Brian May via luv-main wrote:
> The luv.asn.au domain has NS records that refer to invalid servers for
> luv.asn.au, wonder if this is what they are talking about here.
I just received mail from luv-talk claiming that my membership had been
suspended due to bounced mail. So far as I know, my m
Brian May via luv-main wrote:
> Just wondering if Telstra supports IPv6?
When I last checked (several years ago, at best), they supported it only over
their high-end business-grade connections, and definitely not over Bigpond.
If they had commenced support for it recently, I would expect them
Peter Ross via luv-main wrote:
> P.S. luv-main is "dead". I do not get mails anymore.
It's working here.
Maybe your lack of luv-main mail is due to the Australian summer holidays; or
perhaps everybody's Linux systems are working reliably at the moment and
there's no need to post requests for co
Chris Samuel via luv-main wrote:
> I'm trying to get Slurm working on a RHEL7.2 system and I've hit an issue
> where
> systemd is already using the cpuacct cgroup hierarchy and that prevents Slurm
> from using it as it seems to be the one case where it can only be in use once.
While this does
I've spent time today trying to configure SPF, DKIM and DMARC for my domain.
Experience will determine how successful I have been.
The next step is to configure my mail system, running Postfix, to check
inbound mail using these mechanisms. Which tool do others prefer for this
purpose?
My DMARC r
Russell Coker wrote:
> I use opendkim to check DKIM and also sign outbound messages. In almost all
> cases the program that signs messages will also check messages - assuming you
> use the same server for inbound and outbound mail.
>
I'm using opendkim as well (in both directions, naturally
Russell Coker via luv-main wrote:
> To run KVM virtual machines it seems to be recommended to un virsh which
> requires XML.
I've run kvm guests directly, without virsh installed, while also managing
them from the console. Thus, whether you actually need virsh depends on your
requirements and
Brian May via luv-main wrote:
> Seems to work for me. Is very slow to respond however. 10 seconds just
> to get the HTML page,
No such delays from here (central Princeton over a cable connection).
ping6 shows
rtt min/avg/max/mdev = 115.398/119.020/125.329/3.533 ms
__
Russell Coker via luv-main wrote:
> On Fri, 15 Jan 2016 09:52:30 AM Tony Langdon via luv-main wrote:
> > > Facebook is now compelling sysadmins to use SPF or DKIM. This isn't
> > > going to go away. It's only a matter of time before Internode starts
> > > using DKIM to placate Facebook.
> >
> >
Joel W. Shea via luv-main wrote:
> On Thu, Jan 14, 2016 at 08:56:52PM -0500, Jason White wrote:
> > Widespread use of DMARC will result in changes to well established
> > conventions. I don't personally object to having the list server
> > rewrite the "From" field and add a "Reply-to" header that
Brian May via luv-main wrote:
> Russell Coker via luv-main writes:
>
> > On Sat, 16 Jan 2016 09:20:03 PM Erik Christiansen via luv-main wrote:
> > You are obviously not reading any messages that I write. I am not going to
> > explain myself again.
> >
> > It's time for this discussion to end.
Hello Luv members,
I've recently added DNSSec signatures to my domain (jasonjgw.net), and
supplied the key to my DNS registrar, gandi.net.
Unfortunately, my ISP's name servers, which perform DNSSec validation, now
return a SERVFAIL (indicating a validation failure) when I look up the domain.
Goog
Thanks for the responses so far - very helpful and informative as they are.
Recent versions of Bind have automatic DNSSec key/signature maintenance via
inline signing. I'm tying to put that in place now.
___
luv-main mailing list
luv-main@luv.asn.au
htt
For anyone else who is contemplating a similar path, I would recommend the
following article, which explains how to set up in-line signing of zones using
NSSEC3:
https://deepthought.isc.org/article/AA-00711/0/In-line-Signing-With-NSEC3-in-BIND-9.9-A-Walk-through.html
Note that if you have /etc/rn
Andrew McGlashan via luv-main wrote:
> Oh and I will probably up the number of bits next time I create certs,
> the default is RSA 2048.
If they start supporting elliptic curve cryptography you'll be able to obtain
reputedly stronger encryption at much reduced key lengths.
I just installed the
Andrew McGlashan via luv-main wrote:
>
> On 30/01/2016 10:32 PM, Russell Coker via luv-main wrote:
> > IE version 11 supports it and runs on Windows 7+ (all supported
> > versions of Windows). IE 10 doesn't support it and runs on Windows
> > 7 and Windows 8. Are the free upgrades from Windows 7
Russell Coker wrote:
> The number of iPhone users at LUV meetings seems a lot lower than the general
> population. People who use Windows phone are demonstrating a committment to
> MS that's much greater than average, unlike iPhone the Windows phone has
> little going for it.
All true. It'
Fraser McGlinn via luv-main wrote:
> It always a fine balance between supportability and security. But I find an
> excellent resource for deciding what ciphers i should support, Cloudflare
> post up their Nginx SSL Configuration publically on Github and update this
> whenever they change. Might be
Also worht noting:
https://blog.cloudflare.com/do-the-chacha-better-mobile-performance-with-cryptography/
___
luv-main mailing list
luv-main@luv.asn.au
http://lists.luv.asn.au/listinfo/luv-main
Tony Langdon via luv-main wrote:
> I agree, IPv6 is here, and it's not LUV's job to make their servers work
> with broken IPv6 systems. It's up to those with broken systems to fix them.
Yes it is, otherwise IPv6 migration wouldn't continue.
My phone carrier and cable provider both supply IPv
James Harper via luv-main wrote:
> I'm trying to set up a PXE server under Debian, but can't see any packages
> that support the DHCP part of the PXE protocol.
ISC DHCP did it for me when I used PXE to install Debian on a laptop in 2008.
I had to add options to the configuration but I can't re
Michael Schams via luv-main wrote:
> I am very keen to test if Asterisk (maybe in combination with FreePBX)
> is an option for a small team (one trunk, 6 to 8 endpoints, all with
> various SIP clients).
I've used Nodephone successfully with FreeSWITCH using a Snom 320 and an
Android phone as S
James Harper via luv-main wrote:
> Recently I have been seeing a problem on multiple devices where pppd never
> completes. It looks like the ISP thinks that pppd is ready for IPCP, but
> pppd isn't and so discards the IPCP packet (discarding proto 0x8021 in phase
> 5) and things just go around in
Robin Humble via luv-main wrote:
> been there :-/
> not sure that's unique to golden image deployments. pretty sure any
> system can end up like that...
I use etckeeper to track configuration changes under the /etc hierarchy in a
Git repository.
If that's valuable in your usage scenario, you
Brian May wrote:
> Just wondered if anybody here had any ideas of a problem I have had with
> Freeswitch.
Try their IRC channel; you may be able to contact the developers there. In my
experience, they resolve problems quickly.
___
luv-main mailing l
Postfix is configured on my server to use SASL authentication for messages
submitted via port 587. OpenDKIM has been set up for both signing and
verification.
In /etc/opendkim.conf, InternalHosts refers to a file that lists various
addresses, including the IPv6 range of my home network, as well as
Peter Ross via luv-main wrote:
> I thought of the same, signing on the laptop or using VPN (so you have
> a fixed address). Both of them may be considered if everything else
> fails.
>
This is indeed an option. Mobile phones and tablets make this more complicated
of course.
> However, I read t
Brian May via luv-main wrote:
> It is possible to use IMAP in exactly the same way you use POP. There is
> no requirement that keep the emails on the server after you have
> downloaded them.
If I remember rightly, keeping the messages on the server is not the default
in Fetchmail, for example -
Mark Trickett via luv-main wrote:
> I suspect that there may be compatability issues, including only 1.5Gb
> of RAM. I know Audacity is stable and usable to do the editing, just
> not the recording. A way round this is to capture the audio data
> stream from the USB source, then load into Audaci
Erik Christiansen via luv-main wrote:
> Today you could use Vim and Latex - with that you can compose a book with
> even mathematical symbols like integral signs. I've heard of Markdown,
> and understand that Vim has some support, but haven't looked into it. It
> should be lower hanging fruit th
Dede Lamb via luv-main wrote:
> When I need to produce documents I write them in markdown, convert them to
> html using pandoc and then convert that to pdf using wkhtmltopdf. I style
> the html document using css which is the easiest way i know of to apply
> styles, very little code is required
I've had good service from Linode as a hosting provider. SPF, DKIM and DMARC
took me quite a while to configure, attributable mostly to lack of experience.
I need to revisit my spam problem, yet again. The current solution is still
CRM114, which is keeping most of the spam at bay, but introducing
Arjen Lentz via luv-main wrote:
> Do you have any docu on that?
> That'd be great.
Here's the official page:
https://wiki.list.org/DEV/DMARC
In my case, I turned off features of Mailman that modified the subject lines
or bodies of outbound messages, thus preventing it from breaking DKIM
signat
For various reasons, I need to maintain a CV, and, moreover, several different
versions of it to meet different requirements.
At the moment, it's written in Markdown, maintained in a Git repository, and
uses Pandoc for conversion to various file formats (e.g., PDF via LaTeX, HTML,
Microsoft Word/O
Brian May wrote:
> I personally use Sphinx for the same purpose. As in the tool that is
> often used for Python documentation. Similar, but uses restructured
> text, not markdown.
Thank you. I had read about it but hadn't looked at the documentation. While
LaTeX may turn out to be a better choi
As a further note to this discussion, AsciiDoc also appears to be interesting,
in that it supports conditionals as well as conversion to a variety of
formats. The AsciiDoctor implementation seems to be the most current and
feature rich.
___
luv-main mail
Andrew McGlashan via luv-main wrote:
> You could extend the concepts of available and enabled as with an
> Apache2 config...
[...]
Actually, that's quite interesting. I'll give it further thought.
___
luv-main mailing list
luv-main@luv.asn.au
https:
I've recently turned to rspamd 1.7.1 as my antispam solution.
So far, it seems to be effective, but I've only been using it for a day or so.
Interestingly, the latest version offers neural network-based analysis, which
is probably the right direction for development to be taking (as one factor in
Tom Robinson via luv-main wrote:
> I may have confused 'kindness' for 'service' above. I think the Telstra Tech.
> I've been dealing with
> has just 'lent a hand' and fixed my socket on the wall. I'm beginning to
> think that the Network
> Boundary Point has always been a termination either some
Reading this thread inspired the question of how to solve the problem if the
systemd journal is used.
The best that I could find via a quick web search is
https://jjacky.com/2013-10-06-run-triggers-on-systemd-journal-messages/
Are there better solutions?
(Just curiosity - I have no immediate need
Upon attaching a USB hard drive to an old, but up to date, Linux laptop last
weekend, the block device corresponding to the drive was not created.
The kernel logs showed that the USB device was probed for mtp support, which
failed.
After searching the Web, the solution that I found was to
Have you tried remind? As I recall, it can also generate Postscript calendars.
On 9/12/18, 03:14, "luv-main on behalf of Lindsay W via luv-main"
wrote:
I am looking for a simply appointment reminder app, I am NOT interested in
anything online. As well as normal appointments I would like
I have a Lenovo P51 laptop here (currently running Microsoft Windows 10) on
which I'm contemplating installing Linux - probably Arch Linux, or perhaps
Debian Testing - or another distribution that is kept fairly up to date. Arch
is of interest in that the packages are kept fairly close to upstream,
rickett
Sent: Wednesday, January 23, 2019 4:33 AM
To: Jason White ; luv-main
Subject: Re: Contemplating a complex UEFI-based Linux installation
Hello Jason,
On 1/23/19, Jason White via luv-main wrote:
> I have a Lenovo P51 laptop here (currently running Microsoft Windows
> 10) on which I
Thank you, Wen - these observations are helpful and valuable.
In my case, the machine came with Secure Boot enabled. I understand that there
is malware which targets the boot process, but it's also true that Secure Boot
complicates life for Linux users and distributors considerably. Thus, it's
bot
I now have a working, text-based Arch Linux installation on the laptop in
question. Secure Boot is off for the moment. I plan next to install a
graphical desktop environment and the Orca screen reader. (I've raised
questions on the relevant mailing list.)
This laptop has two GPUs, an Intel GPU and
On 2/1/19 3:49 AM, Craig Sanders via luv-main wrote:
I was going to say that for the price this sort of thing usually goes
for,
you'd be better off building a micro-atx PC with 2 or more ethernet ports -
but scorptec has them for $85, so they're surprisingly good value.
Thanks for the analysis
While installing Linux recently, I found that Windows 10 would only
shrink the NTFS partition to approximately half of its previous size. I
read claims via a web search for information on this subject that there
are metadata in the middle of an NTFS partition, and Microsoft's tools
won't reduce
I've been reading about IPFS (https://www.ipfs.io/), and I'm becoming
interested in these emerging peer to peer technologies.
Suppose that I want to share files among several of my machines, with
synchronization of files/directories, but without a server/client
arrangement. Encrypted network
an if you don't use relays then your data
isn't stored on any third party computers.
H
On Sat, Feb 09, 2019 at 02:39:51PM -0500, Jason White via luv-main wrote:
> I've been reading about IPFS (https://www.ipfs.io/), and I'm becoming
>
You may need to use dd to copy the entire drive to a file at a destination with
sufficient free space, then try to recover files from that image.
From: luv-main on behalf of stripes theotoky via
luv-main
Reply-To: stripes theotoky
Date: Saturday, May 18, 2019 at 12:39
To: , LUV mailing lis
As a side question, how reliable is their IMAP server? If I remember rightly,
it used to have a reputation for not conforming to standards, but that was a
very long time ago with Microsoft Exchange.
I'm wondering whether Linux clients would be able to work with it.
At this point, I'm still comf
On 6/7/19, 01:21, "Brian May" wrote:
I haven't had any problems. Other then the one I mentioned here.
I use Postfix for all outgoing emails, so the clients talk to Postfix
for outgoing email.
That's a good idea. I might opt for something similar if running a mail server
bec
Andrew McGlashan via luv-main wrote:
> The gpg.conf change didn't help, still got micahflee key growing just
> with an "automatic, checking trustdb" action, triggered on use of gpg. :
What happens if you remove that key and retrieve it again - this time from the
alternative key server.
There's
This isn't a well defined question at this point, but I'm asking here as
there may be insight on offer.
I'm currently using a Linksys WRT AC1900 as my router at home (the
original version, not v2). It has OpenWRT installed, and I keep it up to
date. It's fine for the moment.
When 802.11ax
If you want to avoid installing Windows client, I suppose your best option
would be IPSec. These days, the implementation of choice appears to be
Strongswan. There are configuration examples on the strongswan.org Web site.
On 8/26/19, 23:06, "luv-main on behalf of Piers via luv-main"
wrote:
On 10/23/19, 08:20, "luv-main on behalf of Andrew Greig via luv-main"
wrote:
Thanks to all,
For some reason my system is fully operational now, just as I was trying
to decipher the man btrfs comments.
My only suggestion is to consider whether an uninterruptable power supply wo
Has Thunderbird been upgraded on your system recently? If not, has the
window manager or desktop environment?
Finding out what has changed would allow you to submit a more precise
bug report regarding the component likely to be responsible.
On 4/16/20 12:57 AM, Andrew Greig via luv-main wro
I'm interested in accessing files on a Mac OS machine over the network
from a Linux host.
They're both my laptops, and currently on the same network, but this is
not always the case (i.e., doing this over the Internet may be desirable
at some point).
I read a while ago that Apple was moving
Thank you - these observations have helped considerably.
On 4/27/20 12:44 AM, Geoff D'Arcy wrote:
On 27/04/2020 06.01, Jason White via luv-main wrote:
I'm interested in accessing files on a Mac OS machine over the
network from a Linux host.
They're both my laptops, and curren
On 11/28/20 5:33 PM, Andrew Greig via luv-main wrote:
I have a Ubuntu 18.04.5 LTS distro with a RAID 1 pair under btrfs.And
now I am considering upgrading to another LTS release.
Will the commands relating to the RAID survive the upgrade, will the
script work from Ed survive the upgrade?
I
On 11/30/20 1:19 AM, Andrew Worsley via luv-main wrote:
I agree. Note that Internode, despite being owned by iiNet, do fully
support IPv6 and have done for decades. I believe they were one
of the
first ISPs in Australia to deploy it.
Indeed they were, and it used to be reliable o
On 11/29/20 7:51 PM, Mike O'Connor via luv-main wrote:
This is connected to a PC router (6 ethernet ports) running a standard
Linux and a 24 POE switch. I like the flexibility of a full Linux
disto for my router.
I'm currently using OpenWRT, but, next time, I would prefer a device
that can
On 12/28/20 4:11 AM, Russell Coker via luv-main wrote:
With Debian you have a "net install" image that's about 180M to 350M
which is
text based by default and can install to either desktop or text-mode (which
mostly means server) depending on options chosen.
I very much prefer this approach:
On 1/16/21 6:59 AM, Russell Coker via luv-main wrote:
We currently run Mailman 2 which is not supported in Debian/Bullseye which
will freeze soon. So upgrading will force an upgrade to Mailman 3 (which is a
good thing anyway), above are the upgrade docs. One thing to note is that
URLs for arc
On 15/2/21 1:03 am, pushin.linux via luv-main wrote:
Ecryptfs_write_metadata: Errorattempting to write header information
to lower file; rc= [-28]
If the system drive is full, as you indicate, then the error message
could be due to an attempt to write to an ecryptfs file system on the
full
I recently tried to access an SMB file system exported by my Mac (Mac OS
11.6) under Linux, and noticed the following.
I used a cifs mount with appropriate options, including the /seal/
option for encryption support. I was able to mount the file system and
access files. However, if I ran an ls
On 26/8/22 00:08, David via luv-main wrote:
A Lenovo representative gave a presentation about being enthusiastic to
support Linux, earlier this year
My understanding is that they're certifying an increasing range of their
systems as compatible with Linux.
I don't know what this precisely m
On 29/8/22 17:48, Brian May wrote:
Also I don't see webcam, or fingerprint reader being included. 2 devices
mentioned here as probably going to cause problems.
I agree. Fingerprint readers may be less troublesome today, as some of
the newer devices reportedly perform the recognition directly
On 11/12/22 21:09, Les Kitchen via luv-main wrote:
1. As you've already realised, sed's "-i", "in-place" option
just puts the output into a temporary file, which it then
renames, so you have to pass through all the data anyway.
And that's pretty much unavoidable, because the modific
On 18/12/22 18:52, Piers Rowan via luv-main wrote:
So CentOS is going away where to next?
CentOS Stream, perhaps? It's reputed to be only slightly ahead of Red
Hat Enterprise Linux.
My main concern about CentOS and similar distributions, though, is that
there reportedly isn't a supported, i
On 19/12/22 08:59, Brian May via luv-main wrote:
I am currently using Debian + flatpak (where possible) to install apps
that I really want to keep up to date or not available in Debian.
I searched on the Web, but I couldn't find an easy way to separate
free/open-source apps from non-free one
While trying to run rsync to update backup files on an old external USB
drive, I received the following errors in the kernel log. Interestingly,
the device is disconnected and later reconnects. It's connected via a
powered USB hub.
I suspect the drive is probably a decade old at this point, bu
On 3/1/23 12:23, Duncan Roe via luv-main wrote:
Bit of a long shot, but are you using the original cable that came with the
external drive?
Thank you for asking, and, yes, it's the original (short) cable.
___
luv-main mailing list -- luv-main@luv
On 3/1/23 14:09, Les Kitchen via luv-main wrote:
To back what Duncan said, yes, it's always worthwhile trying a
known good cable. May the Good Lord protect us from bad USB
cables!
I connected it to a different port on the hub (further away from the
other cables), and had more success.
What I
On 26/3/23 19:52, Rohan McLeod via luv-main wrote:
Rather irritatingly it ignored the "+" but regardless one of the
'finds' was:
https://www.theregister.com/2020/09/28/eric_raymond_linux_beats_windows_prediction/
Then there's the alternative rediction, that Microsoft will attempt to
shift
On 27/3/23 18:02, Rohan McLeod via luv-main wrote:
Jason ; continuing in this dark vein and given the preference for
mobile devices running Android;
perhaps Google would just move their users to a similar model, if they
thought MicroSoft was onto a goodthing ? :-)
I suppose they're already t
On 28/5/23 03:01, Rohan McLeod via luv-main wrote:
Andrew my impression of the bad email situation is that somehow the
technical fixes are themselves the problems;
I have found the testing tool at internet.nl to e useful in making sure
that SPF, DKIM, DMARC, DNSSec and DANE are all confi
Dear Linux users,
I run a small server that provides e-mail, among other services. For
this purpse, it runs Postfix and Dovecot - there's nothing surprising
about it.
Are there any additional measures that I should take these days to
secure it, especially against authentication-related attac
aside, I have found the kernel-based Linux WireGuard
implementation to be highly reliable.
On 4/7/23 17:58, Jason White via luv-main wrote:
Dear Linux users,
I run a small server that provides e-mail, among other services. For
this purpse, it runs Postfix and Dovecot - there's nothing surpr
On 31/7/23 17:22, piers via luv-main wrote:
- There are no log entries on the server for my connections + all
other users are fine
- All users on the internal network have no issues, only me
- Thunderbird, Other email program, Outlook on Windows VM all fail to
connect to MY server GMAIL is
On 31/7/23 18:53, piers via luv-main wrote:
4077CBBF3C7F:error:806F:system library:BIO_connect:Connection
refused:../crypto/bio/bio_sock2.c:125:calling connect()
Are you sure there isn't an entry in IPTables/NFTables on the server
which is blocking the incoming connection on port 993
82 matches
Mail list logo