
>>>  ip_conntrack_ftp
>>>     now a days?
>>>
>>
>> I can't locate my notes at the moment.  But I believe the way things
>> are done in the
>> netfilter framework has changed.
>>
>> If memory servers me the nf_conntrack_ipv4 will load, as needed, the
>> necessary
>> "helper".  I use the standard firewall and these modules are loaded.
>>
>> xt_conntrack   16384  21
>> nf_conntrack_ipv6  16384  12
>> nf_defrag_ipv6 20480  1 nf_conntrack_ipv6
>> nf_conntrack_ipv4  16384  11
>> nf_defrag_ipv4 16384  1 nf_conntrack_ipv4
>> nf_conntrack  147456  6
>> xt_conntrack,nf_conntrack_ipv6,nf_conntrack_ipv4,nf_nat,nf_nat_ipv6,nf_nat_ipv4
>>
>> libcrc32c  16384  2 nf_conntrack,nf_nat
>>
>> and ftp works fine.
>>
>> ip_nat_ftp does not exist on my system.  But I do have nf_conntrack_ftp.
> 
> I see nf_conntrack_ftp inserted
> 
> # lsmod | grep nf_conntrack_ftp
> nf_conntrack_ftp   20480  1 nf_nat_ftp
> nf_conntrack  147456  9
> xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_ipv4,nf_nat,nf_nat_ftp,ipt_MASQUERADE,nf_nat_ipv4,xt_helper,nf_conntrack_ftp
> 
> 
> 
> But it is not following the high ports that ftp uses:
> 
> Aug 22 16:12:09 rn6 kernel: dsl-out Everything Else IN= OUT=eno2
> SRC=192.168.xxx.yyy DST=208.106.xxx.yyy LEN=60 TOS=0x00 PREC=0x00 TTL=64
> ID=25991 DF PROTO=TCP SPT=59698 DPT=21023 WINDOW=29200 RES=0x00 SYN URGP=0

Perhaps I missed this, but are you trying to set up an FTP _server_ on
your machine or using it as an FTP client? The firewall rules for an
FTP server would be significantly different--especially if you wish to
provide both passive and normal FTP operations.
--
- Rick Stevens, Systems Engineer, AllDigitalri...@alldigital.com -
- AIM/Skype: therps2ICQ: 226437340   Yahoo: origrps2 -
--
-   Which is worse: ignorance or apathy?  I don't know.  Who cares?  -
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/RWJR5MJSFSS435FWOZZCSKSD55JBC3KN/


Re: Device defaults -OT maybe

2018-08-23 Thread Fred Erickson
On Wed, 22 Aug 2018 19:06:47 -0400
Bob Goodwin  wrote:

> > --
> 
> Doing as you suggest, ping succeeds but Firefox still does not
> connect with or without the :80.
> 
> Firefox can’t establish a connection to the server at 192.168.11.1.
> 
> My Viasat system quit working earlier and I've been unable to work on 
> this most of the day ... It is usually very reliable but it seems I
> have offended the gods recently.
> 

I was reading this thread and just out of curiosity, I typed "about:config" in 
my Firefox and searched for my routers ip address. It returned a long line of 
data that I had to copy and paste in a text editor to read. 

The beginning of the line read: "capability.policy.maonoscript.sites" followed 
by a long list of domain names, some I knew I had visited, some I didn't. Not 
knowing what "capability.policy.maonoscript.sites" meant, I did a web search on 
that. It is a No Script-Whitelist.

So, what I am wondering is, do you use an add on in you browser that may have 
black listed your routers ip address?. A real long shot I know...
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/AMUFOA5RBJLCU55KNHVXDURF7OV3UBO4/


Re: Split tunnelling

2018-08-23 Thread Patrick O'Callaghan
On Thu, 2018-08-23 at 09:04 +0200, Federico Bruni wrote:
> 
> Il giorno mar 21 ago 2018 alle 11:46, Patrick O'Callaghan 
>  ha scritto:
> > On Tue, 2018-08-21 at 09:10 +0200, Federico Bruni wrote:
> > > 
> > >  Il giorno lun 20 ago 2018 alle 14:03, Patrick O'Callaghan
> > >   ha scritto:
> > >  > Has anyone got this to work in Fedora? To be clear, split 
> > > tunnelling
> > >  > is
> > >  > when network traffic to some destinations (or for some apps) is
> > >  > tunnelled over a VPN, while the rest of the traffic goes through
> > >  > normal
> > >  > channels. I've tried messing with network namespaces, which would 
> > > seem
> > >  > to be the way to go, but not managed to get everything lined up so
> > >  > far.
> > >  > All the howto's I've seen are for various flavours of Ubuntu.
> > >  >
> > >  > I guess I'm asking if anyone has already done the work and feels 
> > > like
> > >  > sharing it.
> > >  >
> > > 
> > >  If you use NetworkManager, you can check the option "Use this
> > >  connection only for resources on its network", in the IPv4 tab of 
> > > the
> > >  VPN settings.
> > 
> > I do use NM, but I'm not seeing that option, at least under KDE. I'll
> > look using Gnome just to be sure but it seems unlikely that they would
> > be different.
> > 
> 
> Strange... this option has been present for a long time.
> Did you install NetworkManager-openvpn package?
> Are you using Fedora 28?

As I explained later, I hadn't seen the option because it was off the
bottom of the window.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/MD2JF6MHUWIA2ZHHWZLM7RSCLZNZITIC/


Re: new kernel?

2018-08-23 Thread Robert Moskowitz

For me, it is good to be out of the 'Kernel of the week club'.

A little peace and quite is a good thing.

:)

On 08/21/2018 11:58 PM, Ranjan Maitra wrote:

Thanks! I guess that I am just surprised that we have not had a new kernel for 
a while. We are at 4.17.14 and there is nothing on updates-testing so I was 
thinking that perhaps we are moving on to 4.18 hence the delay.

Best wishes,
Ranjan


On Wed, 22 Aug 2018 11:22:32 +0800 Ed Greshko  wrote:


On 08/22/18 11:10, Ranjan Maitra wrote:

Just curious, there has not been a kernel in testing for a while. When is the 
next kernel expected to land in Fedora? I guess that it will be a 4.18.3 now 
perhaps?


The latest build in koji for F28 is kernel-4.17.17-200 with the following in the
changelog

Fix CVE-2018-15471 (rhbz 1610555 1618414)

I guess it is more than likely you won't see 4.18.3 until F29.

--
Conjecture is just a conclusion based on incomplete information. It isn't a 
fact.




___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/5VPRHJOH55SSIFNB6SESV2L3ZOMNBH4H/


Re: plymouth vs. boot messages

2018-08-23 Thread Jarmo Hurri
Beartooth  writes:

> In /etc/default/grub I see GRUB_CMDLINE_LINUX="rd.lvm.lv=fedora/ root
> rd.lvm.lv=fedora/swap quiet" (all one line). Is that what you mean??

Don't know if my messages are getting through, because I already sent a
one related to this. If you have tried this, then ignore freely. But I
already instructed you to try removing 'quiet' from kernel parameters,
and it still seems to be there given what you wrote above.

Does it help if you do the following:
1. edit away the 'quiet' from /etc/default/grub
2. run
   /usr/sbin/grub2-mkconfig -o /boot/efi/EFI/fedora/grub.cfg

(Don't know if the target -o could be different for some
systems. Perhaps first check that the file

/boot/efi/EFI/fedora/grub.cfg

exists.)

Jarmo
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/GGH27AUSA4PE2I3O7QJ5N3ZQCKXIX4RX/


Re: Split tunnelling

2018-08-23 Thread Federico Bruni



Il giorno mar 21 ago 2018 alle 11:46, Patrick O'Callaghan 
 ha scritto:

On Tue, 2018-08-21 at 09:10 +0200, Federico Bruni wrote:


 Il giorno lun 20 ago 2018 alle 14:03, Patrick O'Callaghan
  ha scritto:
 > Has anyone got this to work in Fedora? To be clear, split 
tunnelling

 > is
 > when network traffic to some destinations (or for some apps) is
 > tunnelled over a VPN, while the rest of the traffic goes through
 > normal
 > channels. I've tried messing with network namespaces, which would 
seem

 > to be the way to go, but not managed to get everything lined up so
 > far.
 > All the howto's I've seen are for various flavours of Ubuntu.
 >
 > I guess I'm asking if anyone has already done the work and feels 
like

 > sharing it.
 >

 If you use NetworkManager, you can check the option "Use this
 connection only for resources on its network", in the IPv4 tab of 
the

 VPN settings.


I do use NM, but I'm not seeing that option, at least under KDE. I'll
look using Gnome just to be sure but it seems unlikely that they would
be different.



Strange... this option has been present for a long time.
Did you install NetworkManager-openvpn package?
Are you using Fedora 28?


___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/ZXOUFDJCHDLP4KAG5JY7XHUED543EOUK/