- WLUG - wlug.mailman3.com

Re: Reminder! Meeting tomorrow! Topic: Jack Friment from PIRG, Right to Repair!

by Jansen Smith

Sounds like a good time! Looking fwd to meeting Jack. I'll also be bringing a new Omarchy (read: opinionated Arch Linux + Hyprland) system for us to play with. I've got the installer on a USB-C, in case anyone would like to turn ewaste into a productivity workhorse. On Wed, Oct 8, 2025, 5:39 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> wrote: > Hey Gang! > > Just a reminder we've got a meeting tomorrow! > Topic: National Right to Repair day > Speaker: Jack Frimet from PIRG. > Time: 7PM > Date: October 9th, 2025 > Location: Technocopia > Virtual Location: https://meet.jit.si/WlugMA > > Jack Frimet from PIRG reached out to me and asked that he speak at this > meeting. PIRG is an organization that among many other causes is advocating > at the national level for the right to repair. As we are all aware, with > Win10 reaching EOL, this is causing a tsunami of e-waste as people are > forced to upgrade to run Win11. > > On Saturday Oct 18th, it's National Right to Repair day. PIRG in > coordination with Techncopia is going to be hosting what's looking like to > be a good old fashioned Install-fest. Sadly, I have a family conflict, but > I'll be there in spirit! > > I hope to see you all on Thursday! > Later, > Tim. > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/NIOBO… >

Oct. 9, 2025

Reminder! Meeting tomorrow! Topic: Jack Friment from PIRG, Right to Repair!

by Tim Keller

Hey Gang! Just a reminder we've got a meeting tomorrow! Topic: National Right to Repair day Speaker: Jack Frimet from PIRG. Time: 7PM Date: October 9th, 2025 Location: Technocopia Virtual Location: https://meet.jit.si/WlugMA Jack Frimet from PIRG reached out to me and asked that he speak at this meeting. PIRG is an organization that among many other causes is advocating at the national level for the right to repair. As we are all aware, with Win10 reaching EOL, this is causing a tsunami of e-waste as people are forced to upgrade to run Win11. On Saturday Oct 18th, it's National Right to Repair day. PIRG in coordination with Techncopia is going to be hosting what's looking like to be a good old fashioned Install-fest. Sadly, I have a family conflict, but I'll be there in spirit! I hope to see you all on Thursday! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Oct. 8, 2025

Re: Installing Linux on Hundreds of "Obsolete" Computers

by Joshua Stone

>Yes! I need an obsolete computer. The only thing I know about >Windows-10 is that it proved Microsoft can't count. Versions 1, 2, 3.1, >95, 98, were at least monotonic increasing. If you need a new computer for running gcc, TeX, a web browser, a PDF viewer, and all other of your computing needs, then we can surely help! >I don't install Linux on hundreds of computers; I've done about 30 >installs over the years. It used to be: buy a Linux CD from the >bookstore (Not a joke. I did that several times in the 1990s). Every >computer had a built-in CD reader that it could boot from and everything >was on the CD. Oh, that takes me back! When I was first getting into Linux circa 2009, I would be trying out Linux install CDs that were included in several Linux publications within the magazine section at Barnes and Noble. I was fascinated by how I could run a complete desktop from a cheap piece of optical media found in the back of a magazine, and it was at a fraction of the cost of a Windows license. >The last few times I have done a Debian net-install. It worked through >a RJ-45 jack connection to home internet. Details changed. I no longer >have a IPv4 address and NAT, but IPv6 configured itself and worked. >But now RJ-45 seems to be obsolete. Can I install over a wireless >(wifi) connection? Not long ago, the OS needed to be working and >then it could install a special non-free driver for the wifi and use >it at the coffee shop. >Now that I have my own wireless router it seems mostly good, but I still >trust the wire more. I don't need terabytes and virtual reality video >games. Let me run gcc, TeX, a web browser and a pdf viewer, that's >about it. >I miss the punch card reader at school, but I don't need one at home. >Do I need RJ-45? You can expect a mainstream distribution such as Fedora or Debian to have offline installers in case their online installers don't work. These online installers should give you the option to configure a wired connection or a wireless connection. I believe the one limiting factor (as you're alluding to) is whether the wifi card has the appropriate driver. This can become a catch-22 for online installers which typically don't give you the kind of environment needed to build and install the necessary kernel module and firmware. The best workaround I've found is finding a chipset that's known to work OOTB with a stock Linux kernel: https://github.com/morrownr/USB-WiFi The ALFA AWUS036ACM is the USB wifi adapter that I have, and it's saved me *A LOT* of headache when experimenting with uncommon devices that usually come with Broadcom wifi cards: https://www.alfa.com.tw/products/awus036acm_1 https://www.amazon.com/Network-AWUS036ACM-Long-Range-Wide-Coverage-High-Sen… - Josh On Wed, Oct 8, 2025 at 12:15 AM Keith Wright <kwright(a)keithdiane.us> wrote: > Joshua Stone via WLUG <wlug(a)lists.wlug.org> writes: > > > I thought it was really cool to see a coordinated effort to extend the > > lifespan of perfectly usable computers that're only "Obsolete" because > > of Windows 10 becoming EOL: > > Yes! I need an obsolete computer. The only thing I know about > Windows-10 is that it proved Microsoft can't count. Versions 1, 2, 3.1, > 95, 98, were at least monotonic increasing. > > I don't install Linux on hundreds of computers; I've done about 30 > installs over the years. It used to be: buy a Linux CD from the > bookstore (Not a joke. I did that several times in the 1990s). Every > computer had a built-in CD reader that it could boot from and everything > was on the CD. > > The last few times I have done a Debian net-install. It worked through > a RJ-45 jack connection to home internet. Details changed. I no longer > have a IPv4 address and NAT, but IPv6 configured itself and worked. > > But now RJ-45 seems to be obsolete. Can I install over a wireless > (wifi) connection? Not long ago, the OS needed to be working and > then it could install a special non-free driver for the wifi and use > it at the coffee shop. > > Now that I have my own wireless router it seems mostly good, but I still > trust the wire more. I don't need terabytes and virtual reality video > games. Let me run gcc, TeX, a web browser and a pdf viewer, that's > about it. > > I miss the punch card reader at school, but I don't need one at home. > Do I need RJ-45? > > -- Keith >

Oct. 8, 2025

Re: Installing Linux on Hundreds of "Obsolete" Computers

by Keith Wright

Joshua Stone via WLUG <wlug(a)lists.wlug.org> writes: > I thought it was really cool to see a coordinated effort to extend the > lifespan of perfectly usable computers that're only "Obsolete" because > of Windows 10 becoming EOL: Yes! I need an obsolete computer. The only thing I know about Windows-10 is that it proved Microsoft can't count. Versions 1, 2, 3.1, 95, 98, were at least monotonic increasing. I don't install Linux on hundreds of computers; I've done about 30 installs over the years. It used to be: buy a Linux CD from the bookstore (Not a joke. I did that several times in the 1990s). Every computer had a built-in CD reader that it could boot from and everything was on the CD. The last few times I have done a Debian net-install. It worked through a RJ-45 jack connection to home internet. Details changed. I no longer have a IPv4 address and NAT, but IPv6 configured itself and worked. But now RJ-45 seems to be obsolete. Can I install over a wireless (wifi) connection? Not long ago, the OS needed to be working and then it could install a special non-free driver for the wifi and use it at the coffee shop. Now that I have my own wireless router it seems mostly good, but I still trust the wire more. I don't need terabytes and virtual reality video games. Let me run gcc, TeX, a web browser and a pdf viewer, that's about it. I miss the punch card reader at school, but I don't need one at home. Do I need RJ-45? -- Keith

Oct. 8, 2025

Installing Linux on Hundreds of "Obsolete" Computers

by Joshua Stone

Hey all, I thought it was really cool to see a coordinated effort to extend the lifespan of perfectly usable computers that're only "Obsolete" because of Windows 10 becoming EOL: https://www.youtube.com/watch?v=NHLTOdsqDRg I wonder if WLUG could do something similar to make computing more equitable within the community? - Josh

Oct. 7, 2025

Meeting October 9th at 7PM Topic: Jack from PIRG to speak about National Right to Repair

by Tim Keller

Hey Everybody, We've got a meeting on Thursday!! Topic: National Right to Repair day Speaker: Jack Frimet from PIRG. Time: 7PM Date: October 9th, 2025 Location: Technocopia Virtual Location: https://meet.jit.si/WlugMA Jack Frimet from PIRG <https://pirg.org> reached out to me and asked that he speak at this meeting. PIRG is an organization that among many other causes is advocating at the national level for the right to repair. As we are all aware, with Win10 reaching EOL, this is causing a tsunami of e-waste as people are forced to upgrade to run Win11. On Saturday Oct 18th, it's National Right to Repair day. PIRG in coordination with Techncopia is going to be hosting what's looking like to be a good old fashioned Install-fest. Sadly, I have a family conflict, but I'll be there in spirit! I hope to see you all on Thursday! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Oct. 7, 2025

Re: Windows 10 to Linux Repair Event

by Tim Keller

Hey Jack! An event like this would right up WLUG's alley! Our next meeting is scheduled for the 9th. I unfortunately have a family even on the 18th and will be out of town, otherwise I would be there in spades. One of things that WLUG started out doing was "install fests" where we helped people get Linux on their desktops! We *just had a meeting* so I'd be amenable to moving the meeting to the 16th to help prep and make bootable media if that would help. I'm absolutely horrified by the immense amount of e-waste this debacle is causing, all in search of the mighty dollar.. Thanks, Tim. I am leery of the allegiances of any politician who refers to their constituents as "consumers". On Tue, Sep 30, 2025, 3:57 PM Jack Frimet <jfrimet(a)pirg.org> wrote: > Hi Tim and WLUG, > > My name is Jack Frimet, and I'm with PIRG, a consumer advocacy group > working on the Right to Repair. You may have heard from Eric Sutman, but we > are hosting an event at Technocopia on 10/18 (International Repair Day!), > where we are working to save computers impacted by the End of Windows 10 by > switching them over to Linux. > > We need some volunteers to help with actually working on the computers, > and I figured this seems right up your group's alley! I'd love to set up a > time to chat with any of WLUG's organizers to gauge interest in > volunteering for this event! Feel free to send me an email or give me a > call at 845-637-9633. > > Best, > Jack > > -- > > Jack Frimet > Right to Repair Associate > jfrimet(a)pirg.org >

Oct. 4, 2025

Looking for Locality Info of Apatite Specimen

by The Hammer

Hello, I am wondering if anyone might be able to guide me at to the specific locality of a blue apatite specimen that I have. The Label says "Blue Apatite XL New York" The specimen is about an inch across at its widest point. Ron

Sept. 27, 2025

Sorry about the A/V troubles..

by Tim Keller

Last night because I had the presentation full screened I failed to see that the audio had dropped out. For the next meeting I'm going to bring a dedicated laptop whose sole job is to be the "meeting" laptop that just drives Jitsi. As an aside, I'm glad everybody liked the presentation. I'll put my slides up somewhere sensible. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Sept. 19, 2025

Great talk on the state of Linux Kernel

by John Stoffel

Guys, This is a great talk on some of the history of Linux and how things got to where they are now. Not so much technical, but historical. https://www.youtube.com/watch?v=LS2LGMRzE1I Cheers! John

Sept. 18, 2025

Re: Reminder!!! September 18th WLUG Meeting! Topic: Tailscale / Nebula

by John Stoffel

Guys, This is a _fascinating_ talk about Linux containers, mount namespaces, etc. Stuff I sorta kinda knew, but don't use day to day. Really interesting! https://labs.iximiuz.com/tutorials/container-filesystem-from-scratch Cheers, John

Sept. 17, 2025

Reminder!!! September 18th WLUG Meeting! Topic: Tailscale / Nebula

by Tim Keller

Hey Everybody, We've got a meeting THIS Thursday! Time: 7pm Date: September 18th, 2025 Location: Technocopia, 44 Portland St. Worcester MA. Virtual Location: https://meet.jit.si/WlugMA Topic: Why Traditional Network Security is DOOMED! In this talk, I'll explain how we've *done *modern network security, and why tools like tailscale / headscale / nebula largely nullify some of this security. For those of us who are network / security administrators I'll talk about what we should be looking for, and I'll also show off how these technologies are amazingly useful. I will be definitely demoing Tailscale as I'm a daily driver of it and provided it doesn't break my existing stuff I'll show off Nebula. I'm sure this is going to foster a lively discussion about networking, firewalls, security in general and what security on modern networks is going to have to look like to address these new technologies. As usual after the meeting we'll go get some dinner and keep talking. I hope to see you all there! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Sept. 15, 2025

Reminder! WLUG Meeting NEXT Week, Sept 18th, 2025!

by Tim Keller

Hey Everybody, Our next meeting is the 18th of September! I'll be giving a talk on tailscale / headscale and possibly nebula if I have time. The working title for the topic is "Traditional Network Security is DOOMED!" Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Sept. 8, 2025

Next meeting will be the 18th, not the 11th.

by Tim Keller

Hey Gang! I've got a conflict on the 11th, so I'm moving the meeting to the 18th. My plan is to talk about Tailscale / headscale and nebula to build secure networks that don't require punching holes in firewalls, etc. Let me know if you know of similar tech and I'll try to talk about that as well. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Aug. 28, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by steve＠patternsoft.net

Aug. 27, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by eroc1990

Might also be worth looking at Quad9's offering if you don't want tonfunnelmyour traffic to Google or Cloudflare. More info here: https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices… -------- Original Message -------- On 8/26/25 8:30 PM, Jared Greenwald via WLUG wrote: > If you're ever bored with using the Google recursors, give the Oracle recursors a try - 216.146.35.35 & 216.146.36.36 > > Source: I work on OCI's DNS service that maintains the recursors. > > On Tue, Aug 26, 2025 at 7:51 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> wrote: > >> ISPs figured out a long time ago they could harvest and sell your DNS query information. Sure because of https they can't see what your google queries are, but they can deduce the results.. >> >> Just looking at my PiHole logs is pretty enlightening.. It's clear I was just about to go on vacation in Maine, before that I was researching places in the Berkshires, before that I was on a whole bunch of EV review sites. >> That's just filtering for stuff from this machine and my phone. If I turn the filter off and see all the queries, you can quickly figure out there are people into Dr. Who, Star Trek, Anime. Using spotify and discord and facebook and instagram and tumblr and reddit. >> >> Things like DNS over HTTPS and DNSSEC help, but just to stop MITM stuff.. if the ISP is running the DNS server, they can see the queries.. Now, maybe cloudflare or google is doing the same thing, but have far less of an understanding of who I am.. vs.. Verizon.. >> >> We can have a bigger conversation about what google knows about you.. >> >> Tim. >> >> On Tue, Aug 26, 2025 at 3:55 PM Keith Wright <kwright(a)keithdiane.us> wrote: >> >>> Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: >>> >>>> I've long since decided to avoid using my ISP's dns and went to >>>> running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 >>>> >>>> Tim. >>> >>> Other than the hack value of doing it yourself, >>> is there a specific reason that you avoid ISP DNS? >>> >>> -- Keith >> >> -- >> >> I am leery of the allegiances of any politician who refers to their constituents as "consumers". >> _______________________________________________ >> WLUG mailing list -- wlug(a)lists.wlug.org >> To unsubscribe send an email to wlug-leave(a)lists.wlug.org >> Create Account: https://wlug.mailman3.com/accounts/signup/ >> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ >> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/PWR56…

Aug. 27, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by Jared Greenwald

If you're ever bored with using the Google recursors, give the Oracle recursors a try - 216.146.35.35 & 216.146.36.36 Source: I work on OCI's DNS service that maintains the recursors. On Tue, Aug 26, 2025 at 7:51 PM Tim Keller via WLUG <wlug(a)lists.wlug.org> wrote: > ISPs figured out a long time ago they could harvest and sell your DNS > query information. Sure because of https they can't see what your google > queries are, but they can deduce the results.. > > Just looking at my PiHole logs is pretty enlightening.. It's clear I was > just about to go on vacation in Maine, before that I was researching places > in the Berkshires, before that I was on a whole bunch of EV review sites. > That's just filtering for stuff from this machine and my phone. If I turn > the filter off and see all the queries, you can quickly figure out there > are people into Dr. Who, Star Trek, Anime. Using spotify and discord and > facebook and instagram and tumblr and reddit. > > Things like DNS over HTTPS and DNSSEC help, but just to stop MITM stuff.. > if the ISP is running the DNS server, they can see the queries.. Now, maybe > cloudflare or google is doing the same thing, but have far less of an > understanding of who I am.. vs.. Verizon.. > > We can have a bigger conversation about what google knows about you.. > > Tim. > > > On Tue, Aug 26, 2025 at 3:55 PM Keith Wright <kwright(a)keithdiane.us> > wrote: > >> Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: >> >> > I've long since decided to avoid using my ISP's dns and went to >> > running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 >> > >> > Tim. >> >> Other than the hack value of doing it yourself, >> is there a specific reason that you avoid ISP DNS? >> >> -- Keith >> >> > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/PWR56… >

Aug. 27, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by Tim Keller

ISPs figured out a long time ago they could harvest and sell your DNS query information. Sure because of https they can't see what your google queries are, but they can deduce the results.. Just looking at my PiHole logs is pretty enlightening.. It's clear I was just about to go on vacation in Maine, before that I was researching places in the Berkshires, before that I was on a whole bunch of EV review sites. That's just filtering for stuff from this machine and my phone. If I turn the filter off and see all the queries, you can quickly figure out there are people into Dr. Who, Star Trek, Anime. Using spotify and discord and facebook and instagram and tumblr and reddit. Things like DNS over HTTPS and DNSSEC help, but just to stop MITM stuff.. if the ISP is running the DNS server, they can see the queries.. Now, maybe cloudflare or google is doing the same thing, but have far less of an understanding of who I am.. vs.. Verizon.. We can have a bigger conversation about what google knows about you.. Tim. On Tue, Aug 26, 2025 at 3:55 PM Keith Wright <kwright(a)keithdiane.us> wrote: > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > I've long since decided to avoid using my ISP's dns and went to > > running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 > > > > Tim. > > Other than the hack value of doing it yourself, > is there a specific reason that you avoid ISP DNS? > > -- Keith > > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Aug. 26, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by steve＠patternsoft.net

Got my own router. SO I have just a 3rd party modem I own that’s not a spectrum device, just a docsis 3.1 device compatible with spectrum. But no I haven’t set any transparent/bridge settings. That’s actually a good idea to check. I always think of the modem as invisible infrastructure but worth a look. Thanks! Steve Thibault > On Aug 26, 2025, at 4:41 PM, Chuck Anderson <cra(a)fea.st> wrote: > > Did you turn off any "security" features Spectrum has on the cable modem/gateway and put it into transparent bridging mode and use your own router? > > On Tue, Aug 26, 2025 at 04:02:17PM -0400, steve--- via WLUG wrote: >> Privacy. I don’t want one org, source, company knowing EVERY DNS query I make from my house and therefor every company, site, organization, service,…,etc that I use. >> >> If I have a recursive DNS server that doesn’t go to one DNS forward like Spectrum, Google, Cloud flair, etc, server, but instead caches the root entries locally on initial startup for .com, .net, .bix, .org, etc, and then cache as I go the next level down, nobody ever when and what I query but once, and then that’s just the next level of the recurse, which is auto refreshed when the cache TTL runs out. So I keep as much of my digital data away from prying eyes as possible. As the IETF says in their specs, passive monitoring is an attack, and should reasonable measures should be taken to reduce or eliminate it. >> >> Steve Thibault >> >>> On Aug 26, 2025, at 3:55 PM, Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: >>> >>> Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: >>> >>>> I've long since decided to avoid using my ISP's dns and went to >>>> running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 >>>> >>>> Tim. >>> >>> Other than the hack value of doing it yourself, >>> is there a specific reason that you avoid ISP DNS?

Aug. 26, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by Chuck Anderson

Did you turn off any "security" features Spectrum has on the cable modem/gateway and put it into transparent bridging mode and use your own router? On Tue, Aug 26, 2025 at 04:02:17PM -0400, steve--- via WLUG wrote: > Privacy. I don’t want one org, source, company knowing EVERY DNS query I make from my house and therefor every company, site, organization, service,…,etc that I use. > > If I have a recursive DNS server that doesn’t go to one DNS forward like Spectrum, Google, Cloud flair, etc, server, but instead caches the root entries locally on initial startup for .com, .net, .bix, .org, etc, and then cache as I go the next level down, nobody ever when and what I query but once, and then that’s just the next level of the recurse, which is auto refreshed when the cache TTL runs out. So I keep as much of my digital data away from prying eyes as possible. As the IETF says in their specs, passive monitoring is an attack, and should reasonable measures should be taken to reduce or eliminate it. > > Steve Thibault > > > On Aug 26, 2025, at 3:55 PM, Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > > > > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > > > >> I've long since decided to avoid using my ISP's dns and went to > >> running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 > >> > >> Tim. > > > > Other than the hack value of doing it yourself, > > is there a specific reason that you avoid ISP DNS?

Aug. 26, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by steve＠patternsoft.net

Privacy. I don’t want one org, source, company knowing EVERY DNS query I make from my house and therefor every company, site, organization, service,…,etc that I use. If I have a recursive DNS server that doesn’t go to one DNS forward like Spectrum, Google, Cloud flair, etc, server, but instead caches the root entries locally on initial startup for .com, .net, .bix, .org, etc, and then cache as I go the next level down, nobody ever when and what I query but once, and then that’s just the next level of the recurse, which is auto refreshed when the cache TTL runs out. So I keep as much of my digital data away from prying eyes as possible. As the IETF says in their specs, passive monitoring is an attack, and should reasonable measures should be taken to reduce or eliminate it. Steve Thibault > On Aug 26, 2025, at 3:55 PM, Keith Wright via WLUG <wlug(a)lists.wlug.org> wrote: > > Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > >> I've long since decided to avoid using my ISP's dns and went to >> running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 >> >> Tim. > > Other than the hack value of doing it yourself, > is there a specific reason that you avoid ISP DNS? > > -- Keith > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/U4OXJ…

Aug. 26, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by Keith Wright

Tim Keller via WLUG <wlug(a)lists.wlug.org> writes: > I've long since decided to avoid using my ISP's dns and went to > running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 > > Tim. Other than the hack value of doing it yourself, is there a specific reason that you avoid ISP DNS? -- Keith

Aug. 26, 2025

Re: Spectrum, Recursive dns and interception of root authoritative DNS

by Tim Keller

I've long since decided to avoid using my ISP's dns and went to running PiHole with the upstream dns being 8.8.8.8 and 1.1.1.1 Tim. On Sun, Aug 24, 2025, 12:01 PM steve--- via WLUG <wlug(a)lists.wlug.org> wrote: > Hey all. I was wondering since were all? Worcester or surrounding and > dealing with Spectrum as an ISP, if you’ve run into the same thing I have > in the last few months. > > > I used to, as you’ll see soon, run unbound as a recursive DNS server in my > home network to cache and limit external DNS queries that was the forwarder > behind Pihole. It worked great for a very long time. > > > But a few months ago, my internet went down, and It turned out to be non > cached dns queries starting to fail. I realized in logs that unbound was > getting errors reaching out to dns servers and disabled it until I could > investigate instead forwarding to cloud flare temporarily. > > Now that I have had time to research and investigate, I have found that at > least SOMETHING is intercepting my my queries to authoritative DNS servers > when I reset unbound and it throw’s away the response because they aren’t > “AA” status responses and it never caches the root dns and therefor won’t > resolve anything. > > I come to find out the “authoritative” servers are responding with a > status of RA which means it’s not the actual authoritative service when I > query manually, dig @198.41.0.4 . NS +norecurse an actual authoritative, > and that this is most likely a change Spectrum has made. Has anybody else > ran into this? Is it actually Spectrum. I guess I haven’t dug far enough > yet to see if its may be a firmware update to my router, UDM PRO yet. Still > working on that, but though I’d ask this group first before I dig into that > and save myself the time and go straight to ISP workarounds. > > Thanks in advance! Looking forward to our next meeting!! > > Steve > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/5AWI2… >

Aug. 24, 2025

Spectrum, Recursive dns and interception of root authoritative DNS

by steve＠patternsoft.net

Hey all. I was wondering since were all? Worcester or surrounding and dealing with Spectrum as an ISP, if you’ve run into the same thing I have in the last few months. I used to, as you’ll see soon, run unbound as a recursive DNS server in my home network to cache and limit external DNS queries that was the forwarder behind Pihole. It worked great for a very long time. But a few months ago, my internet went down, and It turned out to be non cached dns queries starting to fail. I realized in logs that unbound was getting errors reaching out to dns servers and disabled it until I could investigate instead forwarding to cloud flare temporarily. Now that I have had time to research and investigate, I have found that at least SOMETHING is intercepting my my queries to authoritative DNS servers when I reset unbound and it throw’s away the response because they aren’t “AA” status responses and it never caches the root dns and therefor won’t resolve anything. I come to find out the “authoritative” servers are responding with a status of RA which means it’s not the actual authoritative service when I query manually, dig @198.41.0.4 . NS +norecurse an actual authoritative, and that this is most likely a change Spectrum has made. Has anybody else ran into this? Is it actually Spectrum. I guess I haven’t dug far enough yet to see if its may be a firmware update to my router, UDM PRO yet. Still working on that, but though I’d ask this group first before I dig into that and save myself the time and go straight to ISP workarounds. Thanks in advance! Looking forward to our next meeting!! Steve

Aug. 24, 2025

Re: Reminder! WLUG Meeting tomorrow!! Topics: pi5 nvme support, backups, general discussion

by Frank Sweetser

We're over in the sewing room. - Frank On Thu, Aug 14, 2025, 7:20 PM Joel via WLUG <wlug(a)lists.wlug.org> wrote: > > At Technopia and no WLUG people here. > > Curious... > > Aug 13, 2025 3:46:54 PM Tim Keller via WLUG <wlug(a)lists.wlug.org>: > > Hey Everybody! > > We've got a meeting tomorrow, Thursday, August 14th, 2025 at 7PM! > Location: Technocopia, 44 Portland Ave Worcester MA > <https://www.google.com/maps/search/44+Portland+Ave+Worcester+MA?entry=gmail…>. > > Virtual Location: https://meet.jit.si/WlugMA I'm sure we'll have our > usual A/V antics.. > Topic: pi5 nvme support, backups, round table. > > I recently had a hardware failure that exposed that my backup solution > wasn't that great. This spurred me to get a solution for backups. With a > trusty pi5 and some nvme's I've setup a "burp" backup server. > I'll show off the pi5 with an nvme or dual nvme setup running Rasbian with > ZFS and burp. > Then from there I'm sure we'll stray into other topics and I expect the > conversation to get lively. > > As usual, we'll head out for dinner afterwards and keep the conversation > going. > > Later, > Tim. > > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > > _______________________________________________ > WLUG mailing list -- wlug(a)lists.wlug.org > To unsubscribe send an email to wlug-leave(a)lists.wlug.org > Create Account: https://wlug.mailman3.com/accounts/signup/ > Change Settings: > https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/ > Web Forum/Archive: > https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/HG6DV… >

Aug. 14, 2025