- WLUG - wlug.mailman3.com

张杰zhangjie20 19 辉煌牵到， 1 8 8 菜金送不停联络専员领企鹅812127090链节604958cǒм
by 谭浩 20 Apr '19

20 Apr '19

1 0

~你有一笔 1 8 8 園优惠等你领 · 详情咨询企鹅2830021360地指⑥04981cом
by 房妍佳 20 Apr '19

20 Apr '19

1 0

sZNlxmko首存新体验拵100鎹34え2 3 0 0 0 4 0 1 6 3 链节 6 0 4 9 5 3 Ｃ O Ｍ
by 屠银益 20 Apr '19

20 Apr '19

1 0

Reminder: Meeting April 18th. Topic: Open Broadcast System Location: Stratton Hall Rm 106
by Tim Keller 16 Apr '19

16 Apr '19

Hey Everybody, This Thursday at 7pm in Stratton Hall rm 106, wlug member Ian Gelman will be doing a talk about the Open Broadcast system. OBS (https://obsproject.com/) is free, open source software that allows you turn your Linux system into a powerful mobile TV studio. If you’ve watched any online content creators in the past couple of years, you’ve likely seen the software in action. In this talk, I’ll be giving an overview of what the software can do, as well as a case study on how OBS helped rocket a simple clementine to the top of the WPI subreddit. ( http://wpiwa.wpi.edu/clementine.html) We’ll finish up with a live demo where we’ll create a stream with some webcam footage, application displays, and an internet radio station. Snacks and Refreshments will be provided and afterwards we'll head off for dinner. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Next Meeting April 18th 2019, Topic: Open Broadcast Software Location: Stratton Hall rm 106
by Tim Keller 03 Apr '19

03 Apr '19

Hey Everybody, Our next WLUG meeting is going to be the 3rd Week of April!! I've shifted it down a week because of a scheduling conflict. Date/Time: April 18th, 2019 @7pm Location: WPI Stratton Hall Rm 106 Topic: Open Broadcaster Software (OBS) Presenter: Ian Gelman OBS (https://obsproject.com/) is free, open source software that allows you turn your Linux system into a powerful mobile TV studio. If you’ve watched any online content creators in the past couple of years, you’ve likely seen the software in action. In this talk, I’ll be giving an overview of what the software can do, as well as a case study on how OBS helped rocket a simple clementine to the top of the WPI subreddit. ( http://wpiwa.wpi.edu/clementine.html) We’ll finish up with a live demo where we’ll create a stream with some webcam footage, application displays, and an internet radio station. Snacks and Refreshments will be provided and afterwards we'll head off for dinner. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

free small LCD monitors 15-19"
by Doug Mildram 03 Apr '19

03 Apr '19

(final purge for this month, for me: some VGA and DVI-able hardware/MONITORS. (3) LCD monitors I am recycling or giving away. I'll choose the best taker(s) if any from WLUG perhaps mid-wednesday apr3. Or Thursday. ("TAKER"= someone or more of you, who emails me or the group saying "I'll take (this one/model ; or those 2 ; or all)". Pickup = occuring some later day; no rush. I'm not bringing them into work/WPI/worcester right away. CONDITION: All rather low-use (low hours, many years idle/unused) NO power supply issues nor any flaky issues on any of these. ==================Best one first: 18.1" 1280x1024 NEC MultiSync LCD1880SC ( TFT active) w/ VGA ( aka D-sub ) AND DVI. Very sturdy base, vertical sliding monitor 4-8" above table, and allows rotation 90 degrees if you like it the "tall" way. - Native *Resolution*. 1280 x 1024 at 60 Hz. - Contrast Ratio. 350:1. Response time: (cannot find it listed anywhere) - Color Support. 16.7 million colors. - Controls & Adjustments. Brightness, contrast, color balance, color temperature. - Dimensions (WxDxH) 15.2 in x 7.1 in x 15.5 in. - ==========SMALLEST,cutest, also well-made: 15" 1024x768 Sony SDM-S53 VGA(only) Contrast:500:1 Response time: 25msec ====================3 of 3, a low-end brand and oddball resolution: 19"(wide, but still rather small) 1440x900 Optiquest w/VGA(only)

1 0

Arcade Machine Problem
by Dennis Payne 02 Apr '19

02 Apr '19

My son's cub scout den put together an arcade machine for the Build It pin. It worked great. Then the day of the Blue & Gold where we were demoing it, it didn't work. I ended up using my laptop instead of the intended machine. I have now set it up four times on three computers and have discovered the cause of the problem. The machine is running Fedora. It has only one user and he automatically logs in. It is running wayland. Gnome is configured to automatically start EmulationStation. From there you can launch Ostrich Riders or Super Tux Kart. (I wanted only open source games with two players simultaneous preferably cooperative but more games can be put on.) The problem occurs if the machine does not have a mouse plugged in. EmulationStation starts normally but launching either game brings up the login screen. Any idea why a mouse is required and how that restriction can be removed? -- Dennis Payne dulsi(a)identicalsoftware.com https://social.freegamedev.net/channel/dulsi

1 0

aging/free books for DNS,LDAP,TCP...*NIX+BSD
by Doug Mildram 02 Apr '19

02 Apr '19

"Old" books in some cases, but some protocols never age out! (some of below maybe did...) Free books on my desk here at work/WPI, if unwanted I'll end up tossing: (2005) Addison-Wesley "The Design and Implementation of the FreeBSD OS" I got glassy-eyed diving into most of this kernel,fsys,devices,IPC,etc gore. (2003) ORA/O'Reilly "DNS & BIND Cookbook" (bind8,9) Cricket Liu 200+ pg paperback (2003) ORA "LDAP System Administration" Gerald Carter 290pg paperback (1994) Addison-Wesley "TCP/IP Illustrated, Vol. 1" W. Richard Stevens 550pg hardcover (1990) Prentice Hall "UNIX Network Programming" W. Richard Stevens 750pg hardcover ( things like fork/exec ; basic I/O ; FIFO,IPC,Sockets,TLI...ending in rlogin :) TOO OLD (1993) ORA "sendmail" ( v8 ) too old AND too nasty, though I like the Intro sec1+2 titles "MUA vs MTA" and "Why is sendmail so complex?"

1 0

Reminder: WLUG Meeting TODAY! March 14th, 2019
by Tim Keller 14 Mar '19

14 Mar '19

Hey Gang, After a comedy of email errors, the meeting it actually today.. seriously I just checked the calendar for the fourth time... Time/Date: March 14th, 2019 @ 7PM. Location: WPI Student Center Mid Century Room (Rm 331) Topic: Containerized applications Appimage, snaps, flatpack... I plan to talk about what they are and what they do and compare/contrast the different technologies used to make applications distribution agnostic. Snacks and Refreshments will be provided and afterwards well head off for dinner to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Reminder: Next Meeting is THURSDAY March 14th, 2019 @7PM
by Tim Keller 13 Mar '19

13 Mar '19

Hey Gang, We've got a meeting on Thursday!!! I don't know how I managed to screw up the date on the subject line and then send a follow up email thinking it was already Wednesday.. Sorry about that! I blame a lack of sleep... Time/Date: March 14th, 2019 @ 7PM. Location: WPI Student Center Mid Century Room (Rm 331) Topic: Containerized applications Appimage, snaps, flatpacks... I plan to talk about what they are and what they do and compare/contrast the different technologies used to make applications distribution agnostic. Snacks and Refreshments will be provided and afterwards well head off for dinner to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Reminder: Meeting TOMORROW March 14th 2019 Location:
by Tim Keller 13 Mar '19

13 Mar '19

Hey Gang, We've got a meeting tomorrow! I don't know how I managed to screw up the date on the subject line.. Sorry about that! Time/Date: March 14th, 2019 @ 7PM. Location: WPI Student Center Mid Century Room (Rm 331) Topic: Containerized applications Appimage, snaps, flatpacks... I plan to talk about what they are and what they do and compare/contrast the different technologies used to make applications distribution agnostic. Snacks and Refreshments will be provided and afterwards well head off for dinner to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

3 4

Sorry...
by Tim Keller 13 Mar '19

13 Mar '19

My daughter got her tonsils out and it's been a long week.. already... I seriously thought it was Wednesday... The meeting isn't tomorrow, it's Thursday... Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Next WLUG Meeting March 21st 2019, Topic: TBD
by Tim Keller 12 Mar '19

12 Mar '19

Hey Gang, We've got a WLUG meeting on the 14th of March Location: WPI Student Center Mid Century Room (rm 331) Time: 7pm I've got a couple ideas for topics. 1. Snaps / flatpacks / appimage. These are entirely encapsulated applications that'll run on a variety of linux distributions. My new laptop runs snaps using snapd. This is just one of a bunch of new technologies for distributing software without having it tied to the machines glibc and underlying libraries. 2. Microsoft and its complicated relationship with the OSS community. Are we moving towards a dystopian future of locked and signed bootloaders? Where your only option is to run Windows 10 with the linux subsystem. Has google essentially done the same thing with Chromebook's and ChromeOS and Android? If someone has a topic that they're dying to do, let me know. As usual refreshments and snacks will be provided and afterwards we'll head off for dinner to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

3 2

(text-based mp3 player) Anyone use mpg321/mpg123 ?
by Doug Mildram 28 Feb '19

28 Feb '19

Not trying to prove I'm the biggest dinosaur in the zoo, but I do like TEXT windows ("Terminal",etc) and to play my saved/local mp3 files, mpg123 floats my boat ....especially to random-play-everything-from-a-file-list", or just " cd ArtistDeJour ; mpg123 * */* " or such. mpg321 is not in base Mint (nor other release's base generally) pkg list, but Mint base+3rdparty DID grab everything else it / mpg321 needed. ( pardon confusion, 321 vs 123 = all the same, if you apt-get or otherwise get "mpg321" you get the "mpg123" command.) I had it working on CentOS, with full features usable mid-stream, ( "h" would display a menu of commands like " 1,2,3,4,5,6,7,8,9,0" would jump to 10,20,.....90% portions of the track) and so on. but I dumped CentOS on my fileserver-with-sound, replaced with Mint 19.1 (which BTW solved a firefox-hangs-my-box issue) and I lost the interactive features. e.g. "h" does nothing at the moment, and when I run mpg123 I don't see the "type h for help" output I used to get. So it's just not enabled! Anyone else use this? -doug p.s. whatever Remote Control option is, that's not what the trick needed, though I don't understand it. (I stared at the args/Options below until believing I didnt need any of these flags to use the cmds listed ) But what i CAN'T show at the moment is what the interactive cmds (which "h" will list, normally) are (were until I upgraded). But I think i will reboot on the centOS partition and try. -doug =============non-human "manpage"-like help below. $ mpg321 --help High Performance MPEG 1.0/2.0/2.5 Audio Player for Layer 1, 2, and 3. Version 0.3.2-1 (2012/03/25). Written and copyrights by Joe Drew, now maintained by Nanakos Chrysostomos and others. Uses code from various people. See 'README' for more! THIS SOFTWARE COMES WITH ABSOLUTELY NO WARRANTY! USE AT YOUR OWN RISK! Usage: mpg321 [options] file(s) | URL(s) | - Options supported: --verbose or -v Increase verbosity --quiet or -q Quiet mode (no title or boilerplate) --gain N or -g N Set gain (audio volume) to N (0-100) --skip N or -k N Skip N frames into the file --frames N or -n N Play only the first N frames -o dt Set output devicetype to dt [esd,alsa(09),arts,sun,oss] --audiodevice N or -a N Use N for audio-out --stdout or -s Use stdout for audio-out --au N Use au file N for output --cdr N Use cdr file N for output --wav N or -w N Use wave file N for output --test or -t Test only; do no audio output --list N or -@ N Use playlist N as list of MP3 files --random or -Z Play files randomly until interrupted --shuffle or -z Shuffle list of files before playing --loop N or -l N Play files N times. 0 means until interrupted -R Use remote control interface -3 Restart "remote shell". Used only when in "Remote control" mode. -F Turn on FFT analysis on PCM data. Remote mode only -B Read recursively the given directories -S Report mp3 file to AudioScrobbler -K Enable Basic Keys -x Set xterm title setting -b Number of decoded frames for the output buffer -p hostname:port Use proxy server -u username:password Use proxy server basic authentication -U username:password Use proxy server basic authentication by using environment variables --aggressive Try to get higher priority --help or --longhelp Print this help screen --version or -V Print version information Basic keys: * or / Increase or decrease volume. m Mute/unmute n Skip song. This version of mpg321 has been configured with the libao default as its default libao output device.

1 0

Re: DVI Initial Resolution
by Dennis Payne 26 Feb '19

26 Feb '19

Yes but I refuse to go backward unless I have to. xrandr is read only under Wayland. I found a simpler solution to my problem. The TV has an audio input next to the VGA input that I didn't notice. Of course I'll have to buy a VGA cable since I don't think my son will appreciate losing his monitor cable for the project. Still need to get a software interface running which doesn't need a mouse and keyboard hooked up. EmulationStation has been suggested. I plan on using open source games not emulators but it has "ports" which allows running native applications. Just have to build it under Fedora to test. On Mon, 2019-02-25 at 02:41 +0000, Krichevsky, Nicholas Jacob via WLUG wrote: > It includes both. Gnome just ships with Wayland enabled by default, > but you can change that. Not sure how xrandr works under Wayland. > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > Sent: Sunday, February 24, 2019 9:41 PM > > To: wlug(a)lists.wlug.org > > Cc: Dennis Payne > > Subject: [WLUG] Re: DVI Initial Resolution > > > > >  > > > Fedora uses Wayland now. I assume xrandr would no longer apply. > > > > On Mon, 2019-02-25 at 01:25 +0000, Krichevsky, Nicholas Jacob via > WLUG wrote: > > Could you set the resolution with xrandr using a systemd service? > > Using something like > > > > this seems promising. > > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > > > Sent: Sunday, February 24, 2019 8:23 PM > > > > To: wlug(a)lists.wlug.org > > > > Cc: Dennis Payne > > > > Subject: [WLUG] DVI Initial Resolution > > > > > > > > I've had the cub scouts build an arcade machine. The TV being used > > for > > > > display is connected by DVI. Fedora defaults to a resolution the TV > > > > does not support. If I hookup a monitor on the VGA port I can set > > the > > > > resolution of the second monitor but it switches back to an > > unsupported > > > > resolution when the second monitor is disconnected. Anyone know how > > to > > > > force a specific resolution on boot? > > > > > > > > _______________________________________________ > > WLUG mailing list -- > > > > wlug(a)lists.wlug.org > > > > > > > > To unsubscribe send an email to > > > > wlug-leave(a)lists.wlug.org > > > > > > > > > > > > > > > _______________________________________________WLUG mailing list -- > wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org

1 0

Re: DVI Initial Resolution
by Dennis Payne 25 Feb '19

25 Feb '19

Fedora uses Wayland now. I assume xrandr would no longer apply. On Mon, 2019-02-25 at 01:25 +0000, Krichevsky, Nicholas Jacob via WLUG wrote: > Could you set the resolution with xrandr using a systemd service? > Using something like > > this seems promising. > > > > > From: Dennis Payne via WLUG <wlug(a)lists.wlug.org> > > Sent: Sunday, February 24, 2019 8:23 PM > > To: wlug(a)lists.wlug.org > > Cc: Dennis Payne > > Subject: [WLUG] DVI Initial Resolution > > > > > I've had the cub scouts build an arcade machine. The TV being used > for > > display is connected by DVI. Fedora defaults to a resolution the TV > > does not support. If I hookup a monitor on the VGA port I can set the > > resolution of the second monitor but it switches back to an > unsupported > > resolution when the second monitor is disconnected. Anyone know how > to > > force a specific resolution on boot? > > > > _______________________________________________WLUG mailing list -- > wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org

2 1

DVI Initial Resolution
by Dennis Payne 25 Feb '19

25 Feb '19

I've had the cub scouts build an arcade machine. The TV being used for display is connected by DVI. Fedora defaults to a resolution the TV does not support. If I hookup a monitor on the VGA port I can set the resolution of the second monitor but it switches back to an unsupported resolution when the second monitor is disconnected. Anyone know how to force a specific resolution on boot? -- Dennis Payne <dulsi(a)identicalsoftware.com>

2 1

Reminder: Meeting Tomorrow (Feb. 21st) Topic: AWX Please note location!!!
by Tim Keller 20 Feb '19

20 Feb '19

Hey Gang, This is a reminder that we've got a meeting tomorrow! Time: 7pm Date: Feb. 21st 2019 Location: Fuller Labs, Beckett Conference Room (Room 246) https://maps.wpi.edu/?id=609#!m/105273 Topic: AWX AWX is a platform for managing the automation of running ansible playbooks. My talk will include an overview of ansible / git / gitlab and AWX as they fit together as a system to manage configurations and software. For those who use puppet/chef/salt, I'm sure there will be lively comparisons. Refreshments and snacks will be provided and afterwards we'll head off (likely to the Boynton) to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Meeting is on Thursday!!!
by Tim Keller 20 Feb '19

20 Feb '19

Apparently my proofreading skills were a bit off... The meeting is on THURSDAY, Feb. 21st! Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Reminder: WLUG Meeting THIS Thursday (2/21/2017): Topic: AWX
by Tim Keller 19 Feb '19

19 Feb '19

Hey Everybody, We've got a meeting on Wednesday Location: Fuller Labs, Beckett Conference Room, RM 246 Time: 7PM Topic: AWX and Ansible. AWX is the open source upstream version of Ansible Tower. This is a system that automates the running of ansible playbooks on hosts. What's ansible? Ansible is a management and configuration system for installing / modifying and maintaining linux/unix machines. What's cooler is that AWX can natively use git to manage configs. I'll talk about ansible, playbooks and then AWX. As usual, snacks and refreshments will be provided and we'll head off for dinner afterwards to continue to conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

2 1

Reminder: NO MEETING TODAY!
by Tim Keller 14 Feb '19

14 Feb '19

Just a reminder, the meeting has been moved to Feb. 21st. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

How do I get on daily emails only??
by John Spencer 13 Feb '19

13 Feb '19

I keep getting individual emails. I have tried to change the setting so I only get emails daily not every time someone posts. Can you please make this change for me. Thanks Regards, John Spencer Connected Systems Partners Office: (978) 455-5550 x208 Cell: (978) 621-9743 jspencer(a)connectedsp.com<mailto:jspencer@connectedsp.com> www.connectedsp.com<http://www.connectedsp.com/> GET CONNECTED! All information in this email, unless indicated otherwise in the body of the email, is considered confidential and intended for the view and use of the recipient(s) only.

1 0

charter.net is blocking all Digital Ocean droplet email
by John Stoffel 13 Feb '19

13 Feb '19

I need to vent here. Charter.net which provides my internet, sucks. They are now refusing to accept email from *any* IP blocks owned by Digital Ocean, even though I've got a good mail setup on a droplet there, with proper DNS entries, SPF, etc. So I'm looking to spin up a new instance on some other provider, or I'm going to try and route the email via my @charter.net account that I have since I'm a customer. And I have opened a ticket with them. No answer. Jerks. What do people think of Vultr.com? Seems pretty comparable... I just wonder when Charter will block their IP blocks... Jerks. I think it's too expensive to buy an IPv4 address for more permanent use, since it's too easy for that block of 256 to be blanket banned by some jerks. Grr!!!!! John

3 2

Re: Openvpn and Network mapping
by Higgins, Benjamin J 04 Feb '19

04 Feb '19

Nick: Reminder... just because you *can* doesn't mean you *should*. That is all. --ben From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 11:26 AM To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org>; Levasseur, Kenneth <klevasseur(a)wpi.edu> Cc: Krichevsky, Nicholas Jacob <njkrichevsky(a)wpi.edu> Subject: [WLUG] Re: Openvpn and Network mapping The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2Fg…> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org<mailto:wlug@lists.wlug.org>> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0

Re: Openvpn and Network mapping
by Krichevsky, Nicholas Jacob 03 Feb '19

03 Feb '19

The goal was to expose the LAN, mostly for fun, but what you're describing is certainly the more practical way of solving the port forwarding problem directly. If I can't solve the routing problem, this might just end up being my fallback. Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: Levasseur, Kenneth Sent: Sunday, February 3, 2019 8:52:38 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: Re: Openvpn and Network mapping I hit some keys and it sent the message early. Not sure what happened there. Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ssh localhost -p <desired_port> Now you're ssh'd into the NAS. The desired port could be anything but it needs to be the same on both ends. This also assumes your VPS has a static IP/dynamic dns, and you may need some way to keep the connection alive if it's going to be up for a long time. ________________________________ From: Levasseur, Kenneth via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 8:48:34 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob; Levasseur, Kenneth Subject: [WLUG] Re: Openvpn and Network mapping Do you need to route the entire network, or just access the NAS and other hosts? I think you could do something with SSH reverse tunneling, given you have a VPS. On the NAS: ssh -R <desired_port>:localhost:22 user@<vps_address> Then, once you've ssh'd into the VPS from anywhere else: ________________________________ From: Krichevsky, Nicholas Jacob via WLUG <wlug(a)lists.wlug.org> Sent: Sunday, February 3, 2019 1:42:35 AM To: Worcester Linux Users' Group General Discussion Cc: Krichevsky, Nicholas Jacob Subject: [WLUG] Openvpn and Network mapping So I've found myself in an unfortunate situation where I cannot port forward on my router. My solution to this was to setup an openvpn tunnel on my VPS that would allow me to access my LAN via a NAS that I keep online in my apartment. (In other words, my laptop would connect to my VPS, which would route to my apartment via my NAS, and thus expose the LAN). The big problem is that the network uses 192.168.1.0/24, and given that I cannot edit any router settings, I cannot change this. If I were to simply expose this subnet via openvpn, I wouldn't be able to access any other 192.168.1.0/24 address if I were connect to the VPN. My plan was to try and use some iptables magic to map 10.24.0.0/24 to 192.168.1.0. Luckily, this works, thanks to the NETMAP extension (iptables -A PREROUTING -t nat -d 10.24.0.0/24 -j NETMAP --to 192.168.1.0/24, for the curious). However, the only way I can make this work is if I add the NAS as a gateway on all of the machines I want to connect to on my LAN, which is a bit sad (ip route add 192.168.255.0/24 via 192.168.1.69) . Is there some way I can make this a bit more seamless? This isn't my least favorite solution, as I don't need to run the openvpn client on every host, but it isn't much better...

1 0