February 2019 - WLUG - wlug.mailman3.com

(text-based mp3 player) Anyone use mpg321/mpg123 ?

by Doug Mildram

Not trying to prove I'm the biggest dinosaur in the zoo, but I do like TEXT windows ("Terminal",etc) and to play my saved/local mp3 files, mpg123 floats my boat ....especially to random-play-everything-from-a-file-list", or just " cd ArtistDeJour ; mpg123 * */* " or such. mpg321 is not in base Mint (nor other release's base generally) pkg list, but Mint base+3rdparty DID grab everything else it / mpg321 needed. ( pardon confusion, 321 vs 123 = all the same, if you apt-get or otherwise get "mpg321" you get the "mpg123" command.) I had it working on CentOS, with full features usable mid-stream, ( "h" would display a menu of commands like " 1,2,3,4,5,6,7,8,9,0" would jump to 10,20,.....90% portions of the track) and so on. but I dumped CentOS on my fileserver-with-sound, replaced with Mint 19.1 (which BTW solved a firefox-hangs-my-box issue) and I lost the interactive features. e.g. "h" does nothing at the moment, and when I run mpg123 I don't see the "type h for help" output I used to get. So it's just not enabled! Anyone else use this? -doug p.s. whatever Remote Control option is, that's not what the trick needed, though I don't understand it. (I stared at the args/Options below until believing I didnt need any of these flags to use the cmds listed ) But what i CAN'T show at the moment is what the interactive cmds (which "h" will list, normally) are (were until I upgraded). But I think i will reboot on the centOS partition and try. -doug =============non-human "manpage"-like help below. $ mpg321 --help High Performance MPEG 1.0/2.0/2.5 Audio Player for Layer 1, 2, and 3. Version 0.3.2-1 (2012/03/25). Written and copyrights by Joe Drew, now maintained by Nanakos Chrysostomos and others. Uses code from various people. See 'README' for more! THIS SOFTWARE COMES WITH ABSOLUTELY NO WARRANTY! USE AT YOUR OWN RISK! Usage: mpg321 [options] file(s) | URL(s) | - Options supported: --verbose or -v Increase verbosity --quiet or -q Quiet mode (no title or boilerplate) --gain N or -g N Set gain (audio volume) to N (0-100) --skip N or -k N Skip N frames into the file --frames N or -n N Play only the first N frames -o dt Set output devicetype to dt [esd,alsa(09),arts,sun,oss] --audiodevice N or -a N Use N for audio-out --stdout or -s Use stdout for audio-out --au N Use au file N for output --cdr N Use cdr file N for output --wav N or -w N Use wave file N for output --test or -t Test only; do no audio output --list N or -@ N Use playlist N as list of MP3 files --random or -Z Play files randomly until interrupted --shuffle or -z Shuffle list of files before playing --loop N or -l N Play files N times. 0 means until interrupted -R Use remote control interface -3 Restart "remote shell". Used only when in "Remote control" mode. -F Turn on FFT analysis on PCM data. Remote mode only -B Read recursively the given directories -S Report mp3 file to AudioScrobbler -K Enable Basic Keys -x Set xterm title setting -b Number of decoded frames for the output buffer -p hostname:port Use proxy server -u username:password Use proxy server basic authentication -U username:password Use proxy server basic authentication by using environment variables --aggressive Try to get higher priority --help or --longhelp Print this help screen --version or -V Print version information Basic keys: * or / Increase or decrease volume. m Mute/unmute n Skip song. This version of mpg321 has been configured with the libao default as its default libao output device.

Feb. 28, 2019

Re: DVI Initial Resolution

by Dennis Payne

Yes but I refuse to go backward unless I have to. xrandr is read only under Wayland. I found a simpler solution to my problem. The TV has an audio input next to the VGA input that I didn't notice. Of course I'll have to buy a VGA cable since I don't think my son will appreciate losing his monitor cable for the project. Still need to get a software interface running which doesn't need a mouse and keyboard hooked up. EmulationStation has been suggested. I plan on using open source games not emulators but it has "ports" which allows running native applications. Just have to build it under Fedora to test. On Mon, 2019-02-25 at 02:41 +0000, Krichevsky, Nicholas Jacob via WLUG wrote: > It includes both. Gnome just ships with Wayland enabled by default, > but you can change that. Not sure how xrandr works under Wayland. > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > Sent: Sunday, February 24, 2019 9:41 PM > > To: wlug(a)lists.wlug.org > > Cc: Dennis Payne > > Subject: [WLUG] Re: DVI Initial Resolution > > > > >  > > > Fedora uses Wayland now. I assume xrandr would no longer apply. > > > > On Mon, 2019-02-25 at 01:25 +0000, Krichevsky, Nicholas Jacob via > WLUG wrote: > > Could you set the resolution with xrandr using a systemd service? > > Using something like > > > > this seems promising. > > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > > > Sent: Sunday, February 24, 2019 8:23 PM > > > > To: wlug(a)lists.wlug.org > > > > Cc: Dennis Payne > > > > Subject: [WLUG] DVI Initial Resolution > > > > > > > > I've had the cub scouts build an arcade machine. The TV being used > > for > > > > display is connected by DVI. Fedora defaults to a resolution the TV > > > > does not support. If I hookup a monitor on the VGA port I can set > > the > > > > resolution of the second monitor but it switches back to an > > unsupported > > > > resolution when the second monitor is disconnected. Anyone know how > > to > > > > force a specific resolution on boot? > > > > > > > > _______________________________________________ > > WLUG mailing list -- > > > > wlug(a)lists.wlug.org > > > > > > > > To unsubscribe send an email to > > > > wlug-leave(a)lists.wlug.org > > > > > > > > > > > > > > > _______________________________________________WLUG mailing list -- > wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org

Feb. 26, 2019

Re: DVI Initial Resolution

by Krichevsky, Nicholas Jacob

It includes both. Gnome just ships with Wayland enabled by default, but you can change that. Not sure how xrandr works under Wayland. ________________________________ From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 24, 2019 9:41 PM To: wlug(a)lists.wlug.org Cc: Dennis Payne Subject: [WLUG] Re: DVI Initial Resolution Fedora uses Wayland now. I assume xrandr would no longer apply. On Mon, 2019-02-25 at 01:25 +0000, Krichevsky, Nicholas Jacob via WLUG wrote: Could you set the resolution with xrandr using a systemd service? Using something like this<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsuperuser.…> seems promising. ________________________________ From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 24, 2019 8:23 PM To: wlug(a)lists.wlug.org Cc: Dennis Payne Subject: [WLUG] DVI Initial Resolution I've had the cub scouts build an arcade machine. The TV being used for display is connected by DVI. Fedora defaults to a resolution the TV does not support. If I hookup a monitor on the VGA port I can set the resolution of the second monitor but it switches back to an unsupported resolution when the second monitor is disconnected. Anyone know how to force a specific resolution on boot? _______________________________________________ WLUG mailing list -- <mailto:wlug@lists.wlug.org> wlug(a)lists.wlug.org To unsubscribe send an email to <mailto:wlug-leave@lists.wlug.org> wlug-leave(a)lists.wlug.org

Feb. 25, 2019

Re: DVI Initial Resolution

by Dennis Payne

Fedora uses Wayland now. I assume xrandr would no longer apply. On Mon, 2019-02-25 at 01:25 +0000, Krichevsky, Nicholas Jacob via WLUG wrote: > Could you set the resolution with xrandr using a systemd service? > Using something like > > this seems promising. > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > Sent: Sunday, February 24, 2019 8:23 PM > > To: wlug(a)lists.wlug.org > > Cc: Dennis Payne > > Subject: [WLUG] DVI Initial Resolution > > > > > I've had the cub scouts build an arcade machine. The TV being used > for > > display is connected by DVI. Fedora defaults to a resolution the TV > > does not support. If I hookup a monitor on the VGA port I can set the > > resolution of the second monitor but it switches back to an > unsupported > > resolution when the second monitor is disconnected. Anyone know how > to > > force a specific resolution on boot? > > > > _______________________________________________WLUG mailing list -- > wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org

Feb. 25, 2019

Re: DVI Initial Resolution

by Krichevsky, Nicholas Jacob

Could you set the resolution with xrandr using a systemd service? Using something like this<https://superuser.com/a/1128905/333109> seems promising. ________________________________ From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 24, 2019 8:23 PM To: wlug(a)lists.wlug.org Cc: Dennis Payne Subject: [WLUG] DVI Initial Resolution I've had the cub scouts build an arcade machine. The TV being used for display is connected by DVI. Fedora defaults to a resolution the TV does not support. If I hookup a monitor on the VGA port I can set the resolution of the second monitor but it switches back to an unsupported resolution when the second monitor is disconnected. Anyone know how to force a specific resolution on boot? -- Dennis Payne <dulsi(a)identicalsoftware.com> _______________________________________________ WLUG mailing list -- wlug(a)lists.wlug.org To unsubscribe send an email to wlug-leave(a)lists.wlug.org

Feb. 25, 2019

DVI Initial Resolution

by Dennis Payne

I've had the cub scouts build an arcade machine. The TV being used for display is connected by DVI. Fedora defaults to a resolution the TV does not support. If I hookup a monitor on the VGA port I can set the resolution of the second monitor but it switches back to an unsupported resolution when the second monitor is disconnected. Anyone know how to force a specific resolution on boot? -- Dennis Payne <dulsi(a)identicalsoftware.com>

Feb. 25, 2019

Reminder: Meeting Tomorrow (Feb. 21st) Topic: AWX Please note location!!!

by Tim Keller

Hey Gang, This is a reminder that we've got a meeting tomorrow! Time: 7pm Date: Feb. 21st 2019 Location: Fuller Labs, Beckett Conference Room (Room 246) https://maps.wpi.edu/?id=609#!m/105273 Topic: AWX AWX is a platform for managing the automation of running ansible playbooks. My talk will include an overview of ansible / git / gitlab and AWX as they fit together as a system to manage configurations and software. For those who use puppet/chef/salt, I'm sure there will be lively comparisons. Refreshments and snacks will be provided and afterwards we'll head off (likely to the Boynton) to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 20, 2019

Meeting is on Thursday!!!

by Tim Keller

Apparently my proofreading skills were a bit off... The meeting is on THURSDAY, Feb. 21st! Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 20, 2019

Re: Reminder: LUG Meeting THIS Thursday (2/21/2017): Topic: AWX

by Keith Wright

From: Tim Keller via WLUG <wlug(a)lists.wlug.org> Meeting THIS Thursday (2/21/2017): We've got a meeting on Wednesday ^^^^^^^^ I'm confused by this. -- Keith

Feb. 19, 2019

Reminder: WLUG Meeting THIS Thursday (2/21/2017): Topic: AWX

by Tim Keller

Hey Everybody, We've got a meeting on Wednesday Location: Fuller Labs, Beckett Conference Room, RM 246 Time: 7PM Topic: AWX and Ansible. AWX is the open source upstream version of Ansible Tower. This is a system that automates the running of ansible playbooks on hosts. What's ansible? Ansible is a management and configuration system for installing / modifying and maintaining linux/unix machines. What's cooler is that AWX can natively use git to manage configs. I'll talk about ansible, playbooks and then AWX. As usual, snacks and refreshments will be provided and we'll head off for dinner afterwards to continue to conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 19, 2019

Reminder: NO MEETING TODAY!

by Tim Keller

Just a reminder, the meeting has been moved to Feb. 21st. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 14, 2019

How do I get on daily emails only??

by John Spencer

I keep getting individual emails. I have tried to change the setting so I only get emails daily not every time someone posts. Can you please make this change for me. Thanks Regards, John Spencer Connected Systems Partners Office: (978) 455-5550 x208 Cell: (978) 621-9743 jspencer(a)connectedsp.com<mailto:jspencer@connectedsp.com> www.connectedsp.com<http://www.connectedsp.com/> GET CONNECTED! All information in this email, unless indicated otherwise in the body of the email, is considered confidential and intended for the view and use of the recipient(s) only.

Feb. 13, 2019

Re: charter.net is blocking all Digital Ocean droplet email

by Kevin Stratton

I am not sure if this is off topic, but there were quite a few pay email services a while ago. I use https:/www.fastmail.com for the freedoom to switch ISPs without affecting email. They do support Thunderbird if you use an application specific password. Depending on your bandwith/storage usage, this might be an acceptable solution. On 2/13/19 1:19 PM, Steven Greenberg via WLUG wrote: > For at least a dozen years I have had my own website on GoDaddy. > I also use my GoDaddy email as my main email route. (Although > Thunderbird is getting ungodly slow of late as an email client.) > > I never want to be dependent on "free" email services like gmail. > > I am willing to pay a service like GoDaddy, so that places like > Google and Facebook can't dictate what I can do just because they > provide their services for "free". > > Charter did not start out to be a computer service provider. That's > probably why I don't want to depend on Charter for computer > services more than I have to. At the moment, Charter is the only > reasonable service of internet connection to my house. > > /Steve > > On 2/12/2019 9:24 PM, John Stoffel via WLUG wrote: >> >> I need to vent here. Charter.net which provides my internet, sucks. >> They are now refusing to accept email from *any* IP blocks owned by >> Digital Ocean, even though I've got a good mail setup on a droplet >> there, with proper DNS entries, SPF, etc. >> >> So I'm looking to spin up a new instance on some other provider, or >> I'm going to try and route the email via my @charter.net account that >> I have since I'm a customer. >> >> And I have opened a ticket with them. No answer. Jerks. >> >> What do people think of Vultr.com? Seems pretty comparable... I just >> wonder when Charter will block their IP blocks... >> >> Jerks. >> >> I think it's too expensive to buy an IPv4 address for more permanent >> use, since it's too easy for that block of 256 to be blanket banned by >> some jerks. >> >> Grr!!!!! >> >> John >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> >> > >

Feb. 13, 2019

Re: charter.net is blocking all Digital Ocean droplet email

by Steven Greenberg

For at least a dozen years I have had my own website on GoDaddy. I also use my GoDaddy email as my main email route. (Although Thunderbird is getting ungodly slow of late as an email client.) I never want to be dependent on "free" email services like gmail. I am willing to pay a service like GoDaddy, so that places like Google and Facebook can't dictate what I can do just because they provide their services for "free". Charter did not start out to be a computer service provider. That's probably why I don't want to depend on Charter for computer services more than I have to. At the moment, Charter is the only reasonable service of internet connection to my house. /Steve On 2/12/2019 9:24 PM, John Stoffel via WLUG wrote: > > I need to vent here. Charter.net which provides my internet, sucks. > They are now refusing to accept email from *any* IP blocks owned by > Digital Ocean, even though I've got a good mail setup on a droplet > there, with proper DNS entries, SPF, etc. > > So I'm looking to spin up a new instance on some other provider, or > I'm going to try and route the email via my @charter.net account that > I have since I'm a customer. > > And I have opened a ticket with them. No answer. Jerks. > > What do people think of Vultr.com? Seems pretty comparable... I just > wonder when Charter will block their IP blocks... > > Jerks. > > I think it's too expensive to buy an IPv4 address for more permanent > use, since it's too easy for that block of 256 to be blanket banned by > some jerks. > > Grr!!!!! > > John > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > > -- Steven Greenberg Email: steve(a)ssgreenberg.name 251 Holland Rd. Phone: (774)241-0095 Fiskdale, Massachusetts 01518-1231 Web: www.ssgreenberg.name Other Email: s.greenberg(a)ieee.org ssg(a)alum.mit.edu

Feb. 13, 2019

charter.net is blocking all Digital Ocean droplet email

by John Stoffel

I need to vent here. Charter.net which provides my internet, sucks. They are now refusing to accept email from *any* IP blocks owned by Digital Ocean, even though I've got a good mail setup on a droplet there, with proper DNS entries, SPF, etc. So I'm looking to spin up a new instance on some other provider, or I'm going to try and route the email via my @charter.net account that I have since I'm a customer. And I have opened a ticket with them. No answer. Jerks. What do people think of Vultr.com? Seems pretty comparable... I just wonder when Charter will block their IP blocks... Jerks. I think it's too expensive to buy an IPv4 address for more permanent use, since it's too easy for that block of 256 to be blanket banned by some jerks. Grr!!!!! John

Feb. 13, 2019

Re: Openvpn and Network mapping

by Higgins, Benjamin J

Nick: Reminder... just because you *can* doesn't mean you *should*. That is all. --ben From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 11:26 AM To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org>; Levasseur, Kenneth <klevasseur(a)wpi.edu> Cc: Krichevsky, Nicholas Jacob <njkrichevsky(a)wpi.edu> Subject: [WLUG] Re: Openvpn and Network mapping The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fg…> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

Feb. 4, 2019

Re: Openvpn and Network mapping

by Krichevsky, Nicholas Jacob

The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

Feb. 3, 2019

Re: Openvpn and Network mapping

by Levasseur, Kenneth

I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

Feb. 3, 2019

Re: Openvpn and Network mapping

by Levasseur, Kenneth

Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

Feb. 3, 2019

Openvpn and Network mapping

by Krichevsky, Nicholas Jacob

So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

Feb. 3, 2019