- WLUG - wlug.mailman3.com

Re: Um..wow..

by John Stoffel

>>>>> "Tim" == Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > I'm busy spinning up an Jitsi instance in Digital Ocean for > tonight.. the default Ubuntu 22.04 droplet.. needs 204 updates > apply.. when it starts.. 22.04 is upto version 6 I think, so I'm not too surprised. Good luck with the test!

April 11, 2024

Um..wow..

by Tim Keller

I'm busy spinning up an Jitsi instance in Digital Ocean for tonight.. the default Ubuntu 22.04 droplet.. needs 204 updates apply.. when it starts.. I was just a bit surprised.. Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 11, 2024

Re: Reminder! Next meeting April 11th, 2024 Topic: TBD, xz, net_filter, etc..

by John Stoffel

Sorry guys, I can't make it this month to the meeting, enjoy it without me!

April 9, 2024

Reminder! Next meeting April 11th, 2024 Topic: TBD, xz, net_filter, etc..

by Tim Keller

Hey Gang, We've got a meeting next week on the 11th! Location: Technocopia, 44 Portland St. Worcester MA Time: 7PM Virtual Location: TBD.. Topic: TBD, though there's a whole bunch of security stuff to talk about! Obviously, we'd all be remiss if we didn't talk about xz. We should also talk about kernel root bug as well: https://pwning.tech/nftables/ Beyond that, I'm sure we'll get off on a bunch of different topics. If there's something you want to talk about, by all means bring it up! As usual, we'll have snacks and refreshments available and we'll head off for dinner and continue the conversation! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 5, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Cara Salter

On 3/17/24 04:52, Michael Voorhis via WLUG wrote: > Outgoing SMTP is not blocked and will function, but is frequently > blacklisted by recipients who refuse to accept email originating from a > residential IP block. I have a relay in Amazon-EC2 that sends the > email. Some recipients continue to not like that, but doing > SPF/DKIM/DMARC goes a long way, and I've had no trouble sending to > recipients at gmail and at various MS outlook/o365ish recipients. +1 to SPF/DKIM/DMARC dealing with a lot of challenges related to selfhosting email. I'm not using my residential IP, but they're still really easy to set up for a large payoff. > > The biggest issue I have is that if the cablemodem goes offline for a > long enough time, my IP address changes. But I've got by now a > well-established checklist of stuff that I need to do when the house IP > changes, so I just walk through the list and all is well in a few > minutes. Decent email senders will queue the bounced email for a few > days before bouncing back to sender and I'm not aware of having lost > anything. I've found that OctoDNS + iCinga pair well for both detecting when my external IP changes, and getting fresh DNS records out quickly. I wonder how difficult it'd be to figure out some automation to do it all for me... --cs

March 16, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Michael Voorhis

Outgoing SMTP is not blocked and will function, but is frequently blacklisted by recipients who refuse to accept email originating from a residential IP block. I have a relay in Amazon-EC2 that sends the email. Some recipients continue to not like that, but doing SPF/DKIM/DMARC goes a long way, and I've had no trouble sending to recipients at gmail and at various MS outlook/o365ish recipients. The biggest issue I have is that if the cablemodem goes offline for a long enough time, my IP address changes. But I've got by now a well-established checklist of stuff that I need to do when the house IP changes, so I just walk through the list and all is well in a few minutes. Decent email senders will queue the bounced email for a few days before bouncing back to sender and I'm not aware of having lost anything. --MCV. > I think the answer is "it depends". As Mike Voorhis says, his home > stuff just works. And I certainly allow incoming SSH and other > traffic to my home network. I honestly haven't tested if they > block outgoing SMTP (port 25 traffic) recently, but checking now, > they don't seem to be blocking it since I could get to my VPS on port > 25 from home no problem.

March 16, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Tim Keller

This is the alcohol on the beach clause.. Become a pain in the ass and they'll point to clause L on their website and kill your access. It's interesting there's no SSH on that list.. What is also interesting is that they don't want you running squid.. because I think they don't want people blocking ads.. Tim. On Fri, Mar 15, 2024 at 12:36 PM John Stoffel <john(a)stoffel.org> wrote: > > I think the answer is "it depends". As Mike Voorhis says, his home > stuff just works. And I certainly allow incoming SSH and other > traffic to my home network. I honestly haven't tested if they block > outgoing SMTP (port 25 traffic) recently, but checking now, they don't > seem to be blocking it since I could get to my VPS on port 25 from > home no problem. > > I *have* been slowly working to get Wireguard setup at home so I can > tunnel over a VPN to my VPS to make some things simpler, so I just > have one end-point on my OPNsense Firewall at home which allows > connections from remote devices into my network. This way I don't > need quite as many firewall rules on OPNSense. At least that's the > idea, but lack of time and bugs have slowed my progress here. > > > I could swear I read before, at least for residential services that > > Charter (now Spectrum) internet did NOT allow you to host a site > > which is why I have never tried to do it. I would guess that its > > all about the bandwidth dollars. Below is a link to their current > > TOS (terms of service) in case it is of interest: > > I think if you start hosting something that gets their attention, > they'll shut you down. *shrug* not really sure. > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

March 15, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by John Stoffel

I think the answer is "it depends". As Mike Voorhis says, his home stuff just works. And I certainly allow incoming SSH and other traffic to my home network. I honestly haven't tested if they block outgoing SMTP (port 25 traffic) recently, but checking now, they don't seem to be blocking it since I could get to my VPS on port 25 from home no problem. I *have* been slowly working to get Wireguard setup at home so I can tunnel over a VPN to my VPS to make some things simpler, so I just have one end-point on my OPNsense Firewall at home which allows connections from remote devices into my network. This way I don't need quite as many firewall rules on OPNSense. At least that's the idea, but lack of time and bugs have slowed my progress here. > I could swear I read before, at least for residential services that > Charter (now Spectrum) internet did NOT allow you to host a site > which is why I have never tried to do it. I would guess that its > all about the bandwidth dollars. Below is a link to their current > TOS (terms of service) in case it is of interest: I think if you start hosting something that gets their attention, they'll shut you down. *shrug* not really sure.

March 15, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Keith Wright

Cara Salter via WLUG <wlug(a)lists.wlug.org> writes: > Funnily enough, I get a 403 error when I try to view that page. Last I > remember it allowed services for private use. > -------- Original Message -------- > From: THE HAMMER via WLUG <wlug(a)lists.wlug.org> > https://www.spectrum.com/policies/internet-use-policy I get a page titled: Spectrum Internet Acceptable Use Policy, which says, in part: 2. Prohibited Activities Using the System, Network, and Service. Any activity or use of the Service which violates system or network security or integrity are prohibited and may result in criminal and civil liability. Such violations include, without limitation, the following: L. Running any type of server on the system that is not consistent with personal, residential use. This includes but is not limited to FTP, IRC, SMTP, POP, HTTP, SOCS, SQUID, NTP, DNS or any multi-user forums. So they threaten you with jail time for listening on port 25. PHLHT!! -- Keith

March 14, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Michael Voorhis

I've had my house-server on the internet via Charter Spectrum for many many years. I send and receive (a tiny amt of) email, there's a webserver, and other small items. I've made no attempt to conceal any of this. --MCV. On 3/14/24 10:14 AM, THE HAMMER via WLUG wrote: > I could swear I read before, at least for residential services that > Charter (now Spectrum) internet did NOT allow you to host a site > which is why I have never tried to do it. I would guess that its all > about the bandwidth dollars.

March 14, 2024