[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
** Changed in: resolvconf (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in resolvconf package in Ubuntu: Fix Released Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
** Changed in: resolvconf (Ubuntu) Status: Confirmed => Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in resolvconf package in Ubuntu: Fix Committed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
** Branch linked: lp:~ndorf/ubuntu/trusty/resolvconf/fix_lp_1349011 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in resolvconf package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
Returning to the main issue... > Could this fix be considered for trusty-updates? The patch is very simple and applying it involves little risk, so I'd say yes. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in resolvconf package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
>>> undesirable behavior: all DNS queries go to the VPN nameservers >> That is in most cases the *desired* behavior > On today's systems, I don't think so. [...] Ubuntu run a dnsmasq instance... > Rather than overwrite this... You are right in saying that when there is a local forwarding nameserver then it should be used (i.e., its address should be listed in resolv.conf) instead of external nameservers. Resolvconf is designed to implement this. If a nameserver address is 127.* or ::1 then resolvconf doesn't list any more addresses (provided the value of the environment variable TRUNCATE_NAMESERVER_LIST_AFTER_LOOPBACK_ADDRESS is 'y'). And if the interface configurer follows resolvconf conventions and registers the address using the pattern lo.CONFIGURER then resolvconf's interface prioritization will cause a 127.* address to be listed first, and thus listed exclusively. Unfortunately, in Ubuntu, network-manager does not follow resolvconf conventions. NetworkManager starts a local forwarding nameserver and registers its listening address 127.0.1.1 under the record name "NetworkManager" instead of the correct "lo.NetworkManager". Consequently NetworkManager's record has a low priority as defined by /etc/resolvconf/interface-order instead of a high priority. Consequently nameserver addresses registered by other interface configurers can pre- empt NetworkManager's local forwarding nameserver address. This is a longstanding bug in NetworkManager. > Well, if you work at home and connect to an employer's VPN, > what earthly reason is there to send them all your Internet > DNS lookups? The only reason is that the most commonly used resolver libraries can't route DNS traffic according to the name looked up; such a library connects to a single nameserver which is expected to answer all queries. The idea that the local system should know about multiple nameservers having different information is foreign to DNS. So in general you want to configure the resolver to contact the nameserver with the most complete information. Having said that, I grant that in the special case where you have a private network with its own nameservers which have information about a private (sub)namespace and you have a local forwarding nameserver capable of routing DNS queries to the appropriate servers based on the domain then there may be speed and privacy benefits to doing such routing. > There has to be a better way of handling this than excluding every one specifically... If the aforementioned bug were fixed then, in the case where NetworkManager runs a local forwarding nameserver, it wouldn't do any harm for PPP to register nameserver addresses with resolvconf because those addresses would have lower priority than the loopback address in lo.NetworkManager and wouldn't end up appearing in resolv.conf. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in resolvconf package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
> \o/ Thanks again :) > That is in most cases the *desired* behavior, On today's systems, I don't think so. Debian and Ubuntu run a dnsmasq instance by default, with the only nameserver in /etc/resolv.conf being 127.0.1.1. Rather than overwrite this local caching server with any remote one, it makes more sense to reconfigure *it* to include/remove the new nameservers. Not only can you continue to benefit from the cache, but it's smart enough to route lookups to different servers depending on the domain. That's a benefit because: > since only the VPN nameservers have name information about both the VPN and > the Internet. > Also, under what circumstances do you not trust the VPN with your DNS traffic? Well, if you work at home and connect to an employer's VPN, what earthly reason is there to send them all your Internet DNS lookups? It's far preferable to only use their nameservers just for employer.com and 99.10 .in-addr.arpa, or whatever. Not only that, but if you have a local nameserver that provides local names, you really don't want to wait for the remote to time out before querying those, either. That's exactly what NetworkManager does, simply by sending dnsmasq a DBus message with the new servers, and (optionally) what zones to use them for. However, it only works if the specific plugin in use is excluded from resolvconf's ppp/ip-up script. Come to think of it, there's a growing number of NM VPN plugins in the repos nowadays. There has to be a better way of handling this than excluding every one specifically... -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
> I see that your change has made it to vivid \o/ > undesirable behavior: all DNS queries go to the VPN nameservers That is in most cases the *desired* behavior, since only the VPN nameservers have name information about both the VPN and the Internet. Also, under what circumstances do you not trust the VPN with your DNS traffic? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
Thanks Thomas, I see that your change has made it to vivid (Ubuntu 15.04). Could this fix be considered for trusty-updates? Without it, users of the L2TP plugin are faced with a rather subtle, but quite undesirable behavior: all DNS queries go to the VPN nameservers, even if the VPN is not a default route, in which case this could reasonably be considered a security violation (leaking of private information, namely all your Internet DNS lookups, no pun intended). -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
** Description changed: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: - % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up - 16c16 - < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) - --- - > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) - - % diff /etc/ppp/ip-down.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-down + % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
I'll apply this patch upstream for the upcoming 1.76 release. However I am not sure that Ubuntu is still syncing this package from Debian, so someone may need to apply this in Ubuntu too. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) % diff /etc/ppp/ip-down.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-down 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1349011] Re: nm-l2tp-service needs exception in ppp ip-up/down scripts
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: resolvconf (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to resolvconf in Ubuntu. https://bugs.launchpad.net/bugs/1349011 Title: nm-l2tp-service needs exception in ppp ip-up/down scripts Status in “resolvconf” package in Ubuntu: Confirmed Bug description: There is an actively maintained NetworkManager L2TP VPN plugin, available as an Ubuntu package here: https://launchpad.net/~seriy- pr/+archive/ubuntu/network-manager-l2tp. Hopefully it will be a part of Ubuntu soon. Like nm-pptp-service, it needs an exception in /etc/ppp/ip-{up,down}.d/000resolvconf (part of the resolvconf package) as follows: % diff /etc/ppp/ip-up.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-up 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) % diff /etc/ppp/ip-down.d/000resolvconf /tmp/resolvconf-1.69ubuntu1.1/debian/resolvconf.000resolvconf.ppp.ip-down 16c16 < nm-l2tp-service-*|nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) --- > nm-pptp-service-*|/org/freedesktop/NetworkManager/PPP/*) Since that's how it works for the PPTP plugin, could we add the L2TP one as well so that it can work out of the box on Ubuntu? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/resolvconf/+bug/1349011/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp