Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Grant Taylor
On 5/29/21 12:26 AM, Walter Dnes wrote: Looking through them is "interesting". There seem to be a lot of /etc/ssl/certs/.0 files, where "?" is either a random number or a lower case letter. They aren't random at all. They are a fingerprint (hash) of signing (?) certificates. The

Re: [gentoo-user] Qustions re Dell M.2 PCIe NVMe Solid State Drives under Gentoo

2021-05-27 Thread Grant Taylor
On 5/27/21 4:47 PM, Walter Dnes wrote: Showing my age... I started using linux on a spare machine with 16 ***MEGA***bytes of ram approx year 1999 or 2000, and the ram was perfectly sufficient. Yep. I did similar. Though I think /what/ is done *and* /how/ it is done are significantly

Re: [gentoo-user] Qustions re Dell M.2 PCIe NVMe Solid State Drives under Gentoo

2021-05-27 Thread Grant Taylor
On 5/27/21 3:05 PM, Walter Dnes wrote: All current XPS models seem to have 256G or 512G M.2 PCIe NVMe Solid State drives in the base configuration. Questions... * do NVMe drives function well under Gentoo (driver issues, etc)? I've not had any problems with them. They do show up as a

Re: [gentoo-user] [OT] tar exclude syntax tip

2021-05-05 Thread Grant Taylor
On 5/5/21 7:33 AM, Walter Dnes wrote: 3) All directories and/or files to exclude must be listed as relative paths to the directory being tarred, i.e. last parameter on the command line. This might not be very clearly articulated in the manual et al., but once you are aware of it, you see

Re: [gentoo-user] Re: File transfer via USB?

2021-04-25 Thread Grant Taylor
On 4/25/21 4:08 PM, David M. Fellows wrote: A quick Duckduckgo search for "linux journal" grant edwards yields https://www.linuxjournal.com/article/2880 Thank you for the link Dave. I'll read that later tonight. Still available. Reading it takes me back... :-) -- Grant. . . . unix ||

Re: [gentoo-user] Re: File transfer via USB?

2021-04-25 Thread Grant Taylor
On 4/25/21 12:14 PM, Grant Edwards wrote: Nope. Many years ago I used UUCP a number of times for "production" projects involving data gathering from remote systems via dial-up. :-) 25+ years ago, I wrote an article about one of those projects for Linux Journal. Can you narrow that down any

Re: [gentoo-user] File transfer via USB?

2021-04-25 Thread Grant Taylor
On 4/25/21 11:39 AM, k...@aspodata.se wrote: I doubt that many are fluen in cu and uucp, I think that lack of knowledge / dumb / ignorant about something is (or can be) a relatively easy problem to solve. As in there is (or was) no knowledge about something and there will be (or is)

Re: [gentoo-user] File transfer via USB?

2021-04-25 Thread Grant Taylor
On 4/23/21 7:45 PM, k...@aspodata.se wrote: Grant: I think you are conflating me for the OP. Easy to do with the same first name. ;-) In that case, your usb-connection (or anything) will probably be a borderline case to, since that is also a network... But I guess the thing fobidden is

Re: [gentoo-user] File transfer via USB?

2021-04-23 Thread Grant Taylor
On 4/22/21 9:25 AM, k...@aspodata.se wrote: No IP doesn't prohibit ethernet. I agree technically. Though I suspect it /may/ be problematic with the spirit behind / motivating the ban on IP. You could possible use: raw ethernet frames Do you have any recommendations of utilities for

Re: [gentoo-user] mouse very sluggish in Virtualbox

2021-04-10 Thread Grant Taylor
On 4/10/21 6:41 PM, the...@sys-concept.com wrote: I have: AMD Ryzen 5 3400G with Radeon Vega Graphics and I don't know if this is the problem with Graphic integrated CPU or Virtualbox-6.1.16-r1 I run Windows 7 in Virtualbox and browsing file manager files in Windows is very slow. Sometime I

Re: [gentoo-user] IPsec

2021-04-06 Thread Grant Taylor
Pre-Script: I'm probably in a bad mental state to reply, but I want to answer some valid questions before others reply. Please take what I say and how I say it with a grain of salt. I don't mean anything personally. I /do/ appreciate the constructive and thought provoking responses that

Re: [gentoo-user] IPsec

2021-04-06 Thread Grant Taylor
On 4/6/21 8:09 AM, J. Roeleveld wrote: I only managed to get it working between off-the-shelve devices, but would prefer to do it from Linux. That's where some of my experience is; SOHO routers, 15+ years ago. I think I did manage to get FreeS/WAN (at the time) to establish a VPN with one

[gentoo-user] IPsec

2021-04-04 Thread Grant Taylor
Hi, Does anyone have any experience with IPsec? Preferably on Gentoo or Linux in general? I'd like to discuss some things (probably off list) while wading into the IPsec pool. E.g.: - ip xfrm ... - strongSwan - Libraswan - X.509 certificate based authentication, preferably /mutual/

[gentoo-user] OpenRC vs SysV init scripts.

2021-03-24 Thread Grant Taylor
Hi, Does anyone have any pointers on where to start on converting a 10-15 year old SysV style init script to OpenRC? I'm starting to use something that includes an ancient SysV style init script and trying to get it to work under OpenRC init properly on boot. It seems as if the SysV init

Re: [gentoo-user] "sys-fs/exfat-utils" vs "sys-fs/exfatprogs"

2021-03-20 Thread Grant Taylor
On 3/20/21 11:35 AM, Neil Bothwick wrote: I'm not saying there is a direct relationship, but the exfat-progs readme states it is for use with the new in-kernel fs while exfat-utils is from the same devs as the FUSE module. Okay. I'll accept what's written on the tin as what the targeted

Re: [gentoo-user] "sys-fs/exfat-utils" vs "sys-fs/exfatprogs"

2021-03-20 Thread Grant Taylor
On 3/20/21 9:52 AM, Neil Bothwick wrote: Looking at the github readme, it wold appear that exfat-progs is for use with the new in-kernel exfat fs, while exfat-utils is a companion to the older FUSE implementation of exfat. Maybe I need more caffeine, but I can't see the /direct/ relationship

Re: [gentoo-user] root on nfs and multiple ip addresses

2021-03-19 Thread Grant Taylor
On 3/19/21 5:55 AM, William Kenworthy wrote: Yes, its two IP's to the same MAC address. Its a raspberry pi 3B using swclock so time may be an issue though I dont see how, but its still a different IP for each stage, but the logs are showing the same MAC address. Google shows its a known

Re: [gentoo-user] Question about runlevels.

2021-03-18 Thread Grant Taylor
On 3/18/21 12:54 PM, Victor Ivanov wrote: Yes Okay. Generally yes, when changing from one runlevel to another OpenRC will stop all services from the previous (current) runlevel and start the services for the next (new) runlevel. Good. However, my understanding is that the `boot' and

[gentoo-user] Question about runlevels.

2021-03-18 Thread Grant Taylor
Hi, Do services started in the "boot" runlevel continue to run in the "default" runlevel? Or do they get stopped as part of transitioning from the "boot" runlevel to the "default" runlevel? (Or any other runlevel that doesn't include the service. I'm wondering about having two things

Re: [gentoo-user] root on nfs and multiple ip addresses

2021-03-17 Thread Grant Taylor
On 3/17/21 8:59 AM, Neil Bothwick wrote: Is something changing the MAC address of the Pi after initial boot? That would explain both the issue of two addresses and the consistency of them. Compare packet captures of the various DHCP requests and make sure that they are the same. There

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-16 Thread Grant Taylor
On 3/16/21 6:16 AM, Michael wrote: Yes, I won't argue against this all around rational position. ;-) Thank you for the CRC / checksum on my logic and possibly even my position. Fair enough. It is clear to me your proposal won't break things. Quite the opposite it will eliminate the chance

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-13 Thread Grant Taylor
On 3/12/21 12:04 PM, Michael wrote: Right. That's the nub of it. Samba, with AD-DC and Kerberos configuration deserves special attention and the apps devs advise accordingly. I see it differently. There's the sloppy / slipshod way that doesn't negatively effect /most/ things. Then

Re: [gentoo-user] how to install mailman3 on gentoo

2021-03-12 Thread Grant Taylor
On 3/11/21 7:37 PM, John Covici wrote: I would appreciate some assistance. I would highly recommend that you subscribe to the Mailman Users mailing list. I have been subscribed to the MM-Users mailing list for a decade or more and have always found everybody to be quite helpful. Mark S.

Re: [gentoo-user] Weird harddisk problem: AHCI disks sometimes not found

2021-03-11 Thread Grant Taylor
On 3/11/21 12:39 PM, Alexander Puchmayr wrote: Hi there, Hi, I have a weird harddisk detection problem which rises the questio: what does the gentoo-kernel make differently than the ubuntu kernel? Probably multiple things. They probably have configurations that are at least slightly

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-11 Thread Grant Taylor
On 3/11/21 6:38 AM, Michael wrote: The syntax is: IP_address canonical_hostname [aliases...] The man page for hosts has the following to say: DESCRIPTION This manual page describes the format of the /etc/hosts file. This file is a simple text file that associates IP addresses with

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-11 Thread Grant Taylor
On 3/11/21 6:38 AM, Michael wrote: I'm losing my thread in this ... thread, but what I'm trying to say is the AD/ DC and Kerberos way of processing the /etc/hosts entries, when an /etc/hosts file is used, is different to your run of the mill Linux box and server. I disagree. First, AD/DC ~

Re: [gentoo-user] What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-10 Thread Grant Taylor
On 3/8/21 5:59 PM, antlists wrote: As I remember, you always had to use eselect to switch versions ... and witness all the chaos with python at the moment ... I don't know. If you leave things "at the default", doesn't that screw you over when python/kernel/gcc etc upgrade and a depclean

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-10 Thread Grant Taylor
On 3/10/21 10:43 AM, Mark Knecht wrote: OK, agreed, completely. localhost must be turned into an IP address. :-) I guess what I was thinking was DNS means Server. If it's a Service then that's different. I think we're in agreement that if it can find the name in /etc/hosts, either actively

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-10 Thread Grant Taylor
On 3/10/21 9:38 AM, Michael wrote: I always thought the localhost class A addresses were from days of old 'inter- network' era. The difference with 127.0.0.1 and a private LAN address is the 127.0.0.1 does not reach the data link layer, but loops-back at IP layer 3 and responds to any

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-10 Thread Grant Taylor
On 3/10/21 9:00 AM, Mark Knecht wrote: My undocumented (and unsupported by data) opinion is that this localhost thing has been around a long, long time - possibly longer than Linux for all I know. Check out Yes, very much so. TL;DR: The "localhost" name is a shortcut to say this host that

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-10 Thread Grant Taylor
On 3/10/21 8:25 AM, Michael wrote: I think this is relevant to DNS resolution of/with domain controllers and may depend on the AD/DC topology. I disagree. Pure Linux in a MIT / Heimdal Kerberos environment has the same requirements. Hence having nothing specific to do with Active

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-10 Thread Grant Taylor
On 3/10/21 6:27 AM, Mark Knecht wrote: Caveat - not an expert, just my meager understanding: 1) The name 'localhost' is historically for developers who want to access their own machine _without_ using DNS. Eh Using the /name/ "localhost" still uses name resolution. It could use DNS or

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-03-09 Thread Grant Taylor
On 2/21/21 3:23 PM, Grant Taylor wrote: Will someone please explain why the Gentoo AMD64 Handbook ~> Gentoo (at large) says to add the local host name to the 127.0.0.1 (or ::1) entry in the /etc/hosts file?  What was the thought process behind that? Shameless Bump -- I'm still interes

Re: [gentoo-user] Re: What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 3/8/21 7:30 PM, John Covici wrote: At least I didn't have to change profiles and gcc versions several times. I didn't /change/ the profile. As in it was 17.0 when I started and still is 17.0. I did have to update the make.profile link to point to the same profile in the alternate

Re: [gentoo-user] What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 3/8/21 5:35 PM, Neil Bothwick wrote: Not if you went up a slot, then the old version would still continue to be used until you ran gcc-config. However, if you were depcleaning at each step, that would remove the previous slot and you would stay current. So my overall method, which included

Re: [gentoo-user] What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 3/8/21 4:16 PM, Neil Bothwick wrote: It would have to be done before the first update, when the repo was set to a date just after the last update. Yes and no. It really could have been done at any point along the way. Also, with the git version of the portage repo, I could switch back to

Re: [gentoo-user] Re: What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 3/8/21 4:03 PM, Grant Edwards wrote: How do you feel it compares to just installing from scratch while preserving whatever config and user data you care about? I've done that quite a few times and it usually takes about 2-3 hours for the initial install and then overnight to build a desktop

Re: [gentoo-user] What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 3/8/21 3:29 PM, Neil Bothwick wrote: With hindsight, removing firefox, thunderbird and libreoffice and replacing them with their -bin counterparts at the start of the process would have saved much time. You could switch back to the source options once the system is up to date. You're

Re: [gentoo-user] What is the best way forward? - Update 2 - SUCCESS! - CURRENT!!!

2021-03-08 Thread Grant Taylor
On 2/25/21 5:31 PM, Grant Taylor wrote: 10 have git switch to the next day 20 emerge -aDUN @world 30 assess / deal with masked packages 40 goto 10 It /looks/ like things are working. *TL;DR* DenverCoder9: DEAR PEOPLE FROM THE FUTURE ... This method /does/ work. I have successfully brought

Re: [gentoo-user] zfs repair needed (due to fingers being faster than brain)

2021-03-01 Thread Grant Taylor
On 3/1/21 3:25 PM, John Blinka wrote: HI, Gentooers! Hi, So, I typed dd if=/dev/zero of=/dev/sd, and despite hitting ctrl-c quite quickly, zeroed out some portion of the initial part of a disk. Which did this to my zfs raidz3 array: OOPS!!! NAME

[gentoo-user] Is the "Messages for package ..." output from emerge logged somewhere?

2021-02-28 Thread Grant Taylor
Hi, Is the "Messages for package ..." output from emerge logged somewhere? I'd like to re-read the "Messages for package ..." output from emerge after the fact. Is there a concise collection of that somewhere? Or do I have to pilfer through logs of each and every package to find it? I'm

Re: [gentoo-user] What is the best way forward? - Update 1

2021-02-26 Thread Grant Taylor
On 2/26/21 11:55 PM, Arve Barsnes wrote: I'm not sure what you're saying here, but the ebuild files of the installed packages are in /var/db/pkg Hum. Today I Learned... The ebuild and what looks like additional metadata files are in the /var/db/pkg directory tree. But the source files

Re: [gentoo-user] What is the best way forward? - Update 1

2021-02-26 Thread Grant Taylor
On 2/26/21 12:50 PM, Neil Bothwick wrote: Ah yes, I hadn't thought about the mirrors being too up to date. There's also issue with older packages being installed. E.g. I have an older kernel source (4.14.127) that I'm keeping around for various reasons. I've found that the Gentoo repo /

Re: [gentoo-user] What is the best way forward? - Update 1

2021-02-26 Thread Grant Taylor
On 2/25/21 5:31 PM, Grant Taylor wrote: 10 have git switch to the next day 20 emerge -aDUN @world 30 assess / deal with masked packages 40 goto 10 It /looks/ like things are working. This method is working. I have managed to successfully update from 2020-03-24 to 2020-05-29 in one day

Re: [gentoo-user] What is the best way forward?

2021-02-25 Thread Grant Taylor
On 2/24/21 9:29 PM, Grant Taylor wrote: I'm currently doing an "emerge -DUNe @system" on the restore of /usr/portage (typical PORTDIR) from prior to messing with things today. The system is now stable with a full -DUNe @system. emerge -DUNe @system reboot emerge -D

Re: [gentoo-user] What is the best way forward?

2021-02-25 Thread Grant Taylor
On 2/25/21 2:51 AM, Michael wrote: It would probably be better even with a lot of customizations. ;-) Please elaborate on what "better" means in this case. I'm thinking that you might be meaning "faster" and / or "easier" (as in less effort). At least it /should/ be better in terms of

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-02-24 Thread Grant Taylor
On 2/25/21 12:02 AM, Arve Barsnes wrote: I don't think that was the question Peter sought to answer, but rather that 'hostname -i' returns the loopback address either way. But 'hostname -i' /doesn't/ return the 127.0.0.1 or ::1 if the hostname isn't on lines with 127.0.0.1 or ::1. Might

Re: [gentoo-user] What is the best way forward?

2021-02-24 Thread Grant Taylor
On 2/24/21 9:16 PM, John Covici wrote: The portdir has to be the one gotten from git, not rsync, ACK I'm currently doing an "emerge -DUNe @system" on the restore of /usr/portage (typical PORTDIR) from prior to messing with things today. I've got multiple GB of git data. It looks like

Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-02-24 Thread Grant Taylor
On 2/24/21 7:37 PM, Peter Humphrey wrote: Isn't it a matter of simple logic? No. It is not. Consider my question to be calling the logic into question. Or at least asking for what the logic was to be explained. The loopback address is just that: the machine talking to itself, with no

Re: [gentoo-user] What is the best way forward?

2021-02-24 Thread Grant Taylor
On 2/24/21 6:48 PM, John Covici wrote: What you could try to do, if you are syncing using git, is to roll it back to those dates by checking out a commit each time and doing an update. I don't guarantee it would work, but its worth a shot, otherwise reinstall time. I hit send too soon.

Re: [gentoo-user] What is the best way forward?

2021-02-24 Thread Grant Taylor
On 2/24/21 6:48 PM, John Covici wrote: What you could try to do, if you are syncing using git, is to roll it back to those dates by checking out a commit each time and doing an update. I don't guarantee it would work, but its worth a shot, otherwise reinstall time. And what if I was still

[gentoo-user] What is the best way forward?

2021-02-24 Thread Grant Taylor
I need to update a system that hasn't been updated in 337 days (March 24th 2020. -- Life has been ... trying. What is the best way forward? It seems as if there have been a lot of changes in the interim; glibc, Python 2.7 being deprecated, default Python going to 3.7(?), other breaking

[gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?

2021-02-21 Thread Grant Taylor
Hi, I'm reading Kerberos - The Definitive Guide[1] and it makes the following comment: And to make matters worse, some Unix systems map their own hostname to 127.0.0.1 (the loopback IP address). This makes me think that the local host name /shouldn't/ be included in the 127.0.0.1 (or ::1)

Re: [gentoo-user] why both /usr/lib and /usr/lib64 on a 64bit system?

2021-02-14 Thread Grant Taylor
On 2/14/21 10:51 AM, Jack wrote: I don't think you can completely get rid of it. My (long term) desire is to do away with /lib32 and /lib64, ultimately only using /lib. Likewise for the other library directories in /usr or wherever they are. I don't see a need for the specific bit variants

Re: [gentoo-user] Re: TCP port 445

2021-02-14 Thread Grant Taylor
On 2/14/21 11:26 AM, Michael wrote: These are the services using port 445: 445 TCP SMB Fax Service 445 TCP SMB Print Spooler 445 TCP SMB Server 445 TCP SMB Remote Procedure Call Locator 445 TCP SMB Distributed File System Namespaces

[gentoo-user] Re: TCP port 445

2021-02-14 Thread Grant Taylor
On 2/14/21 4:42 AM, Michael wrote: You are probably right. My knowledge of MSWindows environments has been on a need to know basis, when I can't avoid it. ;-) Fair enough. I've managed to avoid more Windows in the last 10 years than I could in the previous 10 years. Active Directory

Re: [gentoo-user] why both /usr/lib and /usr/lib64 on a 64bit system?

2021-02-13 Thread Grant Taylor
On 2/13/21 9:38 PM, Dan Egli wrote: Frankly, I find there's still too many programs that want 32bit libraries to go full no-multilib. Are the programs that you're referring to things that are installed through something other than emerge? I'd naively assume that anything emerged on a system

Re: [gentoo-user] Sharing printers via Cups

2021-02-13 Thread Grant Taylor
On 2/12/21 4:00 AM, Michael wrote: Samba uses the native MSWindows 'Active Directory Domain Services' over TCP port 445 to resolve IP addresses when printing over Samba. I question the veracity of this. My understanding is that name to ip resolution, particularly in Active Directory

Re: [gentoo-user] spam - different IP's

2021-02-05 Thread Grant Taylor
On 2/5/21 6:57 AM, William Kenworthy wrote: Use fail2ban to target active abusers using your logs. (recommended) I've had extremely good luck using Fail2Ban in a distributed configuration* such that when one of my servers bans an IP, my other servers also (almost) immediately ban the same

Re: [gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
On 2/3/21 2:42 PM, Matt Connell (Gmail) wrote: I did. Sorry for the misinterpretation. Not familiar with debootstrap. No problem. That's why I clarified. The minimum required is probably just the stage3, plus a kernel package and a bootloader of some kind. I'd like to do an old school

Re: [gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
On 2/3/21 1:48 PM, tastytea wrote: You could install Gentoo into a directory without the build tools, but you would have to install packages and update them from a full Gentoo installation outside that directory. I've used that technique in my Docker experiments.[1] emerge --root=/workdir

Re: [gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
On 2/3/21 2:21 PM, Matt Connell (Gmail) wrote: Probably selecting the "default/linux/amd64/17.1/desktop/gnome/systemd" profile would get you the closest to start with. I hit send too soon. Based on the new information, I suspect I actually want "default/linux/amd64/17.1". (Or whatever is

Re: [gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
On 2/3/21 2:21 PM, Matt Connell (Gmail) wrote: @system depends on your profile. So depending on what profile you select, you'll have a different set of implicitly selected packages. The light bulb is starting to glow. To answer your original question... Probably selecting the

Re: [gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
On 2/3/21 1:29 PM, Dale wrote: If I recall correctly, the world file from a stage3 tarball is empty. It only has the packages you want installed added there. You and Arve are correct. Are you thinking about the system packages instead of the world file? Yes. That's what I meant. Thank

[gentoo-user] Minimal world file.

2021-02-03 Thread Grant Taylor
This may be a silly question, but I don't know, so I'm going to ask. What is the minimal world file to be somewhat conceptually similar to a debootstrap install of Debian / Ubuntu? Is the world file that ships with stage3 the smallest it can be? Or are there things that can safely be

Re: [gentoo-user] Re: Bind to 127.0.0.N for any N

2021-01-29 Thread Grant Taylor
On 1/29/21 6:37 AM, Grant Edwards wrote: My brain knows that. My fingers only partially so. I *completely* understand. I now manage to use 'ip addr' instead of ifconfig _most_ of the time. I still almost always use 'route' instead of of 'ip route'. I figure in another 20 years, I will have

Re: [gentoo-user] Re: Bind to 127.0.0.N for any N

2021-01-28 Thread Grant Taylor
On 1/28/21 7:09 PM, Grant Edwards wrote: I think that's probably right. I had never used the 'ip route' command like that and was unaware that route existed. *nod* iproute2 has supplanted the venerable net-tools (or whatever it's called); ifconfig, route, netstat, etc. I sort of put

Re: [gentoo-user] Bind to 127.0.0.N for any N

2021-01-28 Thread Grant Taylor
On 1/28/21 5:38 PM, Grant Edwards wrote: I've just recently realized something about the "lo" interface. I don't think this is as much about the interface as it is the routes that are created. (More below.) You can bind a socket to any 127.0.0.N address, even though only 127.0.0.1/8 is

Re: [gentoo-user] network bonding in gentoo/openrc

2021-01-18 Thread Grant Taylor
On 1/17/21 11:32 PM, William Kenworthy wrote: Hi all, Hi, how can I add/make active an interface that's to be part of a bonded connection without rebooting/restarting the bond? Does the following work? ip link set dev eth2 master bond0 That's from memory without much caffeine. So

Re: [gentoo-user] Re: Console scrollback

2021-01-14 Thread Grant Taylor
On 1/13/21 6:25 PM, Grant Edwards wrote: Some of the above are shadowed by readline or by bash in emacs mode, but the tty driver uses more than a few control keys. Thank you for the clarification / additional information. -- Grant. . . . unix || die

Re: [gentoo-user] Re: Console scrollback

2021-01-13 Thread Grant Taylor
On 1/13/21 4:06 PM, Grant Edwards wrote: I really should try to figure out a control-character that's not used by emacs or the tty driver I think there are very few, if any, keys used by the TTY driver. I suspect you are thinking of the line editor in the shell, e.g. readline. I can see how

Re: [gentoo-user] Console scrollback

2021-01-13 Thread Grant Taylor
On 1/13/21 2:56 PM, Alan Mackenzie wrote: Hello, Grant. Hi Alan, Well, there's really not much that can't be done in a terminal emulator. But it's the manner of the doing that's important. Okay. I can appreciate and respect that response. Doing text work in X is s l u g g i s h.

Re: [gentoo-user] Console scrollback

2021-01-13 Thread Grant Taylor
On 1/13/21 11:14 AM, Alan Mackenzie wrote: This is appalling. I do all my work on the console (apart from web browsing), and with this development, Linux effectively becomes unusable to me. I will NOT be bullied into using second rate alternatives like X-Windows terminals. Wow. I don't

Re: [gentoo-user] preventing PC sutdown by power button when running

2020-12-10 Thread Grant Taylor
On 12/10/20 9:20 PM, the...@sys-concept.com wrote: How to prevent PC from shutdown when running when power button is pressed? Is it a function in a BIOS or OS? Press and release, in less than four seconds, is the OS. Four seconds or longer is the BIOS. Try stopping acpid and seeing if that

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
P.S. You might also be interested in some of the feeds that Team Cymru has to offer. I think they are more friendly to scripted querying. Link - IP to ASN Mapping Service - https://team-cymru.com/community-services/ip-asn-mapping/ -- Grant. . . . unix || die

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 9:59 PM, the...@sys-concept.com wrote: I'll write a script to check, all the IP's from at text file with "whois" and write the output out to another file, just to be sure. I don't know how long will it take, the file contains 26611-entries (IP addresses). ProTip: Don't parse the

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 8:50 PM, the...@sys-concept.com wrote: Creating ACL based on those internet sources eg. https://www.countryipblocks.net/acl.php is not reliable. I pulled a list of Russian and Ukrainian IPs from the above link and checking some of them, I found these two (and possibly more) are

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 6:17 PM, the...@sys-concept.com wrote: so it might be easier to for apache, am I correct? Apache vs iptables is somewhat a preference. Though with Apache, chances are good that you would need to ban in multiple locations, possibly multiple VHOSTs or server wide. (See more

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 4:44 PM, Steve Wilson wrote: I use this as the first step to limit ssh access to one of my servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! --src-cc GB -m comment --comment "Drop SSH from outside GB" -j DROP` Has the geoip match extension been updated to take into

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Grant Taylor
On 12/8/20 3:55 PM, the...@sys-concept.com wrote: What are my options apache blocking access based on country? Do you want to block connections to /just/ Apache and /nothing/ else on the system? Or do you want to block connections from specified sources to anything and everything on the

Re: [gentoo-user] Re: sendmail configuration

2020-11-27 Thread Grant Taylor
On 11/26/20 6:56 PM, Grant Edwards wrote: After trying to think of reasons to use sendmail, I beganto wonder if it still supports bang-routing and UUCP as a transport mechanism. A bit of googling seems to indicate that it does. Yes. I have used this a few times in the last 18 months. Mostly

Re: [gentoo-user] Re: sendmail configuration

2020-11-25 Thread Grant Taylor
On 11/25/20 9:02 PM, Grant Edwards wrote: O'Reilly's_Sendmail_ 4th Edition (the bat book), has 1312 pages and weighs four pounds. There is actually a much smaller book than the quintessential Bat book that is multiple orders of magnitude. IM(ns)HO the Sendmail Installation and Operation

Re: [gentoo-user] Re: sendmail configuration

2020-11-25 Thread Grant Taylor
On 11/25/20 9:09 PM, Grant Edwards wrote: Ah, that's another devine mystery. I believe that the small size of a sendmail config file, when compared to the number of malfunctions it can create violates several basic tenants of information theory. I think the explanation involves extra

Re: [gentoo-user] sendmail configuration

2020-11-25 Thread Grant Taylor
On 11/25/20 9:47 PM, Grant Taylor wrote: That is supported.  You will need to set up a map and tell Sendmail how to use it.  It's not difficult.  But it's been so long that I don't remember exactly how to do it.  It's another define(...) or feature(...) line and adding entries to the file

Re: [gentoo-user] sendmail configuration

2020-11-25 Thread Grant Taylor
On 11/25/20 6:47 PM, the...@sys-concept.com wrote: I've always used postifx but I want to try sendmail this time. I've been using Sendmail for 20 years on multiple Linux and Unixes. And I have a hard time finding gentoo howto. Thankfully, much of Sendmail is self contained and isn't much

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 6:10 PM, Michael Orlitzky wrote: I think I see where we're diverging: I'm assuming that the employees of the VPS provider can hop onto any running system with root privileges. Perhaps I'm woefully ignorant, but my current working understanding is that no virtual machine hypervisor

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
n to other, complementary experimentation, as long as it is published. Grant Taylor, do not let it go to your head, but I agree with most of what you write in Gentoo User. Me? I'm just an idiot on the Internet with some things to say. Sometimes they happen to be true. Ideally, you know (or learn) enoug

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 4:26 PM, Michael Orlitzky wrote:> The contents of the disk are unencrypted while the server is powered on, or at least while the server is receiving email (while it's reading from and writing to that disk). In practice that will be all the time -- you can't log in and type the

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 3:33 PM, Michael Orlitzky wrote: TLS only secures the channel; what comes out at the end is a plain-text message that can be read with minimal effort by the VPS provider, no skullduggery needed. I agree that STARTTLS only protects the email while it's in flight between servers.

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:54 PM, Poison BL. wrote: I'm rather late to the game with this, but at the end of the day, mail coming *into* a mail server isn't typically encrypted (and even that is only the body, the headers can still reveal a great deal, and are necessary for the server to work with it).

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:18 PM, antlists wrote: The main reason other applications use "TCP over HTTP(S)" is because stupid network operators block everything else! I agree that filtering is a problem. I also think that it's something that most people can overcome when they control the firewall between

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-28 Thread Grant Taylor
On 8/28/20 1:55 PM, james wrote: I'm proposing, via a small corp I own, to purchase up to (3) dual Rasp.pi 4 setups of (2) R.Pi.4 8gig ram setups and send them to the devs WE all decide on. A few points. 1) I don't think that 8 GB of RAM is required. -- My email server is a VPS with 2 GB

Re: [gentoo-user] new mail protocol rfc (was Re: tips on running a mail server in a cheap vps provider run but not-so-trusty admins?)

2020-08-27 Thread Grant Taylor
On 8/27/20 11:55 AM, Ashley Dixon wrote: Well said; thanks for the correction. Of course. My intention is to positively contribute to and learn from the community. Mathematical notation can be seen as a tightly coupled analogue to this sort of typesetting: the same book that

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-27 Thread Grant Taylor
On 8/27/20 7:00 AM, Caveman Al Toraboran wrote: but i this way of looking at protocols (despite being common) is wrong. Why do you think that it is wrong? What is not factually correct about it? i also disagree with the network layering proposed by osi or the other ones commonly published

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-27 Thread Grant Taylor
On 8/27/20 6:07 AM, Victor Ivanov wrote: I have been quietly following this discussion and I've seen SRS being mentioned a number of times. Welcome to an active part in the conversation. :-) Now, I know what SRS _does_ (perhaps not fully?) to prevent unintended rejection by a receiving MTA

Re: [gentoo-user] new mail protocol rfc (was Re: tips on running a mail server in a cheap vps provider run but not-so-trusty admins?)

2020-08-26 Thread Grant Taylor
On 8/26/20 7:07 PM, Ashley Dixon wrote: I meant (a), in the sense that you should probably write it up in a more presentable fashion than a GitHub README page. You might want to nicely typeset it in TeX or something to make it seem more serious. Just a suggestion... I'm sure there

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-26 Thread Grant Taylor
On 8/18/20 6:44 PM, Grant Taylor wrote: I will have to collect a list and get back to you. Here are part of some crude notes that I created for myself to use to build a Gentoo mail server about three years ago. This is the email specific parts. The rest were for other non-email aspects

Re: [gentoo-user] new mail protocol rfc (was Re: tips on running a mail server in a cheap vps provider run but not-so-trusty admins?)

2020-08-26 Thread Grant Taylor
On 8/26/20 3:33 PM, Grant Taylor wrote: I would suggest using any reference to Hillary Clinton. Typo: I would suggest *NOT* using any reference to Hillary Clinton. -- Grant. . . . unix || die

Re: [gentoo-user] new mail protocol rfc (was Re: tips on running a mail server in a cheap vps provider run but not-so-trusty admins?)

2020-08-26 Thread Grant Taylor
On 8/26/20 2:33 PM, Caveman Al Toraboran wrote: as for the name "hillarymail", nothing against her. I would suggest using any reference to Hillary Clinton. I believe her name is too politically charged to use it in good faith. it's just that i heard so much about hillary's mails up to a

Re: [gentoo-user] tips on running a mail server in a cheap vps provider run but not-so-trusty admins?

2020-08-26 Thread Grant Taylor
On 8/21/20 10:11 PM, Caveman Al Toraboran wrote: not a major point but just to clarify a thing. i think it's unfair to look at SMTP as a single thing that compares against HTTP*. because while HTTP* is a single-ish thing, SMTP is several things. i.e. SMTP is at least 2 parts: Fair point.

<    1   2   3   4   5   >