- WLUG - wlug.mailman3.com

Re: If you use putty or puttygen, update to the latest version..

by Gregory Boyce

I've mostly seen putty used by Windows users, and Linux users that recently moved from Windows. If you were using it, you would know. You should be good. On Wed, Apr 17, 2024, 9:34 AM Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > Putty just announced that versions earlier than 0.80 were generating > > ecdsa-sha2-nistp521 that were flawed.. > > > > If you have any of these keys lying around, destroy them and regenerate > keys. > > I had never heard of Putty, but this sounded dire. There are many > things that I never heard of that are installed by my Linux distribution > (Debian) and are essential for it's operation. Do I have putty keys > lying around? > > I Google search reveals that this question has been asked by many other > people and answered by many more people who have no idea what they are > talking about. > > My current best guess is that PuTTy is a MeSs-Windows implementation of > the ssh protocol that has been ported to Linux, for no good reason since > the ssh program works better. > > Therefore I plan to ignore this dire warning. > > Does anybody think I am mistaken? > > -- Keith > > PS: In any case, this particular "security vulnerability" seems like it > might be something to worry about iff you work for the CIA and think > that the KGB may be spending mega-$ and years of work to steal your > secrets. Nobody wants to steal my secrets. I am more worried that some > random thug might break a window and steal my computer. > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/6RYVL… >

April 17, 2024

Re: If you use putty or puttygen, update to the latest version..

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > Putty just announced that versions earlier than 0.80 were generating > ecdsa-sha2-nistp521 that were flawed.. > > If you have any of these keys lying around, destroy them and regenerate keys. I had never heard of Putty, but this sounded dire. There are many things that I never heard of that are installed by my Linux distribution (Debian) and are essential for it's operation. Do I have putty keys lying around? I Google search reveals that this question has been asked by many other people and answered by many more people who have no idea what they are talking about. My current best guess is that PuTTy is a MeSs-Windows implementation of the ssh protocol that has been ported to Linux, for no good reason since the ssh program works better. Therefore I plan to ignore this dire warning. Does anybody think I am mistaken? -- Keith PS: In any case, this particular "security vulnerability" seems like it might be something to worry about iff you work for the CIA and think that the KGB may be spending mega-$ and years of work to steal your secrets. Nobody wants to steal my secrets. I am more worried that some random thug might break a window and steal my computer.

April 17, 2024

If you use putty or puttygen, update to the latest version..

by Tim Keller

Putty just announced that versions earlier than 0.80 were generating ecdsa-sha2-nistp521 that were flawed.. If you have any of these keys lying around, destroy them and regenerate keys. Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 16, 2024

Re: Great meeting last night! --- Sorry I couldn't stay

by Robert N. Evans

I connected twice at 7PM, but never seemed to hear anyone. So I also did not stay. Firefox 124.0.2 (Flatpak), on "Pop!_OS 22.04 LTS" (HW is System76 Gazelle laptop) -Bob Evans -----Original Message----- From: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org> Sent: Apr 12, 2024 12:37 PM To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org> Cc: Keith Wright <kwright(a)keithdiane.us> Subject: [WLUG] Re: Great meeting last night! --- Sorry I couldn't stay Kevin Stratton via WLUG writes: > I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but > I was the only person (as a moderator) in the lobby at 7:20. Does you meeting > start at 7:30? I assumed that the meeting starts at 7:00. I connected to https://jitsi.uvhash.org/WlugMA (no %20uvhash) at 7:00 and found people there. Does jitsi create rooms upon demand from anyone? My problem was that, while I could hear other people (at least while they were near the microphone and the gloppita-gloppita machine was off) they could not hear me, except intermittently. Worse, it seemed that my laptop was generating noise and feedback, so people had to mute me so that they could hear each other. The problem seemed to be in the software or configuration of my Thinpad with Debian GNU/Linux 12 (bookworm) and Firefox ESR 102.15.1 of Sept 12, 2023. I thought I had tested it the day before. I found a way to make a recording and recorded a short speech, which I could play back. It all seemed to work, but when I unplugged it and plugged it back in it required reconfiguration and I may have missed something and wound up using the built-in mike. The same USB headphone/mike seemed to work when attached to a Windows machine, but where's the fun in that? I checked out early in disgust. Suggestions on how to debug the mike might be helpful. -- Keith _______________________________________________ WLUG mailing list -- wlug(a)lists.wlug.org To unsubscribe send an email to wlug-leave(a)lists.wlug.org Create Account: https://wlug.mailman3.com/accounts/signup/ Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/OA5FC…

April 12, 2024

Re: Great meeting last night! --- Sorry I couldn't stay

by Keith Wright

Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes: > I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but > I was the only person (as a moderator) in the lobby at 7:20. Does you meeting > start at 7:30? I assumed that the meeting starts at 7:00. I connected to https://jitsi.uvhash.org/WlugMA (no %20uvhash) at 7:00 and found people there. Does jitsi create rooms upon demand from anyone? My problem was that, while I could hear other people (at least while they were near the microphone and the gloppita-gloppita machine was off) they could not hear me, except intermittently. Worse, it seemed that my laptop was generating noise and feedback, so people had to mute me so that they could hear each other. The problem seemed to be in the software or configuration of my Thinpad with Debian GNU/Linux 12 (bookworm) and Firefox ESR 102.15.1 of Sept 12, 2023. I thought I had tested it the day before. I found a way to make a recording and recorded a short speech, which I could play back. It all seemed to work, but when I unplugged it and plugged it back in it required reconfiguration and I may have missed something and wound up using the built-in mike. The same USB headphone/mike seemed to work when attached to a Windows machine, but where's the fun in that? I checked out early in disgust. Suggestions on how to debug the mike might be helpful. -- Keith

April 12, 2024

Re: Great meeting last night!

by Kevin Stratton

I was able to connect using https://jitsi.uvhash.org/WlugMA%20uvhash.org, but I was the only person (as a moderator) in the lobby at 7:20. Does you meeting start at 7:30? I assumed that the meeting starts at 7:00. On 4/12/2024 10:17 AM, gmcaplan--- via WLUG wrote: > Hi Tim, > > As you might remember, I attended several WLUG meetings when they were > virtual. > I read a recent email that led me to believe there is still a way for > me t attend virtually. Is that true? If so. I will try attend some > future meetings. > Also, here is question that maybe you or someone in WLUG can help me with. > My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A > financial institution says I must run a virus scan very soon. I > installed clamav and then ran freshclam. As far as I can tell, > freshclam has been running for 15 hours, and is still running. Is that > typical etc.? > > Thanks. > > George Caplan > P.S. Here is some blatant self-promotion which doubles as recruiting > info for UPchieve, which especially needs Physics and CS coaches > (tutors). It also explains why I am too busy to update my OS ... for > now. (I am now very close to 3000 tutoring session.) > https://upchieve.org/blog/volunteer-math-tutor-george > > > > On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > >> Having our own Jitsi instance was fantastic! >> Jansen got into ollama AI stuff and it was really cool. He's >> expressed interest in doing a full end to end demo. We talked about >> the xz explot and it's entanglement with systemd and OpenSSH. It was >> a great conversation about the history and missteps of systemd and >> how we got to this place where so many pieces of critical software in >> the FOSS are supported by just a few people. >> Next month's meeting will need to be moved around as it conflicts >> with something, I'll give more details as I learn them. >> Thanks, >> Tim. >> -- >> I am leery of the allegiances of any politician who refers to their >> constituents as "consumers". >> >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: >> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: >> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2… > > _______________________________________________ > WLUG mailing list --wlug(a)lists.wlug.org > To unsubscribe send an email towlug-leave(a)lists.wlug.org > Create Account:https://wlug.mailman3.com/accounts/signup/ > Change Settings:https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive:https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org…

April 12, 2024

Re: Great meeting last night!

by John Stoffel

>>>>> "gmcaplan---" == gmcaplan--- via WLUG <wlug(a)lists.wlug.org> writes: > Hi Tim, As you might remember, I attended several WLUG meetings when > they were virtual. I read a recent email that led me to believe > there is still a way for me t attend virtually. Is that true? If > so. I will try attend some future meetings. You should be able to find the link on the website for the monthly meetings, and we do still try to make them both virtual and in-person at the same time. So please do join next month! > Also, here is question that maybe you or someone in WLUG can help me > with. My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A > financial institution says I must run a virus scan very soon. I > installed clamav and then ran freshclam. As far as I can tell, > freshclam has been running for 15 hours, and is still running. Is > that typical etc.? I suspect they're just doing this for all people who connect via a web-browser. But it's hard to know if it's an ok thing because you don't tell us how many files you have and how much data needs to be scanned. And I would also rcommend that you upgrade to 20.04 or 22.04 as soon as you can. Both of those releases should run just fine on a system running 18.04, which is really quite old. It might also just be that you're web browser is old (in the financial institution's eyes) so they want a scan. Is this a laptop with limited memory and/or disk space? Or an old old CPU? More details would help us here. Thanks. > George Caplan > P.S. Here is some blatant self-promotion which doubles as recruiting > info for UPchieve, which especially needs Physics and CS coaches > (tutors). It also explains why I am too busy to update my OS ... for > now. (I am now very close to 3000 tutoring session.) > https://upchieve.org/blog/volunteer-math-tutor-george That would make sense why you're so busy and why you don't want to possibly break thins with an upgrade. It might be simpler to spin up a VM on the system and install the latest version of Ubuntu in there, with a newer web browser and see if your financial institution will be happier then. > On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > Having our own Jitsi instance was fantastic! > Jansen got into ollama AI stuff and it was really cool. He's expressed interest in doing a > full end to end demo. We talked about the xz explot and it's entanglement with systemd and > OpenSSH. It was a great conversation about the history and missteps of systemd and how we got > to this place where so many pieces of critical software in the FOSS are supported by just a > few people. > Next month's meeting will need to be moved around as it conflicts with something, I'll give > more details as I learn them. > Thanks, > Tim. > -- > I am leery of the allegiances of any politician who refers to their constituents as > "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2… > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/RCJ5L…

April 12, 2024

Re: Great meeting last night!

by gmcaplan＠gmcaplan.org

Hi Tim, As you might remember, I attended several WLUG meetings when they were virtual. I read a recent email that led me to believe there is still a way for me t attend virtually. Is that true? If so. I will try attend some future meetings. Also, here is question that maybe you or someone in WLUG can help me with. My computer runs (for now, don't ask why) Ubuntu 18.04 LTS. A financial institution says I must run a virus scan very soon. I installed clamav and then ran freshclam. As far as I can tell, freshclam has been running for 15 hours, and is still running. Is that typical etc.? Thanks. George Caplan P.S. Here is some blatant self-promotion which doubles as recruiting info for UPchieve, which especially needs Physics and CS coaches (tutors). It also explains why I am too busy to update my OS ... for now. (I am now very close to 3000 tutoring session.) https://upchieve.org/blog/volunteer-math-tutor-george On 2024-04-12 9:16 am, Tim Keller via WLUG wrote > Having our own Jitsi instance was fantastic! > > Jansen got into ollama AI stuff and it was really cool. He's expressed > interest in doing a full end to end demo. We talked about the xz explot > and it's entanglement with systemd and OpenSSH. It was a great > conversation about the history and missteps of systemd and how we got > to this place where so many pieces of critical software in the FOSS are > supported by just a few people. > > Next month's meeting will need to be moved around as it conflicts with > something, I'll give more details as I learn them. > > Thanks, > Tim. > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/GEZL2…

April 12, 2024

Re: Great meeting last night!

by John Stoffel

>>>>> "Tim" == Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > Having our own Jitsi instance was fantastic! That sounds great. Wish I could have joined guys. > Jansen got into ollama AI stuff and it was really cool. He's > expressed interest in doing a full end to end demo. We talked about > the xz explot and it's entanglement with systemd and OpenSSH. It was > a great conversation about the history and missteps of systemd and > how we got to this place where so many pieces of critical software > in the FOSS are supported by just a few people. I'd love if Jensen could post some links and hints to what he did for his first demo a couple of months ago. And also learning if we could work just as well on AMD (my preferred HW) graphics cards. I guess I go for the underdog at times technology wise. LOL! > Next month's meeting will need to be moved around as it conflicts > with something, I'll give more details as I learn them. And what should our topic be? I don't think I'll have time to re-do my KiCAD talk, but hopefully some later month or in the fall I can do something.

April 12, 2024

Great meeting last night!

by Tim Keller

Having our own Jitsi instance was fantastic! Jansen got into ollama AI stuff and it was really cool. He's expressed interest in doing a full end to end demo. We talked about the xz explot and it's entanglement with systemd and OpenSSH. It was a great conversation about the history and missteps of systemd and how we got to this place where so many pieces of critical software in the FOSS are supported by just a few people. Next month's meeting will need to be moved around as it conflicts with something, I'll give more details as I learn them. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 12, 2024

Re: NEW VIRTUAL LOCATION!! Topic: xz, hosting, security, etc.

by Kevin Stratton

Sane here. I just connected as moderator at https://jitsi.uvhash.org/WlugMA%20uvhash.org. I was the only one there. On 4/11/2024 4:07 PM, Keith Wright via WLUG wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > >> In an effort to actually eat our own cooking, I've stood up a Jitsi server for >> us to use. > Nice. Thanks for that. What did you do and how did you learn to do it? > >> The NEW VIRTUAL LOCATION: https://jitsi.uvhash.org/WlugMA > I just tried that link. Instead of telling me to wait for a moderator > it told me I was a moderator. I quit immediately. Hope I didn't > screw up something or sign up for something. I don't know how to > moderate. Call me if you need someone to incite. -- Keith > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/2OOMU…

April 11, 2024

Re: NEW VIRTUAL LOCATION!! Topic: xz, hosting, security, etc.

by Tim Keller

Nope, you won't break anything. it's a free for all! Feel free to join, it'll be fun! When the nights over, I'll spin the droplet down until next month. Tim. On Thu, Apr 11, 2024 at 4:07 PM Keith Wright <kwright(a)keithdiane.us> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > In an effort to actually eat our own cooking, I've stood up a Jitsi > server for > > us to use. > > Nice. Thanks for that. What did you do and how did you learn to do it? > > > The NEW VIRTUAL LOCATION: https://jitsi.uvhash.org/WlugMA > > I just tried that link. Instead of telling me to wait for a moderator > it told me I was a moderator. I quit immediately. Hope I didn't > screw up something or sign up for something. I don't know how to > moderate. Call me if you need someone to incite. -- Keith > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 11, 2024

NEW VIRTUAL LOCATION!! Topic: xz, hosting, security, etc.

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > In an effort to actually eat our own cooking, I've stood up a Jitsi server for > us to use. Nice. Thanks for that. What did you do and how did you learn to do it? > The NEW VIRTUAL LOCATION: https://jitsi.uvhash.org/WlugMA I just tried that link. Instead of telling me to wait for a moderator it told me I was a moderator. I quit immediately. Hope I didn't screw up something or sign up for something. I don't know how to moderate. Call me if you need someone to incite. -- Keith

April 11, 2024

Reminder: Meeting tonight!! NEW VIRTUAL LOCATION!! Topic: xz, hosting, security, etc.

by Tim Keller

Hey Gang, In an effort to actually eat our own cooking, I've stood up a Jitsi server for us to use. Physical location: Technocopia, 44 Portland st. Worcester MA The NEW VIRTUAL LOCATION: https://jitsi.uvhash.org/WlugMA Time: 7pm Date: Today! April 11th, 2024 Topic: We'll talk about the xz backdoor attempt, other linux related security stuff, How dead easy it was to self host jitsi, other hosting stuff likely, etc. As usual, I'm sure the conversation will wander, get really interesting and it'll be a blast. I'll have refreshments with me and we'll all head off to dinner afterwards. Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 11, 2024

Re: Um..wow..

by Tim Keller

Yup! The actual address is going to be: https://jitsi.uvhash.org/WlugMA uvhash.org is my domain.. I stood up my own Jitsi server.. I'm a bit done with Jitsi's quality.. I'll be sending up the reminder email with more details in a moment. Tim. On Thu, Apr 11, 2024 at 2:26 PM Keith Wright <kwright(a)keithdiane.us> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > I'm busy spinning up an Jitsi instance in Digital Ocean for tonight.. > > the default Ubuntu 22.04 droplet.. needs 204 updates apply.. when it > starts.. > > I was just a bit surprised.. > > Is this very different from the way it has been done in the past? > > Is the address changing from https://meet.jit.si/WlugMA ? > > That address seems to still be there. I just tried to join the meeting > and it didn't say 404, it said "wait for moderator?". > > I hope to join tonight via Jitsi. In the past I have done that > by borrowing a Windows computer that has a earplug/mike jack and > has been used for Zoom. > > I thought the computer was for doing computations and never put much > thought or effort into watching TV on it, but I have obtained a pair > of USB headphones w/ attached microphone, and have been playing with > it (them) and finding the buttons and setup menus. It seems to work. > > So I will be joining (if at all) with a Genuine Linux(TM) laptop. > > The big advantage of that, besides proof-of-concept, is that I might > be able to screen-share and show people what I have been computing. > > CU7PM, > -- Keith > > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 11, 2024

Re: Um..wow..

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > I'm busy spinning up an Jitsi instance in Digital Ocean for tonight.. > the default Ubuntu 22.04 droplet.. needs 204 updates apply.. when it starts.. > I was just a bit surprised.. Is this very different from the way it has been done in the past? Is the address changing from https://meet.jit.si/WlugMA ? That address seems to still be there. I just tried to join the meeting and it didn't say 404, it said "wait for moderator?". I hope to join tonight via Jitsi. In the past I have done that by borrowing a Windows computer that has a earplug/mike jack and has been used for Zoom. I thought the computer was for doing computations and never put much thought or effort into watching TV on it, but I have obtained a pair of USB headphones w/ attached microphone, and have been playing with it (them) and finding the buttons and setup menus. It seems to work. So I will be joining (if at all) with a Genuine Linux(TM) laptop. The big advantage of that, besides proof-of-concept, is that I might be able to screen-share and show people what I have been computing. CU7PM, -- Keith

April 11, 2024

Re: Um..wow..

by John Stoffel

>>>>> "Tim" == Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > I'm busy spinning up an Jitsi instance in Digital Ocean for > tonight.. the default Ubuntu 22.04 droplet.. needs 204 updates > apply.. when it starts.. 22.04 is upto version 6 I think, so I'm not too surprised. Good luck with the test!

April 11, 2024

Um..wow..

by Tim Keller

I'm busy spinning up an Jitsi instance in Digital Ocean for tonight.. the default Ubuntu 22.04 droplet.. needs 204 updates apply.. when it starts.. I was just a bit surprised.. Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 11, 2024

Re: Reminder! Next meeting April 11th, 2024 Topic: TBD, xz, net_filter, etc..

by John Stoffel

Sorry guys, I can't make it this month to the meeting, enjoy it without me!

April 9, 2024

Reminder! Next meeting April 11th, 2024 Topic: TBD, xz, net_filter, etc..

by Tim Keller

Hey Gang, We've got a meeting next week on the 11th! Location: Technocopia, 44 Portland St. Worcester MA Time: 7PM Virtual Location: TBD.. Topic: TBD, though there's a whole bunch of security stuff to talk about! Obviously, we'd all be remiss if we didn't talk about xz. We should also talk about kernel root bug as well: https://pwning.tech/nftables/ Beyond that, I'm sure we'll get off on a bunch of different topics. If there's something you want to talk about, by all means bring it up! As usual, we'll have snacks and refreshments available and we'll head off for dinner and continue the conversation! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 5, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Cara Salter

On 3/17/24 04:52, Michael Voorhis via WLUG wrote: > Outgoing SMTP is not blocked and will function, but is frequently > blacklisted by recipients who refuse to accept email originating from a > residential IP block. I have a relay in Amazon-EC2 that sends the > email. Some recipients continue to not like that, but doing > SPF/DKIM/DMARC goes a long way, and I've had no trouble sending to > recipients at gmail and at various MS outlook/o365ish recipients. +1 to SPF/DKIM/DMARC dealing with a lot of challenges related to selfhosting email. I'm not using my residential IP, but they're still really easy to set up for a large payoff. > > The biggest issue I have is that if the cablemodem goes offline for a > long enough time, my IP address changes. But I've got by now a > well-established checklist of stuff that I need to do when the house IP > changes, so I just walk through the list and all is well in a few > minutes. Decent email senders will queue the bounced email for a few > days before bouncing back to sender and I'm not aware of having lost > anything. I've found that OctoDNS + iCinga pair well for both detecting when my external IP changes, and getting fresh DNS records out quickly. I wonder how difficult it'd be to figure out some automation to do it all for me... --cs

March 16, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Michael Voorhis

Outgoing SMTP is not blocked and will function, but is frequently blacklisted by recipients who refuse to accept email originating from a residential IP block. I have a relay in Amazon-EC2 that sends the email. Some recipients continue to not like that, but doing SPF/DKIM/DMARC goes a long way, and I've had no trouble sending to recipients at gmail and at various MS outlook/o365ish recipients. The biggest issue I have is that if the cablemodem goes offline for a long enough time, my IP address changes. But I've got by now a well-established checklist of stuff that I need to do when the house IP changes, so I just walk through the list and all is well in a few minutes. Decent email senders will queue the bounced email for a few days before bouncing back to sender and I'm not aware of having lost anything. --MCV. > I think the answer is "it depends". As Mike Voorhis says, his home > stuff just works. And I certainly allow incoming SSH and other > traffic to my home network. I honestly haven't tested if they > block outgoing SMTP (port 25 traffic) recently, but checking now, > they don't seem to be blocking it since I could get to my VPS on port > 25 from home no problem.

March 16, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Tim Keller

This is the alcohol on the beach clause.. Become a pain in the ass and they'll point to clause L on their website and kill your access. It's interesting there's no SSH on that list.. What is also interesting is that they don't want you running squid.. because I think they don't want people blocking ads.. Tim. On Fri, Mar 15, 2024 at 12:36 PM John Stoffel <john(a)stoffel.org> wrote: > > I think the answer is "it depends". As Mike Voorhis says, his home > stuff just works. And I certainly allow incoming SSH and other > traffic to my home network. I honestly haven't tested if they block > outgoing SMTP (port 25 traffic) recently, but checking now, they don't > seem to be blocking it since I could get to my VPS on port 25 from > home no problem. > > I *have* been slowly working to get Wireguard setup at home so I can > tunnel over a VPN to my VPS to make some things simpler, so I just > have one end-point on my OPNsense Firewall at home which allows > connections from remote devices into my network. This way I don't > need quite as many firewall rules on OPNSense. At least that's the > idea, but lack of time and bugs have slowed my progress here. > > > I could swear I read before, at least for residential services that > > Charter (now Spectrum) internet did NOT allow you to host a site > > which is why I have never tried to do it. I would guess that its > > all about the bandwidth dollars. Below is a link to their current > > TOS (terms of service) in case it is of interest: > > I think if you start hosting something that gets their attention, > they'll shut you down. *shrug* not really sure. > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

March 15, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by John Stoffel

I think the answer is "it depends". As Mike Voorhis says, his home stuff just works. And I certainly allow incoming SSH and other traffic to my home network. I honestly haven't tested if they block outgoing SMTP (port 25 traffic) recently, but checking now, they don't seem to be blocking it since I could get to my VPS on port 25 from home no problem. I *have* been slowly working to get Wireguard setup at home so I can tunnel over a VPN to my VPS to make some things simpler, so I just have one end-point on my OPNsense Firewall at home which allows connections from remote devices into my network. This way I don't need quite as many firewall rules on OPNSense. At least that's the idea, but lack of time and bugs have slowed my progress here. > I could swear I read before, at least for residential services that > Charter (now Spectrum) internet did NOT allow you to host a site > which is why I have never tried to do it. I would guess that its > all about the bandwidth dollars. Below is a link to their current > TOS (terms of service) in case it is of interest: I think if you start hosting something that gets their attention, they'll shut you down. *shrug* not really sure.

March 15, 2024

Re: ISPS limiting..was Re: Meeting next week! March 14th 2024!

by Keith Wright

Cara Salter via WLUG <wlug(a)lists.wlug.org> writes: > Funnily enough, I get a 403 error when I try to view that page. Last I > remember it allowed services for private use. > -------- Original Message -------- > From: THE HAMMER via WLUG <wlug(a)lists.wlug.org> > https://www.spectrum.com/policies/internet-use-policy I get a page titled: Spectrum Internet Acceptable Use Policy, which says, in part: 2. Prohibited Activities Using the System, Network, and Service. Any activity or use of the Service which violates system or network security or integrity are prohibited and may result in criminal and civil liability. Such violations include, without limitation, the following: L. Running any type of server on the system that is not consistent with personal, residential use. This includes but is not limited to FTP, IRC, SMTP, POP, HTTP, SOCS, SQUID, NTP, DNS or any multi-user forums. So they threaten you with jail time for listening on port 25. PHLHT!! -- Keith

March 14, 2024