April 2026 - WLUG - wlug.mailman3.com

Re: email imap fail2ban --- was Reminder!!!

by John Stoffel

>>>>> "Keith" == Keith Wright <kwright(a)keithdiane.us> writes: > John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: >> >> Sorry for the delay Keith, new job, life and such all got in the way. > I'm OK without a job, but it would be nice to have a life. Hahahahah! Touche' Keith! >> So for fail2ban, I would just do: >> sudo apt install nftables iptables >> and then check the logs and see if you still get the same warning. > Yes. I did that last week. Great, are you seeing the errors still? > See you in a few hours, jit.si gods willing. Hope to see you there!

April 9, 2026

Re: email imap fail2ban --- was Reminder!!!

by Keith Wright

John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: > > Sorry for the delay Keith, new job, life and such all got in the way. I'm OK without a job, but it would be nice to have a life. > So for fail2ban, I would just do: > sudo apt install nftables iptables > and then check the logs and see if you still get the same warning. Yes. I did that last week. See you in a few hours, jit.si gods willing. -- Keith

April 9, 2026

Re: email imap fail2ban --- was Reminder!!!

by John Stoffel

>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: Sorry for the delay Keith, new job, life and such all got in the way. > John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: >>> My big project for the past few weeks was begun in a hurry when the >>> company that hosts the VPS that runs both mail and web servers sent me a >>> message saying they are going out of business. >> >>> I got another; am sending this mail throught it. >> >>> The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while >>> the new one "Debian GNU/Linux 13 (trixie)" >> >> Do you run dovecot for IMAP(s) access to your mail? Or do you just >> deliver it locally and read it using some other mail program? > I log into the VPS and use emacs (rmail-get-new-mail ... ...), which > is bound to a single keystroke, to copy mbox file from /var/... to > RMAIL in /home/kwright. Diane uses thunderbird on Windows which (I > think) uses imap to interact with dovecot on VPS. Nice! I haven't used rmail is years and years but I have fond memories. >> From time to time I use rsync to copy RMAIL@VPS to RMAIL@laptop > where I can read it again, write this reply, maybe copy it to > thumb drive or web page. >> I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a >> big problem because the configuration language has been changed, and >> it's not as stable as the old 2.3.x version is, and some features have >> been pulled. > But that part seems to be working. Whatever Hostinger put in the > Debian boot image together with a few "apt install"s of my own, just > does it. Great, I'm happy to hear this. I assume you're wife also has a login on your VPS and she's using that username/password to access her email. >> So I'd be careful upgrading. I've been thinking about deployin >> "Mail-in-box" instead, just to get more spam filtering, and more >> integration with DNS, DKIM, SPF, rspam, etc. >> >> Doing mail well is a pain. > My current pain is fail2ban, which seems like a good idea but > seems to be having a fight with systemd. I'm using fail2ban and it works great. > I get error messages that seem to indicate I need to install nft > (nftables), otherwise fail2ban can put an IPaddr in jail, but that > has no effect. Yes, you need to install a firewall tool so that fail2ban can insert rules to drop packets/connections matching rules. I have both 'nftables' and 'iptables' installed. >>> There were several web pages that said that Debian 13 could not run >>> fail2ban without special configuration. Either they were just wrong or >>> it was fixed in some 13.N release. (Does anyone know how to see N?) >>> It seemed to install just fine. > I now think there is no N. Debian 13 is one thing, after that the > problem is to apt install (and configure) the right versions of postfix, > dovecot, fail2ban, and ... ... ... >>> But now I have learned enough to reach a higher plane of confusion. LOL! I understand, it's all so complicated. So for fail2ban, I would just do: sudo apt install nftables iptables and then check the logs and see if you still get the same warning. Can you also share your configuration? for example, I have the following: $ sudo fail2ban-client status Status |- Number of jail: 1 `- Jail list: sshd which shows that I have one jail setup for 'ssh' connections. To get more details I do: $ sudo fail2ban-client status sshd Status for the jail: sshd |- Filter | |- Currently failed: 2 | |- Total failed: 276156 | `- File list: /var/log/auth.log `- Actions |- Currently banned: 2 |- Total banned: 43350 `- Banned IP list: 87.251.64.144 80.66.66.70 But if you post the output of your exact log message, I'd be happy to help. Also post your fail2ban config info as well.

April 9, 2026

WLUG Meeting Tomorrow Thursday (4/9/2026) Topic: Ubuntu FIPS for you!

by Tim Keller

We've got a meeting Tomorrow! (4/9/2026) Date & Time: 4/9/2026 @ 7PM Location: Techncopia, 44 Portland St. Worcester MA 01453 Virtual Location: https://meet.jit.si/WlugMA Topic: Ubuntu FIPS for you! Speaker: Alex Wlug member Alex will be showing off his Ubuntu laptop running in full FIPS mode . What it does, how it does it and how you can do it too! We'll also be talking about the new website, merch and other fun stuff I'm sure! As usual, we'll head off for dinner afterwards and keep the conversation going. I hope to see you there! Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 9, 2026

WLUG Meeting THIS Thursday! Topic: Security Oriented Linux

by Tim Keller

Hey Everybody, We've got a meeting this Thursday (4/9/2026) Time: 7PM Location: Techncopia, 44 Portland St. Worcester MA 01453 Virtual Location: https://meet.jit.si/WlugMA Topic: Security Oriented Linux Speaker: Alex Wlug member Alex will be showing off his security oriented linux laptop. What it does, how it does it and how you can do it too! We'll also be talking about the new website, merch and other fun stuff I'm sure! As usual, we'll head off for dinner afterwards and keep the conversation going. I hope to see you there! Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 7, 2026

email imap fail2ban --- was Reminder!!!

by Keith Wright

John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: >> My big project for the past few weeks was begun in a hurry when the >> company that hosts the VPS that runs both mail and web servers sent me a >> message saying they are going out of business. > >> I got another; am sending this mail throught it. > >> The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while >> the new one "Debian GNU/Linux 13 (trixie)" > > Do you run dovecot for IMAP(s) access to your mail? Or do you just > deliver it locally and read it using some other mail program? I log into the VPS and use emacs (rmail-get-new-mail ... ...), which is bound to a single keystroke, to copy mbox file from /var/... to RMAIL in /home/kwright. Diane uses thunderbird on Windows which (I think) uses imap to interact with dovecot on VPS. From time to time I use rsync to copy RMAIL@VPS to RMAIL@laptop where I can read it again, write this reply, maybe copy it to thumb drive or web page. > I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a > big problem because the configuration language has been changed, and > it's not as stable as the old 2.3.x version is, and some features have > been pulled. But that part seems to be working. Whatever Hostinger put in the Debian boot image together with a few "apt install"s of my own, just does it. > So I'd be careful upgrading. I've been thinking about deployin > "Mail-in-box" instead, just to get more spam filtering, and more > integration with DNS, DKIM, SPF, rspam, etc. > > Doing mail well is a pain. My current pain is fail2ban, which seems like a good idea but seems to be having a fight with systemd. I get error messages that seem to indicate I need to install nft (nftables), otherwise fail2ban can put an IPaddr in jail, but that has no effect. >> There were several web pages that said that Debian 13 could not run >> fail2ban without special configuration. Either they were just wrong or >> it was fixed in some 13.N release. (Does anyone know how to see N?) >> It seemed to install just fine. I now think there is no N. Debian 13 is one thing, after that the problem is to apt install (and configure) the right versions of postfix, dovecot, fail2ban, and ... ... ... >> But now I have learned enough to reach a higher plane of confusion. > -- Keith

April 1, 2026

Re: Reminder!!! Meeting tomorrow! Topic: Macropads + Matrix + lots of other stuff!

by John Stoffel

>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: > eroc1990 via WLUG <wlug(a)lists.wlug.org> writes: >> Methinks the Jitsi was never opened. I have up a few minutes ago. > Actually, I had nothing to do but sit with my laptop on top of my lap > and work on other things, so I left jit.si running and checked back. > About 7:45 they showed up in a new room with the meeting in progress. > I don't care much about crooked keyboards. WLUG meetings these days are > mostly a chance to test my sound and video, which I rarely use > otherwise. > My big project for the past few weeks was begun in a hurry when the > company that hosts the VPS that runs both mail and web servers sent me a > message saying they are going out of business. > I got another; am sending this mail throught it. > The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while > the new one "Debian GNU/Linux 13 (trixie)" Do you run dovecot for IMAP(s) access to your mail? Or do you just deliver it locally and read it using some other mail program? I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a big problem because the configuration language has been changed, and it's not as stable as the old 2.3.x version is, and some features have been pulled. So I'd be careful upgrading. I've been thinking about deploying "Mail-in-box" instead, just to get more spam filtering, and more integration with DNS, DKIM, SPF, rspam, etc. Doing mail well is a pain. > There were several web pages that said that Debian 13 could not run > fail2ban without special configuration. Either they were just wrong or > it was fixed in some 13.N release. (Does anyone know how to see N?) > It seemed to install just fine. > But now I have learned enough to reach a higher plane of confusion. > I had planned to ask a question, but in trying to ask it I have found > the answer; I just misread the man page and made a stupid typo. > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/FAGKX…

April 1, 2026