Re: [Wlug] more on event correlation...
by Mike Peckar
Whoops, didn't mean to send to the entire list - I guess I had too many mini
oreo cookies last night...
----- Original Message -----
From: Mike Peckar <ov(a)fognet.com>
To: <wlug(a)mail.wlug.org>
Sent: Thursday, October 11, 2001 11:27 PM
Subject: [Wlug] more on event correlation...
> Nice meeting you tonight, Chuck, and THANKS for the redhat cd's...
>
> sec was the freeware event correlation tool I spoke of tonight: It is a
> straightforward perl script and doesn't implement a full state machine,
but
> it nevertheless provides some inklings of what more complciated event
> correlators do. Check it at http://kodu.neti.ee/~risto/sec/
>
> The best commercial event corellation tools IMHO are Nervecenter, Taave,
> Smarts, and Netcool. Each has its niche where it's best in class, and
> there are others, like HP's ECS, Logec, G2, etc.
>
> My friend Doug Stevenson is a specialist in event correlation and wrote
the
> Maji spec: the open source event correlation engine being developed under
> the umbrella of OpenNMS (yeah, so, it'll be java - but it will also be
very
> feature rich). He masterfully defines some of the layers of granularity
that
> one might see amongst the different offerings in the Event Correlation
> space. Types we talked about tonight include event correlation (reducing
> traps) and device correlation (mapping switch states to events). His
> definitions are listed below...
>
> Mike
>
>
>
> <snipped message>
> OK...
>
> Here goes...
> § Event Correlation
>
> § Alarm Correlation
>
> § Device Correlation
>
> § System Correlation
>
> § Service Correlation
>
> § Performance Correlation
>
> § Security Correlation
>
> Event Correlation - This is a correlation where multiple events are
filtered
> and processed, thereby reducing the number of events presented. This is
> primarily done with event tally counts and trap problem verification.
>
> Alarm Correlation - This is a correlation of alarms and alerts depicting
> true problems or root causes and their current status. Side effect alarms
or
> alarms occurring as a result of a root cause alarm are suppressed or
become
> subordinate to the root cause alarm.
>
> Device Correlation - This is a correlation of devices, their specific
> internal components (both hardware and software), and the device's
behavior
> with other devices. Additionally, device correlation lends itself toward
> configuration management as it is a dynamic inventory of devices,
> subsystems, components, and behaviors.
>
> System Correlation - This is a correlation of devices and managed objects
as
> they pertain to an overall system. This level of correlation enables one
to
> manage and classify a conglomeration of managed objects as a manageable
> entity.
>
> Service Correlation - This correlation is used to determine the devices
and
> systems that make up an IT service. In essence, this is the correlation of
> managed objects and systems to business rules; similar to a translation of
> terms from computers and systems to business services. The Service
> Correlation can be extended to customer impact analysis, business
> profitability impact analysis, etc.
>
> Performance Correlation - This correlation is used to determine the
effects
> performance has with regards to a fault. It is unique in that performance
> correlation can be applied to enhance the correlation of all of the other
> categories.
>
> Security Correlation - This correlation is used to determine the degree of
> threats caused by security incidents. It is unique in that security
> correlation is embedded among all the other six categories described
above.
>
> HTH,
>
> Doug...
>
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
23 years, 9 months
Re: Looking for advice for home server
by John Stoffel
>>>>> "Kevin" == Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes:
> I am looking for a cheap solution for the following:
> 1) Email server/redireector. I want to have a full custom domain and
> email addre0ss.
> 2) FTP server on the same domain as the email server.
Please no! Setup 'sftp' instead. This does require two IPs on the
system since sftp (ftp over ssh) will take up one port because ideally
you'd setup virtual users who can't actually login to the system...
> 3) GUI setup preferred, I do not want to invest the time (right now)
> to get this working as a 'ground up' project.
I'd think about Ansible, which lets you do repeatable test builds at
home. The trick, of course, is getting your email setup working that
way. There's a bunch of parts:
postfix for SMTP incoming/outgoing
dovecot for IMAP
postscreen
rspamd - spam filtering
dkim - for singing your outgoing emails
nginx - for hosting various files for google and others to check
for you being who you say you are. Fun fun.
And a bunch of other stuff. I'd actually suggest maybe you look at
https://mailinabox.email/ do you your setup. I think if I had to do
it again, i'd go that route.
The most important part though, and the most annoying, if getting your
VPS and making sure it's not in a spam block, or likely to get added
into one. Its... painful. I've been running stoffel.org for 20+
years now for email and it's gotten harder and harder.
Nowdays you need to have SPF keys setup in DNS, DKIM keys for signing
emails, you want to make sure you don't relay anything any more,
because that will get you banned. Which reminds me I need to stop
relaying too. Sigh...
> 4) Total bandwidth needs should be negligible.
Very true, a mail server is pretty low bandwidth.
> How would you approach this?
> At a very high level, I am considering:
> 1) Dedicating a DDR3 (RAM) era Intel I3 P.C. (sorry, I don not know the
> generation) and installing NAS software with the appropriate docker
> plugins, if they exist. I do not know if this is even reasonable.
> Suggestions are appreciated. I am using a home ISP account. I am aware
> of DynDNS type services to get around the lack of a static IP. I do not
> currently plan on using this device as an actual NAS due to security
> concerns. If necessary, I will use sneaker-net to transfer data,
> although I am thinking about ssh or even RS232.
If you're thinking of running this at home on your home internet then
you're in for probably a rude surprise. Most big mail providers tend
to block home IP blocks and not accept email because the volume of
spam from them is so high.
I'm on a Linode droplet right now, but thinking of moving to something
else.
> 2) Renting out space on a service like Amazon Web services. Maybe they
> have an image that is already what I want.
Again, those AWS IP blocks tend to get blocked and dropped because of
the spam levels.
> Any ideas/thoughts/experiences would be appreciated. I hope to be at
> the meeting next Thursday.
Happy to chat then. I'd suggest you going the postfix.org mailing
list and look through the archives. If you do go with a VPS, you'll
really want something with 2gb of RAM or more, because rspamd is a
hog. Postfix and dovecot are simple.
It's the getting others to accept your email that sucks.
John
11 months, 3 weeks
Re: [Wlug] (no subject)
by Tim Keller
Here's my .02 cents on building a machine.
1. Memory. You can never have too much of it. I'd say try to get a board
that'll do 8GB with the expectation you'll be there at some point.
2. CPU: go duel at a minimum. If you could swing a quad I'd say go for it.
3. Video card: Get something that will do HDMI and is capable of duel head.
I've got a Nvidia GeForce 8400 GS with 512MB of video memory and it cost me
a whopping 40 dollars!
4. Harddrives: If your going to spring for 1, go ahead and buy two and then
mirror them. Mirrored drives have now saved my ass on three occasions.
5. Case: Honestly I like cases that don't resemble a disco under my desk.
I'm also fond of 120mm case fans. They move a shit load of air and are
quiet.
Power Supply: I wouldn't go smaller than a 350W. If you ever decide to
suddenly add two more drives or a burner, nothing sucks more than your power
supply being the weak link.
6. OS: Do it yourself. I'm not sure if Ubuntu will let you mirror drives at
install, I know the Red Hat family of distros will. Doing your own install
will at least give you an explicit understanding of what packages you've
installed. Heck we could probably make a meeting out of helping you install
and tweak your machine!
Later,
Tim.
On Mon, Aug 10, 2009 at 8:02 AM, Gregory Avedissian <avedis.g(a)verizon.net>wrote:
>
>
> Brian McLinden wrote:
>
> >
> > What do you think about this workaround --
> > http://www.inatux.com/order These are FSF/FOSS people. I can't see
>
> I would recommend more than their base system. Go with a dual-core cpu and
> probably 2G memory, since it's so cheap now ($30-40 at newegg), and bigger
> hard drive (e.g. 250GB for around $50). How much do they want with those
> upgrades?
>
> >
> > And, for cable broadband and live streaming of audio and video, what
> > combination or package(s) of HW ad SW should I ask for. Wired case?
> > Wireless case?
>
> If you're talking about wired vs. wireless network, it's a lot easier to
> go with wired. Any linux distro will get you online with a basic desktop
> installation. (OK, there are probably exceptions.) You'll also get audio
> and video players. For audio and video, you might need to install
> additional codecs, but that's generally pretty easy to do.
>
> Why don't you want to install the OS yourself?
>
>
>
> > 4. What Linux distribution would you pair with Unix?
> >
> > And, what will I learn from one that I don't learn from the other?
> >
>
> I'm just going to reiterate what others said. You'll learn a lot from
> installing the OS yourself. Ubuntu is a good choice if you're new to
> linux, but anything in the top 5 or 10 in the list at distrowatch.com is
> probably a good choice. The installation procedure is pretty easy these
> days (on the major distros).
>
> Leave room on your hard drive for additional partitions to try other
> flavors of linux if you want. That's sometimes a better choice than trying
> it in a VM, because then you get to see how the OS works with your
> hardware. That tends to be more of an issue when you're using the latest
> hardware.
>
>
> Greg
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
--
I am weary of the allegiances of any politician who refers to their
constituents as "consumers".
15 years, 11 months
Re: Uptime!
by Jon "maddog" Hall
Mike,
Believe it or not, both VMS and Digital Unix systems were the same way.
They would go months and years without rebooting.
The US Navy had two hospital ships, the "Mercy" and the "Hope". One
stationed on the East Coast and one in San Diego. The one on the East
Coast used WNT for the servers and the one in San Diego used GNU/Linux.
The ship using WNT had to have twice as many servers as the one in San
Diego because the Navy rules said that a WNT server HAD to be rebooted
every 30 days, whereas there was no such requirement for GNU/Linux. Since
a Naval deployment could last longer than 30 days, and since they needed
the server services to be up constantly that whole time, they needed twice
as many WNT servers.
md
On Thu, Apr 21, 2022 at 8:58 AM Mike Peckar via WLUG <wlug(a)lists.wlug.org>
wrote:
> Fun Story, Maddog. Around 20 yrs ago I was consulting for Bloomberg in
> Skillman, NJ, a big Solaris shop. The HP app I was working with bellied up
> with memory leaks and I suggested they reboot that server. I was told flat
> out they don't reboot Solaris servers period. They cleaned up the mess and
> isolated where in the HP code that the pointer was lost, leaving me the
> not-so-fun task of filing the bug report with HP.
>
> Mike
>
> On Wed, Apr 20, 2022 at 7:39 PM Jon "maddog" Hall via WLUG <
> wlug(a)lists.wlug.org> wrote:
>
>> Tim,
>>
>> What was the reason for shutting it down?
>>
>> This reminds me of a story from years ago where a young friend contacted
>> me before a trip to the University of New Hampshire for a Linux LUG meeting.
>>
>> He asked me if I would go to a particular dorm and knock on the door of
>> what had been his door room. I was to ask if I could unplug the box that
>> was in the corner of the closet in the room. The system had been running
>> for five years in his former dorm room and he had forgotten the login
>> password. He did not want the machine back, just wanted it unplugged.
>>
>> A young woman answered the door, heard my explanation and let me unplug
>> the machine. "We were afraid to unplug it" she said.
>>
>> Your machine beat his machine on uptime.
>>
>> md
>>
>> On Wed, Apr 20, 2022 at 5:07 PM Tim Keller via WLUG <wlug(a)lists.wlug.org>
>> wrote:
>>
>>> I just shutdown a linux machine with 3169 days of uptime!
>>> It had userland processes that have been actively running since 2013!
>>> Tim.
>>>
>>> --
>>> I am leery of the allegiances of any politician who refers to their
>>> constituents as "consumers".
>>> _______________________________________________
>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>> Change Settings:
>>> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>> Web Forum/Archive:
>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/PW3ML…
>>>
>> _______________________________________________
>> WLUG mailing list -- wlug(a)lists.wlug.org
>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>> Create Account: https://wlug.mailman3.com/accounts/signup/
>> Change Settings:
>> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>> Web Forum/Archive:
>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/KSUVD…
>>
> _______________________________________________
> WLUG mailing list -- wlug(a)lists.wlug.org
> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
> Create Account: https://wlug.mailman3.com/accounts/signup/
> Change Settings:
> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
> Web Forum/Archive:
> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/ZZZSN…
>
3 years, 3 months
Re: [Wlug] Gentoo
by John Platt
Just a couple of thoughts. 1. for a good commentary on the gentoo
handbook I recommend the blog postings of Vincent Zoonekynd. He's
French, he's modest and he's very insightful.
http://zoonek.free.fr/blosxom/Linux/2006-01-01_Gentoo.html
2. You can probably install it with a slax cd. Or a gentoo disk of
course. Either has a /proc/config.gz which will work very well with
genkernel to compile a kernel. After you have emerged genkernel type:
zcat /proc/config.gz > /usr/share/genkernel/x86/kernel-config-2.6
Then genkernel all to create a kernel and initramfs. Of course for a
64-bit machine you should zcat it to the appropriate subdirectory
which I believe is x86_64
On Wed, Mar 23, 2011 at 2:10 PM, Jamie Guinan <guinan(a)bluebutton.com> wrote:
> On Wed, 23 Mar 2011, Eric Martin wrote:
>
>> On 03/23/11 12:19, Joshua Demallistre wrote:
>> >
>> > I was thinking about giving Gentoo a try. It would be nice for some
>> > one in the group could give me a hand.
>> >
>> What sort of help are you looking for? There used to be a
>> disproportionately large Gentoo user base in WLUG, although I don't know
>> how large it is anymore. I use it at home and work and I'd be glad to
>> help you out. For me, the great thing about Gentoo is the learning
>> experience; I learned a lot about GNU/Linux by doing my first Gentoo
>> installs, and I'm still learning. If you haven't already, grab the
>> install discs and peruse through the install docs. If you have a 64bit
>> machine, I suggest grabbing the 64bit disc. Maintaining Gentoo x64
>> isn't terribly hard, and you can use memory more efficiently.
>
> Gentoo user here, too. Although I haven't done a fresh install in
> quite a while, I just keep updating.
>
> What I like best about Gentoo is picking and choosing which packages
> to include and leave out, both applications and libraries. For
> example, the other day I wanted to install "gtkpod", but I really
> don't want to have Mono or QT4 installed on my system, for various
> reasons. Doing a test install, I can verify that they are left out:
>
> # emerge -ptv gtkpod
>
> These are the packages that would be merged, in reverse order:
>
> Calculating dependencies... done!
> [ebuild N ] app-pda/gtkpod-1.0.0 USE="aac flac mp3 ogg -curl" 1,856 kB
> [ebuild N ] media-libs/libgpod-0.8.0 USE="gtk iphone python udev -mono -static-libs" 975 kB
> [nomerge ] media-libs/libgpod-0.8.0 USE="gtk iphone python udev -mono -static-libs"
> [nomerge ] sys-apps/sg3_utils-1.30
> [ebuild N ] sys-apps/rescan-scsi-bus-1.48 21 kB
> [ebuild N ] sys-apps/sg3_utils-1.30 863 kB
> [ebuild N ] app-pda/libimobiledevice-1.0.4 USE="python" 404 kB
> [ebuild N ] app-pda/usbmuxd-1.0.6 57 kB
> [ebuild N ] app-pda/libplist-1.3 67 kB
> [ebuild U ] dev-util/cmake-2.8.3-r1 [2.8.0-r2] USE="ncurses -emacs -qt4 -vim-syntax" 5,310 kB
> ...
>
> The USE= "-mono" and "-qt4" flags indicate that the listed packages
> will be built without that support. Gentoo handles that by passing
> the necessary options to "configure" when it builds the package, and
> that is IMO the main point of using a source-based distribution.
>
> If you *did* want support for mono, you could edit "/etc/make.conf"
> (system-wide) or "/etc/portage/package.use" (package-specific), add
> the "mono" flag (or remove "-mono"), and try again.
>
> For better or worse, I think gentoo kind of peaked in popularity
> several years ago. Related article,
>
> http://news.cnet.com/8301-13505_3-10047439-16.html?tag=mncol;title
>
> But it still meets my needs on several of my computers.
>
> And finally, yes, I am aware of "http://funroll-loops.info/", and I
> don't care. :)
>
> -Jamie
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
14 years, 4 months
Re: [Wlug] synce, is a wonderful thing
by Wes Allen
Yeah, I've figured out the boot-loader part....but I haven't been daring
enough to try it out. I was thinking about starting the process tonight, but
I couldn't get my win4lin installation to tell that I have a serial port on
my computer, and so I couldn't install the boot-loader. And since I can't
get synce to work right, I was kinda stuck.....
I can't wait until I get rid of pocketPC2002..... activesync is just a pain in
the neck.
Wes
On Monday 09 December 2002 5:35 pm, brad wrote:
> On Monday 09 December 2002 03:13 pm, Wes Allen wrote:
> > Thanks,
> > Only now I can't connect to my computer again with synce. Screw it,
> > I've got my data backed up. linux here I come...... Where do I stop the
> > install process and put qtopia on instead of X (and is qtopia in ipkg
> > format anywhere?).
>
> The install is in phases. Though i believe there are some packages will
> combine the root and the graphics (that would combine steps 2 and 3 below).
>
> 1st - you'll need to install a boot loader so you can boot into linux (this
> is the only dangerous part).
>
> 2nd - you'll need to install the base linux system, or the root (you'll
> probably want the familiar distro). You do this through the boot loader.
>
> 3nd - at this point you'll have linux installed but no graphics. You want
> to make sure you can connect you're ipaq to the internet so it can download
> packages. Choose which graphics package you want, X, GPE, Qtopia, or OPIE,
> and install it.
>
> All the graphics packages are a set of packages, so you can install the
> packages you will find useful. I would suggest OPIE, since that's what i
> use, and that seems to be the most featureful and mature of them all.
>
> This will probably make for an intersting mini-demo at a meeting. It's been
> a long time since i've gone through all this stuff though (since i
> installed linux on my ipaq a year and a half ago and a lot has changed).
>
> --brad
>
> > Wes
> >
> > On Wednesday 04 December 2002 10:30 pm, brad wrote:
> > > On Wednesday 04 December 2002 09:55 pm, Wesley Allen wrote:
> > > > Hi all, I've actually managed to get my iPAQ connected to my linux
> > > > laptop using my usb cable....and I've even gotten some files off it
> > > > and opened them up with OOo. All-in-all, I'm happy.
> > >
> > > Nice.
> > >
> > > > But I would like to back up the address files and convert them into
> > > > something Linux can use. What files does pocket-pc use to keep their
> > > > addressbook data in?
> > >
> > > I believe that the address book, is something that only outlook can
> > > read. I had a hard time trying to figure this one out to when i
> > > switched from WinCE to linux. What i did was found a machine with
> > > outlook and sync-ed to that. Opened up outlook and exported the address
> > > book in csv format. Then i could actually read the data.
> > >
> > > Cheers,
> > > --brad
> > >
> > >
> > > _______________________________________________
> > > Wlug mailing list
> > > Wlug(a)mail.wlug.org
> > > http://mail.wlug.org/mailman/listinfo/wlug
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
--
------
This message may be signed using GPG, for my public key please
send me a message with "Key Request" in the subject line.
22 years, 7 months
Re: [Wlug] printers
by Son Nguyen
Keith,
>From: Keith Wright <kwright(a)free-comp-shop.com>
>Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org>
>To: wlug(a)mail.wlug.org
>Subject: Re: [Wlug] printers
>Date: Fri, 3 Sep 2004 17:26:53 -0400
>
> > From: "Son Nguyen" <snguyen(a)hotmail.com>
> >
> > I would recommend not using LPRng. It is too old.
>
>As an old codger in training, I take that personally.
>You remind me of Perlis's comment on Algol60:
> Not perfect, but a big improvement over its successors.
>
This commend is not meant to insult. Just that almost every distributions
are using cups. I have had request from my users that I should retro fit
lrpng into my network. Although it is not impossible, it is less versitile
than cups. I have not had much problems with both the applets and web based
configuration.
>I don't even know what LPRng is, I suppose it's the New-Gnu version
>of the ancient bin/lpr program, from back in the days when programs
>were more prized for working than for having a Web interface.
I totally agree. I would rather use the console command instead, but it is
nice to have an alternative configuration method for those who are not
confortable at the command line.
>
>My printer is attached to a dual boot machine that now runs
>Linux only, with a Samba server so that Diane can print
>via the network from her laptop. It worked pretty much
>the first time, the main problem being getting the Windows
>laptop to notice it.
>
>I can print from the printer/Linux machine, but when I tried
>to use the much-touted CUPS web-based set-up to connect to the
>printer from another Linux machine, it went totaly wonky.
>Certain buttons sent the browser in an apparent infinite loop.
>(By Turing, you can never be sure, but I waited long with no action)
>Sometimes it would take me to some crazy random place in the
>Internet, to pictures of buildings that had the same name
>as my server machine, as though some mad programmer had
>rewritten bin/hostname to search Google for its name.
>
Have you considered connecting the printer to the windows box, share it and
then map it via the linux? How about a a dsl router with the network
printer capability? I love the external jetdirect parrellel to ethernet
device.
>It was not high priority, since ftp works and I have to walk
>to the printer machine anyway to get the paper, so I quit.
>
> > I understand that CUPS seems difficult, but once you understand
it,
> > it is the next best thing.
>
>At first I thought you were recommending it as second-best, but
>maybe "next best" means Best Real Soon Now.
>
> > In my office, I have setup my kickstart
> > to install 300+ printers on all of my Redhat Linux V3 Workstation
> > machines (100+).
>
>Eh? You need 300 printers for 100 workstations?
>
My offices are in Bedford (MA), McLean (VA), NJ, and Tampa (FL). I have to
allow users to printer to any printers on my network for virtual meeting
purposes.
Sonny
> > You can configure it via console, applet, or even web.
>
>Not me, maybe you can.
>
> > Fedora and Redhat has gone that route and I believe that
> > others have too. It is much better than LPRng can every be.
>
>Oh, I suppose, but much better can you make something that
>does what I used to with "cat scratch.ps >/dev/lp0"?
>
> -- Keith
>_______________________________________________
>Wlug mailing list
>Wlug(a)mail.wlug.org
>http://mail.wlug.org/mailman/listinfo/wlug
20 years, 10 months
Re: [Wlug] Instant Messaging Software
by Theo Van Dinter
On Fri, Mar 19, 2004 at 01:37:25PM -0500, Gary Hanley wrote:
> Ha. I still, for the life of me, have not seen the value-added benefit of
> IM over a good old-fashioned telephone or conference call.
Just a few reasons from my POV:
1) phones aren't available everywhere, and cell phone coverage is
spotty/dead in lots of areas. (for example, inside my company's
colo facility...)
2) it's quick and easy if you're already online. need to shoot a command
to someone or ask a quick 5 second question? it'll take me longer to
find/remember/dial their phone number than it is to goto my IM "buddy"
listing and type it.
3) unless you record it, there's no trail of conversations on the phone.
I "record" all IM conversations that I have -- really excellent to
remember little snippets of information. as an example, I opened a
hardware case with IBM the other day, but a coworker was going to be
the contact, so I IMed the case # to him. The next day, I needed to
call IBM about the case... Without having the conversation "recorded",
I'd have had no way to know what the case # was (didn't write it down,
and the coworker was unavailable). I've also done this type of thing
with conversations I had over a year ago. (this is the same reason
I pretty much save all email I send/receive btw...)
4) IM is good for multiple short conversations throughout the day --
my wife/friend/coworker can IM me in the morning, and I can just keep
the window open for any thoughts/questions/etc throughout the day.
5) If I'm not around, but someone IMs me a question, I'll see it when I
get back to my computer and can respond directly. If someone calls me
(see #6 below) I'd either have to tell them to call me back later when
I'm at my computer, or they'd leave me voice mail and I'd have to go
through the bother of getting the VM then calling back, etc, etc.
6) I can walk away from my IM window and get lunch or something --
if people knew my cell phone number, I'd have yet another electronic
leash.
7) I pay for phone calls, I don't pay for IM. If I'm using my home
phone (pay per call + per minute) or my cell phone (pay per minute),
that costs me money that I normally wouldn't have to pay... Not to
mention the fact that sometimes you want to talk to people who
aren't local which costs more money. However, I'm already paying
for bandwidth no matter how much I use.
8) I usually type more "correctly" than I talk.
9) I spend a lot of time working on open source software (one program
specifically), and sometimes need to converse with other developers
on the project. I'm here in MA, some are in CA, some in Canada,
some in Germany, etc... It's easier to IM than setup a multi-country
conference call.
10) if you're on the phone and want to talk to someone else either
about the call or something different, then you'd have to hang up
and call someone else, or get multiple phones, or ... an example:
I was on a con call with several of the above mentioned open source
developers, and the legal department of a large company we're
conversing with -- but we (developers) wanted to chat during the
call without having the other group overhear, so we had an IM chat
session going in the background.
11) I don't like using the phone. :P
I don't think IM is a replace-all for phones or in-person meetings,
but it does better handle/allow a lot of communications in a more
efficient manner. IMHO.
--
Randomly Generated Tagline:
"... although it's better if you call it an osculating circle because nobody
knows what it means. Except those smarty-pants math professors..."
- Prof. Farr
21 years, 4 months
Re: Dec meeting.. not the 14th! 21st or 28th?
by Althea Shaheen
What I do is have the wireguard clients be on a different subnet than my other hosts, all behind the firewall. Then, in pfsense I made wireguard an interface like any other, and that allows me to make firewall policies, such as letting wireguard clients only to my DNS servers on port 53, or my web servers on 443. Also, since each wireguard client has a static IP reserved, I can make my phone access more than my cloud server, since I trust the security of my phone a tad more (but only a tad).
For routing, I have the config for the clients either as 0.0.0.0/0 to send all traffic over the tunnel, or my private networks only for the split tunnel, and let the firewall policy handle it from there.
So, you could certainly make it so that your VPS connects to your wireguard endpoint, and then send your backup traffic to it's client IP if you are going outbound to the VPS, and block the VPS from your internal network, or vice versa just open up the port you need to the host you need from the VPS to internal.
Hope this helps
On Thu, Dec 14, 2023, at 12:42, John Stoffel wrote:
>>>>>> "Althea" == Althea Shaheen via WLUG <wlug(a)lists.wlug.org> writes:
>
>> I run it on my pfSense firewall, but pivpn is also a great option if
>> you'd rather port forward to a different device.
>
> Do you have it so that if you have multiple internal devices behind
> your firewall, your external client can reach all those devices?
>
> I'ev been playing, but I'm sure I'm mssing something. For example:
>
> Internal network: 192.168.1.0/24
> host A 192.168.1.10/32
> host B 192.168.1.20/32
>
> Firewall: 192.168.1.254
> WG: 192.168.200.0/24
>
> Client: 200.150.100.50 (made up)
>
>
> Ideally I'd like my client to be able to access host A or B from the
> road using the WG tunnel. Would I need to assign WG addresses to
> these hosts? Or would I just rounte 192.168.1.0/24 via wg0 on the
> client?
>
> That's the trouble I'm having.
>
> I also want to setup a Wireguard tunnel between home and my VPS in the
> cloud to make backups easier and simple. I could just do an SSH
> tunnel, but I'd prefer not since it's a pain for this one application
> to setup.
>
> So my VPS has both it's public IP, and then I have a WireGuard IP and
> route setup so that I can reach into the home network. And possibly
> also allow connections to the VPS from other clients as well. Very
> mesh like.
>
> John
>
>
>
>
>> On Wed, Dec 13, 2023, at 16:30, John Stoffel wrote:
>>>>>>>> "Althea" == Althea Shaheen via WLUG <wlug(a)lists.wlug.org> writes:
>>>
>>> I've been busy, so I'm coming back to this late...
>>>
>>>> I use a wireguard VPN on my phone anytime I leave my house, mainly
>>>> for ad blocking. I run pi-hole at home to block ads network wide,
>>>> and when I leave wifi, my phone automatically joins the VPN at home
>>>> and uses the same pi-hole servers for DNS. Internet traffic is still
>>>> directly through my carrier (so split tunnel) but my DNS is hidden
>>>> from them and ad free!
>>>
>>> Do you run wireguard on your firewall or do you pass it inside into a
>>> base host?
>>>
>>>> -thea
>>>
>>>> On Sat, Dec 9, 2023, at 03:54, Jon "maddog" Hall via WLUG wrote:
>>>
>>>>> However, they still rely on the trust in the ownership/VPN service country's laws and
>>>> policies.
>>>>> A VPN service is effectively a 'man in the middle'.
>>>> This is why everyone should train their mother to offer a secure ISP/VPN service.
>>>> "Mom's VPN: Do you trust your Mom?"
>>>> md
>>>
>>>> On Fri, Dec 8, 2023 at 11:44 AM Kevin Stratton via WLUG <wlug(a)lists.wlug.org> wrote:
>>>
>>>> VPN services are a good tool for privacy. However, they they still rely
>>>> on the trust in the ownership/VPN service country's laws and policies.
>>>> A VPN service is effectively a 'man in the middle'.
>>>
>>>> On 12/8/2023 3:13 AM, Robert Schwein via WLUG wrote:
>>>>>
>>>>> You've pretty much hit the high points Chuck. From my own experience
>>>>> when going overseas if I'm able to VPN to the country I'm going to,
>>>>> the rental car reservation is considerably less in cost to reserve
>>>>> that car than if I reserved it from state side. I'm assuming there is
>>>>> a difference between a poor native and a rich American.
>>>>>
>>>>> Bob
>>>>>
>>>>> On 12/8/2023 12:56 AM, Chuck Anderson via WLUG wrote:
>>>>>> On Thu, Dec 07, 2023 at 09:08:00PM -0500, Doug Mildram via WLUG wrote:
>>>>>> So, maybe or maybe not, that's the kind of VPN I suspect they're selling,
>>>>>> but I don't see the value for normal folks....or maybe anyone. (educate
>>>>>> me!)
>>>>>> Unless their hosted-server-world-route network security is a win.
>>>>>> Thanks for listening, and my thursday's look better than usual this month,
>>>>>> so hoping for WLUG virtually dec 14. -doug
>>>>>> Yes. Those "modern" VPNs are used for many reasons. Here are a couple:
>>>>>>
>>>>>> - To appear to servers/services that you are physically located in a
>>>>>> different geographical area. This can help you bypass
>>>>>> geographically restricted content, such as watching sports programs
>>>>>> that content owners don't want you to see based on where you live
>>>>>> (local sports broadcast blackouts). Or trick hotels into giving you
>>>>>> a better price--yes, hotels can hike the rates they present to you
>>>>>> if they think you are nearby--assuming you need last-minute
>>>>>> accomodations while you are away on vacation.
>>>>>>
>>>>>> - To hide your real IP address from servers and/or hide your browsing
>>>>>> from intermediaries (your ISP for example) for privacy. This could
>>>>>> be so you can avoid being tracked and having your browsing habits
>>>>>> sold to advertisers (something your ISP can easily do--SSL does not
>>>>>> hide DNS queries although that is changing with the availability of
>>>>>> DNS-over-HTTPS and similar), to hide from authorities/copyright
>>>>>> enforcers, or for life-and-death reasons (hide from unfriendly
>>>>>> governments.)
>>>>>> _______________________________________________
>>>>>> WLUG mailing list --wlug(a)lists.wlug.org
>>>>>> To unsubscribe send an email towlug-leave(a)lists.wlug.org
>>>>>> Create Account:https://wlug.mailman3.com/accounts/signup/
>>>>>> Change Settings:https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/ZC4W3…
>>>>>
>>>>> _______________________________________________
>>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/TI4DE…
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/2OD7Q…
>>>
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/E6KIC…
>>>
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/532CN…
>> _______________________________________________
>> WLUG mailing list -- wlug(a)lists.wlug.org
>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>> Create Account: https://wlug.mailman3.com/accounts/signup/
>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/NK7RY…
1 year, 7 months
Re: [Wlug] Fw: RE: show
by Matthew Kwiatkowski
I think this sounds like it's turning into an interesting idea. I would
be willing to help out as a cameraman or something behind the scenes,
and I do have a laptop with video out, but I would need a ride from
campus to the studio. I will also be home on break the week of the
21st, so I can't make that night.
-Matthew Kwiatkowski
On Wed, 2003-10-15 at 13:39, Yury I Vashugin wrote:
> tim,
> it seems like we don't have enough people to run the show. maybe
> different date and time would be more appropriate for people(depending,
> of course, on the studio availability)...
> first, we need people to produce the show. it's a commitment of half an
> hour ones? a month.(could be ones in two months) is there anyone who
> would like to join the venture?
> second, we need a qualified show host who will lead the show and
> interview guests. i'm a new to linux and i would not dare to discuss it
> with my expertize.
> third, there is little problem with scan converter which can be replaced
> by a notebook with a video output.
> a tape of the show will be available immediately after the show and can
> be broadcast on any channel(depending on the amount of money, sponsorship
> etc; public access channels are free). also it's a good learning tool
> which can be multiplied and offered to the public. i still remember a
> hot discussion on wlug about introducing linux in public schools. i was
> astonished to see how college students buy c compilers for windows to do
> their homework for unix/c class. isn't it something?
> they know about linux but, o boy, they're scared of it!!!(wow, wow- i'm
> not talking about wpi students)
> good point was brought by goug. we need to know what audience we are
> going to target and where. if we start the show with linux introduction
> and discuss the difference between linux and commonly used operating
> systems, to get people intrigued, and continuously refer people to 'that
> show' then they'll know the connection, how to obtain previous
> educational tapes etc.
> yury
> ps keep forgeting to indicate the studio location- shewsbury media
> connection, parker rd.
>
>
> On Wed, 15 Oct 2003 00:40:51 -0400 Andy Stewart <andystewart(a)comcast.net>
> writes:
> > On Tuesday 14 October 2003 12:55 pm, Yury I Vashugin wrote:
> > > hi, everyone.
> > > since we talked about producing an educational show about linux
> > and
> > > putting it 'in-the-air' at the last wlug meeting and i saw a very
> > > enthusiastic response so i've reserved the studio for oct.21(see
> > below).
> > > there's a problem with a converter but i'm sure we can find a
> > laptop with
> > > a video output.
> >
> > HI everybody,
> >
> > I'm still quite enthusiastic about this opportunity, but
> > unfortunately I
> > cannot make it on October 21st (Tuesday is generally a bad night for
> > me). I
> > will be looking forward to reading the e-mails from people who do
> > make it on
> > that date.
> >
> > Please keep us posted!
> >
> > Andy
> >
> > --
> > Andy Stewart, Founder
> > Worcester Linux Users' Group
> > Worcester, MA USA
> > http://www.wlug.org
> >
> >
> > _______________________________________________
> > Wlug mailing list
> > Wlug(a)mail.wlug.org
> > http://mail.wlug.org/mailman/listinfo/wlug
> >
> >
> >
>
> ________________________________________________________________
> The best thing to hit the internet in years - Juno SpeedBand!
> Surf the web up to FIVE TIMES FASTER!
> Only $14.95/ month - visit www.juno.com to sign up today!
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
21 years, 9 months