Re: [Astlinux-users] Announcing AstLinux Release: 1.5.2

[Michael Keuter]

res_hep_pjsip declined to load.
> 
> I could fix:
> loader.c: res_pjsip_transport_websocket declined to load.
> by adding:
> websocket_enabled = false
> to /etc/asterisk/sip.conf [General] section.
> 
> Peter
> 
> 
> On Fri, 2024-03-22 at 07:52 -0500, Lonnie Abelbeck wrote:
>> Hi Peter,
>> 
>> What you need to do is first perform a "System tab -> "Revert to Previous"
>> 
>> 
>> 
>> Then (no need to reboot) perform an "Upgrade with New".
>> 
>> This will use your changed repository URL, and since the previous version is 
>> different from the latest it will allow
>> the upgrade.
>> 
>> Lonnie
>> 
>> 
>> 
>>> On Mar 22, 2024, at 7:10 AM, Dr. Peter Voigt  wrote:
>>> 
>>> Well, I have some time left and would like to upgrade to ast18.
>>> 
>>> I am currently on 1.5.3 of ast16se. I've just changed the repository URL
>>> from https://mirror.astlinux-project.org/ast16se-firmware-1.x
>>> to https://mirror.astlinux-project.org/ast18-firmware-1.x
>>> and checked for new firmware (System -> System Firmware Upgrade:).
>>> However: "You are running the newest available version: astlinux-1.5.3".
>>> 
>>> Can I upgrade the Asterisk version only, if there is also a new AstLinux 
>>> release
>>> available or what else might be wrong?
>>> 
>>> Peter
>>> 
>>> 
>>> On Fri, 2023-11-17 at 15:03 -0600, Lonnie Abelbeck wrote:
>>>> +1 what Michael said ... my thoughts.
>>>> 
>>>> Given, currently using ast16:
>>>> 
>>>> 1) If currently using chan_pjsip, migrate to ast18.
>>>> 
>>>> 2) If currently using dahdi (ex. pcie telephony card), migrate to ast18.
>>>> 
>>>> 3) Else next step, change the "ast16" to "ast16se", ex.
>>>> --
>>>> Prefs -> System & Staff Tab Options: Repository URL:
>>>> https://mirror.astlinux-project.org/ast16se-firmware-1.x
>>>> --
>>>> This should be quick and painless and will give you the latest security 
>>>> fixes
>>>> in the packages with 1.5.2.
>>>> 
>>>> 3a) Consider migrating to "ast18" when you have time to research the
>>>> differences and testing.
>>>> 
>>>> 
>>>> Additionally, it is recommended any "ast13se" systems be migrated to at 
>>>> least
>>>> "ast16se".  Relatively painless, but still requires some research and 
>>>> testing
>>>> as with any version change of Asterisk.
>>>> 
>>>> 
>>>> Lonnie
>>>> 
>>>> 
>>>> 
>>>>> On Nov 17, 2023, at 12:21 PM, Dr. Peter Voigt  wrote:
>>>>> 
>>>>> Hi Michael,
>>>>> 
>>>>> thanks for feedback. I will try the upgrade to ast18 as soon as I've some
>>>>> time
>>>>> left necessary to deal with obviously arising error messages and required
>>>>> configuration changes. May be I'll have to contact the list again, if
>>>>> something
>>>>> goes wrong.
>>>>> 
>>>>> 
>>>>> On Fri, 2023-11-17 at 19:06 +0100, Michael Keuter wrote:
>>>>>> Hi Peter,
>>>>>> 
>>>>>> it is just a matter of changing the repository URL (you must run a lower
>>>>>> version).
>>>>>> 
>>>>>> I would suggest you choose ast18 cause Asterisk is EOL now. 
>>>>>> 20 is not well tested yet, it runs fine for me though.
>>>>>> There was much changed between 16 and 18 (a few missing new config files
>>>>>> =>
>>>>>> error messages.)
>>>>>> The originals are in "/stat/etc/asterisk/".
>>>>>> 
>>>>>>> Am 17.11.2023 um 18:21 schrieb Dr. Peter Voigt :
>>>>>>> 
>>>>>>> I am currently on the ast16 branch and ask myself, if I should switch to
>>>>>>> ast16se
>>>>>>> or to one of the higher version branches ast18/ast20.
>>>>>>> 
>>>>>>> And another question: Is upgrading just a matter of changing the
>>>>>>> repository
>>>>>>> URL
>>>>>>> according to
>>>>>>> https://doc.astlinux-project.org/userdoc:tt_asterisk_upgrade_v

Re: [Astlinux-users] Ubiquiti Unifi

[Michael Keuter]

Hi Michael,

I only used StrongSwan with the AVM Fritzbox router/DSL modem models, which are 
widely used in Germany. You'll have to create a textfile, which has to be 
imported into the Fritzbox via the WebGUI.

Luckily the newer Fritzbox models now support WireGuard. Never used Unifi for 
VPN. I thought you wanted to use Gl.inet routers …

Michael

http://www.mksolutions.info

> Am 07.03.2024 um 12:52 schrieb Lonnie Abelbeck :
> 
> Hi Michael,
> 
> Unifi access points and switches have played well with others over the years.
> 
> Unifi routing products, while based on linux, never had a good track record 
> of interoperability, particularly with VPNs.
> 
> It would seem straightforward for Unifi to support sourcing manual Wireguard 
> configs in addition to the pretty GUI Wireguard configs ... maybe someday.
> 
> Personally, I would not even try to get AstLinux Strongswan to work with 
> Unifi's IPsec.
> 
> Lonnie
> 
> 
> 
>> On Mar 7, 2024, at 12:17 AM, Michael Knill 
>>  wrote:
>> 
>> Noone 
>> 
>> Regards 
>> Michael Knill
>> From: Michael Knill 
>> Sent: Friday, 23 February 2024 2:50 PM
>> To: AstLinux List (astlinux-users@lists.sourceforge.net) 
>> 
>> Subject: [Astlinux-users] Ubiquiti Unifi
>> 
>> Im kicking and screaming all the way, but I will probably be moving to the 
>> Ubiquiti Unifi ecosystem (we already use their WAP’s).
>> As part of this, I will be implementing some of their gateways (routers) 
>> which I really need to connect via VPN to Astlinux in the cloud.
>> They now support Wireguard but only as a client or server and not as a site 
>> to site VPN which they support Open VPN and IPsec only. In the Wireguard 
>> client configuration they emulate a mobile client so all traffic is from the 
>> gateway address (NAT).
>> 
>> So just wondering if Im going to be able to get this working with OpenVPN as 
>> per below:
>> 
>> 
>> 
>> Looks like it only support Pre-Shared Key and not certificates?
>> 
>> Could probably use Strongswan with IPsec but would rather not unless someone 
>> has got this working or something similar.
>> 
>> Regards
>> 
>> Michael Knill
>> Managing Director
>> 
>> D: +61 2 6189 1360
>> P: +61 2 6140 4656
>> E: michael.kn...@ipcsolutions.com.au
>> W: ipcsolutions.com.au
>> 
>> 
>> Smarter Business Communications



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] VMware by Broadcom

[Michael Keuter]

> Am 15.02.2024 um 15:23 schrieb Lonnie Abelbeck :
> 
> Hi Group,
> 
> With the VMware transition from perpetual licensing to new subscription 
> offerings, and the end of free ESXi [1],
> 
> should the VMware support in AstLinux change in any way?
> 
> If you are currently using AstLinux in a VMware instance, will you continue 
> to do so for the future or switch to some other hypervisor?
> 
> There is some extra bloat added to the AstLinux VM ISO to support VMware (ex. 
> open-vm-tools)
> 
> I'm curious how AstLinux VM users are reacting to the VMware transition.
> 
> Lonnie
> 
> [1] https://kb.vmware.com/s/article/2107518

I still have a few bigger customers using VMWare, and they want to stay with 
it, at least as a mid-term plan.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] dyndns-host-open plugin update time

[Michael Keuter]

The default time is 900 seconds. You can edit it in the config file.Make sure it is enabled (at the top).Sent from a mobile device.Michael KeuterAm 07.12.2023 um 06:25 schrieb Michael Knill :







Hi Group
 
Just wondering how long it takes the dyndns-host-open plugin to update. I have been waiting for well over a day now and some sites can see the two servers with nslookup but have not updated iptables.
 
Any ideas?
 

Regards
 
Michael Knill
Managing Director
 
D: +61 2 6189 1360
P: +61 2 6140 4656
E: michael.kn...@ipcsolutions.com.au
W: ipcsolutions.com.au
 
 
Smarter Business Communications

 



___Astlinux-users mailing listAstlinux-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/astlinux-usersDonations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Announcing AstLinux Release: 1.5.2

[Michael Keuter]

Sorry.

Michael

http://www.mksolutions.info


> Am 17.11.2023 um 19:06 schrieb Michael Keuter :
> 
> Hi Peter,
> 
> it is just a matter of changing the repository URL (you must run a lower 
> version).
> 
> I would suggest you choose ast18 cause Asterisk is EOL now. 
> 20 is not well tested yet, it runs fine for me though.
> There was much changed between 16 and 18 (a few missing new config files => 
> error messages.)

I meant NOT much changed :-).

> The originals are in "/stat/etc/asterisk/".
> 
>> Am 17.11.2023 um 18:21 schrieb Dr. Peter Voigt :
>> 
>> I am currently on the ast16 branch and ask myself, if I should switch to 
>> ast16se
>> or to one of the higher version branches ast18/ast20.
>> 
>> And another question: Is upgrading just a matter of changing the repository 
>> URL
>> according to
>> https://doc.astlinux-project.org/userdoc:tt_asterisk_upgrade_version
>> or will I have to adapt or re-create my Asterisk configuration?
>> 
>> Regards,
>> Peter
>> 
>> 
>> On Thu, 2023-11-16 at 07:33 -0600, Lonnie Abelbeck wrote:
>>> Announcing AstLinux Release: 1.5.2
>>> 
>>> More Info: AstLinux Project
>>> https://www.astlinux-project.org/
>>> 
>>> Changes to supported firmware builds:
>>> * Previous 'ast13se' and 'ast16' firmware branches are no longer updated.
>>> * New 'ast16se' firmware branch, Asterisk 16.x built --without-pjproject 
>>> and -
>>> -without-dahdi
>>> * Previous 'ast18' firmware branch, Asterisk 18.x built --with-pjproject 
>>> and -
>>> -with-dahdi
>>> * New 'ast20' firmware branch, Asterisk 20.x built --with-pjproject and --
>>> with-dahdi
>>> 
>>> AstLinux 1.5.2 Highlights:
>>> * Asterisk Versions: 16.30.0, 18.20.0, 20.5.0
>>> 
>>> * Linux Kernel 5.10.197, security and bug fixes
>>> * RUNNIX, version bump to runnix-0.6.16
>>> * OpenSSL, version bump to 1.1.1w, security fixes: CVE-2023-3446, CVE-2023-
>>> 3817
>>> * libcurl (curl) version bump to 8.4.0, security fixes: CVE-2023-38039, CVE-
>>> 2023-38545, CVE-2023-38546
>>> * LibreTLS, version bump to 3.8.1
>>> * libpng, version bump to 1.6.40
>>> * libsodium, version bump to 1.0.19
>>> * libxml2, version bump to 2.11.5
>>> * chrony, version bump to 4.4
>>> * ne, version bump to 3.3.3
>>> * msmtp, version bump to 1.8.25
>>> * netsnmp, version bump to 5.9.4
>>> * pjsip version bump to 2.13.1
>>> * screen, version 4.9.1, security fix: CVE-2023-24626
>>> * sqlite, version bump to 3.43.2
>>> * sqliteodbc, version bump to 0.1
>>> * tiff, version bump to 4.6.0
>>> * unbound, version bump to 1.18.0
>>> * unixodbc, version bump to 2.3.12
>>> * vnStat, version bump to 2.11
>>> * zabbix, version bump to 4.0.50
>>> * Asterisk '16se' (stable edition) version 16.30.0 is the last Asterisk 16.x
>>> "Legacy" version, built --without-pjproject and --without-dahdi 
>>> * Package upgrades providing important security and bug fixes
>>> 
>>> Full ChangeLog:
>>> https://raw.githubusercontent.com/astlinux-project/astlinux/1.5.2/docs/ChangeLog.txt
>>> 
>>> All users are encouraged to upgrade, read the ChangeLog for the details.
>>> 
>>> AstLinux Team
> 
> Michael
> 
> http://www.mksolutions.info
> 
> 
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.




___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Announcing AstLinux Release: 1.5.2

[Michael Keuter]

Asterisk 16 is EOL now.

Michael

http://www.mksolutions.info


> Am 17.11.2023 um 19:06 schrieb Michael Keuter :
> 
> Hi Peter,
> 
> it is just a matter of changing the repository URL (you must run a lower 
> version).
> 
> I would suggest you choose ast18 cause Asterisk is EOL now. 
> 20 is not well tested yet, it runs fine for me though.
> There was much changed between 16 and 18 (a few missing new config files => 
> error messages.)
> The originals are in "/stat/etc/asterisk/".
> 
>> Am 17.11.2023 um 18:21 schrieb Dr. Peter Voigt :
>> 
>> I am currently on the ast16 branch and ask myself, if I should switch to 
>> ast16se
>> or to one of the higher version branches ast18/ast20.
>> 
>> And another question: Is upgrading just a matter of changing the repository 
>> URL
>> according to
>> https://doc.astlinux-project.org/userdoc:tt_asterisk_upgrade_version
>> or will I have to adapt or re-create my Asterisk configuration?
>> 
>> Regards,
>> Peter
>> 
>> 
>> On Thu, 2023-11-16 at 07:33 -0600, Lonnie Abelbeck wrote:
>>> Announcing AstLinux Release: 1.5.2
>>> 
>>> More Info: AstLinux Project
>>> https://www.astlinux-project.org/
>>> 
>>> Changes to supported firmware builds:
>>> * Previous 'ast13se' and 'ast16' firmware branches are no longer updated.
>>> * New 'ast16se' firmware branch, Asterisk 16.x built --without-pjproject 
>>> and -
>>> -without-dahdi
>>> * Previous 'ast18' firmware branch, Asterisk 18.x built --with-pjproject 
>>> and -
>>> -with-dahdi
>>> * New 'ast20' firmware branch, Asterisk 20.x built --with-pjproject and --
>>> with-dahdi
>>> 
>>> AstLinux 1.5.2 Highlights:
>>> * Asterisk Versions: 16.30.0, 18.20.0, 20.5.0
>>> 
>>> * Linux Kernel 5.10.197, security and bug fixes
>>> * RUNNIX, version bump to runnix-0.6.16
>>> * OpenSSL, version bump to 1.1.1w, security fixes: CVE-2023-3446, CVE-2023-
>>> 3817
>>> * libcurl (curl) version bump to 8.4.0, security fixes: CVE-2023-38039, CVE-
>>> 2023-38545, CVE-2023-38546
>>> * LibreTLS, version bump to 3.8.1
>>> * libpng, version bump to 1.6.40
>>> * libsodium, version bump to 1.0.19
>>> * libxml2, version bump to 2.11.5
>>> * chrony, version bump to 4.4
>>> * ne, version bump to 3.3.3
>>> * msmtp, version bump to 1.8.25
>>> * netsnmp, version bump to 5.9.4
>>> * pjsip version bump to 2.13.1
>>> * screen, version 4.9.1, security fix: CVE-2023-24626
>>> * sqlite, version bump to 3.43.2
>>> * sqliteodbc, version bump to 0.1
>>> * tiff, version bump to 4.6.0
>>> * unbound, version bump to 1.18.0
>>> * unixodbc, version bump to 2.3.12
>>> * vnStat, version bump to 2.11
>>> * zabbix, version bump to 4.0.50
>>> * Asterisk '16se' (stable edition) version 16.30.0 is the last Asterisk 16.x
>>> "Legacy" version, built --without-pjproject and --without-dahdi 
>>> * Package upgrades providing important security and bug fixes
>>> 
>>> Full ChangeLog:
>>> https://raw.githubusercontent.com/astlinux-project/astlinux/1.5.2/docs/ChangeLog.txt
>>> 
>>> All users are encouraged to upgrade, read the ChangeLog for the details.
>>> 
>>> AstLinux Team
> 
> Michael
> 
> http://www.mksolutions.info
> 
> 
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.




___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Announcing AstLinux Release: 1.5.2

[Michael Keuter]

Hi Peter,

it is just a matter of changing the repository URL (you must run a lower 
version).

I would suggest you choose ast18 cause Asterisk is EOL now. 
20 is not well tested yet, it runs fine for me though.
There was much changed between 16 and 18 (a few missing new config files => 
error messages.)
The originals are in "/stat/etc/asterisk/".

> Am 17.11.2023 um 18:21 schrieb Dr. Peter Voigt :
> 
> I am currently on the ast16 branch and ask myself, if I should switch to 
> ast16se
> or to one of the higher version branches ast18/ast20.
> 
> And another question: Is upgrading just a matter of changing the repository 
> URL
> according to
> https://doc.astlinux-project.org/userdoc:tt_asterisk_upgrade_version
> or will I have to adapt or re-create my Asterisk configuration?
> 
> Regards,
> Peter
> 
> 
> On Thu, 2023-11-16 at 07:33 -0600, Lonnie Abelbeck wrote:
>> Announcing AstLinux Release: 1.5.2
>> 
>> More Info: AstLinux Project
>> https://www.astlinux-project.org/
>> 
>> Changes to supported firmware builds:
>> * Previous 'ast13se' and 'ast16' firmware branches are no longer updated.
>> * New 'ast16se' firmware branch, Asterisk 16.x built --without-pjproject and 
>> -
>> -without-dahdi
>> * Previous 'ast18' firmware branch, Asterisk 18.x built --with-pjproject and 
>> -
>> -with-dahdi
>> * New 'ast20' firmware branch, Asterisk 20.x built --with-pjproject and --
>> with-dahdi
>> 
>> AstLinux 1.5.2 Highlights:
>> * Asterisk Versions: 16.30.0, 18.20.0, 20.5.0
>> 
>> * Linux Kernel 5.10.197, security and bug fixes
>> * RUNNIX, version bump to runnix-0.6.16
>> * OpenSSL, version bump to 1.1.1w, security fixes: CVE-2023-3446, CVE-2023-
>> 3817
>> * libcurl (curl) version bump to 8.4.0, security fixes: CVE-2023-38039, CVE-
>> 2023-38545, CVE-2023-38546
>> * LibreTLS, version bump to 3.8.1
>> * libpng, version bump to 1.6.40
>> * libsodium, version bump to 1.0.19
>> * libxml2, version bump to 2.11.5
>> * chrony, version bump to 4.4
>> * ne, version bump to 3.3.3
>> * msmtp, version bump to 1.8.25
>> * netsnmp, version bump to 5.9.4
>> * pjsip version bump to 2.13.1
>> * screen, version 4.9.1, security fix: CVE-2023-24626
>> * sqlite, version bump to 3.43.2
>> * sqliteodbc, version bump to 0.1
>> * tiff, version bump to 4.6.0
>> * unbound, version bump to 1.18.0
>> * unixodbc, version bump to 2.3.12
>> * vnStat, version bump to 2.11
>> * zabbix, version bump to 4.0.50
>> * Asterisk '16se' (stable edition) version 16.30.0 is the last Asterisk 16.x
>> "Legacy" version, built --without-pjproject and --without-dahdi 
>> * Package upgrades providing important security and bug fixes
>> 
>> Full ChangeLog:
>> https://raw.githubusercontent.com/astlinux-project/astlinux/1.5.2/docs/ChangeLog.txt
>> 
>> All users are encouraged to upgrade, read the ChangeLog for the details.
>> 
>> AstLinux Team

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] GL.iNet. How good is it?

[Michael Keuter]

Hi Michael,

I have a few of them privately as travelrouter (Creta + Beryl), and 2 of them 
at customers (Creta), but only for remote VPN use.
I have tested them not with AstLinux yet. They are running stable, and they are 
based on OpenWRT (but an older version).

Michael

http://www.mksolutions.info

> Am 16.11.2023 um 10:12 schrieb Michael Knill 
> :
> 
> Hi All
>  I am looking to start using these as my telephony gateway VPN router device 
> e.g. phones within a clients network using this gateway to connect via 
> Wireguard VPN to the cloud Astlinux system.
> It looks perfect and initial playing has been positive. You can even cloud 
> manage it which is a bonus.
>  Just checking if anyone has had any experience with GL.iNet products and 
> this is not too good to be true.
>  Regards
>  Michael Knill






___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] No eth0 after upgrading Astlinux

[Michael Keuter]

> Am 05.11.2023 um 10:17 schrieb Gerard van Til :
> 
> Thanks Lonnie,
> 
> Where I was sure that I downloaded the right image long ago, it seems this 
> box is indeed running on the generic firmware. I see "astlinux=genx86_64" 
> instead of the vm-Board-Type. 
> Now I have my GUI back, this also shows on the status page.
> 
> I have another Hyper-V vm running astlinux-1.4.8, and that machine has the 
> genx86_64-vm board type, so I can (in the GUI) see the difference between 
> these two boxes now.
> I also just upgraded that machine from 1.4.8 to 1.5.1 successfully.
> 
> Thanks again for your help and super fast response. If you want me to do some 
> more tests, let me know, otherwise this issue has been solved,
> 
> Regards,
> Gerard
> 
> 
> Op za 4 nov 2023 om 22:44 schreef Lonnie Abelbeck :
> Hi Gerard,
> 
> AstLinux Hyper-V support [1] needs a Board Type of "genx86_64-vm", so check 
> by typing "cat /proc/cmdline" in the CLI and look for the string " 
> astlinux=genx86_64-vm " as that is what you want.  If you only have the 
> string " astlinux=genx86_64 " then that is the issue.
> 
> The (non-VM) Board Type of "genx86_64" may have been able to run Hyper-V at 
> some point, you really need a Board Type of "genx86_64-vm".  The VM version 
> has specific hv_netvsc and hv_utils modules that support Hyper-V virtual IO 
> drivers.
> 
> Note, your upgrade did not change the board type, so you can test the above 
> with the old astlinux-1.3.8 version.
> 
> Let us know if this is the issue, before any more diagnosis.
> 
> Lonnie
> 
> [1] https://doc.astlinux-project.org/userdoc:guest_vm_hyperv
> 
> 
> 
> > On Nov 4, 2023, at 3:27 PM, Gerard van Til  wrote:
> > 
> > Thanks Michael and Lonnie (I already hoped to receive answers from both of 
> > you :-)).
> > 
> > @Lonnie: unfortunately, I cannot access the GUI anymore, so we'll have to 
> > deal with Linux commands
> > I entered the commands you asked for, and because I have console-only 
> > access, I'll have to send the answers as screenshot:
> > 
> > 
> > 
> > @Michael: "upgrade-run-image show" shows me that I upgraded from 1.3.8 to 
> > 1.4.4.
> > Current version is: astlinux-1.4.4
> > Previous saved version is: astlinux-1.3.8
> > 
> > I did a revert using the second command Michael provided, and that worked: 
> > the system is back again. Thanks!
> > I created a snapshot of this machine before the revert, so we can 
> > investigate further what happened if you want. But I guess I can reproduce 
> > this behaviour by upgrading again.
> > The (virtual) network adapter in this machine is a legacy one according to 
> > Hyper-V: "Realtek PCIe GBE Family controller". Maybe that is related to the 
> > issue?
> > 
> > Thanks both!
> > Regards;
> > Gerard
> > 
> > Op za 4 nov 2023 om 18:32 schreef Michael Keuter :
> > 
> > 
> > > Am 04.11.2023 um 18:16 schrieb Lonnie Abelbeck 
> > > :
> > > 
> > >> 
> > >> On Nov 4, 2023, at 11:12 AM, Gerard van Til  
> > >> wrote:
> > >> 
> > >> Goodafternoon,
> > >> 
> > >> I just upgraded my AstLinux using the UI, but after rebooting, my eth0 
> > >> seems to be gone, so I have no internet access anymore. Luckily, this 
> > >> AstLinux is running on a virtual machine under Windows Hyper-V, and I 
> > >> can access it using the Hyper-V manager. I can login with the root user, 
> > >> and should be able to enter commands. If anyone can help me with the 
> > >> Linux commands to restore this box to its previous version before the 
> > >> upgrade, that would be great!
> > >> 
> > >> Regards;
> > >> Gerard / Netherlands
> > > 
> > > Hi Gerard,
> > > 
> > > First answering your last question, to revert back to the pervious 
> > > version, simply:
> > > 
> > > System tab -> System Firmware Upgrade: [ Revert to Previous ] - { 
> > > Firmware } - _x_ Confirm
> > > 
> > > System tab -> Reboot/Restart System: [ Now ] - { Reboot } - _x_ Confirm
> > > 
> > > 
> > > Before you do that, let's try to understand the issue.
> > > 
> > > Are you at the latest AstLinux 1.5.1 ?
> > > 
> > > What is the output of:
> > > --
> > > lscpu | grep -i '^hypervisor vendor:' 
> > > --
> > > 
> > > What is the output of:
&

Re: [Astlinux-users] No eth0 after upgrading Astlinux

[Michael Keuter]

> Am 04.11.2023 um 18:16 schrieb Lonnie Abelbeck :
> 
>> 
>> On Nov 4, 2023, at 11:12 AM, Gerard van Til  wrote:
>> 
>> Goodafternoon,
>> 
>> I just upgraded my AstLinux using the UI, but after rebooting, my eth0 seems 
>> to be gone, so I have no internet access anymore. Luckily, this AstLinux is 
>> running on a virtual machine under Windows Hyper-V, and I can access it 
>> using the Hyper-V manager. I can login with the root user, and should be 
>> able to enter commands. If anyone can help me with the Linux commands to 
>> restore this box to its previous version before the upgrade, that would be 
>> great!
>> 
>> Regards;
>> Gerard / Netherlands
> 
> Hi Gerard,
> 
> First answering your last question, to revert back to the pervious version, 
> simply:
> 
> System tab -> System Firmware Upgrade: [ Revert to Previous ] - { Firmware } 
> - _x_ Confirm
> 
> System tab -> Reboot/Restart System: [ Now ] - { Reboot } - _x_ Confirm
> 
> 
> Before you do that, let's try to understand the issue.
> 
> Are you at the latest AstLinux 1.5.1 ?
> 
> What is the output of:
> --
> lscpu | grep -i '^hypervisor vendor:' 
> --
> 
> What is the output of:
> --
> lsmod
> --
> 
> 
> Sadly I have no way to test Hyper-V, so your help is appreciated.
> 
> Lonnie

If you cannot access the GUI, the same can be done from the command line:

Check installed versions:

--
upgrade-run-image show
--

Revert to former version:

--
upgrade-run-image revert
reboot
--

Good luck

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] after a hard power-down by unplugging the power cord and the pbx won't boot

[Michael Keuter]

> Am 26.09.2023 um 10:53 schrieb nedi :
> 
> Hello,
> 
> I have an Astlinux installation using the old astlinux astlinux-1.2.8 i586 - 
> Asterisk 1.8.32.3 and alix board. 
> Astlinus is on Kingston USB stick. The customer do a hard power-down by 
> unplugging the power cord and the pbx won't boot. has anyone the soulution to 
> fix that. 
> on boot I  get errors
> squashfs error  unable to read dpage ,block 
> and read on /mnt/root/bzimage failed :input output error
> 
> I hope someone can help me to fix that without new install
> regards nedi 


In the Syslinux bootloader you can select "shell" (instead of the default 
"runnix") to skip booting into AstLinux and try to repair the filesystem with 
"fsck":

https://doc.astlinux-project.org/userdoc:system-boot-process

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Accessing devices behind Astlinux

[Michael Keuter]

Here is also an interesting video regarding jump servers:

https://www.youtube.com/watch?v=KIeBC7NIzj4

Michael

http://www.mksolutions.info

> Am 18.08.2023 um 17:44 schrieb Michael Keuter :
> 
> Nice video, very interesting.
> 
> BTW: on macOS you can install Proxychain via Homebrew with:
> 
> brew install proxychains-ng
> 
> and call it with "proxychain4 firefox".
> 
>> Am 18.08.2023 um 17:02 schrieb Lonnie Abelbeck :
>> 
>> Hi Michael,
>> 
>> I don't have any personal experience to share, but Tom Lawrence has a 
>> related video [1]
>> 
>> Youtube: SSH Jump Server Access and How To Pivot Using OpenVPN & Proxychains
>> 
>> I suspect this could all be done with SSH+SOCKS (Proxychains) and no OpenVPN 
>> tunnel as his example does.
>> 
>> Key takeaways are to encrypt the Jump Server's drive (and backup), keep it 
>> local and secure from the internet, limit remote AstLinux SSH access via its 
>> firewall and Jump Server ssh key.
>> 
>> 
>> Alternatively, some sort of automation to keep the remote AstLinux SSH keys 
>> updated from one hardened location.
>> 
>> Lonnie
>> 
>> [1] https://www.youtube.com/watch?v=jqudlmfG0zA
>> 
>> 
>> 
>>> On Aug 18, 2023, at 2:17 AM, Michael Knill 
>>>  wrote:
>>> 
>>> Hi All
>>> 
>>> Here is the issue:
>>> We access devices behind Astlinux currently using SSH Tunnelling and SOCKS. 
>>> It works well however it is becoming increasingly difficult in managing 
>>> local authentication to do this such as using SSH Keys.
>>> We are going to be bringing on additional staff and I don’t want to have to 
>>> go into every system to add credentials or keys every time we bring on a 
>>> new staffmember.
>>> 
>>> Just wondering if there are any options for external authentication of SSH 
>>> rather than local on Astlinux e.g. using RADIUS
>>> Could there be any other options e.g. HTTPS proxy?
>>> 
>>> Regards
>>> 
>>> Michael Knill
>>> Managing Director



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Accessing devices behind Astlinux

[Michael Keuter]

Nice video, very interesting.

BTW: on macOS you can install Proxychain via Homebrew with:

brew install proxychains-ng

and call it with "proxychain4 firefox".

> Am 18.08.2023 um 17:02 schrieb Lonnie Abelbeck :
> 
> Hi Michael,
> 
> I don't have any personal experience to share, but Tom Lawrence has a related 
> video [1]
> 
> Youtube: SSH Jump Server Access and How To Pivot Using OpenVPN & Proxychains
> 
> I suspect this could all be done with SSH+SOCKS (Proxychains) and no OpenVPN 
> tunnel as his example does.
> 
> Key takeaways are to encrypt the Jump Server's drive (and backup), keep it 
> local and secure from the internet, limit remote AstLinux SSH access via its 
> firewall and Jump Server ssh key.
> 
> 
> Alternatively, some sort of automation to keep the remote AstLinux SSH keys 
> updated from one hardened location.
> 
> Lonnie
> 
> [1] https://www.youtube.com/watch?v=jqudlmfG0zA
> 
> 
> 
>> On Aug 18, 2023, at 2:17 AM, Michael Knill 
>>  wrote:
>> 
>> Hi All
>> 
>> Here is the issue:
>> We access devices behind Astlinux currently using SSH Tunnelling and SOCKS. 
>> It works well however it is becoming increasingly difficult in managing 
>> local authentication to do this such as using SSH Keys.
>> We are going to be bringing on additional staff and I don’t want to have to 
>> go into every system to add credentials or keys every time we bring on a new 
>> staffmember.
>> 
>> Just wondering if there are any options for external authentication of SSH 
>> rather than local on Astlinux e.g. using RADIUS
>> Could there be any other options e.g. HTTPS proxy?
>> 
>> Regards
>> 
>> Michael Knill
>> Managing Director
>> 
>> D: +61 2 6189 1360
>> P: +61 2 6140 4656
>> E: michael.kn...@ipcsolutions.com.au
>> W: ipcsolutions.com.au
>> 
>> 
>> Smarter Business Communications
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.



Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Hello all and I need help.

[Michael Keuter]

The references were removed in 2018:

https://github.com/asterisk/dahdi-linux/commit/75620dd9ef6ac746745a1ecab4ef925a5b9e2988

> Am 05.06.2023 um 15:11 schrieb Lonnie Abelbeck :
> 
> Hi Tahiro,
> 
> A quick look at the dahdi-linux code for the "wcb4xxp", the PCI-ids appear to 
> be defined here [1]
> 
> But my gut feeling, there may be more to it than simply adding a line to 
> DEFINE_PCI_DEVICE_TABLE
> 
> Question, are Digium wcb4xxp ISDN cards available on the used market at a 
> reasonable price?
> 
> Lonnie
> 
> [1] 
> https://github.com/asterisk/dahdi-linux/blob/4397c55319154a8dc89022f6f75c683d6af12d54/drivers/dahdi/wcb4xxp/base.c#LL3642C1-L3651C3
> 
> 
> 
>> On Jun 5, 2023, at 2:51 AM, Tahiro Hashizume via Astlinux-users 
>>  wrote:
>> 
>> Alright, I hope the attached TXT file clarifies the situation I am facing.
>> Looks to me like the driver in question does not have the necessary PCI-ID 
>> listed.
>> 
>> On Thu, Jun 1, 2023 at 4:33 PM Tahiro Hashizume  
>> wrote:
>> Hi Michael,
>> 
>> The telephone service provided by the local telco (NTT East of Japan) is 
>> based on a very standard format (SIP+RTSP with SIP session timer of 300 
>> seconds) provided on a closed network over fiber.
>> Yet I still consider the interfacing of asterisk with the local telco via 
>> ISDN to be a valid option for the following reasons:
>> A.) The information required for SIP registration incl. account, domain and 
>> SIP server address(es) are provided via vendor-specific options of 
>> DHCPv4+DHCPv6-PD.
>> Given the format of the service (as mentioned above), direct-interfacing of 
>> asterisk with telco is no rocket science in principle, but doing so with 
>> some reliability is another thing.
>> While there is sip-proxy software (non-OSS) available for Linux which also 
>> functions as a DHCP client, I find it rather silly to use it.
>> B.)The local telco also requires that any non-hardware/non-certified 
>> IP-PBXes directly interfaced with their VoIP servers via IPv4/IPv6 to be 
>> inspected for security and compatibility. In terms of direct-interfacing 
>> asterisk with the telco, this means having asterisk config files checked by 
>> telco's engineers (AND THE INSPECTION COSTS A LOT!!!). The aforementioned 
>> sip-proxy is certified-compatible with the telco and effectively eliminates 
>> the need for inspection.
>> 
>> Given that B400P available through the local distributor is a 
>> telco-certified device and the telco also provides a ISDN gateway for the 
>> service (which has either two or four BRIs and ethernet), ISDN-interfacing 
>> of asterisk is a seemingly decent choice. Yes, it's a problem so easy to 
>> solve in principle but not so in reality.
>> 
>> Now, the card is listed in lspci, but is not visible from DAHDI utilities. 
>> My guess is that it's due to the PCI VID of B400P that is not listed in 
>> "modinfo wcb4xxp". Documentation by OpenVox also says that a little patching 
>> is necessary, so things make sense overall.
>> 
>> I'll include the PID and VID with the next email should there be a demand 
>> for it.
>> 
>> Any comments and ideas are appreciated.
>> 
>> Tahiro
>> 
>> On Mon, May 29, 2023 at 6:38 PM Michael Keuter  
>> wrote:
>> 
>> 
>>> Am 29.05.2023 um 07:39 schrieb Tahiro Hashizume via Astlinux-users 
>>> :
>>> 
>>> Dear whom it may concern.
>>> 
>>> I've recently got my hands on a OpenVox B400P ISDN BRI card.
>>> It seems that DAHDI included with Astlinux isn't built to support the card 
>>> and I'm now trying to figure out how to build the image with the support 
>>> included.
>>> It's been a while since I started fiddling with OSS and I have been fairly 
>>> comfortable building stuff from sources although I am not yet able to write 
>>> my own Makefile and so on.
>>> Any ideas on how I should get started?
>>> 
>>> P.S.-I have managed to build the toolchain and Astlinux image by default 
>>> config for Asterisk 18.x. 
>>> 
>>> Regards.
>> 
>> Hi Tahiro,
>> 
>> the only BRI driver in DAHDI is the WCB4XXP for 2-8 port HFS-chip cards.
>> 
>> https://doc.astlinux-project.org/userdoc:dahdi
>> 
>> So in principle this should work for your card:
>> 
>> DAHDIMODS="wcb4xxp dahdi_echocan_oslec"
>> 
>> I have switched all my ISDN based installations to berofix cards/boxes over 
>> 10 years ago.
>> And now none is still in production :-). 
>> 
>> Michael
>> 
>> http://www.mksolutions.info


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Hello all and I need help.

[Michael Keuter]

> Am 29.05.2023 um 07:39 schrieb Tahiro Hashizume via Astlinux-users 
> :
> 
> Dear whom it may concern.
> 
> I've recently got my hands on a OpenVox B400P ISDN BRI card.
> It seems that DAHDI included with Astlinux isn't built to support the card 
> and I'm now trying to figure out how to build the image with the support 
> included.
> It's been a while since I started fiddling with OSS and I have been fairly 
> comfortable building stuff from sources although I am not yet able to write 
> my own Makefile and so on.
> Any ideas on how I should get started?
> 
> P.S.-I have managed to build the toolchain and Astlinux image by default 
> config for Asterisk 18.x. 
> 
> Regards.

Hi Tahiro,

the only BRI driver in DAHDI is the WCB4XXP for 2-8 port HFS-chip cards.

https://doc.astlinux-project.org/userdoc:dahdi

So in principle this should work for your card:

DAHDIMODS="wcb4xxp dahdi_echocan_oslec"

I have switched all my ISDN based installations to berofix cards/boxes over 10 
years ago.
And now none is still in production :-). 

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Stopping logging of Crontab

[Michael Keuter]

> Am 30.03.2023 um 10:08 schrieb Michael Keuter :
> 
> 
> 
>> Am 30.03.2023 um 06:39 schrieb Michael Knill 
>> :
>> 
>> Short of putting in a filter for the Status Tab, is there any way to stop 
>> Crontab logging to Syslog.
>> I now have a process that is run every 10 minutes and its annoying that it 
>> logs to Syslog each time.
>> 
>> Regards
>> 
>> Michael Knill
>> Managing Director
> 
> I have not tested this, but maybe it works:
> 
> https://unix.stackexchange.com/questions/204431/skip-syslog-rsyslog-logging-of-certain-cron-jobs
> 
> Michael

No, it does NOT work :-(.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Stopping logging of Crontab

[Michael Keuter]

> Am 30.03.2023 um 06:39 schrieb Michael Knill 
> :
> 
> Short of putting in a filter for the Status Tab, is there any way to stop 
> Crontab logging to Syslog.
> I now have a process that is run every 10 minutes and its annoying that it 
> logs to Syslog each time.
>  
> Regards
>  
> Michael Knill
> Managing Director

I have not tested this, but maybe it works:

https://unix.stackexchange.com/questions/204431/skip-syslog-rsyslog-logging-of-certain-cron-jobs

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Streaming music player

[Michael Keuter]

> Am 22.02.2023 um 14:19 schrieb Lonnie Abelbeck :
> 
> 
> 
>> On Feb 22, 2023, at 2:36 AM, Michael Keuter  wrote:
>> 
>> 
>> 
>>> Am 22.02.2023 um 02:29 schrieb Michael Knill 
>>> :
>>> 
>>> Hi Guys
>>> 
>>> Everything I read mentions that mpg123 is required for this but it does not 
>>> appear to be in Astlinux.
>>> Could I just add the binary to /mnt/kd/bin do you think?
>>> 
>>> Regards
>>> 
>>> Michael Knill
>>> Managing Director
>> 
>> Hi Michael,
>> 
>> you can easily use "sox" instead of "mpg123" for streaming. Like:
>> 
>> 
>> wget -q -O - $URL | sox -t mp3 $FOPTS - -t raw -r 8000 -c 1 -
>> 
>> 
>> Michael
>> http://www.mksolutions.info
> 
> Agreed, sox supports more encoding types than mpg123, IIRC.
> 
> This wiki entry has some good tidbits...
> 
> External Music on Hold Source
> https://doc.astlinux-project.org/userdoc:tt_external_moh_source
> 
> 
> Lonnie

Cool, complete forgot about that old Wiki entry.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Streaming music player

[Michael Keuter]

> Am 22.02.2023 um 02:29 schrieb Michael Knill 
> :
> 
> Hi Guys
>  
> Everything I read mentions that mpg123 is required for this but it does not 
> appear to be in Astlinux.
> Could I just add the binary to /mnt/kd/bin do you think?
>  
> Regards
>  
> Michael Knill
> Managing Director

Hi Michael,

you can easily use "sox" instead of "mpg123" for streaming. Like:


wget -q -O - $URL | sox -t mp3 $FOPTS - -t raw -r 8000 -c 1 -


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Large number of Firewall entries

[Michael Keuter]

> Am 02.01.2023 um 17:21 schrieb Lonnie Abelbeck :
> 
> Hi Michael,
> 
> Referring to the "apply_ipset_netset()" function (here [1])
> 
> Add "-exist" to the "create" and "add" (man-page [2]) commands.
> 
> Note that you can create the ipset from a text file within the 
> /etc/arno-iptables-firewall/custom-rules script.  Edit your text file and 
> reload the firewall.
> 
> Using "ipset create -exist ..." will not fail if the ipset already exists.  
> "ipset flush ..." will clear any pre-existing ipset.
> 
> Tip -> I would probably use "hash:net" instead of "hash:ip" so you could use 
> CIDRs if you wanted.
> 
> custom-rules script snippet
> --
> ipset create -exist udp_sip_hosts hash:net
> ipset flush udp_sip_hosts
> 
> ## either a one-liner from a text file "sip-whitelist.netset"
> sed -n -r -e "s/^([0-9][0-9./]+)([[:space:]].*|)$/add -exist udp_sip_hosts 
> \1/p" sip-whitelist.netset | ipset restore
> 
> ## Or, loop getting IPv4s from a text file "sip-whitelist.netset"
>  ipset add -exist udp_sip_hosts 
> ## done-loop
> 
> iptables -A EXT_INPUT_CHAIN -m set --match-set udp_sip_hosts src -p udp 
> --dport 5060 -j ACCEPT
> --
> 
> Lonnie
> 
> [1] 
> https://github.com/astlinux-project/astlinux/blob/d95ba9c3914b135da4440cb95f32af61a41d4650/package/arnofw/aif/bin/arno-iptables-firewall#L4275
> 
> [2] https://ipset.netfilter.org/ipset.man.html
> 
> 
>> On Jan 1, 2023, at 11:44 PM, Michael Knill 
>>  wrote:
>> 
>> Hi All
>> Merry Christmas and Happy New Year.
>> 
>> Just rejuvenating this thread as I am building our new softswitch and 
>> playing with ipset as you offered below.
>> We have done the following:
>> 
>> Using CLI:
>> ipset create udp_sip_hosts hash:ip
>> ipset add udp_sip_hosts 
>> 
>> In custom-rules.conf
>> iptables -A EXT_INPUT_CHAIN -m set --match-set udp_sip_hosts src -p udp 
>> --dport 5060 -j ACCEPT
>> 
>> It all seems to work fine but I obviously am an iptables noob as I have no 
>> idea what to do when I make changes to the ipset as it does not change even 
>> after a firewall restart.
>> I'm sure there is something I need to do which will get iptables to reread 
>> the ipset?
>> 
>> Thanks guys.
>> 
>> Regards 
>> Michael Knill 
>> 
>> 
>> 
>> On 27/9/2021, 10:54 am, "Lonnie Abelbeck" > > wrote:
>> 
>> 
>> Michael,
>> 
>> 
>> The /mnt/kd/arno-iptables-firewall/custom-rules is a basic shell script, so 
>> parsing sip.conf using 'sed' or such should be reasonably straightforward.
>> 
>> 
>> BTW, for extra credit, if you combined all the allowed SIP IPs into an ipset 
>> (ex. udp_sip_hosts), you can very efficiently match all of them with only 
>> one rule:
>> --
>> iptables -A EXT_INPUT_CHAIN -m set --match-set udp_sip_hosts src -p udp 
>> --dport 5060 -j ACCEPT
>> --
>> That would allow you to rebuild only the "udp_sip_hosts" ipset when the 
>> sip.conf got changed, without rebuilding the firewall. Though requires some 
>> 'ipset' command knowledge, though not complex at all.
>> 
>> 
>> Example 'ipset' usage in AstLinux:
>> https://github.com/astlinux-project/astlinux/blob/d95ba9c3914b135da4440cb95f32af61a41d4650/package/arnofw/aif/bin/arno-iptables-firewall#L4275
>>  
>> 
>> 
>> 
>> If you only use IPv4 a lot of the example can be simplified.
>> 
>> 
>> Lonnie
>> 
>> 
>> 
>> 
>> 
>> 
>>> On Sep 26, 2021, at 7:17 PM, Michael Knill 
>>> >> > wrote:
>>> 
>>> Thanks Lonnie.
>>> 
>>> Actually now that I think about it, is there any reason why the custom rule 
>>> could not parse sip.conf for host= and open up all Public IP's?
>>> It would mean that you would need to restart the firewall every time you 
>>> modified sip.conf but I'm sure we could build this into our portal very 
>>> simply.
>>> 
>>> Regards
>>> Michael Knill
>>> 
>>> On 27/9/21, 9:47 am, "Lonnie Abelbeck" >> > wrote:
>>> 
>>> Hi Michael,
>>> 
>>> With 300 rules and the same across all your boxes, I would use 
>>> /mnt/kd/arno-iptables-firewall/custom-rules to define these.
>>> 
>>> Very similar to the deny_ext_local() example I posted recently, but the 
>>> reverse ... pass_ext_local() using -j ACCEPT
>>> 
>>> Without testing, something like ...
>>> --
>>> pass_ext_local()
>>> {
>>> local proto="$1" host="$2" port="$3"
>>> 
>>> echo "[CUSTOM RULE] Pass EXT->Local for Proto: $proto, Host: $host, Port: 
>>> $port"
>>> iptables -A EXT_INPUT_CHAIN -s $host -p $proto --dport $port -j ACCEPT
>>> }
>>> ## uncomment to enable ##
>>> #pass_ext_local udp 1.2.3.4 5060
>>> #pass_ext_local tcp 1.2.3.0/24 5061
>>> --
>>> 
>>> If you only use udp/5060, you could simplify things, maybe only one "echo" 
>>> statement and a variable defining all 300 IPs. Generic shell scripting.
>>> 
>>> Again untested ...
>>> --
>>> pass_ext_local_udp_sip()
>>> {
>>> local host proto="udp" port="5060" IFS

Re: [Astlinux-users] No "eth0" device found on HP T510 Thin Client - astlinux 1.4.7

[Michael Keuter]

> Am 09.12.2022 um 04:33 schrieb Tim Griffin :
> 
> Hi all; I've just blown the dust off of an HP T150 thin client box (4GB 
> RAM/16GB Flash, VIA Eden X2 U4200 processor @ 1Ghz) and installed the latest 
> x64 version of ASTLinux (1.4.7). 
> The operating system installs without error, but after booting, and despite 
> apparently installing the 
> "Intel PRO/1000 Network Driver 3.8.7-NAPI" driver, ASTLinux cannot find 
> "eth0", and there is consequently no network available. 
> 
> Yet, if I boot the machine just to a RUNNIX shell, "lspci" shows the network 
> adapter (Broadcom Inc. BCM57780 Gigabit Ethernet PCIe (rev 01)) installed as 
> "eth0" (albeit without an IP address):
> 
> 
> If I let ASTLinux boot to completion, it seems to load the "Intel PRO/1000 
> Network Driver 3.8.7-NAPI" and the "8139 Fast Ethernet drive 0.9.28", but 
> then cannot find "eth0" (last line of screen shot). 
> 
> 
> 
> 
> When boot into ASTLinux, my installation does not have anything pertaining to 
> "net" in the /etc/udev/rules directory either:
> 
> 
> 
> I can confirm that the network cable was attached to the box and 
> connection/activity indicators were illuminated, so the hardware seems okay.
> 
> After booting into ASTLinux, "ifconfig" shows the following:
> 
> 
> 
> One other interesting anomaly is that "eth0" *is* reported right at the end 
> of the boot:
> 
> 
> 
> But then the OS doesn't seem to initialize "eth0" leaving the environment 
> networkless.
> 
> While I am relatively used to working on Ubuntu servers, I've never had to 
> operate at the level of network interface drivers, so I'm a little lost as to 
> where to look for the problem and how to attempt a resolution. 
> 
> Is there something about 1.4.7 that it would not necessarily include and 
> enable a network driver for this adapter? 
> 
> 
> Thanks!
> Tim

Hi Tim,

the available network drivers can be found in "/etc/rc.modules".
I think for Broadcom NICs you can try the "tg3" driver.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] MSMTP: E-Mail From root?

[Michael Keuter]

You need to define SMTP_FROM="u...@host.com"
for your sender address in your user.conf

Sent from a mobile device.

Michael Keuter

> Am 07.08.2022 um 17:02 schrieb Dan Ryson :
> 
> 
> All,
> 
> I've been trying to figure out why I'm experiencing a new MSMTP symptom on 
> two completely separate PBXs; both running AstLinux 1.4.6.  Within the last 
> few weeks, I've started seeing bounce messages like the one pasted below.  
> For some reason, mail appears to be going out with a "from" address of root.  
>   
> 
> sip mail.err msmtp: host=smtp.ryson.org tls=on auth=on user=d...@ryson.org 
> from=r...@ryson.org recipients=d...@ryson.org smtpstatus=550 smtpmsg='550 
> sorry, you can?t send as this user' errormsg='envelope from address 
> r...@ryson.org not accepted by the server' exitcode=EX_DATAERR 
> 
> I see the same thing with the Test SMTP Mail Relay dialog under the Network 
> tab while entering my e-mail address to both the "to" and "from" text boxes.  
> 
> 
> 
> The symptom also occurs from the command line (with some portions redacted):
> 
> sip kd #  echo "hello there username." | msmtp --debug -a default 
> d...@ryson.org
> loaded system configuration file /etc/msmtprc
> ignoring user configuration file /root/.msmtprc: No such file or directory
> using account default from /etc/msmtprc
> host = smtp.ryson.org
> port = 465
> source ip = (not set)
> proxy host = (not set)
> proxy port = 0
> socket = (not set)
> timeout = 30 seconds
> protocol = smtp
> domain = localhost
> auth = LOGIN
> <-- 235 ok, go ahead (#2.0.0)
> --> MAIL FROM:
> --> RCPT TO:
> --> DATA
> <-- 550 sorry, you can't send as this user
> msmtp: envelope from address r...@ryson.org not accepted by the server
> msmtp: server message: 550 sorry, you can't send as this user
> msmtp: could not send mail (account default from /etc/msmtprc)
> 
> As always, I'd appreciate any insight.
> 
> Thanks,
> 
> Dan
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Can't access astlinux GUI

[Michael Keuter]

We (AstLinux Team) documented only three Cloud scenarios, that we have tested 
ourselves.
I cannot speak for installations on OVH. On Vultr it is quite easy to install.

> Am 16.05.2022 um 18:37 schrieb Hamid Awad :
> 
>  
> There’re talked about 3 cloud company.
> Any way I read all the the docs in the link 
> (https://doc.astlinux-project.org/userdoc:documentation#cloud_hosted_guest_vm_s
> ) to understand the idea and applied it in my environment
> I installed astlinux the remove the ISO CD and let astlinux boot from hd
> No thing happens
> Same issue
> NOTE : I used Kimchi (Virtualization Management)
> https://github.com/kimchi-project/wok @ ubuntu 16.04 server
>  
> Regards,
>  
> From: Michael Keuter
> Sent: Monday, May 16, 2022 12:59 PM
> To: Hamid Awad
> Subject: Re: [Astlinux-users] Can't access astlinux GUI
>  
> https://doc.astlinux-project.org/userdoc:documentation#cloud_hosted_guest_vm_s
>  
> > Am 16.05.2022 um 12:52 schrieb Hamid Awad :
> >
> > Hi again,
> >
> > In fact I managd dedicated server from ovh with virtualization (kvm)
> >
> > Can you tell me what can I do
> >
> > Regards
> >
> >
> >  Original message 
> > From: Michael Keuter 
> > Date: Mon, 16 May 2022, 11:29
> > To: AstLinux Users Mailing List 
> > Subject: Re: [Astlinux-users] Can't access astlinux GUI
> > Hi Hamid,
> >
> > normally you should get a DHCP address from your provider.
> > I had a same issue with another provider in Germany (static IP didn't help 
> > either), I filed a support request,
> > and within a few hours they re-provisioned the server and I got an IP 
> > address via DHCP.
> >
> > Otherwise in "rc.conf":
> >
> > 
> > ## External Interface
> > EXTIF="eth0"
> >
> > ## If EXTIP is set, a 'static' config is used instead of the default,
> > ## which is DHCP client on $EXTIF. If you are using a T1/E1
> > ## EXTGW is also the PtP address. You can enter as many DNS servers as
> > ## you wish.  They will be added in order.
> > #EXTIP="192.168.25.2"
> > #EXTNM="255.255.255.0"
> > #EXTGW="192.168.25.1"
> > #DNS="192.168.1.1 192.168.1.2 192.168.1.3"
> > 
> >
> > > Am 16.05.2022 um 08:48 schrieb Hamid Awad :
> > >
> > > VPS from ovh
> > >
> > > How can I turne dhcp off
> > >
> > >
> > >  Original message 
> > > From: Lonnie Abelbeck 
> > > Date: Mon, 16 May 2022, 04:03
> > > To: AstLinux Users Mailing List 
> > > Subject: Re: [Astlinux-users] Can't access astlinux GUI
> > >
> > >
> > > > On May 15, 2022, at 3:44 PM, Hamid Awad  wrote:
> > > >
> > > > Hi every body,
> > > > I install astlinux in my vps and all is fine, I could not assign IP 
> > > > address (my ip address)
> > > > I tried ifconfig 54.x.x.x to setup ip and netmask and I successful on 
> > > > that.
> > > > I can't ping the gateway so I can't add it to the route.
> > >
> > > What VPS are you trying to use?
> > >
> > > Doesn't DHCP (the default) work on the external interface?
> > >
> > > I know Vultr [1] can easily deploy an AstLinux VM ISO [2].
> > >
> > > Lonnie
> > >
> > > [1] https://www.vultr.com/
> > >
> > > [2] https://doc.astlinux-project.org/userdoc:hosted_guest_vm_vultr
> >
> > Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Can't access astlinux GUI

[Michael Keuter]

Hi Hamid,

normally you should get a DHCP address from your provider.
I had a same issue with another provider in Germany (static IP didn't help 
either), I filed a support request, 
and within a few hours they re-provisioned the server and I got an IP address 
via DHCP.

Otherwise in "rc.conf":


## External Interface
EXTIF="eth0"

## If EXTIP is set, a 'static' config is used instead of the default,
## which is DHCP client on $EXTIF. If you are using a T1/E1
## EXTGW is also the PtP address. You can enter as many DNS servers as
## you wish.  They will be added in order.
#EXTIP="192.168.25.2"
#EXTNM="255.255.255.0"
#EXTGW="192.168.25.1"
#DNS="192.168.1.1 192.168.1.2 192.168.1.3"


> Am 16.05.2022 um 08:48 schrieb Hamid Awad :
> 
> VPS from ovh
> 
> How can I turne dhcp off
> 
> 
>  Original message 
> From: Lonnie Abelbeck 
> Date: Mon, 16 May 2022, 04:03
> To: AstLinux Users Mailing List 
> Subject: Re: [Astlinux-users] Can't access astlinux GUI
> 
> 
> > On May 15, 2022, at 3:44 PM, Hamid Awad  wrote:
> > 
> > Hi every body, 
> > I install astlinux in my vps and all is fine, I could not assign IP address 
> > (my ip address)
> > I tried ifconfig 54.x.x.x to setup ip and netmask and I successful on that. 
> > I can't ping the gateway so I can't add it to the route. 
> 
> What VPS are you trying to use?
> 
> Doesn't DHCP (the default) work on the external interface?
> 
> I know Vultr [1] can easily deploy an AstLinux VM ISO [2].
> 
> Lonnie
> 
> [1] https://www.vultr.com/
> 
> [2] https://doc.astlinux-project.org/userdoc:hosted_guest_vm_vultr

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Adding a Wireguard null route with higher metric

[Michael Keuter]

> Am 15.05.2022 um 05:07 schrieb Michael Knill 
> :
> 
> I use Wireguard VPN’s extensively and our softswitch has many peers connected 
> to it.
> One issue that is very annoying is that if a VPN route drops out of the 
> routing table, rather than just Unreachable, Asterisk complains as below:
> [May 14 07:20:37] WARNING[2082]: chan_sip.c:3781 __sip_xmit: sip_xmit of 
> 0x2b61f424e7a0 (len 509) to 172.29.1.252:5060 returned -1: Destination 
> address required
> [May 14 07:20:38] WARNING[2082]: chan_sip.c:3781 __sip_xmit: sip_xmit of 
> 0x2b61f458c940 (len 507) to 172.29.1.13:5060 returned -1: Destination address 
> required
> You also get the same when you try to ping it.
>  
> Can you think of any way to resolve this. I tried a null route and that 
> didn't work.
>  
> Regards
>  
> Michael Knill
> Managing Director

Hi Michael,

have you tried "qualify=yes" versus "no" for the client in "sip.conf", 
sometimes this makes a difference. 

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Analogue CLIP (CallerID)

[Michael Keuter]

Thanks for all your comments. 

I close this thread here,
cause now I am in direct contact with the company who manufactures the analogue 
modems.
And they offered me to debug their CallerID function with an Cisco SPA112.

>> Am 20.04.2022 um 21:24 schrieb Michael Knill 
>> :
>> 
>> 
>> Ah I understand now.
>> So do you know what the modem is expecting from a CLIP perspective or is 
>> this what you are trying to find?
> 
> Exactly, this is what I am trying to find. CLIP works for me with an old 
> analog DECT phone with 2 of the multiple variations. So the SPA112 are 
> working in general.
> 
>> What is the interface from the modem to the Emergency Console? Can you build 
>> something that connects directly to the console?
> 
> No, I don‘t have access, it is a custom product from a company here in 
> Germany, who are only producing elevation communication equipment (but it 
> seems only analog).
> 
>> It certainly seems like something that needs to be updated.
>> 
>> Regards
>> Michael Knill
>> 
>> From: Michael Keuter 
>> Reply to: AstLinux List 
>> Date: Wednesday, 20 April 2022 at 9:47 pm
>> To: AstLinux List 
>> Subject: Re: [Astlinux-users] Analogue CLIP (CallerID)
>> 
>> 
>> 
>> 
>> Am 20.04.2022 um 01:36 schrieb Michael Knill 
>> :
>> 
>> Hi Michael
>> 
>> I'm a little confused here. I was assuming this:
>> elevator -> PSTN -> SPA112 -> Asterisk
>> 
>> elevator -> PSTN -> Asterisk (via Voip to PSTN)) -> SPA112 -> Modem -> 
>> Emergency Support console (special construction modem with "handset")
>> 
>> Update: I could simulate the internal part with an 20 year old Siemens 
>> analogue DECT phone at the SPA112.
>> CallerID (CLIP) works fine after the first ring with "Bellcore (bell-202 or 
>> v.23)", "ETSI FSK (bell-202 or v.23)" and "ETSI FSK with PR (UK) (bell-202 + 
>> v.23)". Even the CallerID name is shown.
>> 
>> When I set to e.g. "DTMF Denmark" the phone shows only "External Call".
>> 
>> 
>> What am I missing?
>> 
>> Regards
>> Michael Knill
>> 
>> From: Michael Keuter 
>> Reply to: AstLinux List 
>> Date: Wednesday, 20 April 2022 at 9:20 am
>> To: AstLinux List 
>> Subject: Re: [Astlinux-users] Analogue CLIP (CallerID)
>> 
>> Hi Michael,
>> 
>> the „potential“ customer has these modems for a long time, and there are no 
>> alternatives (like SIP) at the market. 
>> 
>> And sure, in SIP I see the correct CallerID, but the modem don‘t see the 
>> „right“ CallerID generated by the ATA.
>> 
>> Sent from a mobile device.
>> 
>> Michael Keuter
>> 
>> 
>> 
>> Am 20.04.2022 um 00:58 schrieb Michael Knill 
>> :
>> 
>> Hi Michael
>> 
>> Just wondering why you need analogue modems to receive the calls from the 
>> elevators?
>> Have you done a SIP Debug of the traffic coming from the SPA112’s to see if 
>> the number is anywhere in the SIP Invite?
>> Do you know the particular standard for this in your country and is this 
>> supported by the SPA112’s?
>> 
>> I have never used analogue FXO for anything sorry.
>> 
>> Regards
>> Michael Knill
>> 
>> From: Michael Keuter 
>> Reply to: AstLinux List 
>> Date: Wednesday, 20 April 2022 at 2:23 am
>> To: AstLinux List 
>> Subject: [Astlinux-users] Analogue CLIP (CallerID)
>> 
>> Hi list,
>> 
>> I am trying to install an Asterisk PBX for an elevator emergency central in 
>> Germany.
>> The callees are 6 analogue modems who receive calls from the elevators.
>> 
>> The main issue is that the modems need to identify the elevator via a so 
>> called analogue CLIP (Calling Line Identification Presentation) where the 
>> calling number is shown to the receiving modem.
>> It is not the Asterisk CALLERID(num) but a special "message" which is 
>> transfered for analogue phones between the first 2 ringings (but I think 
>> this is generated from the CALLERID(num)). 
>> There are several different methods for that, that can be set in the ATA 
>> (Cisco SPA112, latest EOL firmware):
>> 
>> 
>> 
>> 
>> 
>> I tried every possible combination of "Caller ID Method" and "Caller ID FSK 
>> Standard", but without success.
>> 
>> Has anybody on the list made experiences with analogue CLIP?
>> 
>> Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Analogue CLIP (CallerID)

[Michael Keuter]

Sent from a mobile device.

Michael Keuter

> Am 20.04.2022 um 21:24 schrieb Michael Knill 
> :
> 
> 
> Ah I understand now.
> So do you know what the modem is expecting from a CLIP perspective or is this 
> what you are trying to find?

Exactly, this is what I am trying to find. CLIP works for me with an old analog 
DECT phone with 2 of the multiple variations. So the SPA112 are working in 
general.

> What is the interface from the modem to the Emergency Console? Can you build 
> something that connects directly to the console?

No, I don‘t have access, it is a custom product from a company here in Germany, 
who are only producing elevation communication equipment (but it seems only 
analog).

> It certainly seems like something that needs to be updated.
>  
> Regards
> Michael Knill
>  
> From: Michael Keuter 
> Reply to: AstLinux List 
> Date: Wednesday, 20 April 2022 at 9:47 pm
> To: AstLinux List 
> Subject: Re: [Astlinux-users] Analogue CLIP (CallerID)
>  
> 
> 
> 
> Am 20.04.2022 um 01:36 schrieb Michael Knill 
> :
> 
> Hi Michael
> 
> I'm a little confused here. I was assuming this:
> elevator -> PSTN -> SPA112 -> Asterisk
> 
> elevator -> PSTN -> Asterisk (via Voip to PSTN)) -> SPA112 -> Modem -> 
> Emergency Support console (special construction modem with "handset")
>  
> Update: I could simulate the internal part with an 20 year old Siemens 
> analogue DECT phone at the SPA112.
> CallerID (CLIP) works fine after the first ring with "Bellcore (bell-202 or 
> v.23)", "ETSI FSK (bell-202 or v.23)" and "ETSI FSK with PR (UK) (bell-202 + 
> v.23)". Even the CallerID name is shown.
>  
> When I set to e.g. "DTMF Denmark" the phone shows only "External Call".
> 
> 
> What am I missing?
> 
> Regards
> Michael Knill
> 
> From: Michael Keuter 
> Reply to: AstLinux List 
> Date: Wednesday, 20 April 2022 at 9:20 am
> To: AstLinux List 
> Subject: Re: [Astlinux-users] Analogue CLIP (CallerID)
> 
> Hi Michael,
> 
> the „potential“ customer has these modems for a long time, and there are no 
> alternatives (like SIP) at the market. 
> 
> And sure, in SIP I see the correct CallerID, but the modem don‘t see the 
> „right“ CallerID generated by the ATA.
> 
> Sent from a mobile device.
> 
> Michael Keuter
> 
> 
> 
> Am 20.04.2022 um 00:58 schrieb Michael Knill 
> :
> 
> Hi Michael
> 
> Just wondering why you need analogue modems to receive the calls from the 
> elevators?
> Have you done a SIP Debug of the traffic coming from the SPA112’s to see if 
> the number is anywhere in the SIP Invite?
> Do you know the particular standard for this in your country and is this 
> supported by the SPA112’s?
> 
> I have never used analogue FXO for anything sorry.
> 
> Regards
> Michael Knill
> 
> From: Michael Keuter 
> Reply to: AstLinux List 
> Date: Wednesday, 20 April 2022 at 2:23 am
> To: AstLinux List 
> Subject: [Astlinux-users] Analogue CLIP (CallerID)
> 
> Hi list,
> 
> I am trying to install an Asterisk PBX for an elevator emergency central in 
> Germany.
> The callees are 6 analogue modems who receive calls from the elevators.
> 
> The main issue is that the modems need to identify the elevator via a so 
> called analogue CLIP (Calling Line Identification Presentation) where the 
> calling number is shown to the receiving modem.
> It is not the Asterisk CALLERID(num) but a special "message" which is 
> transfered for analogue phones between the first 2 ringings (but I think this 
> is generated from the CALLERID(num)). 
> There are several different methods for that, that can be set in the ATA 
> (Cisco SPA112, latest EOL firmware):
> 
> 
> 
> 
> 
> I tried every possible combination of "Caller ID Method" and "Caller ID FSK 
> Standard", but without success.
> 
> Has anybody on the list made experiences with analogue CLIP?
> 
> Michael
>  
> Michael
>  
> http://www.mksolutions.info
>  
> 
>  
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Analogue CLIP (CallerID)

[Michael Keuter]

> Am 20.04.2022 um 01:36 schrieb Michael Knill 
>  <mailto:michael.kn...@ipcsolutions.com.au>>:
> 
> Hi Michael
> 
> I'm a little confused here. I was assuming this:
> elevator -> PSTN -> SPA112 -> Asterisk

elevator -> PSTN -> Asterisk (via Voip to PSTN)) -> SPA112 -> Modem -> 
Emergency Support console (special construction modem with "handset")

Update: I could simulate the internal part with an 20 year old Siemens analogue 
DECT phone at the SPA112.
CallerID (CLIP) works fine after the first ring with "Bellcore (bell-202 or 
v.23)", "ETSI FSK (bell-202 or v.23)" and "ETSI FSK with PR (UK) (bell-202 + 
v.23)". Even the CallerID name is shown.

When I set to e.g. "DTMF Denmark" the phone shows only "External Call".

> What am I missing?
> 
> Regards
> Michael Knill
> 
> From: Michael Keuter 
> Reply to: AstLinux List 
> Date: Wednesday, 20 April 2022 at 9:20 am
> To: AstLinux List 
> Subject: Re: [Astlinux-users] Analogue CLIP (CallerID)
> 
> Hi Michael,
> 
> the „potential“ customer has these modems for a long time, and there are no 
> alternatives (like SIP) at the market. 
> 
> And sure, in SIP I see the correct CallerID, but the modem don‘t see the 
> „right“ CallerID generated by the ATA.
> 
> Sent from a mobile device.
> 
> Michael Keuter
> 
> 
>> Am 20.04.2022 um 00:58 schrieb Michael Knill 
>> :
>> 
>> Hi Michael
>> 
>> Just wondering why you need analogue modems to receive the calls from the 
>> elevators?
>> Have you done a SIP Debug of the traffic coming from the SPA112’s to see if 
>> the number is anywhere in the SIP Invite?
>> Do you know the particular standard for this in your country and is this 
>> supported by the SPA112’s?
>> 
>> I have never used analogue FXO for anything sorry.
>> 
>> Regards
>> Michael Knill
>> 
>> From: Michael Keuter 
>> Reply to: AstLinux List 
>> Date: Wednesday, 20 April 2022 at 2:23 am
>> To: AstLinux List 
>> Subject: [Astlinux-users] Analogue CLIP (CallerID)
>> 
>> Hi list,
>> 
>> I am trying to install an Asterisk PBX for an elevator emergency central in 
>> Germany.
>> The callees are 6 analogue modems who receive calls from the elevators.
>> 
>> The main issue is that the modems need to identify the elevator via a so 
>> called analogue CLIP (Calling Line Identification Presentation) where the 
>> calling number is shown to the receiving modem.
>> It is not the Asterisk CALLERID(num) but a special "message" which is 
>> transfered for analogue phones between the first 2 ringings (but I think 
>> this is generated from the CALLERID(num)). 
>> There are several different methods for that, that can be set in the ATA 
>> (Cisco SPA112, latest EOL firmware):
>> 
>> 
>> 
>> 
>> 
>> I tried every possible combination of "Caller ID Method" and "Caller ID FSK 
>> Standard", but without success.
>> 
>> Has anybody on the list made experiences with analogue CLIP?
>> 
>> Michael

Michael

http://www.mksolutions.info



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] ‘Lost’ Web Interface to the ‘Astlinux Management’ page.

[Michael Keuter]

> Am 17.04.2022 um 00:25 schrieb Steve Barlow :
> 
> Hello there everyone, I am a ‘very basic level user’ who has been 
> successfully using Astlinux for approx. the last 5 years, for the 
> interconnection of my heritage telephones and communication with other 
> enthusiasts.  
> 
> I recently updated the firmware on my HP T5720 Thin Client PC to Astlinux 
> 1.3.8 along with Asterisk 13.31.0
> 
> However, now after rebooting/restarting I have ‘lost’ my Web Interface to the 
> ‘Astlinux Management’ page.
> 
> I used to access this by entering in my Google Chrome Browser:
> 
> https://192.168.1.141/status.php

Hi Steve,
do you have tried:

https://192.168.1.141/admin/status.php

If it fails, maybe lighttpd (the webserver) is not running. You can try via ssh:

ps | grep lighttpd
 1442 root lighttpd -f /etc/lighttpd.conf
 5144 root grep lighttpd

The first line shows here that lighttpd is running (1442), if not try this to 
start lighttpd:

service lighttpd stop
service lighttpd init

> But I now get the message returned:
> 
> This site can’t be reached
> 192.168.1.141 took too long to respond.
> 
> However, the good news is that I can still make and receive calls etc. etc. 
> and can SSH access to all my folders/files via Putty or access them via 
> WinSCP using SFTP 
> 
> Any ideas anyone on how I can access the ‘Astlinux Management’ GUI again 
> without doing total reinstall?
> 
> Best wishes 
> Steve - UK

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Announcing AstLinux Release: 1.4.5

[Michael Keuter]

Hi,

as stated in the release info, the Asterisk 13 version is no more updated, but 
ast13se, ast16 + ast18.

> Am 13.03.2022 um 19:15 schrieb Ionel Chila via Astlinux-users 
> :
> 
> Is strange, when I do an update from the GUI it tells me 1.4.4 is the latest 
> version. It used to work upgrading from there just fine. Anything changed?
> 
> 
> 
> 
> 
>> On Mar 2, 2022, at 7:49 AM, Lonnie Abelbeck  
>> wrote:
>> 
>> Announcing AstLinux Release: 1.4.5
>> 
>> More Info: AstLinux Project
>> https://www.astlinux-project.org/
>> 
>> AstLinux 1.4.5 Highlights:
>> * Asterisk Versions: 13.38.3, 16.21.1, 18.10.0
>> * Asterisk 18.x is now supported, along with Asterisk 16.x and Asterisk 13.x 
>> built --without-pjproject
>> * Previous ast13-firmware-1.x is no longer being updated, ast13-firmware-1.x 
>> users should either switch to ast16-firmware-1.x (recommended) or use 
>> ast13se-firmware-1.x if chan_pjsip is not used in your dialplan.
>> 
>> * Linux Kernel 4.19.230, security and bug fixes
>> * RUNNIX, version bump to runnix-0.6.6
>> * OpenSSL, version bump to 1.1.1m, security fixes: none
>> * WireGuard VPN, module 1.0.20211208 (version bump), tools 1.0.20210914 (no 
>> change)
>> * strongSwan, version 5.5.3, security fix: CVE-2021-45079
>> * libcurl (curl) version bump to 7.81.0
>> * chrony, version bump to 4.2
>> * darkstat, version bump to 3.0.721
>> * expat, version bump to 2.4.6, security fixes: many
>> * Monit, version bump to 5.31.0
>> * msmtp, version bump to 1.8.19, 'msmtpd' security fix
>> * mtr, version bump to 0.95
>> * prosody, version bump to 0.11.13
>> * tarsnap, version bump to 1.0.40, "Trust No One" encrypted backups using 
>> the Tarsnap Backup service.
>> * vnStat, version bump to 2.9
>> * zabbix, version bump to 4.0.38
>> * Asterisk '13se' (stable edition) version 13.38.3 is the last Asterisk 13.x 
>> "Legacy" version, built --without-pjproject 
>> * Package upgrades providing important security and bug fixes
>> 
>> Full ChangeLog:
>> https://raw.githubusercontent.com/astlinux-project/astlinux/1.4.5/docs/ChangeLog.txt
>> 
>> All users are encouraged to upgrade, read the ChangeLog for the details.
>> 
>> AstLinux Team
>> 
>> 
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Astlinux on VmWare with Digium Wildcard TDM410

[Michael Keuter]

> Am 05.02.2022 um 18:50 schrieb Lonnie Abelbeck :
> 
>> 
>> On Feb 5, 2022, at 11:09 AM, Ionel Chila via Astlinux-users 
>>  wrote:
>> 
>> I had this dedicated box with a Digium Wildcard TDM410 running forever, 
>> thanks for all the hard work that is put into this great project.  I run few 
>> SIP trunks on this home PBX with VOIP providers from Europe, Asia and US as 
>> I have family all over the world.  I also use this for some automation 
>> tasks, so the need for the FXO and FXS modules besides my home line.
>> 
>> I am in process of consolidating some of my small servers into a beefy 
>> VmWare Esxi 7.0 server and I was wondering if migrating from this current 
>> physical PBX to VmWare will work.  The only part I am not sure in VmWare is 
>> about TDM410. Will this  TDM410 card still work properly even in the virtual 
>> environment, of course after putting the card in passthrough mode. Does 
>> anyone have a similar working setup?
>> 
>> https://doc.astlinux-project.org/userdoc:guest_vm_vmware_vsphere
>> 
>> Thanks
>> Ionel Chila
> 
> The TDM410 is PCI not PCIe, so you have a "beefy VmWare Esxi 7.0 server" with 
> PCI?
> 
> While possible, (I have never done it) I would consider reserving one of your 
> old boxes with PCI as a home-built SIP/ATA using AstLinux.
> 
> Lonnie

Or use physical ATAs from Cisco, Yeastar, Grandstream via SIP instead.
That works without VM issues (only configuring th ATAs, which can be tricky as 
well).

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Moving to Asterisk 16 from 13 guidance

[Michael Keuter]

> Am 21.01.2022 um 00:57 schrieb Ionel Chila via Astlinux-users 
> :
> 
> Any guidance / faq, formal or informal for moving from Asterisk 13 to 16?  I 
> run a very small home setup with 3 SIP providers and about 20 clients.  My 
> sip.conf and extensions.conf is not that complex :) 
> Do I need to put in another image?  

No, just make a backup before. Then change the Repository URL.

> Would it preserve my current configuration? I appreciate any guidance.

Your current config is preserved. Asterisk 16 includes a few new modules. You 
can exclude them in "modules.conf" with "noload => xyz.so" if you don't need 
them.
No so much has changed in the dialplan.

Look into the CHANGES and UPGRADE.txt:
https://github.com/asterisk/asterisk/tree/16

> As always great community and great work with Astlinux team.
> 
> Cheers
> 
> 
> |
> | A | Release: astlinux-1.4.4 - Asterisk 13.38.3
> | s |   Host Name: HOME-PBX.entouch.net
> | t |   Last Boot: 2022-01-20 12:21
> | L |   Linux: 4.19.208-astlinux x86_64
> | i | CPU: Intel Atom D2550 (4x) @ 1866 MHz
> | n | RAM: 3933 MB
> | u |  Board Type: genx86_64
> | x |Hardware: Generic x86_64
> |
> HOME-PBX ~ # 


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Fossil file size

[Michael Keuter]

> Am 18.01.2022 um 15:00 schrieb David Kerr :
> 
> Is there a way I can manage my fossil db size?  I think it is much larger 
> than it could be, probably because it has years of changes... the db is 1.8GB 
> which expands to 3.4GB when dumped for tarsnap backup... which is 75% of my 
> total tarsnap backup, driving up my tarsnap costs.
> 
> Is there a way I can, for example, prune the fossil db so that it contains 
> only e.g. last 3 months of file history.
> 
> And is there a way for me to get a listing of everything in the fossil db and 
> what size it is... maybe there is just one or two files in particular causing 
> the problem.
> 
> Thanks
> David

Hi David,

hmm mine is 2.5 MB of size after many years. Do you include binary files in 
Fossil?
There is an option to ignore certain file types in Fossil => Admin => Settings: 
"ignore-glob"



Maybe that helps.

Michael

http://www.mksolutions.info



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Updated Vultr - Cloud Hosted Guest VM Documentation

[Michael Keuter]

> Am 27.12.2021 um 22:07 schrieb Lonnie Abelbeck :
> 
> Hi,
> 
> Updated Vultr - Cloud Hosted Guest VM Documentation
> 
> There have been some cosmetic changes in the Vultr setup process, so the 
> documentation now reflects those changes.
> 
> More significantly, a Vultr "Firewall Group" is described to disallow network 
> traffic during VM Setup, and then disable the Vultr Firewall after the 
> AstLinux Firewall is enabled.  A couple extra steps, but adds peace of mind, 
> and the "Firewall Group" can be reused for new instances.
> 
> Vultr KVM
> https://doc.astlinux-project.org/userdoc:hosted_guest_vm_vultr
> 
> Please report any typos or confusing text.
> 
> Lonnie

Hi Lonnie,

nice update!
The added Firewall is a useful feature during the installation.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Moving to Asterisk 16

[Michael Keuter]

That was based on the Asterisk 13 certified version (at that time a bit older 
version with only security fixes) and without PJSIP included. Now it is the 
lastest Asterisk 13 LTS version since it is EOL.

Sent from a mobile device.

Michael Keuter

> Am 19.12.2021 um 11:51 schrieb The Cadillac Kid via Astlinux-users 
> :
> 
> 
> What is SE? I’m not familiar with your term. I only knew of regular and LTS 
> 
> On Saturday, December 18, 2021, 09:36:27 PM EST, Michael Knill 
>  wrote:
> 
> 
> Ok thanks Lonnie. Already disabled pre SE __
> 
> Regards
> Michael Knill
> 
> On 19/12/21, 12:41 pm, "Lonnie Abelbeck"  wrote:
> 
> Hi Michael,
> 
> > Are we looking at an Asterisk 16SE version at some stage?
> 
> Not in 2022, we plan to be supporting ast13se, ast16 and ast18
> 
> You will need to manage your modules.conf to disable pjsip in ast16 ... 
> or build a custom image with ast16 and --without-pjproject.
> 
> Lonnie
> 
> 
> 
> > On Dec 18, 2021, at 6:59 PM, Michael Knill 
>  wrote:
> > 
> > Thanks all. Looks like I'm going to 1.4.4 with Asterisk 16 then.
> > Are we looking at an Asterisk 16SE version at some stage?
> > 
> > Regards
> > Michael Knill
> > 
> > On 19/12/21, 11:57 am, "Michael Knill" 
>  wrote:
> > 
> >    Thanks Michael. I'm already using res_parking.conf so that's all 
> good.
> > 
> >Regards
> >Michael Knill
> > 
> >On 18/12/21, 9:33 pm, "Michael Keuter"  
> wrote:
> > 
> > 
> > 
> >> Am 18.12.2021 um 02:04 schrieb Michael Knill 
> :
> >> 
> >> Hi Group
> >> 
> >> Wanting to get some dev work done over the Christmas break and am 
> considering my options.
> >> Certainly moving from Astlinux 1.3.10 to 1.4.4 but trying to decide 
> whether I move to Asterisk 16 or not.
> >> Has anyone had any issues? Are there any gotchas with the move? I can 
> only see AMI changes for the Command action!
> >> 
> >> Regards
> >> 
> >> Michael Knill
> >> Managing Director
> > 
> >Hi Michael,
> > 
> >I successfully migrated all my AstLinux installations to 
> Asterisk 16 in 2021 and had no issues so far.
> >I just tweaked the "modules.conf" to not load the new stuff that 
> I don't needed.
> > 
> >And the parking stuff is now in a new "res_parking.conf" file in 
> Asterisk and has to stripped from "features.conf".
> > 
> >There are simple advices in the Asterisk error messages after 
> the upgrade (e.g which new files could not be loaded => 
> "/stat/etc/asterisk/").
> > 
> >Michael
> > 
> >http://www.mksolutions.info
> > 
> > 
> > 
> > 
> > 
> >___
> >Astlinux-users mailing list
> >Astlinux-users@lists.sourceforge.net
> >https://lists.sourceforge.net/lists/listinfo/astlinux-users
> > 
> >Donations to support AstLinux are graciously accepted via PayPal 
> to pay...@krisk.org.
> 
> > 
> > 
> >___
> >Astlinux-users mailing list
> >Astlinux-users@lists.sourceforge.net
> >https://lists.sourceforge.net/lists/listinfo/astlinux-users
> > 
> >Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> > 
> > 
> > ___
> > Astlinux-users mailing list
> > Astlinux-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/astlinux-users
> > 
> > Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Moving to Asterisk 16

[Michael Keuter]

> Am 18.12.2021 um 14:28 schrieb Lonnie Abelbeck :
> 
> 
> 
>> On Dec 18, 2021, at 4:32 AM, Michael Keuter  wrote:
>> 
>> 
>> 
>>> Am 18.12.2021 um 02:04 schrieb Michael Knill 
>>> :
>>> 
>>> Hi Group
>>> 
>>> Wanting to get some dev work done over the Christmas break and am 
>>> considering my options.
>>> Certainly moving from Astlinux 1.3.10 to 1.4.4 but trying to decide whether 
>>> I move to Asterisk 16 or not.
>>> Has anyone had any issues? Are there any gotchas with the move? I can only 
>>> see AMI changes for the Command action!
>>> 
>>> Regards
>>> 
>>> Michael Knill
>>> Managing Director
>> 
>> Hi Michael,
>> 
>> I successfully migrated all my AstLinux installations to Asterisk 16 in 2021 
>> and had no issues so far.
>> I just tweaked the "modules.conf" to not load the new stuff that I don't 
>> needed.
>> 
>> And the parking stuff is now in a new "res_parking.conf" file in Asterisk 
>> and has to stripped from "features.conf".
>> 
>> There are simple advices in the Asterisk error messages after the upgrade 
>> (e.g which new files could not be loaded => "/stat/etc/asterisk/").
>> 
>> Michael
> 
> IIRC Asterisk 13 already contained the res_parking.conf
> "; Note: From Asterisk 12 - All parking lot configuration is now done in 
> res_parking.conf"
> 
> Lonnie

Yup, you're right.
I just tracked a customer upgrade in Fossil - But now as you say it - it was 
from Asterisk 11 to 16 :-).

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Moving to Asterisk 16

[Michael Keuter]

> Am 18.12.2021 um 02:04 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> Wanting to get some dev work done over the Christmas break and am considering 
> my options.
> Certainly moving from Astlinux 1.3.10 to 1.4.4 but trying to decide whether I 
> move to Asterisk 16 or not.
> Has anyone had any issues? Are there any gotchas with the move? I can only 
> see AMI changes for the Command action!
>  
> Regards
>  
> Michael Knill
> Managing Director

Hi Michael,

I successfully migrated all my AstLinux installations to Asterisk 16 in 2021 
and had no issues so far.
I just tweaked the "modules.conf" to not load the new stuff that I don't needed.

And the parking stuff is now in a new "res_parking.conf" file in Asterisk and 
has to stripped from "features.conf".

There are simple advices in the Asterisk error messages after the upgrade (e.g 
which new files could not be loaded => "/stat/etc/asterisk/").

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] CAKE!

[Michael Keuter]

Maybe your Browser cache?

Sent from a mobile device.

Michael Keuter

> Am 15.12.2021 um 21:10 schrieb Dan Ryson :
> 
> 
> Hi Lonnie,
> 
> Thanks for the prompt response and recommendations.
> 
> Sip.conf already had the TOS settings so no change was necessary there.  
> 
> Right off the bat, a discrepancy is apparent between your screen shot (below) 
> and what I'm observing.  Although the GUI is reporting that I'm running 
> version 1.4.4, there's no [cake] option available in the Traffic Shaping 
> pull-down.  The only options are Disabled, Enabled [htb], and Enabled [hfsc]. 
>  Furthermore, I'm seeing no CAKE Tuning Options, Link Layer Tuning, or ACK 
> Filter.  I've rebooted twice since upgrading both Runnix and AstLinux.
> 
> What am I missing?  (No, wait.  Don't answer that!)
> 
> Dan
> 
> 
> 
>> On Wed, Dec 15, 2021 at 02:19 PM, Lonnie Abelbeck 
>>  wrote:
>> Hi Dan!
>> 
>> When we added CAKE support ... after much testing, I concluded CAKE is the 
>> best choice for many.
>> 
>> There are no UDP/TCP port based shaping rules when using CAKE (a person 
>> needs hsfc or htb to support that), as configured CAKE uses DiffServ QoS 
>> markings.
>> 
>> So in sip.conf be sure to enable at least:
>> --
>> tos_sip=cs3 ; Sets TOS for SIP packets.
>> tos_audio=ef; Sets TOS for RTP audio packets.
>> --
>> 
>> Personally I have a 100/20 Mbps (down/up) DOCSIS cable modem (slightly more 
>> tested with Speedtest), here is my setting.
>> 
>> 
>> 
>> In general you should never enable Downlink shaping.
>> 
>> While there is a method to apply Downlink shaping using CAKE via an ifb 
>> device, it does not offer much benefit with many complications.  If you 
>> enable Downlink shaping it will drop packets to limit the speed, which 
>> applies equally to all shaping types.  Best not to enable Downlink shaping.
>> 
>> 
>> Let me know how it goes for you.
>> 
>> Lonnie
>> 
>> 
>> 
>> 
>> On Dec 15, 2021, at 11:44 AM, Dan Ryson  wrote:
>> 
>> Hi Team,
>> 
>> And thanks for your continuing efforts with AstLinux and 1..4.4 in 
>> particular.  
>> 
>> 'Tis the season to be streamin' and I'm facing new challenges with Traffic 
>> Shaping.  Specifically, we're missing syllables on incoming voice traffic.  
>> Might CAKE help?  Can you point to any guidance on using CAKE in a VoIP 
>> context of the other provided Traffic Shaping tools?
>> 
>> Best wishes,
>> 
>> Dan
>> 
>> 
>> On Tue, Nov 2, 2021 at 11:58 AM, Lonnie Abelbeck  
>> wrote:
>> Announcing AstLinux Release: 1.4.4
>> 
>> More Info: AstLinux Project
>> https://www.astlinux-project.org/
>> 
>> AstLinux 1.4.4 Highlights:
>> * Asterisk Versions: 13.38.3, 16.21.1
>> * Added SIP threats blocklist 'apiban', requires an API Key in 
>> /mnt/kd/apiban.conf via https://apiban.org/
>> * Traffic Shaping, add CAKE support, both "Network -> Firewall -> Traffic 
>> Shaping" and "Network -> WAN Failover"
>> * 2.5G ethernet support for Intel i225 (igc) and Realtek RTL8125 (r8125) NICs
>> * '13se' version now uses Asterisk 13.38.3, "Security Fixes Only" version 
>> for Asterisk 13
>> 
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Log4j vulnerability

[Michael Keuter]

> Am 14.12.2021 um 10:51 schrieb Stefan Ulm :
> 
>  
>  
> is astlinux using Log4j some way? I’m asking, because lately there came out a 
> vulnerability regarding Log4j.
> I have installed some older version like for example astlinux 1.2.7 and I 
> want just to know if I need to take action to update theese devices to avoid 
> Log4j vulnerability.
>  
>  
> Best regards
>  
> Stefan Ulm

Hi Stefan,

no, AstLinux does not use Java at all. 
Only if you have compiled yourself a personal version with custom packages with 
Buildroot, that might be.

Version 1.2.7 is quite old (2016-07-06) and many security fixes for other 
packages were included in the meantime.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Large number of Firewall entries

[Michael Keuter]

That sounds very interesting. I have a customer using AstLinux as Proxy as well.
Maybe we could document this in the Wiki? 

> Am 27.09.2021 um 02:54 schrieb Lonnie Abelbeck :
> 
> Michael,
> 
> The /mnt/kd/arno-iptables-firewall/custom-rules is a basic shell script, so 
> parsing sip.conf using 'sed' or such should be reasonably straightforward.
> 
> BTW, for extra credit, if you combined all the allowed SIP IPs into an ipset 
> (ex. udp_sip_hosts), you can very efficiently match all of them with only one 
> rule:
> --
> iptables -A EXT_INPUT_CHAIN -m set --match-set udp_sip_hosts src -p udp 
> --dport 5060 -j ACCEPT
> --
> That would allow you to rebuild only the "udp_sip_hosts" ipset when the 
> sip.conf got changed, without rebuilding the firewall.  Though requires some 
> 'ipset' command knowledge, though not complex at all.
> 
> Example 'ipset' usage in AstLinux:
> https://github.com/astlinux-project/astlinux/blob/d95ba9c3914b135da4440cb95f32af61a41d4650/package/arnofw/aif/bin/arno-iptables-firewall#L4275
> 
> If you only use IPv4 a lot of the example can be simplified.
> 
> Lonnie
> 
> 
> 
>> On Sep 26, 2021, at 7:17 PM, Michael Knill 
>>  wrote:
>> 
>> Thanks Lonnie.
>> 
>> Actually now that I think about it, is there any reason why the custom rule 
>> could not parse sip.conf for host= and open up all Public IP's?
>> It would mean that you would need to restart the firewall every time you 
>> modified sip.conf but I'm sure we could build this into our portal very 
>> simply.
>> 
>> Regards
>> Michael Knill
>> 
>> On 27/9/21, 9:47 am, "Lonnie Abelbeck"  wrote:
>> 
>>   Hi Michael,
>> 
>>   With 300 rules and the same across all your boxes, I would use 
>> /mnt/kd/arno-iptables-firewall/custom-rules to define these.
>> 
>>   Very similar to the deny_ext_local() example I posted recently, but the 
>> reverse ... pass_ext_local() using -j ACCEPT
>> 
>>   Without testing, something like ...
>>   --
>>   pass_ext_local()
>>   {
>> local proto="$1" host="$2" port="$3"
>> 
>> echo "[CUSTOM RULE] Pass EXT->Local for Proto: $proto, Host: $host, 
>> Port: $port"
>> iptables -A EXT_INPUT_CHAIN -s $host -p $proto --dport $port -j ACCEPT
>>   }
>>   ## uncomment to enable ##
>>   #pass_ext_local udp 1.2.3.4 5060
>>   #pass_ext_local tcp 1.2.3.0/24 5061
>>   --
>> 
>>   If you only use udp/5060, you could simplify things, maybe only one "echo" 
>> statement and a variable defining all 300 IPs.  Generic shell scripting.
>> 
>>   Again untested ...
>>   --
>>   pass_ext_local_udp_sip()
>>   {
>> local host proto="udp" port="5060" IFS
>> local sip_hosts="1.2.3.4 1.22.33.40 1.22.33.41 1.22.33.42 1.22.33.43 
>> 1.22.33.44 1.22.33.45 1.22.33.46 1.22.33.47 1.22.33.48"
>> 
>> echo "[CUSTOM RULE] Pass EXT->Local for UDP/5060 SIP Hosts"
>> unset IFS
>> for host in $sip_hosts; do
>>   iptables -A EXT_INPUT_CHAIN -s $host -p $proto --dport $port -j ACCEPT
>> done
>>   }
>>   pass_ext_local_udp_sip
>>   --
>> 
>>   Alternatively, you could define the sip_hosts variable with a file if 
>> desired.
>> 
>>   Lonnie
>> 
>> 
>> 
>> 
>> 
>>> On Sep 26, 2021, at 5:32 PM, Michael Knill 
>>>  wrote:
>>> 
>>> Hi Group
>>> 
>>> I'm looking to have a large number of firewall entries in Astlinux e.g. 
>>> 300. They would be all the same e.g. I want to open port 5060 from multiple 
>>> sites.
>>> Is there an easier/neater way to do this other than lots of firewall 
>>> entries in the Firewall Tab?
>>> 
>>> Regards
>>> 
>>> Michael Knill
>>> Managing Director
>>> 
>>> D: +61 2 6189 1360
>>> P: +61 2 6140 4656
>>> E: michael.kn...@ipcsolutions.com.au
>>> W: ipcsolutions.com.au


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] L2TP on Astlinux

[Michael Keuter]

> Am 27.09.2021 um 10:37 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> Forgive my lack of VPN knowledge here. V85 of Yealink phones supports L2TP. 
> Could this be supported on Astlinux?
> It looks like it would be easier to set up on the phone than OpenVPN.
>  
> Regards
>  
> Michael Knill

Hi Michael,

I looked at it last year, when V85 was released.
The Yealink L2TP implementation doesn't even support a static PSK. Only 
username/password.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] SIP trunk / pstn provider

[Michael Keuter]

BTW: I also had the "15 minutes" issue with "Deutsche Telekom" SIP-trunks here 
in Germany, and I could solve this by setting "session-timers=refuse" in 
"sip.conf" in those cases (default is "accept").

> Am 23.08.2021 um 14:31 schrieb Dan Ryson :
> 
> I'm sure you've looked into this but when I hear of problems precisely at 15 
> minutes, failed SIP re-invites come to mind.  If so, it might be worth 
> exploring whether a SIP re-invite was sent but not acknowledged for some 
> reason.
> 
> I was glad to hear this question regarding providers.  Since it has never 
> come up, I presumed it was a taboo topic.  As a small-time hobbyist user, my 
> experience is limited in scope but many years have been spent on a quest for 
> an ideal AstLinux fit.  I've had varying degrees of success and many 
> disappointments.
> 
> As AstLinux is so feature-rich, it can largely stand on its own with minimal 
> help from providers.  As a result, I've gravitated to wholesale providers 
> that offer direct RTP from carriers, which typically reduces latency, 
> improves voice quality, and lowers cost.  Although reduced cost wasn't my 
> primary motivator, it does pay for a $5/month Linode AstLinux droplet that's 
> used as a static-IP, SIP-only, proxy server and failover backup.  [Note: With 
> many wholesale providers, you're on your own to handle calls during a PBX 
> outage.]
> 
> Here are a few candidates that you may wish to explore and test.  Use at your 
> own risk!
>   • Voxbeam:  Used seven years for US domestic termination.  I have 
> limited experience with their DIDs.  International termination available.  UK 
> owned and operated so may be particularly useful for calls to western Europe. 
>  E911 is provided only by their retail product "Localphone," which has a bit 
> more polish and may be more akin to Vitelity.  Offers both "direct" RTP and 
> via points of presence in US and Amsterdam.  Listed first because of your 
> specific requirements regarding UK calls.
>   • AnveoDirect:  Used nine years for US domestic DIDs but only recently 
> for US domestic termination.  Some international termination available.  It 
> is possible to select among multiple termination carriers or use their unique 
> least-cost-routing.  Does not support registration for DIDs but I use a 
> static IP.  Registration and E911 is provided only by their retail product 
> "Anveo," which I don't know much about.
>   • BulkVS:  Six months experience but my early experience with DIDs and 
> US domestic termination has been good.  At the very least, it's an intriguing 
> product worthy of review for US domestic-only use.  Offers E911, US domestic 
> termination only.  Direct RTP only.  Supports registration as well as IP 
> authentication.  Listed last only because it doesn't provide UK support.
> One factor to consider when selecting termination carriers within the US is 
> the FCC's recent push for STIR/SHAKEN compliance (more) that adds SIP header 
> signatures to facilitate CallerID authentication.  From a practical 
> standpoint in the short term, STIR/SHAKEN compliance for "little guys" like 
> me requires use of the same termination provider as the DID provider.
> 
> Dan
> 
> On Sun, Aug 22, 2021 at 05:52 PM, David Kerr  wrote:
> Can anyone recommend a good SIP trunk/pstn provider?  I've been using 
> Vitelity for years and had been happy with them, but recently long distance 
> calls (well specifically calls from US to UK) have lost audio about 10-15 
> minutes into the call.  Immediately calling back sometimes works, or 
> sometimes it requires the other person to call me.
> 
> I'm wondering if I should try a different provider.  Any suggestions? 
> 
> Thanks
> David

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Maximum memory usage

[Michael Keuter]

Hi Michael,

it might depend also on how many SIP users per instance are connected. For 50 
or less 1 GB should be fine. For bigger systems I would keep an eye on the free 
RAM.

> Am 23.08.2021 um 00:22 schrieb Michael Knill 
> :
> 
> Thanks Lonnie. 1G it will be
> 
> Regards
> Michael Knill
> 
> On 23/8/21, 8:11 am, "Lonnie Abelbeck"  wrote:
> 
>Hi Michael,
> 
>Without FOP and no LXC containers, 1.0G RAM should be safe and not a 
> worry.  You could go lower, but you would have to monitor things more closely.
> 
>Lonnie
> 
>> On Aug 22, 2021, at 3:45 PM, Michael Knill 
>>  wrote:
>> 
>> Hi Group
>> 
>> I'm using VMware vCloud with one of my providers and have set up a Virtual 
>> Data Centre. I'm looking to set up a few Astlinux systems in this 
>> environment.
>> Although you can overcommit on CPU, you cannot on RAM and as this is fairly 
>> expensive, I'm wanting to go as low as I am comfortable on each Astlinux 
>> system.
>> 
>> Just wondering what the maximum RAM usage you should ever see on an Astlinux 
>> system assuming no FOP is running? I have currently made it 1.5G but I think 
>> I can go lower than this.
>> 
>> Regards
>> 
>> Michael Knill
>> Managing Director
>> 
>> D: +61 2 6189 1360
>> P: +61 2 6140 4656
>> E: michael.kn...@ipcsolutions.com.au
>> W: ipcsolutions.com.au
>> 
>> 
>> Smarter Business Communications

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Windows SIP-Client with BLF and Speeddial buttons

[Michael Keuter]

> Am 03.05.2021 um 10:35 schrieb Michael Keuter :
> 
> 
> 
>> Am 23.04.2021 um 08:52 schrieb nedi :
>> 
>> 
>> Hi Michael, 
>> can be this  CTI with SIP Phone, I use it for one Customer with Astlinux and 
>> snom, but this CTI have  SIP Client to.
>> 
>> https://www.phonesuite.de/hlp/de/client/topics/sip_softphone.htm
>> 
>> Regards Nedi
> 
> Yes, the "Phonesuite CTI Client" can be used for CTI (TAPI) via the Asterisk 
> Manager Interface (AMI) and it has an integrated softphone which works fine 
> with Asterisk. There are 2 versions of the client:
> 
> https://www.phonesuite.de/de/produkte/client/functions.htm
> 
> I'm not sure, if the BLF keys in the client work without the (optional) 
> Phonesuite CTI server. There is a separate license for "Präsenz-Management". 
> To be sure I would call the programmer (he speaks German).
> 
> https://www.phonesuite.de/de/kontakt.htm

If you only need CTI without the softphone you can use TAPI for Asterisk (it is 
also much cheaper):

https://www.phonesuite.de/de/produkte/ast_tsp/phonesuite_tapi_for_asterisk.htm

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Windows SIP-Client with BLF and Speeddial buttons

[Michael Keuter]

> Am 23.04.2021 um 08:52 schrieb nedi :
> 
> 
> Hi Michael, 
> can be this  CTI with SIP Phone, I use it for one Customer with Astlinux and 
> snom, but this CTI have  SIP Client to.
> 
> https://www.phonesuite.de/hlp/de/client/topics/sip_softphone.htm
> 
> Regards Nedi

Yes, the "Phonesuite CTI Client" can be used for CTI (TAPI) via the Asterisk 
Manager Interface (AMI) and it has an integrated softphone which works fine 
with Asterisk. There are 2 versions of the client:

https://www.phonesuite.de/de/produkte/client/functions.htm

I'm not sure, if the BLF keys in the client work without the (optional) 
Phonesuite CTI server. There is a separate license for "Präsenz-Management". To 
be sure I would call the programmer (he speaks German).

https://www.phonesuite.de/de/kontakt.htm

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Windows SIP-Client with BLF and Speeddial buttons

[Michael Keuter]

> Am 23.04.2021 um 08:53 schrieb nedi :
> 
> 
> Hi Michael, 
> can be this  CTI with SIP Phone, I use it for one Customer with Astlinux and 
> snom, but this CTI have  SIP Client to.
> 
> https://www.phonesuite.de/hlp/de/client/topics/sip_softphone.htm
> 
> Regards Nedi

Yes, the "Phonesuite CTI Client" can be used for CTI (TAPI) via the Asterisk 
Manager Interface (AMI) and it has an integrated softphone which works fine 
with Asterisk. There are 2 versions of the client:

https://www.phonesuite.de/de/produkte/client/functions.htm

I'm not sure, if the BLF keys in the client work without the (optional) 
Phonesuite CTI server. There is a separate license for "Präsenz-Management". To 
be sure I would call the programmer (he speaks German).

https://www.phonesuite.de/de/kontakt.htm

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Astlinux Webgui Update

[Michael Keuter]

The WebGUI is updated automatically when you update the AstLinux distro.
The tar.gz files are only needed if your want to use a custom WebGUI (or test 
something).

Sent from a mobile device.

Michael Keuter

> Am 20.04.2021 um 18:50 schrieb nedi :
> 
> Hi, 
> i updated one  PBX to the : astlinux-1.2.8 i586 - Asterisk 1.8.32.3   Runnix 
> Release: runnix-0.4-8057
> 
> For the Webgui update Im not sure should I untar  both tar files or only the 
> update file?  
> Can I untar and copy all file to my www folder as sample  /stat/var/www  
> folder
> 
> my  HTTPSDIR  is  /stat/var/www
> 
> AstLinux 1.0.0 through 1.3.6 GUI Version: 1.8.49 
> Untar's into altweb/ directory: altweb.tar.gz 
> Untar's into current (./) directory: altweb-update.tar.gz 
> 
> Regards Nedi
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] High CPU Load on primary softswitch

[Michael Keuter]

But maybe there are more processes than usual and/or they run longer than usual 
with higher load. 
Look at periodic stuff like Monit (it does checks usually once per minute).

> Am 20.04.2021 um 12:07 schrieb Michael Knill 
> :
> 
> Yes well that's the problem. CPU Utilisation didn't get over 20%
> 
> Regards
> Michael Knill
> 
> On 20/4/21, 7:35 pm, "Michael Keuter"  wrote:
> 
> 
> 
>> Am 20.04.2021 um 09:00 schrieb Michael Knill 
>> :
>> 
>> Hi Group
>> 
>> For some reason my primary softswitch is running at a much higher CPU Load 
>> than normal today. From what I can see there does not appear to be any more 
>> traffic than normal. Also nothing onerous in the logs.
>> 
>> 2 CPU System:
>> 1281-IPCPROD-SSFE1 kd # uptime
>> 16:57:22 up 112 days, 23:44,  load average: 1.80, 1.17, 1.11
>> 
>> Only 26 calls - 1280-IPCPROD-GW1  26/0/0
>> 
>> 
>> 
>> Been fine previously.
>> Just wondering where I should go next to troubleshoot other than rebooting 
>> the system.
>> 
>> Regards
>> Michael Knill
> 
>Hi Michael,
> 
>I would let run "htop" parallel for a while to figure out processes with 
> high CPU load (at least if they are run longer than a few seconds).
> 
>Michael
> 
>http://www.mksolutions.info
> 
> 
> 
> 
> 
>___
>Astlinux-users mailing list
>Astlinux-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] High CPU Load on primary softswitch

[Michael Keuter]

> Am 20.04.2021 um 09:00 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> For some reason my primary softswitch is running at a much higher CPU Load 
> than normal today. From what I can see there does not appear to be any more 
> traffic than normal. Also nothing onerous in the logs.
>  
> 2 CPU System:
> 1281-IPCPROD-SSFE1 kd # uptime
> 16:57:22 up 112 days, 23:44,  load average: 1.80, 1.17, 1.11
>  
> Only 26 calls - 1280-IPCPROD-GW1  26/0/0
>  
> 
>  
> Been fine previously.
> Just wondering where I should go next to troubleshoot other than rebooting 
> the system.
>  
> Regards
> Michael Knill

Hi Michael,

I would let run "htop" parallel for a while to figure out processes with high 
CPU load (at least if they are run longer than a few seconds).

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

> Am 12.04.2021 um 21:32 schrieb nedi :
> 
> Hi Michael, 
> i don't understand you exactly
> 
> I have NTP Server ch.pool.ntp.org
> 
> I have in my sip.conf
> 
> deny = 0.0.0.0/0.0.0.0
> permit = 10.0.0.0/255.255.255.0
> permit = 10.8.0.0/255.255.255.0
> permit = 10.10.11.0/255.255.255.0
> 
> you mean i must put into my sip.conf  under [general] localnet for all 
> network’s  to? Or only localnet  and remove this with deny and permit?
> after nat=yes?
> localnet = 10.0.0.0/255.255.255.0
> localnet = 10.8.0.0/255.255.255.0
> localnet = 10.10.11.0/255.255.255.0

Looks good.

> I don’t understand must configure phone to register to IP adress 10.10.11.?  
> if my pbx is 10.0.0.132?

This is the IP address of your OpenVPN server (possibly 10.10.11.1). The phone 
does not need to know anything else about your network (e.g. other routes).

> all others clinets on mac and android working only snom not.
> 
> regards Nedi
> 
> 
>> Am 12.04.2021 um 13:54 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 12.04.2021 um 13:48 schrieb Michael Keuter :
>>> 
>>> 
>>> 
>>>> Am 12.04.2021 um 13:01 schrieb nedi :
>>>> 
>>>> Hi,
>>>> I have my snom phone connected to the PBX trough OpenVPN, (on the display 
>>>> I see VPN  Active, on PBX VPN Status is User1 connected but I can’t make 
>>>> provisioning and can't  register, what can bee the issues?
>>>> My Macbook or Android phone with SIP Client work trough this OpenVPN with 
>>>> the same VPN 
>>>> settings.
>>>> 
>>>> My lan PBX is 10.0.0.132
>>>> My virtual Network IP for VPN Client is 10.10.11.2
>>>> My LTE Router for testing VPN is 192.168.1.1
>>>> 
>>>> what must be in PUSH section  of my PBX VPN Config?
>>>> 
>>>> I have This
>>>> dhcp-option DNS 10.0.0.1
>>>> route 10.0.0.0 255.255.255.0
>>>> redirect-gateway def1
>>>> 
>>>> 
>>>> OpenVPN Status on PBX 
>>>> 
>>>> 
>>>> User1  194.230.148.217:618410.10.11.2  41824520
>>>> Mon Apr 12 10:47:57 20211618217277
>>>> 
>>>> in sip.conf   general I have this
>>>> 
>>>> alwaysauthreject=yes
>>>> deny = 0.0.0.0/0.0.0.0
>>>> permit = 10.0.0.0/255.255.255.0
>>>> permit = 10.8.0.0/255.255.255.0
>>>> permit = 10.10.11.0/255.255.255.0
>>>> 
>>>> regards Nedi
>>> 
>>> Hi Nedi,
>>> 
>>> important is that the phone registers to Asterisk on the virtual IP 
>>> "10.10.11.x" and not on 10.0.0.132!
>>> 
>>> You also need to add "localnet" in sip.conf for this virtual IP range in 
>>> the NAT section.
>>> For provisioning to work you need to add the virtual IP range to "HTTP & 
>>> HTTPS /phoneprov/ Allowed IP's:" (if not all (*) is allowed) and restart 
>>> AstLinux.
>> 
>> Update: and you need an external time server on the IP-phone and not the 
>> internal one from AstLinux (e.g. "europe.pool.ntp.org")
>> 
>>>>> Am 10.04.2021 um 18:04 schrieb nedi :
>>>>> 
>>>>> Hi , 
>>>>> has anyone working config for the snom phones and astlinux openVPN i 
>>>>> tried and tried , it works with MacBook and Asttlinux OpenVPN, 
>>>>> snom won’t connecting , what can I do to get it working?
>>>>> 
>>>>> I putting ip adress of vpn server into vpn.cnf
>>>>> This is my snom vpn config:
>>>>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>>>>> comp-lzo yes
>>>>> cipher AES-256-CBC
>>>>> key-direction 1
>>>>> client
>>>>> ns-cert-type server
>>>>> nobind
>>>>> persist-key
>>>>> persist-tun
>>>>> dev tun
>>>>> verb 3
>>>>> 
>>>>> -BEGIN CERTIFICATE-
>>>>> …..my cert , key, and tl….
>>>>> 
>>>>> After not working i tried this vpn.cnf  to put cert key  separately as 
>>>>> described by snom wiki  putting all files into openvpn folder and  made 
>>>>> tarbal of them 
>>>>> 
>>>>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>>>>> comp-lzo yes
>>>>> cipher AES-256-CBC
>>>>> key-direction 1
>>>

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

> Am 12.04.2021 um 13:48 schrieb Michael Keuter :
> 
> 
> 
>> Am 12.04.2021 um 13:01 schrieb nedi :
>> 
>> Hi,
>> I have my snom phone connected to the PBX trough OpenVPN, (on the display I 
>> see VPN  Active, on PBX VPN Status is User1 connected but I can’t make 
>> provisioning and can't  register, what can bee the issues?
>> My Macbook or Android phone with SIP Client work trough this OpenVPN with 
>> the same VPN 
>> settings.
>> 
>> My lan PBX is 10.0.0.132
>> My virtual Network IP for VPN Client is 10.10.11.2
>> My LTE Router for testing VPN is 192.168.1.1
>> 
>> what must be in PUSH section  of my PBX VPN Config?
>> 
>> I have This
>> dhcp-option DNS 10.0.0.1
>> route 10.0.0.0 255.255.255.0
>> redirect-gateway def1
>> 
>> 
>> OpenVPN Status on PBX 
>> 
>> 
>> User1194.230.148.217:618410.10.11.2  41824520
>> Mon Apr 12 10:47:57 20211618217277
>> 
>> in sip.conf   general I have this
>> 
>> alwaysauthreject=yes
>> deny = 0.0.0.0/0.0.0.0
>> permit = 10.0.0.0/255.255.255.0
>> permit = 10.8.0.0/255.255.255.0
>> permit = 10.10.11.0/255.255.255.0
>> 
>> regards Nedi
> 
> Hi Nedi,
> 
> important is that the phone registers to Asterisk on the virtual IP 
> "10.10.11.x" and not on 10.0.0.132!
> 
> You also need to add "localnet" in sip.conf for this virtual IP range in the 
> NAT section.
> For provisioning to work you need to add the virtual IP range to "HTTP & 
> HTTPS /phoneprov/ Allowed IP's:" (if not all (*) is allowed) and restart 
> AstLinux.

Update: and you need an external time server on the IP-phone and not the 
internal one from AstLinux (e.g. "europe.pool.ntp.org")

>>> Am 10.04.2021 um 18:04 schrieb nedi :
>>> 
>>> Hi , 
>>> has anyone working config for the snom phones and astlinux openVPN i tried 
>>> and tried , it works with MacBook and Asttlinux OpenVPN, 
>>> snom won’t connecting , what can I do to get it working?
>>> 
>>> I putting ip adress of vpn server into vpn.cnf
>>> This is my snom vpn config:
>>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>>> comp-lzo yes
>>> cipher AES-256-CBC
>>> key-direction 1
>>> client
>>> ns-cert-type server
>>> nobind
>>> persist-key
>>> persist-tun
>>> dev tun
>>> verb 3
>>> 
>>> -BEGIN CERTIFICATE-
>>> …..my cert , key, and tl….
>>> 
>>> After not working i tried this vpn.cnf  to put cert key  separately as 
>>> described by snom wiki  putting all files into openvpn folder and  made 
>>> tarbal of them 
>>> 
>>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>>> comp-lzo yes
>>> cipher AES-256-CBC
>>> key-direction 1
>>> client
>>> ns-cert-type server
>>> nobind
>>> persist-key
>>> persist-tun
>>> dev tun
>>> verb 3
>>> ca /openvpn/ca.crt
>>> cert /openvpn/client.crt
>>> key /openvpn/client.key 
>>> 
>>> Thanks
>>> 
>>> Regards nedi
>>> 
>>> 
>>>> Am 08.04.2021 um 23:22 schrieb Michael Keuter :
>>>> 
>>>> 
>>>> 
>>>>> Am 08.04.2021 um 22:59 schrieb nedi :
>>>>> 
>>>>> Hi MIchael, 
>>>>> I need 2 Phoen connect to pbx from outside 
>>>>> I have this snom Firmware and Patch for VPN flashed as Update,  but this 
>>>>> not working with my Synology. From Synology I can Export  openvpn config 
>>>>> file and use on Macbook OpenVpn app  but there is not user.key included 
>>>>> and user.crt ther are only ca.crt and openvpn.conf  files. 
>>>> 
>>>> The Synology OpenVPN server is very limited from the WebGUI.
>>>> 
>>>>> I think is not wrong with snom, I can make those tar file .. and flash 
>>>>> the snome phone.  After that I tried with Astlinux openvpn and forwarded 
>>>>> port to Astlinux ip  but with Astlinux i can’t Connect from snom, can’t 
>>>>> connect from my smartphone or macbook. There is no connecting to VPN 
>>>>> server. I thinK on astlinux side is something wrong.
>>>>> regards 
>>>>> nedi
>>>> 
>>>> You should definitely get it working first with your Mac, before trying 
>>>> the snom.
>>>> 
>>

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

> Am 12.04.2021 um 13:01 schrieb nedi :
> 
> Hi,
> I have my snom phone connected to the PBX trough OpenVPN, (on the display I 
> see VPN  Active, on PBX VPN Status is User1 connected but I can’t make 
> provisioning and can't  register, what can bee the issues?
> My Macbook or Android phone with SIP Client work trough this OpenVPN with the 
> same VPN 
> settings.
> 
> My lan PBX is 10.0.0.132
> My virtual Network IP for VPN Client is 10.10.11.2
> My LTE Router for testing VPN is 192.168.1.1
> 
> what must be in PUSH section  of my PBX VPN Config?
> 
> I have This
> dhcp-option DNS 10.0.0.1
> route 10.0.0.0 255.255.255.0
> redirect-gateway def1
> 
> 
> OpenVPN Status on PBX 
> 
> 
> User1 194.230.148.217:618410.10.11.2  41824520Mon Apr 
> 12 10:47:57 20211618217277
> 
> in sip.conf   general I have this
> 
> alwaysauthreject=yes
> deny = 0.0.0.0/0.0.0.0
> permit = 10.0.0.0/255.255.255.0
> permit = 10.8.0.0/255.255.255.0
> permit = 10.10.11.0/255.255.255.0
> 
> regards Nedi

Hi Nedi,

important is that the phone registers to Asterisk on the virtual IP 
"10.10.11.x" and not on 10.0.0.132!

You also need to add "localnet" in sip.conf for this virtual IP range in the 
NAT section.
For provisioning to work you need to add the virtual IP range to "HTTP & HTTPS 
/phoneprov/ Allowed IP's:" (if not all (*) is allowed) and restart AstLinux.

> 
>> Am 10.04.2021 um 18:04 schrieb nedi :
>> 
>> Hi , 
>> has anyone working config for the snom phones and astlinux openVPN i tried 
>> and tried , it works with MacBook and Asttlinux OpenVPN, 
>> snom won’t connecting , what can I do to get it working?
>> 
>> I putting ip adress of vpn server into vpn.cnf
>> This is my snom vpn config:
>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>> comp-lzo yes
>> cipher AES-256-CBC
>> key-direction 1
>> client
>> ns-cert-type server
>> nobind
>> persist-key
>> persist-tun
>> dev tun
>> verb 3
>> 
>> -BEGIN CERTIFICATE-
>> …..my cert , key, and tl….
>> 
>> After not working i tried this vpn.cnf  to put cert key  separately as 
>> described by snom wiki  putting all files into openvpn folder and  made 
>> tarbal of them 
>> 
>> remote IP Adress of my PBX OpenVPN Server  1194 udp
>> comp-lzo yes
>> cipher AES-256-CBC
>> key-direction 1
>> client
>> ns-cert-type server
>> nobind
>> persist-key
>> persist-tun
>> dev tun
>> verb 3
>> ca /openvpn/ca.crt
>> cert /openvpn/client.crt
>> key /openvpn/client.key 
>> 
>> Thanks
>> 
>> Regards nedi
>> 
>> 
>>> Am 08.04.2021 um 23:22 schrieb Michael Keuter :
>>> 
>>> 
>>> 
>>>> Am 08.04.2021 um 22:59 schrieb nedi :
>>>> 
>>>> Hi MIchael, 
>>>> I need 2 Phoen connect to pbx from outside 
>>>> I have this snom Firmware and Patch for VPN flashed as Update,  but this 
>>>> not working with my Synology. From Synology I can Export  openvpn config 
>>>> file and use on Macbook OpenVpn app  but there is not user.key included 
>>>> and user.crt ther are only ca.crt and openvpn.conf  files. 
>>> 
>>> The Synology OpenVPN server is very limited from the WebGUI.
>>> 
>>>> I think is not wrong with snom, I can make those tar file .. and flash the 
>>>> snome phone.  After that I tried with Astlinux openvpn and forwarded port 
>>>> to Astlinux ip  but with Astlinux i can’t Connect from snom, can’t connect 
>>>> from my smartphone or macbook. There is no connecting to VPN server. I 
>>>> thinK on astlinux side is something wrong.
>>>> regards 
>>>> nedi
>>> 
>>> You should definitely get it working first with your Mac, before trying the 
>>> snom.
>>> 
>>> https://doc.astlinux.org/userdoc:tt_openvpn_server
>>> 
>>> For the snom use "Auth Method" => "Certificate"
>>> 
>>> When I download the credentials and import the "openvpn-cert-key" *.ovpn 
>>> file into Viscosity or Tunnelblick it works fine on a Mac.
>>> 
>>>> 
>>>>> Am 08.04.2021 um 22:36 schrieb Michael Keuter :
>>>>> 
>>>>> 
>>>>> 
>>>>>> Am 08.04.2021 um 22:24 schrieb nedi :
>>>>>> 
>>>>>> Hi, 
>>>>>> I tried to configure OpenVpn for the Snom phone without  success on 

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

Hi Nedi,

I never used snom phones for OpenVPN (only Yealink) since the stripped VPN from 
their default firmware (years ago).
Have you followed their instructions at:

https://service.snom.com/display/wiki/Configuring+VPN+on+Snom+Deskphones

It looks at they need separate files for the keys and cert. There are example 
configs.
BTW: Depending how old the phones are e.g. "AES-256-CBC" might not be supported 
by the phones hardware.

> Am 10.04.2021 um 18:04 schrieb nedi :
> 
> Hi , 
> has anyone working config for the snom phones and astlinux openVPN i tried 
> and tried , it works with MacBook and Asttlinux OpenVPN, 
> snom won’t connecting , what can I do to get it working?
> 
> I putting ip adress of vpn server into vpn.cnf
> This is my snom vpn config:
> remote IP Adress of my PBX OpenVPN Server  1194 udp
> comp-lzo yes
> cipher AES-256-CBC
> key-direction 1
> client
> ns-cert-type server
> nobind
> persist-key
> persist-tun
> dev tun
> verb 3
> 
> -BEGIN CERTIFICATE-
> …..my cert , key, and tl….
> 
> After not working i tried this vpn.cnf  to put cert key  separately as 
> described by snom wiki  putting all files into openvpn folder and  made 
> tarbal of them 
> 
> remote IP Adress of my PBX OpenVPN Server  1194 udp
> comp-lzo yes
> cipher AES-256-CBC
> key-direction 1
> client
> ns-cert-type server
> nobind
> persist-key
> persist-tun
> dev tun
> verb 3
> ca /openvpn/ca.crt
> cert /openvpn/client.crt
> key /openvpn/client.key 
> 
> Thanks
> 
> Regards nedi
> 
> 
>> Am 08.04.2021 um 23:22 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 08.04.2021 um 22:59 schrieb nedi :
>>> 
>>> Hi MIchael, 
>>> I need 2 Phoen connect to pbx from outside 
>>> I have this snom Firmware and Patch for VPN flashed as Update,  but this 
>>> not working with my Synology. From Synology I can Export  openvpn config 
>>> file and use on Macbook OpenVpn app  but there is not user.key included and 
>>> user.crt ther are only ca.crt and openvpn.conf  files. 
>> 
>> The Synology OpenVPN server is very limited from the WebGUI.
>> 
>>> I think is not wrong with snom, I can make those tar file .. and flash the 
>>> snome phone.  After that I tried with Astlinux openvpn and forwarded port 
>>> to Astlinux ip  but with Astlinux i can’t Connect from snom, can’t connect 
>>> from my smartphone or macbook. There is no connecting to VPN server. I 
>>> thinK on astlinux side is something wrong.
>>> regards 
>>> nedi
>> 
>> You should definitely get it working first with your Mac, before trying the 
>> snom.
>> 
>> https://doc.astlinux.org/userdoc:tt_openvpn_server
>> 
>> For the snom use "Auth Method" => "Certificate"
>> 
>> When I download the credentials and import the "openvpn-cert-key" *.ovpn 
>> file into Viscosity or Tunnelblick it works fine on a Mac.
>> 
>>> 
>>>> Am 08.04.2021 um 22:36 schrieb Michael Keuter :
>>>> 
>>>> 
>>>> 
>>>>> Am 08.04.2021 um 22:24 schrieb nedi :
>>>>> 
>>>>> Hi, 
>>>>> I tried to configure OpenVpn for the Snom phone without  success on 
>>>>> Astlinux box and on Synology. 
>>>>> On Synology I have VPN working but I think  is not compatible to the Snom 
>>>>> phone I need a key file.
>>>>> 
>>>>> 
>>>>> astlinux-1.2.6.1 i586 - Asterisk 1.8.32.3 Runnix Release: runnix-0.4-7671 
>>>>> GUI Version:1.8.40
>>>>> 
>>>>> Can Anyone help me to configure OpenVPN on Astlinux box. I  Have Alix 
>>>>> with only one Lan Port can be this is the issue because VPN won’t work or 
>>>>> iptables firewall make some issues? 
>>>>> I tried with firewall enabled or disabled, I  rebooted, tried import 
>>>>> openvpn.conf on Macbook. I made port-forwarding .  
>>>>> 
>>>>> In Firewal options is all disabled and I put into firewall  Pass 
>>>>> EXT->Local  UDP 0/0 1194
>> 
>> You don't need that, it is done by the openvpn firewall plugin automatically.
>> 
>>>>> 
>>>>> My network  is: 10.0.0.1   DNS:  10.0.0.1  NM:  255.255.255.0ipv4 
>>>>> Gateway: 10.0.0.1
>>>>> 
>>>>> Tunnel Options:
>>>>> Protocol: UDPv4   Port:   1194
>>>>> Log Verbosity: medium   

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

> Am 08.04.2021 um 22:59 schrieb nedi :
> 
> Hi MIchael, 
> I need 2 Phoen connect to pbx from outside 
> I have this snom Firmware and Patch for VPN flashed as Update,  but this not 
> working with my Synology. From Synology I can Export  openvpn config file and 
> use on Macbook OpenVpn app  but there is not user.key included and user.crt 
> ther are only ca.crt and openvpn.conf  files. 

The Synology OpenVPN server is very limited from the WebGUI.

> I think is not wrong with snom, I can make those tar file .. and flash the 
> snome phone.  After that I tried with Astlinux openvpn and forwarded port to 
> Astlinux ip  but with Astlinux i can’t Connect from snom, can’t connect from 
> my smartphone or macbook. There is no connecting to VPN server. I thinK on 
> astlinux side is something wrong.
> regards 
> nedi

You should definitely get it working first with your Mac, before trying the 
snom.

https://doc.astlinux.org/userdoc:tt_openvpn_server

For the snom use "Auth Method" => "Certificate"

When I download the credentials and import the "openvpn-cert-key" *.ovpn file 
into Viscosity or Tunnelblick it works fine on a Mac.

> 
>> Am 08.04.2021 um 22:36 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 08.04.2021 um 22:24 schrieb nedi :
>>> 
>>> Hi, 
>>> I tried to configure OpenVpn for the Snom phone without  success on 
>>> Astlinux box and on Synology. 
>>> On Synology I have VPN working but I think  is not compatible to the Snom 
>>> phone I need a key file.
>>> 
>>> 
>>> astlinux-1.2.6.1 i586 - Asterisk 1.8.32.3   Runnix Release: runnix-0.4-7671 
>>> GUI Version:1.8.40
>>> 
>>> Can Anyone help me to configure OpenVPN on Astlinux box. I  Have Alix with 
>>> only one Lan Port can be this is the issue because VPN won’t work or 
>>> iptables firewall make some issues? 
>>> I tried with firewall enabled or disabled, I  rebooted, tried import 
>>> openvpn.conf on Macbook. I made port-forwarding .  
>>> 
>>> In Firewal options is all disabled and I put into firewall  Pass EXT->Local 
>>>  UDP 0/0 1194

You don't need that, it is done by the openvpn firewall plugin automatically.

>>> 
>>> My network  is: 10.0.0.1   DNS:  10.0.0.1  NM:  255.255.255.0ipv4 
>>> Gateway: 10.0.0.1
>>> 
>>> Tunnel Options:
>>> Protocol: UDPv4 Port:   1194
>>> Log Verbosity: medium   Compression:yes
>>> QoS Passthrough:Yes Legacy Cipher:  
>>> AES-256-CBC
>>> Device:tun0 Auth HMAC:  
>>> Use default
>>> Raw Commands:
>>> 
>>> Authentication:
>>> Auth Method:Certificate 
>>> Extra TLS-Auth: Yes
>>> 
>>> Firewall Options:
>>> External Hosts: 0/0
>>> 
>>> Server Mode:
>>> Server Hostname(s): my dyndns

Is this domain reachable?
Depending on your network/DNS configuration you might fail to test the VPN 
connection from your internal network.

Try testing with your MacBook via a smartphone with Wifi Hotspot and mobile 
data instead.

>>> Network IPv4 NM:10.10.11.0 255.255.255.0
>>> Network IPv6/nn:
>>> 
>>> Topology:   subnet latest , requires openvpn 2.1+ clients
>>> "push": dhcp-option DOMAIN priv.mydomain.ch   <==   can be 
>>> it is wrong what i have here , do I need this?

The domain option is not needed at first, you can still add it later.

>>> dhcp-option DNS 10.10.10.1 
>>> route10.10.10.0 255.255.255.0 
>>> redirect-gateway def1
>>> 
>>> Server Certificate and Key:
>>> 
>>> Private Key Size:   2048
>>> Signature Algorithm:SHA-256
>>> 
>>> I made 2 Usr and downloaded zip files 
>>> 
>>> after import into openvpn app won’r connecting.
>>> 
>>> regards Nedi
>> 
>> I think some years ago snom removed OpenVPN from their default firmware 
>> images. You need a special firmware that enables OpenVPN.
>> 
>> https://service.snom.com/display/wiki/Configuring+VPN+on+Snom+Deskphones#ConfiguringVPNonSnomDeskphones-InstallandconfigureOpenVPNontheSnomphones.1
>> 
>> Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] how to confogure OpenVPN on Astlinux for Snom Phone

[Michael Keuter]

> Am 08.04.2021 um 22:24 schrieb nedi :
> 
> Hi, 
> I tried to configure OpenVpn for the Snom phone without  success on Astlinux 
> box and on Synology. 
> On Synology I have VPN working but I think  is not compatible to the Snom 
> phone I need a key file.
> 
> 
> astlinux-1.2.6.1 i586 - Asterisk 1.8.32.3 Runnix Release: runnix-0.4-7671 
> GUI Version:1.8.40
> 
> Can Anyone help me to configure OpenVPN on Astlinux box. I  Have Alix with 
> only one Lan Port can be this is the issue because VPN won’t work or iptables 
> firewall make some issues? 
> I tried with firewall enabled or disabled, I  rebooted, tried import 
> openvpn.conf on Macbook. I made port-forwarding .  
> 
> In Firewal options is all disabled and I put into firewall  Pass EXT->Local  
> UDP 0/0 1194
> 
> My network  is: 10.0.0.1   DNS:  10.0.0.1  NM:  255.255.255.0ipv4 
> Gateway: 10.0.0.1
> 
> Tunnel Options:
> Protocol: UDPv4   Port:   1194
> Log Verbosity: medium Compression:yes
> QoS Passthrough:Yes   Legacy Cipher:  
> AES-256-CBC
> Device:tun0   Auth HMAC:  
> Use default
> Raw Commands:
> 
> Authentication:
> Auth Method:  Certificate 
> Extra TLS-Auth:   Yes
> 
> Firewall Options:
> External Hosts:   0/0
> 
> Server Mode:
> Server Hostname(s):   my dyndns
> Network IPv4 NM:  10.10.11.0 255.255.255.0
> Network IPv6/nn:  
> 
> Topology: subnet latest , requires openvpn 2.1+ clients
> "push":   dhcp-option DOMAIN priv.mydomain.ch   <==   can be 
> it is wrong what i have here , do I need this?
>   dhcp-option DNS 10.10.10.1 
>   route10.10.10.0 255.255.255.0 
>   redirect-gateway def1
> 
> Server Certificate and Key:
> 
> Private Key Size: 2048
> Signature Algorithm:  SHA-256
> 
> I made 2 Usr and downloaded zip files 
> 
> after import into openvpn app won’r connecting.
> 
> regards Nedi

I think some years ago snom removed OpenVPN from their default firmware images. 
You need a special firmware that enables OpenVPN.

https://service.snom.com/display/wiki/Configuring+VPN+on+Snom+Deskphones#ConfiguringVPNonSnomDeskphones-InstallandconfigureOpenVPNontheSnomphones.1

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Metering all traffic

[Michael Keuter]

> Am 27.01.2021 um 08:34 schrieb Michael Keuter :
> 
> Yes, vnStat looks very promising.
> 
> Sent from a mobile device.
> 
> Michael Keuter

BTW: This looks quite nice:

https://humdi.net/vnstat/cgidemo/

>> Am 27.01.2021 um 05:27 schrieb David Kerr :
>> 
>> 
>> Lonnie,
>>   That is very interesting, I would love to have that as part of astlinux.  
>> We may be missing some dependencies, it says it needs libgd for the graphs.  
>> But I would find the data it collects and shows more useful than what we 
>> have with Netstat/darkstat today.
>> 
>> David.
>> 
>> On Tue, Jan 26, 2021 at 9:56 PM Lonnie Abelbeck  
>> wrote:
>> Hi David,
>> 
>> In upstream Buildroot there is a "vnStat" package.
>> 
>> Seems like exactly what you are after, uses sqlite for storage.
>> 
>> https://humdi.net/vnstat/
>> 
>> Might be a good addition to AstLinux.
>> 
>> Lonnie
>> 
>> 
>> 
>> > On Jan 26, 2021, at 4:26 PM, David Kerr  wrote:
>> > 
>> > Here is what I have done so far. In the network init script I have added 
>> > the following...
>> > 
>> > echo $(date +%s.%3N; cat /sys/class/net/$EXTIF/statistics/rx_bytes; cat 
>> > /sys/class/net/$EXTIF/statistics/tx_bytes) "stop" >> 
>> > /var/log/$EXTIF-meter.txt
>> > 
>> > right before the ip link set dev $EXTIF down.  I did the same for EXT2IF 
>> > and a "start" log immediately after every place the EXTIF/EXT2IF is 
>> > brought up.
>> > 
>> > Then I added the following to crontabs...
>> > 
>> > 59 * * * * echo $(date +%s.%3N; cat 
>> > /sys/class/net/eth0/statistics/rx_bytes; cat 
>> > /sys/class/net/eth0/statistics/tx_bytes) "cron" >> /var/log/eth0-meter.txt
>> > 59 * * * * echo $(date +%s.%3N; cat 
>> > /sys/class/net/eth2/statistics/rx_bytes; cat 
>> > /sys/class/net/eth2/statistics/tx_bytes) "cron" >> /var/log/eth2-meter.txt
>> > 
>> > Is there a way to get $EXTxx variables in crontabs?
>> > 
>> > After rebooting and waiting for the big hand to point at the number 12, 
>> > here is my eth0 log...
>> > 
>> > pbx kd # cat log/eth0-meter.txt
>> > 1611696594.726 41916587023 8211080131 stop
>> > 1611696625.644 0 0 start
>> > 1611698340.940 832008278 51755144 cron
>> > 
>> > So now I think I can just gather all the data and I should be able to 
>> > create a script to read and sum things up... last hour, last day, last 
>> > week, last month, whatever.  Could probably import to excel for fancy 
>> > graphs.  But patience required, will have to wait a while before I have 
>> > enough data to play with.
>> > 
>> > I suppose I could do this for INTIF's as well.
>> > 
>> > David
>> > 
>> > 
>> > On Tue, Jan 26, 2021 at 12:42 PM Lonnie Abelbeck 
>> >  wrote:
>> > David,
>> > 
>> > If you are happy with Netstat/darkstat there is a way to save and reload 
>> > that data to persistent storage.  Years ago this caused issues, but may 
>> > work today, and with a rc.conf variable option to enable it.
>> > 
>> > Without looking, basically the darkstat.init needs to be tweaked.
>> > 
>> > Lonnie
>> > 
>> > 
>> > 
>> > 
>> > > On Jan 26, 2021, at 10:45 AM, David Kerr  wrote:
>> > > 
>> > > ifconfig/ip -s probably reports closest to what the ISP is metering.
>> > > And I assume that is what Netstat/darkstat is measuring.  But the data
>> > > on that tab is reset every reboot. I assume the interface RX/TX bytes
>> > > are reset to zero on boot (and/or on taking the interface down/up).  I
>> > > would need to make sure to capture the values on shutdown... and maybe
>> > > at regular intervals.  Any suggestions on how to capture final values
>> > > as an interface is shutdown?
>> > > 
>> > > Measuring in iptables might provide more granularity, but may not map
>> > > as closely to the raw data comcast measure.
>> > > 
>> > > David
>> > > 
>> > > On Tue, Jan 26, 2021 at 10:57 AM Lonnie Abelbeck
>> > >  wrote:
>> > >> 
>> > >> 
>> > >> 
>> > >>> On Jan 26, 2021, at 8:29 AM, Michael Keuter  
>> > >>> wrote:
>> > >>> 
>> > >&g

Re: [Astlinux-users] Metering all traffic

[Michael Keuter]

Yes, vnStat looks very promising.

Sent from a mobile device.

Michael Keuter

> Am 27.01.2021 um 05:27 schrieb David Kerr :
> 
> 
> Lonnie,
>   That is very interesting, I would love to have that as part of astlinux.  
> We may be missing some dependencies, it says it needs libgd for the graphs.  
> But I would find the data it collects and shows more useful than what we have 
> with Netstat/darkstat today.
> 
> David.
> 
>> On Tue, Jan 26, 2021 at 9:56 PM Lonnie Abelbeck  
>> wrote:
>> Hi David,
>> 
>> In upstream Buildroot there is a "vnStat" package.
>> 
>> Seems like exactly what you are after, uses sqlite for storage.
>> 
>> https://humdi.net/vnstat/
>> 
>> Might be a good addition to AstLinux.
>> 
>> Lonnie
>> 
>> 
>> 
>> > On Jan 26, 2021, at 4:26 PM, David Kerr  wrote:
>> > 
>> > Here is what I have done so far. In the network init script I have added 
>> > the following...
>> > 
>> > echo $(date +%s.%3N; cat /sys/class/net/$EXTIF/statistics/rx_bytes; cat 
>> > /sys/class/net/$EXTIF/statistics/tx_bytes) "stop" >> 
>> > /var/log/$EXTIF-meter.txt
>> > 
>> > right before the ip link set dev $EXTIF down.  I did the same for EXT2IF 
>> > and a "start" log immediately after every place the EXTIF/EXT2IF is 
>> > brought up.
>> > 
>> > Then I added the following to crontabs...
>> > 
>> > 59 * * * * echo $(date +%s.%3N; cat 
>> > /sys/class/net/eth0/statistics/rx_bytes; cat 
>> > /sys/class/net/eth0/statistics/tx_bytes) "cron" >> /var/log/eth0-meter.txt
>> > 59 * * * * echo $(date +%s.%3N; cat 
>> > /sys/class/net/eth2/statistics/rx_bytes; cat 
>> > /sys/class/net/eth2/statistics/tx_bytes) "cron" >> /var/log/eth2-meter.txt
>> > 
>> > Is there a way to get $EXTxx variables in crontabs?
>> > 
>> > After rebooting and waiting for the big hand to point at the number 12, 
>> > here is my eth0 log...
>> > 
>> > pbx kd # cat log/eth0-meter.txt
>> > 1611696594.726 41916587023 8211080131 stop
>> > 1611696625.644 0 0 start
>> > 1611698340.940 832008278 51755144 cron
>> > 
>> > So now I think I can just gather all the data and I should be able to 
>> > create a script to read and sum things up... last hour, last day, last 
>> > week, last month, whatever.  Could probably import to excel for fancy 
>> > graphs.  But patience required, will have to wait a while before I have 
>> > enough data to play with.
>> > 
>> > I suppose I could do this for INTIF's as well.
>> > 
>> > David
>> > 
>> > 
>> > On Tue, Jan 26, 2021 at 12:42 PM Lonnie Abelbeck 
>> >  wrote:
>> > David,
>> > 
>> > If you are happy with Netstat/darkstat there is a way to save and reload 
>> > that data to persistent storage.  Years ago this caused issues, but may 
>> > work today, and with a rc.conf variable option to enable it.
>> > 
>> > Without looking, basically the darkstat.init needs to be tweaked.
>> > 
>> > Lonnie
>> > 
>> > 
>> > 
>> > 
>> > > On Jan 26, 2021, at 10:45 AM, David Kerr  wrote:
>> > > 
>> > > ifconfig/ip -s probably reports closest to what the ISP is metering.
>> > > And I assume that is what Netstat/darkstat is measuring.  But the data
>> > > on that tab is reset every reboot. I assume the interface RX/TX bytes
>> > > are reset to zero on boot (and/or on taking the interface down/up).  I
>> > > would need to make sure to capture the values on shutdown... and maybe
>> > > at regular intervals.  Any suggestions on how to capture final values
>> > > as an interface is shutdown?
>> > > 
>> > > Measuring in iptables might provide more granularity, but may not map
>> > > as closely to the raw data comcast measure.
>> > > 
>> > > David
>> > > 
>> > > On Tue, Jan 26, 2021 at 10:57 AM Lonnie Abelbeck
>> > >  wrote:
>> > >> 
>> > >> 
>> > >> 
>> > >>> On Jan 26, 2021, at 8:29 AM, Michael Keuter  
>> > >>> wrote:
>> > >>> 
>> > >>> 
>> > >>> 
>> > >>>> Am 26.01.2021 um 15:08 schrieb David Kerr :
>> > >>>> 
>> > >>>>

Re: [Astlinux-users] Metering all traffic

[Michael Keuter]

> Am 26.01.2021 um 15:08 schrieb David Kerr :
> 
> As some of you may be aware, Comcast / Xfinity are starting to impose
> monthly data caps on internet usage.  Where I live it is 1.2TB a
> month.  So I just received the dreaded "You have used 75% of your
> allowance" email.  Fortunately only 5 days from the end of the month,
> but looking back there are months that I have exceeded the cap.
> 
> Can I do anything in Astlinux to meter usage myself?  I would want to
> monitor raw traffic in and out on eth0, the totals would need to
> survive reboot, I would want to reset on the first of each month and
> maintain a history.  For extra credit... be able to identify high
> users on my internal network(s).
> 
> Any ideas?  Have any other gateways (like OpenWRT) tackled this?
> 
> Thanks
> David

Hi David,

most applications that I know use RRDtool (a Round-Robin-database to store 
data/measurements) as its basis, like Munin, Cacti, MRTG etc.

https://en.wikipedia.org/wiki/RRDtool

It is also available in BR2.
Years ago I had hacked myself a Munin node (client) for AstLinux, so data could 
fetched from a Munin server on Debian in my network from my AstLinux boxes. But 
it does not work anymore or I forgot about it. But it created nice progress 
graphicss for some parameters (CPU load, traffic, Asterisk calls, etc.).

Now since we're using SSDs instead CF cards it would be nice to have such 
application.
My 2 cts.  

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Second WAN Connection

[Michael Keuter]

> Am 24.11.2020 um 06:34 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> I'm wanting two external interfaces for my softswitch gateway with one 
> connecting to the internet and the other connecting to a direct Megaport 
> connection to my SIP provider.
> I'm assuming that I can set up the following in user.conf:
> EXT2IF="eth2"
> EXT2IP="10.1.1.2"
> EXT2NM="255.255.255.0"
> EXT2GW="10.1.1.1" 
> EXT2ROUTES=""

You can do this in the WebGUI:
Failover Interface eth2
The rest in the Failover tab, but disable failover.
 
> 
> I also will have Failover disabled on the Failover tab.
>  
> Is this workable? I'm assuming I will need common firewall entries for both 
> interfaces?

Yes.

> I have always only done this in a failover scenario with both interfaces 
> connected to the internet!
>  
> Thanks all.
>  
> Regards
> Michael Knill

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Secondary IP Address

[Michael Keuter]

> Am 13.10.2020 um 06:16 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> Is there a way to add a secondary LAN IP Address with Astlinux?
> I cant see an INTIP_ALIAS variable!
>  
> Regards
> Michael Knill

https://www.cyberciti.biz/faq/linux-creating-or-adding-new-network-alias-to-a-network-card-nic/

You have to add this to rc.elocal to make it persistent.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

I didn‘t know that page, thanks. I always looked only at their homepage.
Do you have successfully installed firmware from that page?

Sent from a mobile device.

Michael Keuter

> Am 17.09.2020 um 17:39 schrieb Daryl Richards via Astlinux-users 
> :
> 
> Why do you thing 4.0.7 is the latest?
> 
> https://pcengines.github.io
> 
>> On 2020-09-17 10:39 a.m., Michael Keuter wrote:
>> BTW: 4.0.7 is the latest BIOS for the APU2
>> https://www.pcengines.ch/apu2e4.htm
>>>> Am 17.09.2020 um 16:33 schrieb Michael Keuter :
>>> 
>>> I have 2 older ones in the field, the APU4 is mine (quite new), all without 
>>> issues:
>>> 
>>> DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
>>> DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
>>> DMI: PC Engines apu4/apu4, BIOS v4.11.0.2 12/30/2019e
>>> 
>>>> Am 17.09.2020 um 14:53 schrieb Lonnie Abelbeck :
>>>> 
>>>> My no-issue APU2's BIOS is somewhat older :-)
>>>> 
>>>> # dmesg | grep DMI:
>>>> [0.00] DMI: PC Engines apu2/apu2, BIOS 88a4f96 03/07/2016
>>>> 
>>>> Lonnie
>>>> 
>>>> 
>>>> 
>>>>> On Sep 17, 2020, at 7:20 AM, Daryl Richards via Astlinux-users 
>>>>>  wrote:
>>>>> 
>>>>> I don't run PPPoE, just DHCP. I do have a few systems at client 
>>>>> locations, also running APU2 and Astlinux 1.3.10, and either DHCP or 
>>>>> static IP. None of them are having the problem. One used to run PPPoE and 
>>>>> didn't crash then either but has since moved to static so can't test 
>>>>> things there.
>>>>> 
>>>>> I do like the question about BIOS though, as I do remember updating the 
>>>>> BIOS on this system recently. I think I may have done this in response to 
>>>>> the crashing but perhaps I'm mixing up the cause and effect on that.. My 
>>>>> system here:
>>>>> 
>>>>> DMI: PC Engines apu2/apu2, BIOS v4.12.0.3 07/30/2020
>>>>> 
>>>>> On 2020-09-16 8:29 p.m., Michael Knill wrote:
>>>>>> That's correct.
>>>>>> Regards
>>>>>> Michael Knill
>>>>>> On 17/9/20, 9:34 am, "Lonnie Abelbeck"  
>>>>>> wrote:
>>>>>>> I have had EXACTLY the same problem on a Qotom box.
>>>>>>   But no UPS, correct ?
>>>>>>   Lonnie
>>>>>>> On Sep 16, 2020, at 5:54 PM, Michael Knill 
>>>>>>>  wrote:
>>>>>>> 
>>>>>>> Hi sorry all but this is not an APU problem. I have had EXACTLY the 
>>>>>>> same problem on a Qotom box.
>>>>>>> 
>>>>>>> At all three sites the common denominators are:
>>>>>>> -- Astlinux 1.3.7.1
>>>>>>> -- PPPoE
>>>>>>> 
>>>>>>> My next tests will be (in this order):
>>>>>>> 1) Install another system onsite connected to the same environment e.g. 
>>>>>>> power to see if it happens to both systems
>>>>>>> 2) Put a firewall in front of the Astlinux box to do PPPoE
>>>>>>> 3) OS upgrade
>>>>>>> 
>>>>>>> Regards
>>>>>>> Michael Knill
>>>>>>> 
>>>>>>> On 17/9/20, 8:12 am, "Lonnie Abelbeck"  
>>>>>>> wrote:
>>>>>>> 
>>>>>>>  Yes, this is very strange.
>>>>>>> 
>>>>>>>  I have had an APU2 for years, never locked-up once ... and it is 
>>>>>>> currently running a UniFi controller in a Linux container.
>>>>>>> 
>>>>>>>  I also ran my APU2 without a UPS for a year or two, though it is using 
>>>>>>> one now.  But we have good quality power where I live outside of 
>>>>>>> thunder-storms.
>>>>>>> 
>>>>>>>  Possibly the Coreboot BIOS version also needs to be tracked to find 
>>>>>>> some common denominator.  I have never updated my APU2 coreboot BIOS.
>>>>>>> 
>>>>>>>  Also my APU2 sits inside my network, without a public interface.
>>>>>>> 
>>>>>>>  A common denominator list for APU2 lock-up reports:
>>>>>>> 
>>>>>>>  -

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

BTW: 4.0.7 is the latest BIOS for the APU2

https://www.pcengines.ch/apu2e4.htm

> Am 17.09.2020 um 16:33 schrieb Michael Keuter :
> 
> I have 2 older ones in the field, the APU4 is mine (quite new), all without 
> issues:
> 
> DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
> DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
> DMI: PC Engines apu4/apu4, BIOS v4.11.0.2 12/30/2019e
> 
>> Am 17.09.2020 um 14:53 schrieb Lonnie Abelbeck :
>> 
>> My no-issue APU2's BIOS is somewhat older :-)
>> 
>> # dmesg | grep DMI:
>> [0.00] DMI: PC Engines apu2/apu2, BIOS 88a4f96 03/07/2016
>> 
>> Lonnie
>> 
>> 
>> 
>>> On Sep 17, 2020, at 7:20 AM, Daryl Richards via Astlinux-users 
>>>  wrote:
>>> 
>>> I don't run PPPoE, just DHCP. I do have a few systems at client locations, 
>>> also running APU2 and Astlinux 1.3.10, and either DHCP or static IP. None 
>>> of them are having the problem. One used to run PPPoE and didn't crash then 
>>> either but has since moved to static so can't test things there.
>>> 
>>> I do like the question about BIOS though, as I do remember updating the 
>>> BIOS on this system recently. I think I may have done this in response to 
>>> the crashing but perhaps I'm mixing up the cause and effect on that.. My 
>>> system here:
>>> 
>>> DMI: PC Engines apu2/apu2, BIOS v4.12.0.3 07/30/2020
>>> 
>>> On 2020-09-16 8:29 p.m., Michael Knill wrote:
>>>> That's correct.
>>>> Regards
>>>> Michael Knill
>>>> On 17/9/20, 9:34 am, "Lonnie Abelbeck"  wrote:
>>>>> I have had EXACTLY the same problem on a Qotom box.
>>>>   But no UPS, correct ?
>>>>   Lonnie
>>>>> On Sep 16, 2020, at 5:54 PM, Michael Knill 
>>>>>  wrote:
>>>>> 
>>>>> Hi sorry all but this is not an APU problem. I have had EXACTLY the same 
>>>>> problem on a Qotom box.
>>>>> 
>>>>> At all three sites the common denominators are:
>>>>> -- Astlinux 1.3.7.1
>>>>> -- PPPoE
>>>>> 
>>>>> My next tests will be (in this order):
>>>>> 1) Install another system onsite connected to the same environment e.g. 
>>>>> power to see if it happens to both systems
>>>>> 2) Put a firewall in front of the Astlinux box to do PPPoE
>>>>> 3) OS upgrade
>>>>> 
>>>>> Regards
>>>>> Michael Knill
>>>>> 
>>>>> On 17/9/20, 8:12 am, "Lonnie Abelbeck"  wrote:
>>>>> 
>>>>>  Yes, this is very strange.
>>>>> 
>>>>>  I have had an APU2 for years, never locked-up once ... and it is 
>>>>> currently running a UniFi controller in a Linux container.
>>>>> 
>>>>>  I also ran my APU2 without a UPS for a year or two, though it is using 
>>>>> one now.  But we have good quality power where I live outside of 
>>>>> thunder-storms.
>>>>> 
>>>>>  Possibly the Coreboot BIOS version also needs to be tracked to find some 
>>>>> common denominator.  I have never updated my APU2 coreboot BIOS.
>>>>> 
>>>>>  Also my APU2 sits inside my network, without a public interface.
>>>>> 
>>>>>  A common denominator list for APU2 lock-up reports:
>>>>> 
>>>>>  -- AstLinux version:
>>>>>  -- Asterisk: 13se, 13 or 16
>>>>>  -- RAM: 2GB or 4GB
>>>>>  -- Coreboot BIOS version:
>>>>>  -- Public interface yes/no, if 'yes' public SSH, HTTPS, etc. access 
>>>>> yes/no
>>>>>  -- PPPoE: yes/no
>>>>>  -- UPS Power: yes/no
>>>>> 
>>>>> 
>>>>>  Lonnie
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>>> On Sep 16, 2020, at 4:09 PM, Michael Knill 
>>>>>>  wrote:
>>>>>> 
>>>>>> I do have Zabbix running on these boxes which checks memory and will 
>>>>>> notify me if its getting too low and this has not happened. This is what 
>>>>>> alerted me to the Zabbix client memory leak.
>>>>>> Also the lockups are very sporadic. Can happen after a couple of weeks 
>>>>>> or the next day.
>>>>>> 
>>>>>> Regards
>>>>>> Michael Knill
>>

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

I have 2 older ones in the field, the APU4 is mine (quite new), all without 
issues:

DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
DMI: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017
DMI: PC Engines apu4/apu4, BIOS v4.11.0.2 12/30/2019e

> Am 17.09.2020 um 14:53 schrieb Lonnie Abelbeck :
> 
> My no-issue APU2's BIOS is somewhat older :-)
> 
> # dmesg | grep DMI:
> [0.00] DMI: PC Engines apu2/apu2, BIOS 88a4f96 03/07/2016
> 
> Lonnie
> 
> 
> 
>> On Sep 17, 2020, at 7:20 AM, Daryl Richards via Astlinux-users 
>>  wrote:
>> 
>> I don't run PPPoE, just DHCP. I do have a few systems at client locations, 
>> also running APU2 and Astlinux 1.3.10, and either DHCP or static IP. None of 
>> them are having the problem. One used to run PPPoE and didn't crash then 
>> either but has since moved to static so can't test things there.
>> 
>> I do like the question about BIOS though, as I do remember updating the BIOS 
>> on this system recently. I think I may have done this in response to the 
>> crashing but perhaps I'm mixing up the cause and effect on that.. My system 
>> here:
>> 
>> DMI: PC Engines apu2/apu2, BIOS v4.12.0.3 07/30/2020
>> 
>> On 2020-09-16 8:29 p.m., Michael Knill wrote:
>>> That's correct.
>>> Regards
>>> Michael Knill
>>> On 17/9/20, 9:34 am, "Lonnie Abelbeck"  wrote:
>>>> I have had EXACTLY the same problem on a Qotom box.
>>>But no UPS, correct ?
>>>Lonnie
>>>> On Sep 16, 2020, at 5:54 PM, Michael Knill 
>>>>  wrote:
>>>> 
>>>> Hi sorry all but this is not an APU problem. I have had EXACTLY the same 
>>>> problem on a Qotom box.
>>>> 
>>>> At all three sites the common denominators are:
>>>> -- Astlinux 1.3.7.1
>>>> -- PPPoE
>>>> 
>>>> My next tests will be (in this order):
>>>> 1) Install another system onsite connected to the same environment e.g. 
>>>> power to see if it happens to both systems
>>>> 2) Put a firewall in front of the Astlinux box to do PPPoE
>>>> 3) OS upgrade
>>>> 
>>>> Regards
>>>> Michael Knill
>>>> 
>>>> On 17/9/20, 8:12 am, "Lonnie Abelbeck"  wrote:
>>>> 
>>>>   Yes, this is very strange.
>>>> 
>>>>   I have had an APU2 for years, never locked-up once ... and it is 
>>>> currently running a UniFi controller in a Linux container.
>>>> 
>>>>   I also ran my APU2 without a UPS for a year or two, though it is using 
>>>> one now.  But we have good quality power where I live outside of 
>>>> thunder-storms.
>>>> 
>>>>   Possibly the Coreboot BIOS version also needs to be tracked to find some 
>>>> common denominator.  I have never updated my APU2 coreboot BIOS.
>>>> 
>>>>   Also my APU2 sits inside my network, without a public interface.
>>>> 
>>>>   A common denominator list for APU2 lock-up reports:
>>>> 
>>>>   -- AstLinux version:
>>>>   -- Asterisk: 13se, 13 or 16
>>>>   -- RAM: 2GB or 4GB
>>>>   -- Coreboot BIOS version:
>>>>   -- Public interface yes/no, if 'yes' public SSH, HTTPS, etc. access 
>>>> yes/no
>>>>   -- PPPoE: yes/no
>>>>   -- UPS Power: yes/no
>>>> 
>>>> 
>>>>   Lonnie
>>>> 
>>>> 
>>>> 
>>>> 
>>>>> On Sep 16, 2020, at 4:09 PM, Michael Knill 
>>>>>  wrote:
>>>>> 
>>>>> I do have Zabbix running on these boxes which checks memory and will 
>>>>> notify me if its getting too low and this has not happened. This is what 
>>>>> alerted me to the Zabbix client memory leak.
>>>>> Also the lockups are very sporadic. Can happen after a couple of weeks or 
>>>>> the next day.
>>>>> 
>>>>> Regards
>>>>> Michael Knill
>>>>> 
>>>>> On 16/9/20, 11:21 pm, "Michael Keuter"  wrote:
>>>>> 
>>>>>  Hi all,
>>>>> 
>>>>>  it might be completely unrelated, but it reminds me at an issue that 
>>>>> only occured many years ago only on 32bit Geode boxes (Alix/net5501) 
>>>>> after we integrated Monit into AstLinux.
>>>>>  On these boxes all RAM was eaten up slowly and then these boxes locked 
>>>>> up after a few days. 

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

Only an idea.

> Am 17.09.2020 um 10:12 schrieb Michael Knill 
> :
> 
> It runs fine on the other 50 boxes. Why would it be different?
> 
> Regards
> Michael Knill
> 
> On 17/9/20, 6:07 pm, "Michael Keuter"  wrote:
> 
>I've never used Zabbix. 
>Maybe Zabbix is the issue … (it has some similarities to Monit in a way)
>Try to disable it for a while on the problematic boxes …
> 
>> Am 16.09.2020 um 23:09 schrieb Michael Knill 
>> :
>> 
>> I do have Zabbix running on these boxes which checks memory and will notify 
>> me if its getting too low and this has not happened. This is what alerted me 
>> to the Zabbix client memory leak.
>> Also the lockups are very sporadic. Can happen after a couple of weeks or 
>> the next day.
>> 
>> Regards
>> Michael Knill
>> 
>> On 16/9/20, 11:21 pm, "Michael Keuter"  wrote:
>> 
>>  Hi all,
>> 
>>  it might be completely unrelated, but it reminds me at an issue that only 
>> occured many years ago only on 32bit Geode boxes (Alix/net5501) after we 
>> integrated Monit into AstLinux.
>>  On these boxes all RAM was eaten up slowly and then these boxes locked up 
>> after a few days. That's why we didn't installed Monit for these build types.
>> 
>>  To figure it out I then created a cronjob that logged uptime, RAM and used 
>> Asterisk channels into a logfile every 10 minutes.
>> 
>>> Am 16.09.2020 um 15:07 schrieb Lonnie Abelbeck :
>>> 
>>> Hi Daryl,
>>> 
>>> Has the AstLinux version changed in the last couple weeks ?
>>> 
>>> What version are you running ?
>>> 
>>> Lonnie
>>> 
>>> 
>>> 
>>>> On Sep 16, 2020, at 8:01 AM, Daryl Richards via Astlinux-users 
>>>>  wrote:
>>>> 
>>>> This is good timing (in a bad way..) Time for a "Me too!"
>>>> 
>>>> Recently, over the last couple weeks my APU2 has started locking up 
>>>> exactly the same way, just hard lock. I have a serial console cable hooked 
>>>> up and there are no messages printed out before, there's just nothing. 
>>>> When the problem first started I didn't have a console cable hooked up but 
>>>> I put it in to see if any messages were appearing..
>>>> 
>>>> My system is on a UPS. Nothing else in the rack glitches.
>>>> 
>>>> On 2020-09-15 8:36 p.m., Michael Knill wrote:
>>>>> Thanks Chris
>>>>> Yep I have plenty out there too with no issues. It also happened on a 
>>>>> Qotom box so not hardware related.
>>>>> Regards
>>>>> Michael Knill
>>>>> *From: *AstLinux List 
>>>>> *Reply to: *AstLinux List 
>>>>> *Date: *Wednesday, 16 September 2020 at 8:53 am
>>>>> *To: *AstLinux List 
>>>>> *Cc: *The Cadillac Kid 
>>>>> *Subject: *Re: [Astlinux-users] APU2 keeps locking up
>>>>> for whatever its worth..  from a hardware standpoint I have probably 200 
>>>>> APU2s in the field and dont have then just freeze like that..  granted 
>>>>> they arent running astlinux, but just mentioning it from a power / 
>>>>> hardware point of view.
>>>>> mine are all running Centos 6.X and asterisk 11 or 13
>>>>> I have had a few chan_sip freezes.. (we wrote a watchdog to catch those 
>>>>> and restart asterisk).. we get maybe 1 every 3 or 4 months .. (not each 
>>>>> site but collectively)
>>>>> I have kenrel panicked an APU before by upping and downing the ethernet 
>>>>> port too much (or so it seems)..  it doesnt happen very often and is hard 
>>>>> to repeat in the lab.  but have done it esp on an install..  where one is 
>>>>> prone to plug and unplug cables multiple times in succession for dressing 
>>>>> in..
>>>>> I have had a few power bricks go bad.. in all cases there was just no 
>>>>> output..  no lights on the board at all. its not been that many 3 or 4..  
>>>>> considering we have sites in some pretty lightning-prone areas i dont 
>>>>> feel too bad about a few power bricks.
>>>>> we run UPSs on all of our sites
>>>>> we run the US power supply that is sold on the PC-Engines store.
>>>>> On Tuesday, September 15, 2020, 6:04:44 PM EDT, Michael Knill 
>>>>>  wrote:
>>>>> Yep I would say environmental for 1, maybe 2 sites but for 3

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

I've never used Zabbix. 
Maybe Zabbix is the issue … (it has some similarities to Monit in a way)
Try to disable it for a while on the problematic boxes …

> Am 16.09.2020 um 23:09 schrieb Michael Knill 
> :
> 
> I do have Zabbix running on these boxes which checks memory and will notify 
> me if its getting too low and this has not happened. This is what alerted me 
> to the Zabbix client memory leak.
> Also the lockups are very sporadic. Can happen after a couple of weeks or the 
> next day.
> 
> Regards
> Michael Knill
> 
> On 16/9/20, 11:21 pm, "Michael Keuter"  wrote:
> 
>   Hi all,
> 
>   it might be completely unrelated, but it reminds me at an issue that only 
> occured many years ago only on 32bit Geode boxes (Alix/net5501) after we 
> integrated Monit into AstLinux.
>   On these boxes all RAM was eaten up slowly and then these boxes locked up 
> after a few days. That's why we didn't installed Monit for these build types.
> 
>   To figure it out I then created a cronjob that logged uptime, RAM and used 
> Asterisk channels into a logfile every 10 minutes.
> 
>> Am 16.09.2020 um 15:07 schrieb Lonnie Abelbeck :
>> 
>> Hi Daryl,
>> 
>> Has the AstLinux version changed in the last couple weeks ?
>> 
>> What version are you running ?
>> 
>> Lonnie
>> 
>> 
>> 
>>> On Sep 16, 2020, at 8:01 AM, Daryl Richards via Astlinux-users 
>>>  wrote:
>>> 
>>> This is good timing (in a bad way..) Time for a "Me too!"
>>> 
>>> Recently, over the last couple weeks my APU2 has started locking up exactly 
>>> the same way, just hard lock. I have a serial console cable hooked up and 
>>> there are no messages printed out before, there's just nothing. When the 
>>> problem first started I didn't have a console cable hooked up but I put it 
>>> in to see if any messages were appearing..
>>> 
>>> My system is on a UPS. Nothing else in the rack glitches.
>>> 
>>> On 2020-09-15 8:36 p.m., Michael Knill wrote:
>>>> Thanks Chris
>>>> Yep I have plenty out there too with no issues. It also happened on a 
>>>> Qotom box so not hardware related.
>>>> Regards
>>>> Michael Knill
>>>> *From: *AstLinux List 
>>>> *Reply to: *AstLinux List 
>>>> *Date: *Wednesday, 16 September 2020 at 8:53 am
>>>> *To: *AstLinux List 
>>>> *Cc: *The Cadillac Kid 
>>>> *Subject: *Re: [Astlinux-users] APU2 keeps locking up
>>>> for whatever its worth..  from a hardware standpoint I have probably 200 
>>>> APU2s in the field and dont have then just freeze like that..  granted 
>>>> they arent running astlinux, but just mentioning it from a power / 
>>>> hardware point of view.
>>>> mine are all running Centos 6.X and asterisk 11 or 13
>>>> I have had a few chan_sip freezes.. (we wrote a watchdog to catch those 
>>>> and restart asterisk).. we get maybe 1 every 3 or 4 months .. (not each 
>>>> site but collectively)
>>>> I have kenrel panicked an APU before by upping and downing the ethernet 
>>>> port too much (or so it seems)..  it doesnt happen very often and is hard 
>>>> to repeat in the lab.  but have done it esp on an install..  where one is 
>>>> prone to plug and unplug cables multiple times in succession for dressing 
>>>> in..
>>>> I have had a few power bricks go bad.. in all cases there was just no 
>>>> output..  no lights on the board at all. its not been that many 3 or 4..  
>>>> considering we have sites in some pretty lightning-prone areas i dont feel 
>>>> too bad about a few power bricks.
>>>> we run UPSs on all of our sites
>>>> we run the US power supply that is sold on the PC-Engines store.
>>>> On Tuesday, September 15, 2020, 6:04:44 PM EDT, Michael Knill 
>>>>  wrote:
>>>> Yep I would say environmental for 1, maybe 2 sites but for 3 sites and all 
>>>> only recently I cant see how it could be.
>>>> No serial or long ethernet cables are connected.
>>>> Yes completely different power adaptors when I changed from APU2 -> Qotom.
>>>> Yes they are all DSL however ALL different modems and service types.
>>>> I'm thinking I will upgrade all Runnix versions at these sites and if 
>>>> still happening upgrade to 1.3.10 and if still happening then I have no 
>>>> idea what to do.
>>>> Regards
>>>> Michael Knill
>>>> On 16/9/20, 7:36 am, 

Re: [Astlinux-users] APU2 keeps locking up

[Michael Keuter]

Hi all,

it might be completely unrelated, but it reminds me at an issue that only 
occured many years ago only on 32bit Geode boxes (Alix/net5501) after we 
integrated Monit into AstLinux.
On these boxes all RAM was eaten up slowly and then these boxes locked up after 
a few days. That's why we didn't installed Monit for these build types.

To figure it out I then created a cronjob that logged uptime, RAM and used 
Asterisk channels into a logfile every 10 minutes.

> Am 16.09.2020 um 15:07 schrieb Lonnie Abelbeck :
> 
> Hi Daryl,
> 
> Has the AstLinux version changed in the last couple weeks ?
> 
> What version are you running ?
> 
> Lonnie
> 
> 
> 
>> On Sep 16, 2020, at 8:01 AM, Daryl Richards via Astlinux-users 
>>  wrote:
>> 
>> This is good timing (in a bad way..) Time for a "Me too!"
>> 
>> Recently, over the last couple weeks my APU2 has started locking up exactly 
>> the same way, just hard lock. I have a serial console cable hooked up and 
>> there are no messages printed out before, there's just nothing. When the 
>> problem first started I didn't have a console cable hooked up but I put it 
>> in to see if any messages were appearing..
>> 
>> My system is on a UPS. Nothing else in the rack glitches.
>> 
>> On 2020-09-15 8:36 p.m., Michael Knill wrote:
>>> Thanks Chris
>>> Yep I have plenty out there too with no issues. It also happened on a Qotom 
>>> box so not hardware related.
>>> Regards
>>> Michael Knill
>>> *From: *AstLinux List 
>>> *Reply to: *AstLinux List 
>>> *Date: *Wednesday, 16 September 2020 at 8:53 am
>>> *To: *AstLinux List 
>>> *Cc: *The Cadillac Kid 
>>> *Subject: *Re: [Astlinux-users] APU2 keeps locking up
>>> for whatever its worth..  from a hardware standpoint I have probably 200 
>>> APU2s in the field and dont have then just freeze like that..  granted they 
>>> arent running astlinux, but just mentioning it from a power / hardware 
>>> point of view.
>>> mine are all running Centos 6.X and asterisk 11 or 13
>>> I have had a few chan_sip freezes.. (we wrote a watchdog to catch those and 
>>> restart asterisk).. we get maybe 1 every 3 or 4 months .. (not each site 
>>> but collectively)
>>> I have kenrel panicked an APU before by upping and downing the ethernet 
>>> port too much (or so it seems)..  it doesnt happen very often and is hard 
>>> to repeat in the lab.  but have done it esp on an install..  where one is 
>>> prone to plug and unplug cables multiple times in succession for dressing 
>>> in..
>>> I have had a few power bricks go bad.. in all cases there was just no 
>>> output..  no lights on the board at all. its not been that many 3 or 4..  
>>> considering we have sites in some pretty lightning-prone areas i dont feel 
>>> too bad about a few power bricks.
>>> we run UPSs on all of our sites
>>> we run the US power supply that is sold on the PC-Engines store.
>>> On Tuesday, September 15, 2020, 6:04:44 PM EDT, Michael Knill 
>>>  wrote:
>>> Yep I would say environmental for 1, maybe 2 sites but for 3 sites and all 
>>> only recently I cant see how it could be.
>>> No serial or long ethernet cables are connected.
>>> Yes completely different power adaptors when I changed from APU2 -> Qotom.
>>> Yes they are all DSL however ALL different modems and service types.
>>> I'm thinking I will upgrade all Runnix versions at these sites and if still 
>>> happening upgrade to 1.3.10 and if still happening then I have no idea what 
>>> to do.
>>> Regards
>>> Michael Knill
>>> On 16/9/20, 7:36 am, "Lonnie Abelbeck" >> > wrote:
>>>So a UPS may solve the issue as with Site 1 ?
>>>Do you have any serial cables connected ?
>>>Any long ethernet cables connected ?
>>>Is this with a variety of power adapters ?  ie. the APU2 -> Qotom switch 
>>> did the power adapter change as well ?
>>>Sure sounds environmental to me.
>>>I've seen DC-to-DC UPSs for about $40 USD, but never tried one.
>>> https://protectli.com/product/uninterruptible-power-supply/
>>>Lonnie
 On Sep 15, 2020, at 3:58 PM, Michael Knill 
 mailto:michael.kn...@ipcsolutions.com.au>>
  wrote:
 
 Ok I'm reviving this thread as I have now had my third site with this 
 issue.
 
 Symptom:
 Astlinux completely locks up and requires a power reset. The log shows 
 NOTHING in all cases.
 
 Troubleshooting conducted:
 Site 1 - The problem has not occurred since both a UPS AND Power Filter 
 have been added
 Site 2 - A power filter has been added and the problem has reoccurred. I 
 have completely changed the system from an APU2 to Qotom and it did the 
 same thing again
 Site 3 - A known working APU2 was installed and it locked up yesterday.
 
 I have checked mSATA cards and they were different across systems at these 
 sites.
 All systems are running 1.3.7.1 but I am running this at many other sites 
 on the same hardware with no issues.
 
 Power quality testing is 

Re: [Astlinux-users] Whoops I forgot Runnix

[Michael Keuter]

> Am 07.09.2020 um 14:12 schrieb Michael Knill 
> :
> 
> All my devices are 64 bit ☹
> 
> Regards
> Michael Knill

Shame on you :-).

> On 7/9/20, 9:50 pm, "Michael Keuter"  wrote:
> 
> 
> 
>> Am 07.09.2020 um 13:19 schrieb Michael Knill 
>> :
>> 
>> Hi Group
>> 
>> I have just realised that I have not been checking for Runnix Bootloader 
>> upgrades when doing a firmware upgrade and I have quite a few different 
>> versions out there.
>> E.g. some of my original systems are running runnix-0.4-6956
>> 
>> All systems seem to be running fine but just wondering what the impact could 
>> be of running an old version?
>> 
>> Regards
>> Michael Knill
> 
>Hi Michael,
> 
>the RUNNIX version depends on the device. For e.g. 32bit (non-PAE) devices 
> like Alix or net5501 the last RUNNIX version was runnix-0.4-8057.
>You should upgrade to the latest possible version. All 64bit devices 
> should run 0.6.
> 
>https://doc.astlinux.org/userdoc:legacy-installer-iso
> 
>Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Whoops I forgot Runnix

[Michael Keuter]

> Am 07.09.2020 um 13:19 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> I have just realised that I have not been checking for Runnix Bootloader 
> upgrades when doing a firmware upgrade and I have quite a few different 
> versions out there.
> E.g. some of my original systems are running runnix-0.4-6956
>  
> All systems seem to be running fine but just wondering what the impact could 
> be of running an old version?
>  
> Regards
> Michael Knill

Hi Michael,

the RUNNIX version depends on the device. For e.g. 32bit (non-PAE) devices like 
Alix or net5501 the last RUNNIX version was runnix-0.4-8057.
You should upgrade to the latest possible version. All 64bit devices should run 
0.6.

https://doc.astlinux.org/userdoc:legacy-installer-iso

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] logrotate configuration

[Michael Keuter]

It might not fit always, but have thought about using a syslog server?
I think there is a package for e.g. a Synology DiskStation.

SYSLOGHOST=

Sent from a mobile device.

Michael Keuter

> Am 06.09.2020 um 23:22 schrieb Michael Knill 
> :
> 
> Thanks Lonnie great explanation and I have also enabled persistent log.
> 
> The reason that I asked this question is that I am considering performing 
> verbose logging for Asterisk which will be handy for troubleshooting. 
> I would probably prefer logging to be on tmpfs to reduce writes to flash but 
> I found that losing the logs on reboot was very annoying if I was trying to 
> troubleshoot issues that caused a reboot.
> As all my systems now have an SLC CF or 16G or greater mSATA maybe I'm 
> worrying too much about flash writes.
> 
> Regards
> Michael Knill
> 
> On 5/9/20, 11:28 pm, "Michael Keuter"  wrote:
> 
> 
> 
>>> Am 05.09.2020 um 14:48 schrieb Lonnie Abelbeck :
>>> 
>>> 
>>> 
>>>> On Sep 5, 2020, at 2:34 AM, Michael Keuter  wrote:
>>> 
>>> 
>>> 
>>>> Am 05.09.2020 um 06:52 schrieb Michael Knill 
>>>> :
>>>> 
>>>> Hi Group
>>>> 
>>>> I'm wanting to change some log rotation configuration for Asterisk logging 
>>>> and just wondering the best way.
>>>> I want to change the log size from 100k to 10m in 
>>>> /etc/logrotate.d/asterisk.
>>>> Shall I just edit this file directly?
>>>> 
>>>> Regards
>>>> Michael Knill
>>> 
>>> Hi Michael,
>>> 
>>> yes, I do edit the files directly in "/etc/logrotate.d/". They are stored 
>>> in UnionFS. 
>>> 
>>> Michael
>> 
>> Yes, but keep in mind the default location for logs is /var/log/ (/var/ is 
>> on tmpfs) and VAR_SIZE defaults to 1k (10 MB).
>> 
>> So changing the asterisk log size from 100k to 10m, with 1 rotation can use 
>> 20 MB of space.
>> 
>> You would need to set VAR_SIZE in your user.conf to something much larger, 
>> for example:
>> --
>> VAR_SIZE="4k"
>> --
>> Also keep in mind this is only a limit, it does not allocate RAM for the 
>> tmpfs volume until it is needed.
>> 
>> 
>> A related note, why do a few programs like logrotate, tarsnap, sudo not have 
>> a /mnt/kd/ symlink.  Well, these programs are standalone and do not require 
>> a service init.d script, as such there is no script to symlink /etc/foo -> 
>> /mnt/kd/foo.  AstLinux could create dummy service init.d scripts for these 
>> cases, but chose not to and allow users to simply edit the /etc/ config 
>> files directly.  Additionally, many users will never have the need to edit 
>> these files.
>> 
>> Editable Files
>> https://doc.astlinux-project.org/userdoc:tt_editable_files
>> 
>> 
>> Lonnie
> 
>Of course I enabled "PERSISTLOG=yes" in my user.conf :-).
> 
>Michael
> 
>http://www.mksolutions.info
> 
> 
> 
> 
> 
>___
>Astlinux-users mailing list
>Astlinux-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] logrotate configuration

[Michael Keuter]

> Am 05.09.2020 um 14:48 schrieb Lonnie Abelbeck :
> 
> 
> 
>> On Sep 5, 2020, at 2:34 AM, Michael Keuter  wrote:
>> 
>> 
>> 
>>> Am 05.09.2020 um 06:52 schrieb Michael Knill 
>>> :
>>> 
>>> Hi Group
>>> 
>>> I'm wanting to change some log rotation configuration for Asterisk logging 
>>> and just wondering the best way.
>>> I want to change the log size from 100k to 10m in /etc/logrotate.d/asterisk.
>>> Shall I just edit this file directly?
>>> 
>>> Regards
>>> Michael Knill
>> 
>> Hi Michael,
>> 
>> yes, I do edit the files directly in "/etc/logrotate.d/". They are stored in 
>> UnionFS. 
>> 
>> Michael
> 
> Yes, but keep in mind the default location for logs is /var/log/ (/var/ is on 
> tmpfs) and VAR_SIZE defaults to 1k (10 MB).
> 
> So changing the asterisk log size from 100k to 10m, with 1 rotation can use 
> 20 MB of space.
> 
> You would need to set VAR_SIZE in your user.conf to something much larger, 
> for example:
> --
> VAR_SIZE="4k"
> --
> Also keep in mind this is only a limit, it does not allocate RAM for the 
> tmpfs volume until it is needed.
> 
> 
> A related note, why do a few programs like logrotate, tarsnap, sudo not have 
> a /mnt/kd/ symlink.  Well, these programs are standalone and do not require a 
> service init.d script, as such there is no script to symlink /etc/foo -> 
> /mnt/kd/foo.  AstLinux could create dummy service init.d scripts for these 
> cases, but chose not to and allow users to simply edit the /etc/ config files 
> directly.  Additionally, many users will never have the need to edit these 
> files.
> 
> Editable Files
> https://doc.astlinux-project.org/userdoc:tt_editable_files
> 
> 
> Lonnie

Of course I enabled "PERSISTLOG=yes" in my user.conf :-).

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] logrotate configuration

[Michael Keuter]

> Am 05.09.2020 um 06:52 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> I'm wanting to change some log rotation configuration for Asterisk logging 
> and just wondering the best way.
> I want to change the log size from 100k to 10m in /etc/logrotate.d/asterisk.
> Shall I just edit this file directly?
>  
> Regards
> Michael Knill

Hi Michael,

yes, I do edit the files directly in "/etc/logrotate.d/". They are stored in 
UnionFS. 

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] DAHDI cards

[Michael Keuter]

If a patch doesn‘t work you could easily replace the card with cheap Cisco SPA 
ATAs.
E.g. SPA112 with 2x FXS.

Sent from a mobile device.

Michael Keuter

> Am 28.08.2020 um 20:24 schrieb Lonnie Abelbeck :
> 
> Hi Ionel,
> 
> I think we could add a patch to re-add the "wctdm24xxp" on DAHDI 3.1.0.
> 
> Curious, what hardware is this running on ?
> 
> Lonnie
> 
> 
> 
>> On Aug 28, 2020, at 1:19 PM, Ionel Chila  wrote:
>> 
>> Yes I still use these drivers Lonnie. I have the  TDM410P 1FXO & 3FXS 
>> Asterisk card PCI  and man I need it as it connects all my home phone lines 
>> and my automation system.
>> 
>> PBX / # cat /mnt/kd/rc.conf.d/user.conf
>> ### user.conf - start ###
>> ###
>> ###  Advanced Configuration: User System Variables
>> ###
>> ###  Define variables here that are not otherwise set in the Network tab.
>> ###
>> ###  Variables defined here will override any value set elsewhere.
>> ###
>> ###
>> DAHDIMODS="wctdm24xxp dahdi_echocan_oslec"
>> ### user.conf - end ###
>> 
>> 
>> 
>> 
>> 
>> 
>>>> On Aug 28, 2020, at 11:50 AM, Lonnie Abelbeck  
>>>> wrote:
>>> 
>>> Hi DAHDI card users,
>>> 
>>> For anyone out there that uses a DAHDI compatible card, please take note.  
>>> DAHDI version 3+ removes support for a bunch of cards.  Seemingly PCI (not 
>>> PCIe) cards.
>>> 
>>> Notable, these oldies:
>>> 
>>> wctdm: Digium TDM400P: up to 4 analog ports
>>> wcfxo: X100P, similar and clones. A simple single-port FXO card
>>> 
>>> and
>>> 
>>> wctdm24xxp: Digium TDM800P/AEX800: up to 8 analog ports TDM410P/AEX410 up 
>>> to 4 analog ports
>>> 
>>> Complete list of changes here:
>>> https://github.com/asterisk/dahdi-linux/commit/f47c9bd9285d4c9d15f47a4cfbd2a00a5a1eaa13
>>> 
>>> Does anyone use removed card drivers ?  ie, does anyone have a user.conf 
>>> containing:
>>> 
>>> DAHDIMODS="wctdm24xxp", or DAHDIMODS="wcfxo" or DAHDIMODS="wctdm" ?
>>> 
>>> Granted PCI card slots are hard to come by today.
>>> 
>>> Lonnie
>>> 
>>> 
>>> 
>>> 
>>> ___
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>> pay...@krisk.org.
>> 
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] CA Problem in Astlinux

[Michael Keuter]

Hi Michael,

in my example on the Wiki I also had to use:

--cacert "/usr/lib/ssl/cert.pem"

> Am 07.07.2020 um 09:16 schrieb Michael Knill 
> :
> 
> Hi Lonnie
> 
> Looks like I have fixed the problem by using the --cacert option and using my 
> wildcard CA Cert file.
> Thanks for your help.
> 
> Regards
> Michael Knill
> 
> On 7/7/20, 10:56 am, "Lonnie Abelbeck"  wrote:
> 
>Michael,
> 
>I tested with "curl -LI https://asia.queuemetrics-live.com/; and the 
> certificate is valid to the base URL.
> 
>Does the QueueMetrics have it's own network SSL stack and ca-certificates 
> database ?  If so, possibly their ca-certificates is out of date.  AstLinux's 
> ca-certificates work.
> 
>I looked at the QueueMetrics uniloader, it appears to be java based, which 
> would have its own SSL stack and ca-certificates.
> 
>I would talk to the QueueMetrics folks.  Maybe there is an update.
> 
>Lonnie
> 
> 
>> On Jul 6, 2020, at 7:39 PM, Michael Knill 
>>  wrote:
>> 
>> Hi Group
>> 
>> I'm connecting QueueMetrics Live to an Astlinux box and I'm getting the 
>> following error from uniloader:
>> 2020/07/07 10:35:23 Errors in HTTP: [Post 
>> https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: 
>> certificate signed by unknown authority]
>> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver 
>> error: retrying in 400 ms
>> 2020/07/07 10:35:23 Errors in HTTP: [Post 
>> https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: 
>> certificate signed by unknown authority]
>> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver 
>> error: retrying in 2000 ms
>> 
>> It works fine when I use HTTP.
>> 
>> Is there any way to fix this problem as I would much rather use HTTPS?
>> 
>> Regards
>> Michael Knill
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> 
> 
>___
>Astlinux-users mailing list
>Astlinux-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] When a call goes to a group of snom phones and is answered by one phone, all the other phones display a missed call notification

[Michael Keuter]

I mean the c option only for the groupcall.

Sent from a mobile device.

Michael Keuter

> Am 18.06.2020 um 16:31 schrieb nedi :
> 
> Michael do you mean c in dialpilan everywere  or only where I dial all 
> extension together?
> 
>> Am 16.06.2020 um 00:11 schrieb The Cadillac Kid via Astlinux-users 
>> :
>> 
>> I didnt think about dial options..  
>> 
>> this is my Dial command
>> 
>> exten = 
>> s,n,Dial(SIP/${receiver}${ARG5},${fbnatimer},rIM(answerme,${receiver},${origuniqueid},${cidoriginate}))
>> 
>> im not using 'c' in it the 'r' in it pretty much means that 180 will be sent 
>> back to the originating phone no matter what. I had to use that as we had 
>> some older analog FXS gateways that refused to send ringback
>> 
>> as for the config I sent its meant for a D700 series..  all of our snoms in 
>> the field are 700s. 
>> 
>> 
>> On Monday, June 15, 2020, 4:26:41 PM EDT, Michael Keuter 
>>  wrote:
>> 
>> 
>> Have you tried in Asterisk the option „c“ of the „dial“ command?
>> 
>> Sent from a mobile device.
>> 
>> Michael Keuter
>> 
>>>> Am 15.06.2020 um 22:21 schrieb nedi :
>>>> 
>>> 
>> 
>> Thanks , I will try tomorow.
>> Regards nedi
>> 
>>> Am 15.06.2020 um 22:16 schrieb The Cadillac Kid via Astlinux-users 
>>> :
>>> 
>>> hit send too quick..
>>> 
>>> this is the SIP sent back to it..   
>>> 
>>> CANCEL sip:5051@172.16.9.2:54836;line=up7wg15k SIP/2.0
>>> Via: SIP/2.0/UDP 172.16.8.2:5060;branch=z9hG4bK21641ecc
>>> Max-Forwards: 70
>>> From: "3200" ;tag=as73a14520
>>> To: 
>>> Call-ID: 328a1eaf23fc726f695258ef65aa2e51@172.16.8.2:5060
>>> CSeq: 102 CANCEL
>>> User-Agent: Asterisk PBX 11.20.0
>>> Reason: SIP;cause=200;text="Call completed elsewhere"
>>> Content-Length: 0
>>> 
>>> 
>>> my call was 3200 dials a ring group with 5002 and 5051(snom),  5002 answers 
>>> the phone and 5051 shows answered elsewhere with no missed call  
>>> 
>>> On Monday, June 15, 2020, 3:54:19 PM EDT, nedi  wrote:
>>> 
>>> 
>>> The phone showing message  "call completed elsewhere" on the screen  coming 
>>> but  missed call is still there on all phones.
>>> Nedi
>>> 
>>>> Am 15.06.2020 um 21:45 schrieb The Cadillac Kid via Astlinux-users 
>>>> :
>>>> 
>>>> this was a PJ issue wasnt it? im still using Chan_sip and my snoms dont do 
>>>> it if I answer at another phone, they actually show call completed 
>>>> elsewhere on the screen...  im using 10.1.49.X firmware on my snoms..  
>>>> I dont remember having to set anything different in the config to make it 
>>>> work.
>>>> 
>>>> 
>>>> On Monday, June 15, 2020, 3:31:16 PM EDT, nedi  wrote:
>>>> 
>>>> 
>>>> Hi,
>>>> 
>>>> When a call goes to a group of snom phones and is answered by one phone, 
>>>> all the other phones display a missed call notification.
>>>> 
>>>> According to the SNOM FAQ this can be stopped by way of the following 
>>>> changes to SIP protocols:
>>>> 
>>>> Has anyone idea how to fix that
>>>> 
>>>> Regards 
>>>> Nedi
>>>> ___
>>>> Astlinux-users mailing list
>>>> Astlinux-users@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>> 
>>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>>> pay...@krisk.org.
>>>> ___
>>>> Astlinux-users mailing list
>>>> Astlinux-users@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>> 
>>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>>> pay...@krisk.org.
>>> 
>>> ___
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>> pay...@krisk.org.
>>> ___
>&

Re: [Astlinux-users] When a call goes to a group of snom phones and is answered by one phone, all the other phones display a missed call notification

[Michael Keuter]

Have you tried in Asterisk the option „c“ of the „dial“ command?

Sent from a mobile device.

Michael Keuter

> Am 15.06.2020 um 22:21 schrieb nedi :
> 
> Thanks , I will try tomorow.
> Regards nedi
> 
>> Am 15.06.2020 um 22:16 schrieb The Cadillac Kid via Astlinux-users 
>> :
>> 
>> hit send too quick..
>> 
>> this is the SIP sent back to it..   
>> 
>> CANCEL sip:5051@172.16.9.2:54836;line=up7wg15k SIP/2.0
>> Via: SIP/2.0/UDP 172.16.8.2:5060;branch=z9hG4bK21641ecc
>> Max-Forwards: 70
>> From: "3200" ;tag=as73a14520
>> To: 
>> Call-ID: 328a1eaf23fc726f695258ef65aa2e51@172.16.8.2:5060
>> CSeq: 102 CANCEL
>> User-Agent: Asterisk PBX 11.20.0
>> Reason: SIP;cause=200;text="Call completed elsewhere"
>> Content-Length: 0
>> 
>> 
>> my call was 3200 dials a ring group with 5002 and 5051(snom),  5002 answers 
>> the phone and 5051 shows answered elsewhere with no missed call  
>> 
>> On Monday, June 15, 2020, 3:54:19 PM EDT, nedi  wrote:
>> 
>> 
>> The phone showing message  "call completed elsewhere" on the screen  coming 
>> but  missed call is still there on all phones.
>> Nedi
>> 
>>> Am 15.06.2020 um 21:45 schrieb The Cadillac Kid via Astlinux-users 
>>> :
>>> 
>>> this was a PJ issue wasnt it? im still using Chan_sip and my snoms dont do 
>>> it if I answer at another phone, they actually show call completed 
>>> elsewhere on the screen...  im using 10.1.49.X firmware on my snoms..  
>>> I dont remember having to set anything different in the config to make it 
>>> work.
>>> 
>>> 
>>> On Monday, June 15, 2020, 3:31:16 PM EDT, nedi  wrote:
>>> 
>>> 
>>> Hi,
>>> 
>>> When a call goes to a group of snom phones and is answered by one phone, 
>>> all the other phones display a missed call notification.
>>> 
>>> According to the SNOM FAQ this can be stopped by way of the following 
>>> changes to SIP protocols:
>>> 
>>> Has anyone idea how to fix that
>>> 
>>> Regards 
>>> Nedi
>>> ___
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>> pay...@krisk.org.
>>> ___
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>> pay...@krisk.org.
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Losing business because no soft phone apps

[Michael Keuter]

> Am 09.06.2020 um 12:00 schrieb Michael Knill 
> :
> 
> Hi Michael
> 
> Yes I have used Bria with Wireguard on iPhone and it works great while its in 
> the foreground.
> Push notifications are the only option to wake up the application from the 
> background which don't work if you are using VPN.
> 
> Regards
> Michael Knill

But this behavior is dependend on the smartphones operating system, right?
Does the 3CX smartphone app behave different?

> On 9/6/20, 7:08 pm, "Michael Keuter"  wrote:
> 
> 
> 
>> Am 09.06.2020 um 10:04 schrieb Michael Knill 
>> :
>> 
>> Hi Group
>> 
>> Well although we are coping fine during COVID-19 and haven’t really lost any 
>> business yet, its now only a matter of time that we will.
>> I'm getting increased pressure from clients that they need simple remote 
>> working solutions for both desktop and smartphone as they are suspecting the 
>> new norm will not be everyone sitting in the office with a phone on their 
>> desk.
>> 
>> In the light of this, I am struggling to build something for an standard 
>> Asterisk based system that's going to be moderately secure. Yes OpenVPN from 
>> Yealink phones is awesome but its not a mobile solution and people are sick 
>> of bringing phones into the office and back home.
>> 
>> 3CX has a nice remote client and it looks like I'm going to lose at least 
>> one customer to this product. Its easy to set up and appears to do it more 
>> securely via a tunnelling protocol.
>> Bria is great but I just don't know how to secure it other than using a VPN.
>> 
>> Does anyone have any ideas before I start using 3CX to keep business?
>> 
>> Regards
>> 
>> Michael Knill
> 
>Hi Michael,
> 
>I just looked into the 3CX Windows softphone. You are right, they are 
> using a special proprietary tunnel protocol to their own SBC on port 5090.
> 
>https://www.3cx.com/docs/3cx-tunnel-session-border-controller/
> 
>https://www.3cx.com/docs/3cx-sbc-raspberry-pi/
> 
>But it seems everyone is using the same Tunnel password (no user 
> authentiation for the tunnel!). So if one user is hacked or lost its device, 
> then you would need to reconfigure the tunnel with a new password for all 
> users. I personally would not want this, but I don't know the exact details 
> of the tunnel.
> 
>You can do the same, but much safer with OpenVPN or WireGuard. It's a bit 
> more work to setup the client on each device. WireGuard works fine on mobile 
> phones.
> 
>Otherwise you just use SIP over TLS with SRTP without a VPN.
> 
>Michael
> 
>http://www.mksolutions.info
> 
> 
> 
> 
> 
>___
>Astlinux-users mailing list
>Astlinux-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
>Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Losing business because no soft phone apps

[Michael Keuter]

> Am 09.06.2020 um 10:04 schrieb Michael Knill 
> :
> 
> Hi Group
>  
> Well although we are coping fine during COVID-19 and haven’t really lost any 
> business yet, its now only a matter of time that we will.
> I'm getting increased pressure from clients that they need simple remote 
> working solutions for both desktop and smartphone as they are suspecting the 
> new norm will not be everyone sitting in the office with a phone on their 
> desk.
>  
> In the light of this, I am struggling to build something for an standard 
> Asterisk based system that's going to be moderately secure. Yes OpenVPN from 
> Yealink phones is awesome but its not a mobile solution and people are sick 
> of bringing phones into the office and back home.
>  
> 3CX has a nice remote client and it looks like I'm going to lose at least one 
> customer to this product. Its easy to set up and appears to do it more 
> securely via a tunnelling protocol.
> Bria is great but I just don't know how to secure it other than using a VPN.
>  
> Does anyone have any ideas before I start using 3CX to keep business?
>  
> Regards
>  
> Michael Knill

Hi Michael,

I just looked into the 3CX Windows softphone. You are right, they are using a 
special proprietary tunnel protocol to their own SBC on port 5090.

https://www.3cx.com/docs/3cx-tunnel-session-border-controller/

https://www.3cx.com/docs/3cx-sbc-raspberry-pi/

But it seems everyone is using the same Tunnel password (no user authentiation 
for the tunnel!). So if one user is hacked or lost its device, then you would 
need to reconfigure the tunnel with a new password for all users. I personally 
would not want this, but I don't know the exact details of the tunnel.

You can do the same, but much safer with OpenVPN or WireGuard. It's a bit more 
work to setup the client on each device. WireGuard works fine on mobile phones.

Otherwise you just use SIP over TLS with SRTP without a VPN.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Qotom Q190G4U-S01 vs Q190G4N-S07

[Michael Keuter]

Yes, only the case has a slightly different design. That´s all.

Sent from a mobile device.

Michael Keuter

> Am 29.05.2020 um 09:30 schrieb Michael Knill 
> :
> 
> 
> Hi Group
>  
> I'm assuming that the Qotom Q190G4U-S01 should work fine instead of the 
> Q190G4N-S07?
> The Q190G4N-S07 contains a Wifi card that we end up taking out and its more 
> expensive.
>  
> https://qotom.net/product/35.html
> http://www.qotom.net/product/36.html
>  
> It appears to have the same motherboard unless I'm mistaken.
>  
> Regards
> Michael Knill
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

> Am 24.05.2020 um 23:54 schrieb Michael Keuter :
> 
> 
> 
>> Am 24.05.2020 um 23:38 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 24.05.2020 um 23:24 schrieb Lonnie Abelbeck :
>>> 
>>> 
>>> 
>>>> On May 24, 2020, at 3:49 PM, Michael Keuter  wrote:
>>>> 
>>>> Try running the "yes" stresstest in the container, with the above 
>>>> limitations.
>>> 
>>> If I define lxc.cgroup.cpuset.cpus to 1, or 2 or 3, the "yes" stress-test 
>>> [1] only uses one core.
>>> 
>>> Setting lxc.cgroup.cpuset.cpus=4 the container does not start.
>>> 
>>> Not setting lxc.cgroup.cpuset.cpus all 4 cores are used.
>>> 
>>> Lonnie
>>> 
>>> [1]
>>> (start test)
>>> # for x in 1 2 3 4; do ( yes >/dev/null & ); done
>>> 
>>> (stop test)
>>> # killall yes
>> 
>> 
>> From the man page:
>> 
>> lxc-cgroup -n foo cpuset.cpus "0,3"
>> assign the processors 0 and 3 to the container.
>> 
>> 
>> I guess you define which CPU cores are allowed to use (0-3), that's why 4 
>> does not work :-).
>> 
>> lxc.cgroup.cpuset.cpus=0,3  (maybe in quotes, should use core 1 and 4)
> 
> Yup, this uses CPU 2 + 4 (core 0 + 3), you define the actual cores NOT the 
> count!
> 
> lxc.cgroup.cpuset.cpus = 1,3

The RAM limit seems also be working fine. I set this in the container config:

lxc.cgroup.memory.limit_in_bytes = 256M

For the test you need to install the "pv" command to see the actual RAM value:


root@deb10:# dd if=/dev/zero bs=1024 | pv -b -B 1024 | dd of=/dev/shm/fill 
bs=1024

dd: error writing '/dev/shm/fill': Cannot allocate memory
 240MiB
246721+0 records in
246720+0 records out
252641280 bytes (253 MB, 241 MiB) copied, 4.63373 s, 54.5 MB/s


Sometimes the container crashes at the end of that test.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

> Am 24.05.2020 um 23:38 schrieb Michael Keuter :
> 
> 
> 
>> Am 24.05.2020 um 23:24 schrieb Lonnie Abelbeck :
>> 
>> 
>> 
>>> On May 24, 2020, at 3:49 PM, Michael Keuter  wrote:
>>> 
>>> Try running the "yes" stresstest in the container, with the above 
>>> limitations.
>> 
>> If I define lxc.cgroup.cpuset.cpus to 1, or 2 or 3, the "yes" stress-test 
>> [1] only uses one core.
>> 
>> Setting lxc.cgroup.cpuset.cpus=4 the container does not start.
>> 
>> Not setting lxc.cgroup.cpuset.cpus all 4 cores are used.
>> 
>> Lonnie
>> 
>> [1]
>> (start test)
>> # for x in 1 2 3 4; do ( yes >/dev/null & ); done
>> 
>> (stop test)
>> # killall yes
> 
> 
> From the man page:
> 
> lxc-cgroup -n foo cpuset.cpus "0,3"
> assign the processors 0 and 3 to the container.
> 
> 
> I guess you define which CPU cores are allowed to use (0-3), that's why 4 
> does not work :-).
> 
> lxc.cgroup.cpuset.cpus=0,3  (maybe in quotes, should use core 1 and 4)

Yup, this uses CPU 2 + 4 (core 0 + 3), you define the actual cores NOT the 
count!

lxc.cgroup.cpuset.cpus = 1,3

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

> Am 24.05.2020 um 23:24 schrieb Lonnie Abelbeck :
> 
> 
> 
>> On May 24, 2020, at 3:49 PM, Michael Keuter  wrote:
>> 
>> Try running the "yes" stresstest in the container, with the above 
>> limitations.
> 
> If I define lxc.cgroup.cpuset.cpus to 1, or 2 or 3, the "yes" stress-test [1] 
> only uses one core.
> 
> Setting lxc.cgroup.cpuset.cpus=4 the container does not start.
> 
> Not setting lxc.cgroup.cpuset.cpus all 4 cores are used.
> 
> Lonnie
> 
> [1]
> (start test)
> # for x in 1 2 3 4; do ( yes >/dev/null & ); done
> 
> (stop test)
> # killall yes


From the man page:

lxc-cgroup -n foo cpuset.cpus "0,3"
assign the processors 0 and 3 to the container.


I guess you define which CPU cores are allowed to use (0-3), that's why 4 does 
not work :-).

lxc.cgroup.cpuset.cpus=0,3  (maybe in quotes, should use core 1 and 4)

>>> Am 24.05.2020 um 22:35 schrieb Lonnie Abelbeck :
>>> 
>>> I tried
>>> --
>>> lxc.cgroup.memory.limit_in_bytes = 512M
>>> lxc.cgroup.cpuset.cpus = 1
>>> --
>>> and 'htop' show 4 cores and 4 GB of RAM.
>>> 
>>> Kind of makes sense sense /proc/ is shared.
>>> 
>>> There is an optional lxcfs (uses FUSE) that offers a different /proc/ to 
>>> each container, but don't really think this is needed with AstLinux.
>>> 
>>> Lonnie
>> 
>> Try running the "yes" stresstest in the container, with the above 
>> limitations.
>> 
>>>> On May 24, 2020, at 3:25 PM, Michael Keuter  wrote:
>>>> 
>>>> I did some tests and at least the number of cores worked for me. Look at 
>>>> these optional commands:
>>>> 
>>>> https://doc.astlinux.org/userdoc:guest_lxc_container#optional
>>>> 
>>>> The CPU shares are to set priorities between multiple containers. But it 
>>>> needs to be tested more.
>>>> 
>>>> 
>>>>> Am 24.05.2020 um 22:17 schrieb Lonnie Abelbeck 
>>>>> :
>>>>> 
>>>>> Hi Michael,
>>>>> 
>>>>> Not currently.
>>>>> 
>>>>> For the AstLinux case we did not see much of an issue if the LXC can see 
>>>>> all cores and all RAM.
>>>>> 
>>>>> Lonnie
>>>>> 
>>>>> 
>>>>>> On May 24, 2020, at 3:12 PM, Michael Knill 
>>>>>>  wrote:
>>>>>> 
>>>>>> Can you limit CPU resources to the  LXC container?
>>>>>> 
>>>>>> Regards
>>>>>> Michael Knill
>>>>>> 
>>>>>> On 24/5/20, 8:08 pm, "Michael Keuter"  wrote:
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>>> Am 24.05.2020 um 07:35 schrieb Michael Knill 
>>>>>>> :
>>>>>>> 
>>>>>>> Not really knowing anything about LXC Containers, just wondering if I 
>>>>>>> could install Centos and run QueueMetrics on the same box.
>>>>>>> This would be a pretty cool option!
>>>>>>> 
>>>>>>> https://www.queuemetrics.com/install-queuemetrics.jsp
>>>>>>> https://www.queuemetrics.com/blog/2018/12/04/dimensioning-queuemetrics/
>>>>>>> 
>>>>>>> Regards
>>>>>>> Michael Knill
>>>>>> 
>>>>>> Hi Michael,
>>>>>> 
>>>>>> in general this should work, but needs to be tested.
>>>>>> The question is how much diskspace, RAM and CPU power will be needed. 
>>>>>> All is shared with the host.
>>>>>> 
>>>>>> Michael
>>>> 
>>>> Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

> Am 24.05.2020 um 22:35 schrieb Lonnie Abelbeck :
> 
> I tried
> --
> lxc.cgroup.memory.limit_in_bytes = 512M
> lxc.cgroup.cpuset.cpus = 1
> --
> and 'htop' show 4 cores and 4 GB of RAM.
> 
> Kind of makes sense sense /proc/ is shared.
> 
> There is an optional lxcfs (uses FUSE) that offers a different /proc/ to each 
> container, but don't really think this is needed with AstLinux.
> 
> Lonnie

Try running the "yes" stresstest in the container, with the above limitations.

>> On May 24, 2020, at 3:25 PM, Michael Keuter  wrote:
>> 
>> I did some tests and at least the number of cores worked for me. Look at 
>> these optional commands:
>> 
>> https://doc.astlinux.org/userdoc:guest_lxc_container#optional
>> 
>> The CPU shares are to set priorities between multiple containers. But it 
>> needs to be tested more.
>> 
>> 
>>> Am 24.05.2020 um 22:17 schrieb Lonnie Abelbeck :
>>> 
>>> Hi Michael,
>>> 
>>> Not currently.
>>> 
>>> For the AstLinux case we did not see much of an issue if the LXC can see 
>>> all cores and all RAM.
>>> 
>>> Lonnie
>>> 
>>> 
>>>> On May 24, 2020, at 3:12 PM, Michael Knill 
>>>>  wrote:
>>>> 
>>>> Can you limit CPU resources to the  LXC container?
>>>> 
>>>> Regards
>>>> Michael Knill
>>>> 
>>>> On 24/5/20, 8:08 pm, "Michael Keuter"  wrote:
>>>> 
>>>> 
>>>> 
>>>>> Am 24.05.2020 um 07:35 schrieb Michael Knill 
>>>>> :
>>>>> 
>>>>> Not really knowing anything about LXC Containers, just wondering if I 
>>>>> could install Centos and run QueueMetrics on the same box.
>>>>> This would be a pretty cool option!
>>>>> 
>>>>> https://www.queuemetrics.com/install-queuemetrics.jsp
>>>>> https://www.queuemetrics.com/blog/2018/12/04/dimensioning-queuemetrics/
>>>>> 
>>>>> Regards
>>>>> Michael Knill
>>>> 
>>>> Hi Michael,
>>>> 
>>>> in general this should work, but needs to be tested.
>>>> The question is how much diskspace, RAM and CPU power will be needed. All 
>>>> is shared with the host.
>>>> 
>>>> Michael
>> 
>> Michael
>> 
>> http://www.mksolutions.info
>> 
>> 
>> 
>> 
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

I did some tests and at least the number of cores worked for me. Look at these 
optional commands:

https://doc.astlinux.org/userdoc:guest_lxc_container#optional

The CPU shares are to set priorities between multiple containers. But it needs 
to be tested more.


> Am 24.05.2020 um 22:17 schrieb Lonnie Abelbeck :
> 
> Hi Michael,
> 
> Not currently.
> 
> For the AstLinux case we did not see much of an issue if the LXC can see all 
> cores and all RAM.
> 
> Lonnie
> 
> 
>> On May 24, 2020, at 3:12 PM, Michael Knill 
>>  wrote:
>> 
>> Can you limit CPU resources to the  LXC container?
>> 
>> Regards
>> Michael Knill
>> 
>> On 24/5/20, 8:08 pm, "Michael Keuter"  wrote:
>> 
>> 
>> 
>>> Am 24.05.2020 um 07:35 schrieb Michael Knill 
>>> :
>>> 
>>> Not really knowing anything about LXC Containers, just wondering if I could 
>>> install Centos and run QueueMetrics on the same box.
>>> This would be a pretty cool option!
>>> 
>>> https://www.queuemetrics.com/install-queuemetrics.jsp
>>> https://www.queuemetrics.com/blog/2018/12/04/dimensioning-queuemetrics/
>>> 
>>> Regards
>>> Michael Knill
>> 
>>   Hi Michael,
>> 
>>   in general this should work, but needs to be tested.
>>   The question is how much diskspace, RAM and CPU power will be needed. All 
>> is shared with the host.
>> 
>>   Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] LXC Containers

[Michael Keuter]

> Am 24.05.2020 um 07:35 schrieb Michael Knill 
> :
> 
> Not really knowing anything about LXC Containers, just wondering if I could 
> install Centos and run QueueMetrics on the same box.
> This would be a pretty cool option!
>  
> https://www.queuemetrics.com/install-queuemetrics.jsp
> https://www.queuemetrics.com/blog/2018/12/04/dimensioning-queuemetrics/
>  
> Regards
> Michael Knill

Hi Michael,

in general this should work, but needs to be tested.
The question is how much diskspace, RAM and CPU power will be needed. All is 
shared with the host.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Changing from Astlinux SE to non SE version

[Michael Keuter]

> Am 18.05.2020 um 10:19 schrieb Michael Knill 
> :
> 
> Ah thanks Michael I thought I needed to reboot. I will give that a try.
>  
> Regards
> Michael Knill

In this case it is only to switch the version file ("ver") to an older version.

"/oldroot/cdrom/os/ver" vs. "Xver"
 
> From: Michael Keuter 
> Reply to: AstLinux List 
> Date: Monday, 18 May 2020 at 5:51 pm
> To: AstLinux List 
> Subject: Re: [Astlinux-users] Changing from Astlinux SE to non SE version
>  
> Hi Michael, 
>  
> you need to revert to the previous version, but don‘t reboot, then with the 
> new repo configured, check for a new version, upgrade and then reboot
> 
> Sent from a mobile device. 
>  
> Michael Keuter
> 
> 
>> Am 18.05.2020 um 06:39 schrieb Michael Knill 
>> :
>> 
>> Hi Group
>>  
>> I'm still getting seg faults on app_queue.so crashing Asterisk. I was hoping 
>> the SE version would fix this but I'm now going to need to try the latest 13 
>> version.
>> Just wondering how I can move from SE to NON SE versions considering I don't 
>> want really to revert to the previous Astlinux version? Is this the only 
>> option?
>>  
>> Regards
>> Michael Knill

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Changing from Astlinux SE to non SE version

[Michael Keuter]

Hi Michael,

you need to revert to the previous version, but don‘t reboot, then with the new 
repo configured, check for a new version, upgrade and then reboot

Sent from a mobile device.

Michael Keuter

> Am 18.05.2020 um 06:39 schrieb Michael Knill 
> :
> 
> 
> Hi Group
>  
> I'm still getting seg faults on app_queue.so crashing Asterisk. I was hoping 
> the SE version would fix this but I'm now going to need to try the latest 13 
> version.
> Just wondering how I can move from SE to NON SE versions considering I don't 
> want really to revert to the previous Astlinux version? Is this the only 
> option?
>  
> Regards
> Michael Knill
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] APU2 Install hang

[Michael Keuter]

> Am 08.05.2020 um 00:40 schrieb nedi :
> 
> Michael, 
> Is there a working download  link for German Asterisk Sounds Packages  for 
> Astlinux or I must copy my old files to the new installed PBX.
> Nedi

Yes, setup this URL in the AstLinux Prefs as "Sounds Pkg URL":
http://mirror.astlinux-project.org/asterisk-sounds

Then choose "core" "german" and "alaw" (all other codecs might not work).

> 
>> Am 07.05.2020 um 23:34 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 07.05.2020 um 23:17 schrieb Michael Knill 
>>> :
>>> 
>>> I gave up on screen and ZTerm. Just use Serial on Mac. It just works and 
>>> supports many USB-Serial convertors.
>> 
>> Hi Michael,
>> I use this as well for years, it is great, but it is not cheap (and now the 
>> 2.0 upgrade, I dont need those new features).
>> That's why I suggested it not at this time :-).
>> 
>>> Regards
>>> Michael Knill
>>> 
>>> On 8/5/20, 5:42 am, "nedi"  wrote:
>>> 
>>>  Thanks, 
>>>  I thing that was Mac issue.   With serial app works
>>> 
>>>  Which version do you recomend me to load 
>>>  genx86_64-serial-1.3.8-asterisk-13.23.1se  [1]| |
>>>| |genx86_64-serial-1.3.8-asterisk-13.31.0[2]| |
>>>| |genx86_64-serial-1.3.8-asterisk-16.8.0 [3]
>>>  Nedi
>>> 
>>>> Am 07.05.2020 um 21:30 schrieb Michael Keuter :
>>>> 
>>>> 
>>>> 
>>>>> Am 07.05.2020 um 21:13 schrieb Lonnie Abelbeck 
>>>>> :
>>>>> 
>>>>> Nedi,
>>>>> 
>>>>> Followup, bottom line, there is something goofy with the macOS 'screen'.
>>>>> 
>>>>> I just tried the astlinux-1.3.8-genx86_64-serial.iso installer on the 
>>>>> APU2.
>>>>> 
>>>>> If I use the "Serial" macOS application, it works just fine.
>>>>> https://www.decisivetactics.com/products/serial/
>>>>> 
>>>>> If I use "minicom" on an old MacBook, it works fine.
>>>>> 
>>>>> I used another AstLinux box (I have lots of them), same USB/serial 
>>>>> converter connected to AstLinux, ssh into AstLinux and issue:
>>>>> --
>>>>> screen --version
>>>>> Screen version 4.08.00 (GNU) 05-Feb-20
>>>>> 
>>>>> screen /dev/ttyUSB0 115200
>>>>> --
>>>>> it works fine.
>>>>> 
>>>>> But, if I use macOS's screen:
>>>>> --
>>>>> screen --version
>>>>> Screen version 4.00.03 (FAU) 23-Oct-06
>>>>> 
>>>>> screen /dev/tty.usbserial-A102MMV1 115200
>>>>> ---
>>>>> as soon as the menus appear, the screen flashes wildly as if I was typing 
>>>>> characters.
>>>>> 
>>>>> Bottom line, don't use the macOS 'screen' with a USB/serial adapter and 
>>>>> expect it to always work.
>>>>> 
>>>>> Lonnie
>>>> 
>>>> As a free alternative you can try ZTerm:
>>>> https://dalverson.com/zterm/
>>>> 
>>>> It is very, very old, but still work for me on High Sierra (I guess it 
>>>> will not work on Catalina anymore).
>>>> 
>>>>>> On May 7, 2020, at 1:22 PM, Lonnie Abelbeck  
>>>>>> wrote:
>>>>>> 
>>>>>> Nedi,
>>>>>> 
>>>>>> Very weird you can receive data but not send.
>>>>>> 
>>>>>> On my MacBook Air, USB to serial and a NULL modem cable to APU2.
>>>>>> 
>>>>>> $ ls /dev/tty.*
>>>>>> /dev/tty.Bluetooth-Incoming-Port /dev/tty.usbserial-A102MMV1
>>>>>> 
>>>>>> $ screen /dev/tty.usbserial-A102MMV1 115200
>>>>>> 
>>>>>> ## interact over serial
>>>>>> ## exit with Control-a Control-\ (confirm with y)
>>>>>> 
>>>>>> [screen is terminating]
>>>>>> 
>>>>>> 
>>>>>> Have you used your USB/serial terminal setup successfully before ?
>>>>>> 
>>>>>> Lonnie
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>>> On May 7, 2020, at 11:43 AM, nedi 

Re: [Astlinux-users] APU2 Install hang

[Michael Keuter]

> Am 07.05.2020 um 23:17 schrieb Michael Knill 
> :
> 
> I gave up on screen and ZTerm. Just use Serial on Mac. It just works and 
> supports many USB-Serial convertors.

Hi Michael,
I use this as well for years, it is great, but it is not cheap (and now the 2.0 
upgrade, I dont need those new features).
That's why I suggested it not at this time :-).

> Regards
> Michael Knill
> 
> On 8/5/20, 5:42 am, "nedi"  wrote:
> 
>Thanks, 
>I thing that was Mac issue.   With serial app works
> 
>Which version do you recomend me to load 
>genx86_64-serial-1.3.8-asterisk-13.23.1se  [1]| |
>  | |genx86_64-serial-1.3.8-asterisk-13.31.0[2]| |
>  | |genx86_64-serial-1.3.8-asterisk-16.8.0     [3]
>Nedi
> 
>> Am 07.05.2020 um 21:30 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 07.05.2020 um 21:13 schrieb Lonnie Abelbeck :
>>> 
>>> Nedi,
>>> 
>>> Followup, bottom line, there is something goofy with the macOS 'screen'.
>>> 
>>> I just tried the astlinux-1.3.8-genx86_64-serial.iso installer on the APU2.
>>> 
>>> If I use the "Serial" macOS application, it works just fine.
>>> https://www.decisivetactics.com/products/serial/
>>> 
>>> If I use "minicom" on an old MacBook, it works fine.
>>> 
>>> I used another AstLinux box (I have lots of them), same USB/serial 
>>> converter connected to AstLinux, ssh into AstLinux and issue:
>>> --
>>> screen --version
>>> Screen version 4.08.00 (GNU) 05-Feb-20
>>> 
>>> screen /dev/ttyUSB0 115200
>>> --
>>> it works fine.
>>> 
>>> But, if I use macOS's screen:
>>> --
>>> screen --version
>>> Screen version 4.00.03 (FAU) 23-Oct-06
>>> 
>>> screen /dev/tty.usbserial-A102MMV1 115200
>>> ---
>>> as soon as the menus appear, the screen flashes wildly as if I was typing 
>>> characters.
>>> 
>>> Bottom line, don't use the macOS 'screen' with a USB/serial adapter and 
>>> expect it to always work.
>>> 
>>> Lonnie
>> 
>> As a free alternative you can try ZTerm:
>> https://dalverson.com/zterm/
>> 
>> It is very, very old, but still work for me on High Sierra (I guess it will 
>> not work on Catalina anymore).
>> 
>>>> On May 7, 2020, at 1:22 PM, Lonnie Abelbeck  
>>>> wrote:
>>>> 
>>>> Nedi,
>>>> 
>>>> Very weird you can receive data but not send.
>>>> 
>>>> On my MacBook Air, USB to serial and a NULL modem cable to APU2.
>>>> 
>>>> $ ls /dev/tty.*
>>>> /dev/tty.Bluetooth-Incoming-Port   /dev/tty.usbserial-A102MMV1
>>>> 
>>>> $ screen /dev/tty.usbserial-A102MMV1 115200
>>>> 
>>>> ## interact over serial
>>>> ## exit with Control-a Control-\ (confirm with y)
>>>> 
>>>> [screen is terminating]
>>>> 
>>>> 
>>>> Have you used your USB/serial terminal setup successfully before ?
>>>> 
>>>> Lonnie
>>>> 
>>>> 
>>>> 
>>>> 
>>>>> On May 7, 2020, at 11:43 AM, nedi  wrote:
>>>>> 
>>>>> Hi lonnie, 
>>>>> Yes I have SSD  on slot 3 mSATA 
>>>>> I Used the Image astlinux-1.3.8-genx86_64-serial.iso 
>>>>> I made USB boot stick with windows 10  Rufus in DD image mode
>>>>> 
>>>>> I see booting I can chose F10  and make memory test  after that or 
>>>>> directtly  if I don’t press F10 I can  booting directly to the  astlinux, 
>>>>> the installer menu appears  and if the menu appears I can’t chose 
>>>>> anything.
>>>>> 
>>>>> if I press enter or arows nothing happend
>>>>> 
>>>>> Nedi
>>>>> 
>>>>>> Am 07.05.2020 um 18:11 schrieb Lonnie Abelbeck 
>>>>>> :
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>>> On May 7, 2020, at 10:02 AM, nedi  wrote:
>>>>>>> 
>>>>>>> Hi, 
>>>>>>> I have new apu4d2  Mainboard. Installer hang on Astlinux installer 
>>>>>>> menu, I can’t install if I press enter in the Terminal or on physical 
>>>>>>> usb keyboard.
>>>>>>> I use USB Serial Adapter on my Mac OSX and Baudr

Re: [Astlinux-users] APU2 Install hang

[Michael Keuter]

> Am 07.05.2020 um 21:41 schrieb nedi :
> 
> Thanks, 
> I thing that was Mac issue.   With serial app works

Great.

> Which version do you recomend me to load 
> genx86_64-serial-1.3.8-asterisk-13.23.1se  [1]| |
>  | |genx86_64-serial-1.3.8-asterisk-13.31.0[2]| |
>  | |genx86_64-serial-1.3.8-asterisk-16.8.0 [3]
> Nedi

Asterisk 13.23.1 SE is without PJSIP and based on an older "certified" version.
Asterisk 13.13.0 is the latest 13 version
Asterisk 16.8.0 is the latest 16 version.

I personally use the 16 version and have no issues.

>> Am 07.05.2020 um 21:30 schrieb Michael Keuter :
>> 
>> 
>> 
>>> Am 07.05.2020 um 21:13 schrieb Lonnie Abelbeck :
>>> 
>>> Nedi,
>>> 
>>> Followup, bottom line, there is something goofy with the macOS 'screen'.
>>> 
>>> I just tried the astlinux-1.3.8-genx86_64-serial.iso installer on the APU2.
>>> 
>>> If I use the "Serial" macOS application, it works just fine.
>>> https://www.decisivetactics.com/products/serial/
>>> 
>>> If I use "minicom" on an old MacBook, it works fine.
>>> 
>>> I used another AstLinux box (I have lots of them), same USB/serial 
>>> converter connected to AstLinux, ssh into AstLinux and issue:
>>> --
>>> screen --version
>>> Screen version 4.08.00 (GNU) 05-Feb-20
>>> 
>>> screen /dev/ttyUSB0 115200
>>> --
>>> it works fine.
>>> 
>>> But, if I use macOS's screen:
>>> --
>>> screen --version
>>> Screen version 4.00.03 (FAU) 23-Oct-06
>>> 
>>> screen /dev/tty.usbserial-A102MMV1 115200
>>> ---
>>> as soon as the menus appear, the screen flashes wildly as if I was typing 
>>> characters.
>>> 
>>> Bottom line, don't use the macOS 'screen' with a USB/serial adapter and 
>>> expect it to always work.
>>> 
>>> Lonnie
>> 
>> As a free alternative you can try ZTerm:
>> https://dalverson.com/zterm/
>> 
>> It is very, very old, but still work for me on High Sierra (I guess it will 
>> not work on Catalina anymore).
>> 
>>>> On May 7, 2020, at 1:22 PM, Lonnie Abelbeck  
>>>> wrote:
>>>> 
>>>> Nedi,
>>>> 
>>>> Very weird you can receive data but not send.
>>>> 
>>>> On my MacBook Air, USB to serial and a NULL modem cable to APU2.
>>>> 
>>>> $ ls /dev/tty.*
>>>> /dev/tty.Bluetooth-Incoming-Port   /dev/tty.usbserial-A102MMV1
>>>> 
>>>> $ screen /dev/tty.usbserial-A102MMV1 115200
>>>> 
>>>> ## interact over serial
>>>> ## exit with Control-a Control-\ (confirm with y)
>>>> 
>>>> [screen is terminating]
>>>> 
>>>> 
>>>> Have you used your USB/serial terminal setup successfully before ?
>>>> 
>>>> Lonnie
>>>> 
>>>> 
>>>> 
>>>> 
>>>>> On May 7, 2020, at 11:43 AM, nedi  wrote:
>>>>> 
>>>>> Hi lonnie, 
>>>>> Yes I have SSD  on slot 3 mSATA 
>>>>> I Used the Image astlinux-1.3.8-genx86_64-serial.iso 
>>>>> I made USB boot stick with windows 10  Rufus in DD image mode
>>>>> 
>>>>> I see booting I can chose F10  and make memory test  after that or 
>>>>> directtly  if I don’t press F10 I can  booting directly to the  astlinux, 
>>>>> the installer menu appears  and if the menu appears I can’t chose 
>>>>> anything.
>>>>> 
>>>>> if I press enter or arows nothing happend
>>>>> 
>>>>> Nedi
>>>>> 
>>>>>> Am 07.05.2020 um 18:11 schrieb Lonnie Abelbeck 
>>>>>> :
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>>> On May 7, 2020, at 10:02 AM, nedi  wrote:
>>>>>>> 
>>>>>>> Hi, 
>>>>>>> I have new apu4d2  Mainboard. Installer hang on Astlinux installer 
>>>>>>> menu, I can’t install if I press enter in the Terminal or on physical 
>>>>>>> usb keyboard.
>>>>>>> I use USB Serial Adapter on my Mac OSX and Baudrate is 115200 
>>>>>>> Bios Version is 4.11.0.2
>>>>>>> screen /dev/cu.usbserial 115200
>>>>>>> 
>>>>>>> Regards 
>>>>>>> Nedi
>>>>>> 
>>>>>> Questions ...
>>>>>> 
>>>>>> Do you have a mSATA SSD installed in the APU2 in the proper slot 
>>>>>> (labeled mSATA) ?
>>>>>> 
>>>>>> Did you use this ISO ...
>>>>>> Generic x86-64bit (Serial Console):
>>>>>> https://s3.amazonaws.com/mirror.astlinux-project/downloads/iso/astlinux-1.3.8-genx86_64-serial.iso
>>>>>> 
>>>>>> Did you use something like this to copy the ISO to a USB drive: (macOS)
>>>>>> https://abelbeck.com/lonnie/astlinux/info/os-x-cf-write.php
>>>>>> 
>>>>>> 
>>>>>> If "yes" to all the above, what do you mean by "Installer hang" ?
>>>>>> 
>>>>>> Lonnie
>> 
>> Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] APU2 Install hang

[Michael Keuter]

> Am 07.05.2020 um 21:13 schrieb Lonnie Abelbeck :
> 
> Nedi,
> 
> Followup, bottom line, there is something goofy with the macOS 'screen'.
> 
> I just tried the astlinux-1.3.8-genx86_64-serial.iso installer on the APU2.
> 
> If I use the "Serial" macOS application, it works just fine.
> https://www.decisivetactics.com/products/serial/
> 
> If I use "minicom" on an old MacBook, it works fine.
> 
> I used another AstLinux box (I have lots of them), same USB/serial converter 
> connected to AstLinux, ssh into AstLinux and issue:
> --
> screen --version
> Screen version 4.08.00 (GNU) 05-Feb-20
> 
> screen /dev/ttyUSB0 115200
> --
> it works fine.
> 
> But, if I use macOS's screen:
> --
> screen --version
> Screen version 4.00.03 (FAU) 23-Oct-06
> 
> screen /dev/tty.usbserial-A102MMV1 115200
> ---
> as soon as the menus appear, the screen flashes wildly as if I was typing 
> characters.
> 
> Bottom line, don't use the macOS 'screen' with a USB/serial adapter and 
> expect it to always work.
> 
> Lonnie

As a free alternative you can try ZTerm:
https://dalverson.com/zterm/

It is very, very old, but still work for me on High Sierra (I guess it will not 
work on Catalina anymore).

>> On May 7, 2020, at 1:22 PM, Lonnie Abelbeck  
>> wrote:
>> 
>> Nedi,
>> 
>> Very weird you can receive data but not send.
>> 
>> On my MacBook Air, USB to serial and a NULL modem cable to APU2.
>> 
>> $ ls /dev/tty.*
>> /dev/tty.Bluetooth-Incoming-Port /dev/tty.usbserial-A102MMV1
>> 
>> $ screen /dev/tty.usbserial-A102MMV1 115200
>> 
>> ## interact over serial
>> ## exit with Control-a Control-\ (confirm with y)
>> 
>> [screen is terminating]
>> 
>> 
>> Have you used your USB/serial terminal setup successfully before ?
>> 
>> Lonnie
>> 
>> 
>> 
>> 
>>> On May 7, 2020, at 11:43 AM, nedi  wrote:
>>> 
>>> Hi lonnie, 
>>> Yes I have SSD  on slot 3 mSATA 
>>> I Used the Image astlinux-1.3.8-genx86_64-serial.iso 
>>> I made USB boot stick with windows 10  Rufus in DD image mode
>>> 
>>> I see booting I can chose F10  and make memory test  after that or 
>>> directtly  if I don’t press F10 I can  booting directly to the  astlinux, 
>>> the installer menu appears  and if the menu appears I can’t chose anything.
>>> 
>>> if I press enter or arows nothing happend
>>> 
>>> Nedi
>>> 
 Am 07.05.2020 um 18:11 schrieb Lonnie Abelbeck :
 
 
 
> On May 7, 2020, at 10:02 AM, nedi  wrote:
> 
> Hi, 
> I have new apu4d2  Mainboard. Installer hang on Astlinux installer menu, 
> I can’t install if I press enter in the Terminal or on physical usb 
> keyboard.
> I use USB Serial Adapter on my Mac OSX and Baudrate is 115200 
> Bios Version is 4.11.0.2
> screen /dev/cu.usbserial 115200
> 
> Regards 
> Nedi
 
 Questions ...
 
 Do you have a mSATA SSD installed in the APU2 in the proper slot (labeled 
 mSATA) ?
 
 Did you use this ISO ...
 Generic x86-64bit (Serial Console):
 https://s3.amazonaws.com/mirror.astlinux-project/downloads/iso/astlinux-1.3.8-genx86_64-serial.iso
 
 Did you use something like this to copy the ISO to a USB drive: (macOS)
 https://abelbeck.com/lonnie/astlinux/info/os-x-cf-write.php
 
 
 If "yes" to all the above, what do you mean by "Installer hang" ?
 
 Lonnie

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] APU2 Install hang

[Michael Keuter]

> Am 07.05.2020 um 20:53 schrieb Nedeljko Grgic :
> 
> Lonnie, I'm confused to, I can send data as sample f10 to get menu from apu 
> and I can make memory test and exit, I can chose bootvolume, I can with USB 
> keyboard on apu  with crtl alt delete make reboot  but I can't install if 
> press on install in menu. 
> If I press enter nothing happens and after pressing ctrl alt delete apu make 
> reboot. 
> i will try later on old WIndows hyperterminal, my USB rs232 adapter is old 
> one I don't use it some years and I don't know if works. this is my first apu 
> til now I used alix with vga. 
> 
> nedi
> Am 7. Mai 2020, um 20:22, Lonnie Abelbeck  schrieb:
> Nedi,
> 
> Very weird you can receive data but not send.
> 
> On my MacBook Air, USB to serial and a NULL modem cable to APU2.
> 
> $ ls /dev/tty.*
> /dev/tty.Bluetooth-Incoming-Port /dev/tty.usbserial-A102MMV1
> 
> $ screen /dev/tty.usbserial-A102MMV1 115200
> 
> ## interact over serial
> ## exit with Control-a Control-\ (confirm with y)
> 
> [screen is terminating]
> 
> 
> Have you used your USB/serial terminal setup successfully before ?
> 
> Lonnie

What if you try an older serial install image e.g.:
https://s3.amazonaws.com/mirror.astlinux-project/downloads/iso/astlinux-1.3.7.1-genx86_64-serial.iso
 


and later upgrade to the latest version.

> On May 7, 2020, at 11:43 AM, nedi  wrote:
> 
> Hi lonnie, 
> Yes I have SSD  on slot 3 mSATA 
> I Used the Image astlinux-1.3.8-genx86_64-serial.iso 
> I made USB boot stick with windows 10  Rufus in DD image mode
> 
> I see booting I can chose F10  and make memory test  after that or directtly  
> if I don’t press F10 I can  booting directly to the  astlinux, the installer 
> menu appears  and if the menu appears I can’t chose anything.
> 
> if I press enter or arows nothing happend
> 
> Nedi
> 
> Am 07.05.2020 um 18:11 schrieb Lonnie Abelbeck :
> 
> 
> 
> On May 7, 2020, at 10:02 AM, nedi  wrote:
> 
> Hi, 
> I have new apu4d2  Mainboard. Installer hang on Astlinux installer menu, I 
> can’t install if I press enter in the Terminal or on physical usb keyboard.
> I use USB Serial Adapter on my Mac OSX and Baudrate is 115200 
> Bios Version is 4.11.0.2
> screen /dev/cu.usbserial 115200
> 
> Regards 
> Nedi
> 
> Questions ...
> 
> Do you have a mSATA SSD installed in the APU2 in the proper slot (labeled 
> mSATA) ?
> 
> Did you use this ISO ...
> Generic x86-64bit (Serial Console):
> https://s3.amazonaws.com/mirror.astlinux-project/downloads/iso/astlinux-1.3.8-genx86_64-serial.iso
> 
> Did you use something like this to copy the ISO to a USB drive: (macOS)
> https://abelbeck.com/lonnie/astlinux/info/os-x-cf-write.php
> 
> 
> If "yes" to all the above, what do you mean by "Installer hang" ?
> 
> Lonnie

Michael

http://www.mksolutions.info



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Which Alix Mainboard to use with new Astlinux

[Michael Keuter]

Sent from a mobile device.

Michael Keuter

> Am 05.05.2020 um 02:35 schrieb David Kerr :
> 
> 
> Michael,
>   Yes, I am subscribed to astlinux commits.  I assume you refer to LXC which 
> is pretty exciting.  I don't know a whole lot about that but I suppose it 
> would be possible to link a LXC container to a physical NIC rather than to a 
> s/w bridge.  So yes, there could be applications for that.

There are different ways to configure the network. There are lot of 
configuration options.

> For LXC... is it necessary to enable the intel virtualization extensions... 
> ie, if I run AstLinux inside VMware, should I turn on VT-x/EPT and IOMMU.

That needs to be tested. But in VMware  generally you do not need that feature. 
You could easily create new VM/container.

> If your LXC implementation is general purpose it would open doors to a whole 
> lot of "accessory" applications running on the same box.

The mail goal was getting Pi-hole running :-).

> David
> 
>> On Mon, May 4, 2020 at 5:12 PM Michael Keuter  wrote:
>> For 10 € more I‘ve rather have a spare one.
>> 
>> BTW: Did you look at the commit log the last 2 days :-) ?
>> 
>> Sent from a mobile device.
>> 
>> Michael Keuter
>> 
>>>> Am 04.05.2020 um 23:08 schrieb David Kerr :
>>>> 
>>> 
>>> Michael,
>>>   What are the good uses for a 4th NIC?  I suppose if you wanted two 
>>> completely isolated internal LAN networks without using VLAN it could be 
>>> useful, would require separate h/w switch and wiring of course.  Any other 
>>> good uses?
>>> 
>>> David
>>> 
>>>> On Mon, May 4, 2020 at 4:21 PM Michael Keuter  
>>>> wrote:
>>>> 
>>>> 
>>>> > Am 04.05.2020 um 22:18 schrieb Michael Keuter :
>>>> > 
>>>> > 
>>>> > 
>>>> >> Am 04.05.2020 um 22:10 schrieb Nedeljko Grgic :
>>>> >> 
>>>> >> Sorry i made mistake ,  I thought all pcengines boards are alix 
>>>> >> mainboards. 
>>>> >> apu2e4 will be good for some time? 
>>>> > 
>>>> > Yes.
>>>> 
>>>> BTW: The 4 LAN version APU4E4 is only 10 € more.
>>>> 
>>>> >> Beste Grüsse
>>>> >> Nedeljko Grgić
>>>> > 
>>>> > Ebenfalls Grüße aus Hamburg :-).
>>>> > 
>>>> >> Am 4. Mai 2020, um 21:59, Michael Keuter  
>>>> >> schrieb:
>>>> >> 
>>>> >> 
>>>> >> Am 04.05.2020 um 16:43 schrieb David Kerr :
>>>> >> 
>>>> >> Nedi,
>>>> >>   The ALIX boards are kind of old.  PC Engines recommends their 
>>>> >> APU2/APU4 line and I would too unless you have a large installed base 
>>>> >> of Alix and really must keep the same for new deployments (though 
>>>> >> looking at PC Engines web site you might not even be able to buy ALIX 
>>>> >> any more).  Any of the APU2/4's with a minimum of 3 NIC ports would be 
>>>> >> fine.  You need three to allow for WAN, LAN and WAN failover.  4th is 
>>>> >> not necessary though I suppose there are some niche applications.
>>>> >> 
>>>> >> David
>>>> >> 
>>>> >> On Mon, May 4, 2020 at 9:04 AM nedi  wrote:
>>>> >> HI, which  Alix mainboard do you recommend me to use with newest 
>>>> >> Astlinux, I would like to upgrade my pix to newest Astlinux. And Is 
>>>> >> there a possibility to use Hylfax on Astlinux to end fax from windows 
>>>> >> through Astlinux
>>>> >> Regards
>>>> >> Nedi
>>>> >> 
>>>> >> And BTW with the next AstLinux version 1.3.10 32-bit boards are not 
>>>> >> supported anymore.
>>>> >> So please don't buy a new ALIX board. Take a look a our Wiki:
>>>> >> 
>>>> >> https://doc.astlinux.org/userdoc:documentation#generic_64-bit_x86_64_boards_and_appliances
>>>> >> 
>>>> >> Michael
>>>> > 
>>>> > Michael
>>>> 
>>>> Michael
>>>> 
>>>> http://www.mksolutions.info
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> ___
>>>> Astlinux-users mailing list
>>>> Astlinux-users@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>> 
>>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>>> pay...@krisk.org.
>>> ___
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>> 
>>> Donations to support AstLinux are graciously accepted via PayPal to 
>>> pay...@krisk.org.
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Which Alix Mainboard to use with new Astlinux

[Michael Keuter]

For 10 € more I‘ve rather have a spare one.

BTW: Did you look at the commit log the last 2 days :-) ?

Sent from a mobile device.

Michael Keuter

> Am 04.05.2020 um 23:08 schrieb David Kerr :
> 
> 
> Michael,
>   What are the good uses for a 4th NIC?  I suppose if you wanted two 
> completely isolated internal LAN networks without using VLAN it could be 
> useful, would require separate h/w switch and wiring of course.  Any other 
> good uses?
> 
> David
> 
>> On Mon, May 4, 2020 at 4:21 PM Michael Keuter  wrote:
>> 
>> 
>> > Am 04.05.2020 um 22:18 schrieb Michael Keuter :
>> > 
>> > 
>> > 
>> >> Am 04.05.2020 um 22:10 schrieb Nedeljko Grgic :
>> >> 
>> >> Sorry i made mistake ,  I thought all pcengines boards are alix 
>> >> mainboards. 
>> >> apu2e4 will be good for some time? 
>> > 
>> > Yes.
>> 
>> BTW: The 4 LAN version APU4E4 is only 10 € more.
>> 
>> >> Beste Grüsse
>> >> Nedeljko Grgić
>> > 
>> > Ebenfalls Grüße aus Hamburg :-).
>> > 
>> >> Am 4. Mai 2020, um 21:59, Michael Keuter  schrieb:
>> >> 
>> >> 
>> >> Am 04.05.2020 um 16:43 schrieb David Kerr :
>> >> 
>> >> Nedi,
>> >>   The ALIX boards are kind of old.  PC Engines recommends their APU2/APU4 
>> >> line and I would too unless you have a large installed base of Alix and 
>> >> really must keep the same for new deployments (though looking at PC 
>> >> Engines web site you might not even be able to buy ALIX any more).  Any 
>> >> of the APU2/4's with a minimum of 3 NIC ports would be fine.  You need 
>> >> three to allow for WAN, LAN and WAN failover.  4th is not necessary 
>> >> though I suppose there are some niche applications.
>> >> 
>> >> David
>> >> 
>> >> On Mon, May 4, 2020 at 9:04 AM nedi  wrote:
>> >> HI, which  Alix mainboard do you recommend me to use with newest 
>> >> Astlinux, I would like to upgrade my pix to newest Astlinux. And Is there 
>> >> a possibility to use Hylfax on Astlinux to end fax from windows through 
>> >> Astlinux
>> >> Regards
>> >> Nedi
>> >> 
>> >> And BTW with the next AstLinux version 1.3.10 32-bit boards are not 
>> >> supported anymore.
>> >> So please don't buy a new ALIX board. Take a look a our Wiki:
>> >> 
>> >> https://doc.astlinux.org/userdoc:documentation#generic_64-bit_x86_64_boards_and_appliances
>> >> 
>> >> Michael
>> > 
>> > Michael
>> 
>> Michael
>> 
>> http://www.mksolutions.info
>> 
>> 
>> 
>> 
>> 
>> ___
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>> 
>> Donations to support AstLinux are graciously accepted via PayPal to 
>> pay...@krisk.org.
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Which Alix Mainboard to use with new Astlinux

[Michael Keuter]

> Am 04.05.2020 um 22:18 schrieb Michael Keuter :
> 
> 
> 
>> Am 04.05.2020 um 22:10 schrieb Nedeljko Grgic :
>> 
>> Sorry i made mistake ,  I thought all pcengines boards are alix mainboards. 
>> apu2e4 will be good for some time? 
> 
> Yes.

BTW: The 4 LAN version APU4E4 is only 10 € more.

>> Beste Grüsse
>> Nedeljko Grgić
> 
> Ebenfalls Grüße aus Hamburg :-).
> 
>> Am 4. Mai 2020, um 21:59, Michael Keuter  schrieb:
>> 
>> 
>> Am 04.05.2020 um 16:43 schrieb David Kerr :
>> 
>> Nedi,
>>   The ALIX boards are kind of old.  PC Engines recommends their APU2/APU4 
>> line and I would too unless you have a large installed base of Alix and 
>> really must keep the same for new deployments (though looking at PC Engines 
>> web site you might not even be able to buy ALIX any more).  Any of the 
>> APU2/4's with a minimum of 3 NIC ports would be fine.  You need three to 
>> allow for WAN, LAN and WAN failover.  4th is not necessary though I suppose 
>> there are some niche applications.
>> 
>> David
>> 
>> On Mon, May 4, 2020 at 9:04 AM nedi  wrote:
>> HI, which  Alix mainboard do you recommend me to use with newest Astlinux, I 
>> would like to upgrade my pix to newest Astlinux. And Is there a possibility 
>> to use Hylfax on Astlinux to end fax from windows through Astlinux
>> Regards
>> Nedi
>> 
>> And BTW with the next AstLinux version 1.3.10 32-bit boards are not 
>> supported anymore.
>> So please don't buy a new ALIX board. Take a look a our Wiki:
>> 
>> https://doc.astlinux.org/userdoc:documentation#generic_64-bit_x86_64_boards_and_appliances
>> 
>> Michael
> 
> Michael

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Which Alix Mainboard to use with new Astlinux

[Michael Keuter]

> Am 04.05.2020 um 16:43 schrieb David Kerr :
> 
> Nedi,
>   The ALIX boards are kind of old.  PC Engines recommends their APU2/APU4 
> line and I would too unless you have a large installed base of Alix and 
> really must keep the same for new deployments (though looking at PC Engines 
> web site you might not even be able to buy ALIX any more).  Any of the 
> APU2/4's with a minimum of 3 NIC ports would be fine.  You need three to 
> allow for WAN, LAN and WAN failover.  4th is not necessary though I suppose 
> there are some niche applications.
> 
> David
> 
> On Mon, May 4, 2020 at 9:04 AM nedi  wrote:
> HI, which  Alix mainboard do you recommend me to use with newest Astlinux, I 
> would like to upgrade my pix to newest Astlinux. And Is there a possibility 
> to use Hylfax on Astlinux to end fax from windows through Astlinux
> Regards
> Nedi

And BTW with the next AstLinux version 1.3.10 32-bit boards are not supported 
anymore.
So please don't buy a new ALIX board. Take a look a our Wiki:

https://doc.astlinux.org/userdoc:documentation#generic_64-bit_x86_64_boards_and_appliances

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] SNMP on Astlinux

[Michael Keuter]

> Am 22.04.2020 um 11:43 schrieb Michael Knill 
> :
> 
> Even though I don't use SNMP, I thought I would add the default configuration 
> from the doco just in case I wanted it one day.
> A couple of my systems are now complaining as follows:
> Apr 22 16:32:38 1280-IPCPROD-GW1 daemon.err snmpd[7707]: ipaddress_linux: 
> could not open /proc/net/if_inet6: No such file or directory
> Apr 22 16:32:41 1280-IPCPROD-GW1 daemon.err snmpd[7707]: ipaddress_linux: 
> could not open /proc/net/if_inet6: No such file or directory
> Apr 22 16:32:44 1280-IPCPROD-GW1 daemon.err snmpd[7707]: ipaddress_linux: 
> could not open /proc/net/if_inet6: No such file or directory
>  
> Any idea what it could be? Note these systems were built new whereas other 
> systems which are working fine were upgraded!
> I'm thinking of just turning it off.
>  
> Regards
> Michael Knill

Hi Michael,

does "/proc/net/if_inet6" exist on this system?
On my systems it does exist.

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] No audio when incoming SIP trunk calls forwarded by endpoint back out of same SIP trunk

[Michael Keuter]

> Am 30.03.2020 um 14:32 schrieb The Cadillac Kid via Astlinux-users 
> :
> 
> Ive had this same issue..  while im not running on astlinux on my production 
> sites..  ive found that I needed to do one of 2 things..  
> anchor the media at the asterisk server, so the directmedia = no  on the SIP 
> trunk, and in the SIP settings I needed to have my externip = 
> my.public.ip.here  and localnet = 172.16.0.5/255.255.252.0   (use your 
> localnet)..  it seems that the forward sends the Internal IP of asterisk in 
> the redirect for the forward..   
> 
> I Ihandle my forwarding a little different. I handle it on the server as 
> opposed to the phone..  (I have XML apps that forward the call in asterisk 
> and light  the lamp on the phone when the user presses the key)..  those 
> sites where the call is forwarded at asterisk vs the phone itself seem to 
> fare a little better..  the reason I do this is the call still forwards even 
> if ther phone gets unplugged, and the user can use our web-based User 
> interface to turn their forward on / off remotely or change it. 
> 
> in one case. the SIP provider is velocity, I had to actually Answer(), 
> establish audio then transfer the call before 2 way audio would establish..   
> I accomplished this by answering then playing a quick "please hold" then 
> sending the call off to the external number..   

Hi Christopher,

the tip with "Answer" (and playing music during transfer ("m-option" of the 
Dial command)) worked fine!

> I can give you nore details if you wish to do this method
> -Christopher
> 
> On Monday, March 30, 2020, 4:09:09 AM EDT, Tom Chadwin 
>  wrote:
> 
> 
> Morning all
> 
> We have a SIP trunk, with ample channels. With staff at home, they have tried 
> to forward their phones to their home numbers. They do this on the endpoints 
> themselves (Snom D305). However, it's not working. An incoming external call 
> hits the phone, and is forwarded, rings, and is answered. However, after 
> pickup, there is no audio either way.
> 
> Can anyone think of any reason why this might be happening?
> 
> Thanks
> 
> Tom
> 
> 
> Tom Chadwin, ICT Manager


Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] FYI: WireGuard 1.0.0 is now official

[Michael Keuter]

> Am 30.03.2020 um 16:35 schrieb Lonnie Abelbeck :
> 
> Greetings,
> 
> FYI, I forwarded (below) a note from the WireGuard mailing list.
> 
> My favorite VPN type (as well as many of you reading this) has achieved a 
> major milestone.  Additionally, an outside security audit of WireGuard has 
> been performed.
> 
> For those previously concerned about the non-official status of WireGuard, 
> those concerns should now be minimized.
> 
> Lonnie
> 
> 
> 
> Begin forwarded message:
> 
> From: "Jason A. Donenfeld" 
> Subject: [ANNOUNCE] WireGuard 1.0.0 for Linux 5.6 Released
> Date: March 29, 2020 at 9:16:43 PM CDT
> To: WireGuard mailing list 
> 
> Hi folks,
> 
> Earlier this evening, Linus released [1] Linus 5.6, which contains our
> first release of WireGuard. This is quite exciting. It means that
> kernels from here on out will have WireGuard built-in by default. And
> for those of you who were scared away prior by the "dOnT uSe tHiS
> k0de!!1!" warnings everywhere, you now have something more stable to
> work with.
> 
> The last several weeks of 5.6 development and stabilization have been
> exciting, with our codebase undergoing a quick security audit [3], and
> some real headway in terms of getting into distributions.
> 
> We'll also continue to maintain our wireguard-linux-compat [2]
> backports repo for older kernels. On the backports front, WireGuard
> was backported to Ubuntu 20.04 (via wireguard-linux-compat) [4] and
> Debian Buster (via a real backport to 5.5.y) [5]. I'm also maintaining
> real backports, not via the compat layer, to 5.4.y [6] and 5.5.y [7],
> and we'll see where those wind up; 5.4.y is an LTS release.
> 
> Meanwhile, the usual up-to-date distributions like Arch, Gentoo, and
> Fedora 32 will be getting WireGuard automatically by virtue of having
> 5.6, and I expect these to increase in number over time.
> 
> Enjoy!
> Jason
> 
> 
> [1] 
> https://lore.kernel.org/lkml/CAHk-=wi9zt7stg-uspx0uwqzam6op9jzz6xu1ckyu1cicpd...@mail.gmail.com/
> [2] https://git.zx2c4.com/wireguard-linux-compat/
> [3] https://lore.kernel.org/netdev/20200319003047.113501-1-ja...@zx2c4.com/
> [4] 
> https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/tree/debian/dkms-versions?h=master-next
> [5] 
> https://salsa.debian.org/kernel-team/linux/-/tree/master/debian%2Fpatches%2Ffeatures%2Fall%2Fwireguard
> [6] https://git.zx2c4.com/wireguard-linux/log/?h=backport-5.4.y
> [7] https://git.zx2c4.com/wireguard-linux/log/?h=backport-5.5.y

Hi Lonnie,

this is great news!

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Upgrading Coreboot firmware of PC Engines APU with flashrom

[Michael Keuter]

Hi Lonnie,

Its long ago, but it can be that dmidecode is also needed.
Build it as well, just in case.

Sent from a mobile device.

Michael Keuter

> Am 28.03.2020 um 14:13 schrieb Lonnie Abelbeck :
> 
> 
> 
>> On Mar 28, 2020, at 7:05 AM, Dr. Peter Voigt  wrote:
>> 
>> My AstLinux machine is a PC Engines APU1 and I would like to upgrade
>> the strongly outdated Coreboot BIOS.
>> 
>> Usualy, under Linux and FreeBSD there is a flash program called
>> "flashrom" which can be used to flash the BIOS from the running
>> Operating system (Linux or FreeBSD). E.g. for Debian and FreeBSD package
>> information is available here:
>> https://packages.debian.org/buster/flashrom
>> https://www.freshports.org/sysutils/flashrom/
>> 
>> Almost three years ago I successfully did the BIOS upgrade from a
>> running pfSense.
>> 
>> Does AstLinux as well provide flashrom to do this job?
> 
> Hi Peter,
> 
> flashrom is a package for custom builds, but we don't include it in the 
> standard builds.
> 
> If you want, I could build and create a flashrom-1.1.tar.gz for you to use. 
> If yes, are you using the 64-bit genx86_64-serial image ?  Let me know.
> 
> But in general, if your BIOS is working it is usually best to leave as is.
> 
> Lonnie
> 
> 
> 
> 
> 
> ___
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.



___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Re: [Astlinux-users] Conference attendees "limit"

[Michael Keuter]

> Am 12.03.2020 um 10:32 schrieb Tom Chadwin :
> 
> Hello
> 
> We have two conference rooms set up on a Jetway NF9HG-2930 with 2GB RAM (I 
> think). I am being asked how many users can dial in to these conferences. My 
> understanding is that limits are not hard/software-defined, but rather depend 
> on performance of the hardware. Can anyone confirm, and if so, give an 
> estimate, or let me know what other info might be needed in order to estimate 
> (such as codecs in use, or what else)?
> 
> Many thanks
> 
> Tom

Hi Tom,

one limit would be the number of external trunk channels :-). 
But I guess 10-12 users should be no problem (maybe more).

Michael

http://www.mksolutions.info





___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.