Re: [Dorset] Using a Raspberry Pi as a Network Router

2018-07-09 Thread Terry Coles
On Sunday, 17 June 2018 11:34:02 BST Terry Coles wrote:
> I have placed files showing yhe physical and software configuration at
> http://www.hadrian-way.co.uk/Misc/Pi_Router/.
> 
> Simply put, the on-site Wi-Fi Antenna is acting as a DHCP server as well as
> an Access Point and is connected to the default Ethernet port (eth0) on the
> Pi. A USB / Ethernet Adaptor (eth1) then provides a link to the Office
> Router and the Internet.  This port obtains it's IP address automatically.
> 
> Using information from various sources I've set up dhcpcd.conf, dnsmasq.conf
> and iptables to allow traffic to be routed between the two networks.  The
> problem is that when I plug the cable into eth0 nothing is routed to
> anywhere. As soon as I unplug it, the path to the Internet is restored.

It's been a while since I last posted. I had a number of problems, most of 
which I have 
now overcome and I also had a family holiday that got in the way.

In the end, I used dnsmasq to set up the DNS Server on the Pi and I removed all 
the 
routing that I had set up using iptables commands because nodogsplash covers 
everything! In its config file.  I was able to allow only those protocols (UDP 
and TCP port 
53) that were needed to fool the phone into thinking it was on the internet 
prior to 
authentication and then port 80 and 443 to the Pi (combined Router and 
Webserver) to 
serve the content. It seems to work pretty well.

I now only have one problem (I hope). Before I started using nodogsplash, many 
of the 
Visitors were having to accept that our WiFi Access Point had no internet 
access before 
they could surf to our Home Page. This not very reliable and each version of 
Android 
behaved differently as related in my message of many months ago.  With 
nodogsplash, 
the Visitor is presented with a Sign-on Page, which he has to read and then 
Click 
'Continue'.  This routes him to the original Home Page and thence to the 
content.

On my wife's Moto G6 Plus (Android 8.0), this works well.  On my Moto G5 Plus 
(Android 
7.0), the Home Page is too big and overflows the screen.  I suspect this is to 
do with the 
built-in webserver that nodogsplash uses, because if I surf to the Home Page 
with 
nodogsplash disabled it works correctly.  I used nginx for the original content.

Any suggestions on how I can resolve this?

-- 



Terry Coles
-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Terry Coles
On Monday, 9 July 2018 15:04:52 BST Hamish MB wrote:
> Use archive.raspbian.org in your sources.list for now? That would mean 
> you wouldn't need to stop :)

It just started working :-)

-- 



Terry Coles



-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Hamish MB
Use archive.raspbian.org in your sources.list for now? That would mean 
you wouldn't need to stop :)


On 09/07/18 15:02, Terry Coles wrote:
> On Monday, 9 July 2018 14:56:11 BST Ralph Corderoy wrote:
>> So things are afoot and I think you just have to be patient.
>> https://twitter.com/ukmirrorservice seems to agree.
> Thanks Ralph, (and Patrick and Ian).
>
> Another delay to sorting out my WMT Webserver ;-(
>
> I lost a week last week because my Mother was staying and now
>

-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Terry Coles
On Monday, 9 July 2018 14:56:11 BST Ralph Corderoy wrote:
> So things are afoot and I think you just have to be patient.
> https://twitter.com/ukmirrorservice seems to agree.

Thanks Ralph, (and Patrick and Ian).

Another delay to sorting out my WMT Webserver ;-(

I lost a week last week because my Mother was staying and now

-- 



Terry Coles



-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Ian Morris
Whois indicates domain was updated this morning:

whois mirrorservice.org
Domain Name: MIRRORSERVICE.ORG
Registry Domain ID: D104609905-LROR
Registrar WHOIS Server: whois.easyspace.com
Registrar URL: http://www.easyspace.com
Updated Date: 2018-07-09T09:52:52Z
Creation Date: 2004-07-08T08:53:01Z
Registry Expiry Date: 2028-07-08T08:53:01Z
Registrar Registration Expiration Date:
Registrar: Easyspace Limited
Registrar IANA ID: 79
Registrar Abuse Contact Email: ab...@easyspace.com
Registrar Abuse Contact Phone: +44.3707555066
Reseller:
Domain Status: clientTransferProhibited
https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited
https://icann.org/epp#clientUpdateProhibited
Domain Status: renewPeriod https://icann.org/epp#renewPeriod
Domain Status: autoRenewPeriod https://icann.org/epp#autoRenewPeriod
Registrant Organization: University of Kent
Registrant State/Province: Kent
Registrant Country: GB
Name Server: NS1.BISHNET.NET
Name Server: DNS0.MIRRORSERVICE.ORG
Name Server: DNS2.MIRRORSERVICE.ORG
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form:
https://www.icann.org/wicf/

>>> Last update of WHOIS database: 2018-07-09T13:48:20Z <<<

DNS using Authoritive DNS

dig +trace www.mirrorservice.org

; <<>> DiG 9.10.3-P4-De


[snip]

www.mirrorservice.org.    900    IN    A    212.219.56.184
mirrorservice.org.    900    IN    NS    ns1.bishnet.net.
mirrorservice.org.    900    IN    NS    dns0.mirrorservice.org.
mirrorservice.org.    900    IN    NS    dns2.mirrorservice.org.
;; Received 221 bytes from
2001:630:341:12::157#53(dns0.mirrorservice.org) in 21 ms

However using google gives different results:

ipm@spruce ~ $ dig  www.mirrorservice.org @8.8.8.8

; <<>> DiG 9.10.3-P4-Debian <<>> www.mirrorservice.org @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20314
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.mirrorservice.org.        IN    A

;; ANSWER SECTION:
www.mirrorservice.org.    68    IN    A    212.219.56.184

;; Query time: 26 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Jul 09 14:55:09 BST 2018
;; MSG SIZE  rcvd: 66

ipm@spruce ~ $ dig  www.mirrorservice.org @8.8.8.8

; <<>> DiG 9.10.3-P4-Debian <<>> www.mirrorservice.org @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19442
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.mirrorservice.org.        IN    A

;; ANSWER SECTION:
www.mirrorservice.org.    484    IN    A    62.233.120.98

;; Query time: 27 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Jul 09 14:55:10 BST 2018
;; MSG SIZE  rcvd: 66



So .


Looks like the domain could well have expired this morning ... since
been rectified ... but caching DNS servers have still to drop entries
pointing to the "domain Expired" expiration.


Nothing you can do other than wait  or set up your own caching
nameserver that does authoritive queries only and doesn't recurse (which
is what i do )


HTH,


Ian.


On 09/07/18 14:41, Terry Coles wrote:
> Could some of you guys try the UK Mirror Service (https://
> www.mirrorservice.org/)?
>
> This is used by Raspbian (and many other distros) to download updates and 
> install packages (eg apt-get install etc) but it threw up a not found error 
> this morning.  When I typed the domain name into Chromium I got the message 
> that the domain had expired.  (This behaviour was consistent across my 
> Raspberry Pi and my Kubuntu Linux Box, which both access the internet via my 
> PlusNet ISP.
>
> Hamish was able to access the site and I managed to get to it through my 
> Android phone.  I then tried changing the DNS Servers in my Netgear router to 
> the Google Public servers and then the OpenDNS servers and now I'm getting 
> 'This site can't be reached'.
>
> Is this another of those 'wobblys' like I had with raspberrypi.org the other 
> week?
>

-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Patrick Wigmore
On Mon, 09 Jul 2018 14:41:12 +0100, Terry Coles wrote:
> Could some of you guys try the UK Mirror Service (https://
> www.mirrorservice.org/)?

I, too, receive a domain holding page from Easyspace saying that the 
domain has expired.

They have posted about it on Twitter. It looks like the issue has been 
fixed, but we just have to wait for it to propagate to all DNS 
servers.
https://twitter.com/UKMirrorService/status/1016255918441484288


-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

Re: [Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Ralph Corderoy
Hi Terry,

> Could some of you guys try the UK Mirror Service (https://
> www.mirrorservice.org/)?

https://isup.me/www.mirrorservice.org thinks it's up.
But `curl -sSgvI https://www.mirrorservice.org' from home times out
trying to establish a TCP connection.  However, dropping the TLS works.

$ curl -sSgI http://www.mirrorservice.org
HTTP/1.1 200 OK
Date: Mon, 09 Jul 2018 13:49:28 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
Connection: close
Content-Type: text/html; charset=UTF-8

$

The domain name expired yesterday, and may not have been renewed in
time given this morning's update.

$ whois mirrorservice.org | grep 'Date:.*T.*Z'
Updated Date: 2018-07-09T09:52:52Z
Creation Date: 2004-07-08T08:53:01Z
Registry Expiry Date: 2028-07-08T08:53:01Z
$

`tracepath www.mirrorservice.org' from home worked a few minutes ago,

 5:  peer2-et-0-1-1.slough.ukcore.bt.net  49.525ms asymm  6 
 6:  195.99.125.1850.010ms 
 7:  ae23.londtt-sbr1.ja.net  50.338ms 
 8:  ae28.londtw-sbr2.ja.net  48.728ms 
 9:  kpsn.londtw-sbr2.ja.net  50.260ms 
10:  212.219.171.222  50.646ms 
11:  www.mirrorservice.org50.079ms reached
 Resume: pmtu 1492 hops 11 back 11 

but now takes a different route, and doesn't.

 5:  peer2-et0-0-1.slough.ukcore.bt.net   48.056ms asymm  6 
 6:  no reply
 7:  po97.core2.ld5.as20860.net   76.864ms asymm 13 
 8:  2990.core1.dc7.as20860.net   59.550ms asymm 12 
 9:  3940.core1.dc6.as20860.net   54.136ms 
10:  3936.core1.dc1.as20860.net   58.391ms 
11:  no reply
12:  no reply
13:  no reply
14:  no reply

So things are afoot and I think you just have to be patient.
https://twitter.com/ukmirrorservice seems to agree.

Cheers, Ralph.

-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR

[Dorset] Problems with The UK Mirror Service https://www.mirrorservice.org/

2018-07-09 Thread Terry Coles
Could some of you guys try the UK Mirror Service (https://
www.mirrorservice.org/)?

This is used by Raspbian (and many other distros) to download updates and 
install packages (eg apt-get install etc) but it threw up a not found error 
this morning.  When I typed the domain name into Chromium I got the message 
that the domain had expired.  (This behaviour was consistent across my 
Raspberry Pi and my Kubuntu Linux Box, which both access the internet via my 
PlusNet ISP.

Hamish was able to access the site and I managed to get to it through my 
Android phone.  I then tried changing the DNS Servers in my Netgear router to 
the Google Public servers and then the OpenDNS servers and now I'm getting 
'This site can't be reached'.

Is this another of those 'wobblys' like I had with raspberrypi.org the other 
week?

-- 



Terry Coles



-- 
Next meeting:  Bournemouth, Tuesday, 2018-07-17 20:00
Meets, Mailing list, IRC, LinkedIn, ...  http://dorset.lug.org.uk/
New thread:  mailto:dorset@mailman.lug.org.uk / CHECK IF YOU'RE REPLYING
Reporting bugs well:  http://goo.gl/4Xue / TO THE LIST OR THE AUTHOR