- WLUG - wlug.mailman3.com

Re: email imap fail2ban --- was Reminder!!!

by Keith Wright

John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: > > Sorry for the delay Keith, new job, life and such all got in the way. I'm OK without a job, but it would be nice to have a life. > So for fail2ban, I would just do: > sudo apt install nftables iptables > and then check the logs and see if you still get the same warning. Yes. I did that last week. See you in a few hours, jit.si gods willing. -- Keith

April 9, 2026

Re: email imap fail2ban --- was Reminder!!!

by John Stoffel

>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: Sorry for the delay Keith, new job, life and such all got in the way. > John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: >>> My big project for the past few weeks was begun in a hurry when the >>> company that hosts the VPS that runs both mail and web servers sent me a >>> message saying they are going out of business. >> >>> I got another; am sending this mail throught it. >> >>> The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while >>> the new one "Debian GNU/Linux 13 (trixie)" >> >> Do you run dovecot for IMAP(s) access to your mail? Or do you just >> deliver it locally and read it using some other mail program? > I log into the VPS and use emacs (rmail-get-new-mail ... ...), which > is bound to a single keystroke, to copy mbox file from /var/... to > RMAIL in /home/kwright. Diane uses thunderbird on Windows which (I > think) uses imap to interact with dovecot on VPS. Nice! I haven't used rmail is years and years but I have fond memories. >> From time to time I use rsync to copy RMAIL@VPS to RMAIL@laptop > where I can read it again, write this reply, maybe copy it to > thumb drive or web page. >> I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a >> big problem because the configuration language has been changed, and >> it's not as stable as the old 2.3.x version is, and some features have >> been pulled. > But that part seems to be working. Whatever Hostinger put in the > Debian boot image together with a few "apt install"s of my own, just > does it. Great, I'm happy to hear this. I assume you're wife also has a login on your VPS and she's using that username/password to access her email. >> So I'd be careful upgrading. I've been thinking about deployin >> "Mail-in-box" instead, just to get more spam filtering, and more >> integration with DNS, DKIM, SPF, rspam, etc. >> >> Doing mail well is a pain. > My current pain is fail2ban, which seems like a good idea but > seems to be having a fight with systemd. I'm using fail2ban and it works great. > I get error messages that seem to indicate I need to install nft > (nftables), otherwise fail2ban can put an IPaddr in jail, but that > has no effect. Yes, you need to install a firewall tool so that fail2ban can insert rules to drop packets/connections matching rules. I have both 'nftables' and 'iptables' installed. >>> There were several web pages that said that Debian 13 could not run >>> fail2ban without special configuration. Either they were just wrong or >>> it was fixed in some 13.N release. (Does anyone know how to see N?) >>> It seemed to install just fine. > I now think there is no N. Debian 13 is one thing, after that the > problem is to apt install (and configure) the right versions of postfix, > dovecot, fail2ban, and ... ... ... >>> But now I have learned enough to reach a higher plane of confusion. LOL! I understand, it's all so complicated. So for fail2ban, I would just do: sudo apt install nftables iptables and then check the logs and see if you still get the same warning. Can you also share your configuration? for example, I have the following: $ sudo fail2ban-client status Status |- Number of jail: 1 `- Jail list: sshd which shows that I have one jail setup for 'ssh' connections. To get more details I do: $ sudo fail2ban-client status sshd Status for the jail: sshd |- Filter | |- Currently failed: 2 | |- Total failed: 276156 | `- File list: /var/log/auth.log `- Actions |- Currently banned: 2 |- Total banned: 43350 `- Banned IP list: 87.251.64.144 80.66.66.70 But if you post the output of your exact log message, I'd be happy to help. Also post your fail2ban config info as well.

April 9, 2026

WLUG Meeting Tomorrow Thursday (4/9/2026) Topic: Ubuntu FIPS for you!

by Tim Keller

We've got a meeting Tomorrow! (4/9/2026) Date & Time: 4/9/2026 @ 7PM Location: Techncopia, 44 Portland St. Worcester MA 01453 Virtual Location: https://meet.jit.si/WlugMA Topic: Ubuntu FIPS for you! Speaker: Alex Wlug member Alex will be showing off his Ubuntu laptop running in full FIPS mode . What it does, how it does it and how you can do it too! We'll also be talking about the new website, merch and other fun stuff I'm sure! As usual, we'll head off for dinner afterwards and keep the conversation going. I hope to see you there! Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 9, 2026

WLUG Meeting THIS Thursday! Topic: Security Oriented Linux

by Tim Keller

Hey Everybody, We've got a meeting this Thursday (4/9/2026) Time: 7PM Location: Techncopia, 44 Portland St. Worcester MA 01453 Virtual Location: https://meet.jit.si/WlugMA Topic: Security Oriented Linux Speaker: Alex Wlug member Alex will be showing off his security oriented linux laptop. What it does, how it does it and how you can do it too! We'll also be talking about the new website, merch and other fun stuff I'm sure! As usual, we'll head off for dinner afterwards and keep the conversation going. I hope to see you there! Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 7, 2026

email imap fail2ban --- was Reminder!!!

by Keith Wright

John Stoffel via WLUG <wlug(a)lists.wlug.org> writes: >>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: >> My big project for the past few weeks was begun in a hurry when the >> company that hosts the VPS that runs both mail and web servers sent me a >> message saying they are going out of business. > >> I got another; am sending this mail throught it. > >> The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while >> the new one "Debian GNU/Linux 13 (trixie)" > > Do you run dovecot for IMAP(s) access to your mail? Or do you just > deliver it locally and read it using some other mail program? I log into the VPS and use emacs (rmail-get-new-mail ... ...), which is bound to a single keystroke, to copy mbox file from /var/... to RMAIL in /home/kwright. Diane uses thunderbird on Windows which (I think) uses imap to interact with dovecot on VPS. From time to time I use rsync to copy RMAIL@VPS to RMAIL@laptop where I can read it again, write this reply, maybe copy it to thumb drive or web page. > I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a > big problem because the configuration language has been changed, and > it's not as stable as the old 2.3.x version is, and some features have > been pulled. But that part seems to be working. Whatever Hostinger put in the Debian boot image together with a few "apt install"s of my own, just does it. > So I'd be careful upgrading. I've been thinking about deployin > "Mail-in-box" instead, just to get more spam filtering, and more > integration with DNS, DKIM, SPF, rspam, etc. > > Doing mail well is a pain. My current pain is fail2ban, which seems like a good idea but seems to be having a fight with systemd. I get error messages that seem to indicate I need to install nft (nftables), otherwise fail2ban can put an IPaddr in jail, but that has no effect. >> There were several web pages that said that Debian 13 could not run >> fail2ban without special configuration. Either they were just wrong or >> it was fixed in some 13.N release. (Does anyone know how to see N?) >> It seemed to install just fine. I now think there is no N. Debian 13 is one thing, after that the problem is to apt install (and configure) the right versions of postfix, dovecot, fail2ban, and ... ... ... >> But now I have learned enough to reach a higher plane of confusion. > -- Keith

April 1, 2026

Re: Reminder!!! Meeting tomorrow! Topic: Macropads + Matrix + lots of other stuff!

by John Stoffel

>>>>> "Keith" == Keith Wright via WLUG <wlug(a)lists.wlug.org> writes: > eroc1990 via WLUG <wlug(a)lists.wlug.org> writes: >> Methinks the Jitsi was never opened. I have up a few minutes ago. > Actually, I had nothing to do but sit with my laptop on top of my lap > and work on other things, so I left jit.si running and checked back. > About 7:45 they showed up in a new room with the meeting in progress. > I don't care much about crooked keyboards. WLUG meetings these days are > mostly a chance to test my sound and video, which I rarely use > otherwise. > My big project for the past few weeks was begun in a hurry when the > company that hosts the VPS that runs both mail and web servers sent me a > message saying they are going out of business. > I got another; am sending this mail throught it. > The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while > the new one "Debian GNU/Linux 13 (trixie)" Do you run dovecot for IMAP(s) access to your mail? Or do you just deliver it locally and read it using some other mail program? I ask because with Trixie, dovecot was upgraded to v2.4.x and it's a big problem because the configuration language has been changed, and it's not as stable as the old 2.3.x version is, and some features have been pulled. So I'd be careful upgrading. I've been thinking about deploying "Mail-in-box" instead, just to get more spam filtering, and more integration with DNS, DKIM, SPF, rspam, etc. Doing mail well is a pain. > There were several web pages that said that Debian 13 could not run > fail2ban without special configuration. Either they were just wrong or > it was fixed in some 13.N release. (Does anyone know how to see N?) > It seemed to install just fine. > But now I have learned enough to reach a higher plane of confusion. > I had planned to ask a question, but in trying to ask it I have found > the answer; I just misread the man page and made a stupid typo. > -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/FAGKX…

April 1, 2026

Re: Reminder!!! Meeting tomorrow! Topic: Macropads + Matrix + lots of other stuff!

by Keith Wright

eroc1990 via WLUG <wlug(a)lists.wlug.org> writes: > Methinks the Jitsi was never opened. I have up a few minutes ago. Actually, I had nothing to do but sit with my laptop on top of my lap and work on other things, so I left jit.si running and checked back. About 7:45 they showed up in a new room with the meeting in progress. I don't care much about crooked keyboards. WLUG meetings these days are mostly a chance to test my sound and video, which I rarely use otherwise. My big project for the past few weeks was begun in a hurry when the company that hosts the VPS that runs both mail and web servers sent me a message saying they are going out of business. I got another; am sending this mail throught it. The old SVP ran PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" while the new one "Debian GNU/Linux 13 (trixie)" There were several web pages that said that Debian 13 could not run fail2ban without special configuration. Either they were just wrong or it was fixed in some 13.N release. (Does anyone know how to see N?) It seemed to install just fine. But now I have learned enough to reach a higher plane of confusion. I had planned to ask a question, but in trying to ask it I have found the answer; I just misread the man page and made a stupid typo. -- Keith

March 29, 2026

Re: New WLUG web site

by Doug Mildram

Tux (penguin) would be cool! Will you hand off, or be webmaster? Thanks either way, plus same/s'more to everyone else... doug/dmildram in the tech void.. north of Portland ME On Wed, Mar 25, 2026, 1:54 PM John Stoffel via WLUG <wlug(a)lists.wlug.org> wrote: > > Guys, > I'm working on migrating the old WLUG website from the old non-https > server to a new Ubuntu 24.04 LTS based system with proper HTTPs > support, and using the 'grav' flatfile CMS for simpler management. > > Can people take a look at 'https://wlug.stoffel.org' and give me some > feedback on how they like the look? Or do we really care? > > Cheers, > John > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/BHA6G… >

March 26, 2026

Re: New WLUG web site

by Joe Sherman

Looks ok to me On Wed, Mar 25, 2026, 1:53 PM John Stoffel via WLUG <wlug(a)lists.wlug.org> wrote: > > Guys, > I'm working on migrating the old WLUG website from the old non-https > server to a new Ubuntu 24.04 LTS based system with proper HTTPs > support, and using the 'grav' flatfile CMS for simpler management. > > Can people take a look at 'https://wlug.stoffel.org' and give me some > feedback on how they like the look? Or do we really care? > > Cheers, > John > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/BHA6G… >

March 25, 2026

New WLUG web site

by John Stoffel

Guys, I'm working on migrating the old WLUG website from the old non-https server to a new Ubuntu 24.04 LTS based system with proper HTTPs support, and using the 'grav' flatfile CMS for simpler management. Can people take a look at 'https://wlug.stoffel.org' and give me some feedback on how they like the look? Or do we really care? Cheers, John

March 25, 2026