- WLUG - wlug.mailman3.com

Re: Openvpn and Network mapping
by Higgins, Benjamin J Feb. 4, 2019

Feb. 4, 2019

Nick: Reminder... just because you *can* doesn't mean you *should*. That is all. --ben From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 11:26 AM To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org>; Levasseur, Kenneth <klevasseur(a)wpi.edu> Cc: Krichevsky, Nicholas Jacob <njkrichevsky(a)wpi.edu> Subject: [WLUG] Re: Openvpn and Network mapping The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fg…> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Re: Openvpn and Network mapping
by Krichevsky, Nicholas Jacob Feb. 3, 2019

Feb. 3, 2019

The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Re: Openvpn and Network mapping
by Levasseur, Kenneth Feb. 3, 2019

Feb. 3, 2019

I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Re: Openvpn and Network mapping
by Levasseur, Kenneth Feb. 3, 2019

Feb. 3, 2019

Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Openvpn and Network mapping
by Krichevsky, Nicholas Jacob Feb. 3, 2019

Feb. 3, 2019

So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Re: struggling w/ reliable printers on CUPS in small office
by Aljerin Butler,Jr. Jan. 25, 2019

Jan. 25, 2019

Try my website here (especially HPLIP) at the compatibility links.(http://customdesktopsolutions.mywebcommunity.org/index.php/linux-ope… Al Butler On Wednesday, January 23, 2019, 11:12:51 PM EST, Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> wrote: I have an HP Officejet 8600 that only gets "paused" if I unplug it, in my testing. YMMV Get Outlook for Android From: Bradley Noyes via WLUG <wlug(a)lists.wlug.org> Sent: Wednesday, January 23, 2019 11:07:29 AM To: Worcester Linux Users' Group General Discussion Cc: Bradley Noyes Subject: [WLUG] struggling w/ reliable printers on CUPS in small office WLug-gers, tl;dr: Can someone recommend a printer (or printer brand) that is reliable for printing via CUPS? I’m struggling w/ printers in a small office and i've struggled to get any kind of guidance on-line. The volume of pages printed at the office is probably around 100 pages a day and there are 4 printers — all HPs and all consumer grade — each printer has its purpose, e.g. there's an 11x17 printer, one color laser, one BW laster, one color inkjet. The office is all iMACs, which connect to a Linux CUPS server. The iMacs were networking directly w/ the printers, but i added the CUPS server to try to mitigate the poor reliability with only marginal results. Routinely printers become “paused” in CUPS so i need to go in and ‘unpause’ them, also some printers just fall of the network entirely. Inevitably the only printer that works most of the time is the ink-jet which is a lot more expensive to re-fill. I’m looking for a reliable solution. If anyone has a recomendation that’d be great! Thanks, — Brad _______________________________________________ WLUG mailing list -- wlug(a)lists.wlug.org To unsubscribe send an email to wlug-leave(a)lists.wlug.org _______________________________________________ WLUG mailing list -- wlug(a)lists.wlug.org To unsubscribe send an email to wlug-leave(a)lists.wlug.org

4 4

Demon haunted laptop has found the light...
by Tim Keller Jan. 11, 2019

Jan. 11, 2019

Now running Ubuntu 18.10 and working happy as a clam... Touch screen works and everything! Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

4 5

Re: Last Reminder: WLUG Meeting tomorrow! Taylor Room (rm 128)
by Tim Keller Jan. 10, 2019

Jan. 10, 2019

Yes, this room is has a large screen and a VGA/HDMI connection. As as aside, do you need a ride tonight? Thanks, Tim. On Thu, Jan 10, 2019 at 2:18 AM Krichevsky, Nicholas Jacob via WLUG < wlug(a)lists.wlug.org> wrote: > I believe so, yes. It definitely has HDMI. > > Get Outlook for Android <https://aka.ms/ghei36> > > ------------------------------ > *From:* Keith Wright via WLUG <wlug(a)lists.wlug.org> > *Sent:* Thursday, January 10, 2019 2:07:09 AM > *To:* Worcester Linux Users' Group General Discussion > *Cc:* wlug(a)lists.wlug.org; turbofx(a)gmail.com; Keith Wright > *Subject:* [WLUG] Re: Last Reminder: WLUG Meeting tomorrow! Taylor Room > (rm 128) > > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > Last reminder that we've got a meeting tomorrow in the WPI Student Center > > Taylor Room (rm 128) at 7PM. > > I just noticed this is a new room. > > It has a big screen with a VGA connection, yes? > > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

2 1

VGA
by Keith Wright Jan. 10, 2019

Jan. 10, 2019

"Krichevsky, Nicholas Jacob" <njkrichevsky(a)wpi.edu> says: > I believe so, yes. It definitely has HDMI. I don't think I do. I have tried this laptop in the Mid-century room with VGA, I think. > Get Outlook for Android<https://aka.ms/ghei36> Who's gonna make me? -- Keith

1 0

Last Reminder: WLUG Meeting tomorrow! Taylor Room (rm 128)
by Tim Keller Jan. 10, 2019

Jan. 10, 2019

Hey Gang, Last reminder that we've got a meeting tomorrow in the WPI Student Center Taylor Room (rm 128) at 7PM. Date & Time: Jan. 10th, 2019 @ 7pm Location: WPI Student Center Room 128 "Taylor Room" It's the room at the BOTTOM of the stairs. Topic: A Scheme to Bootstrap Trust. Presenter: Dr. Keith Wright. Snacks and Refreshments will be provided and we'll head off for dinner afterwards to continue to conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

3 2