Re: [Wlug] more on event correlation...
by Mike Peckar
Whoops, didn't mean to send to the entire list - I guess I had too many mini
oreo cookies last night...
----- Original Message -----
From: Mike Peckar <ov(a)fognet.com>
To: <wlug(a)mail.wlug.org>
Sent: Thursday, October 11, 2001 11:27 PM
Subject: [Wlug] more on event correlation...
> Nice meeting you tonight, Chuck, and THANKS for the redhat cd's...
>
> sec was the freeware event correlation tool I spoke of tonight: It is a
> straightforward perl script and doesn't implement a full state machine,
but
> it nevertheless provides some inklings of what more complciated event
> correlators do. Check it at http://kodu.neti.ee/~risto/sec/
>
> The best commercial event corellation tools IMHO are Nervecenter, Taave,
> Smarts, and Netcool. Each has its niche where it's best in class, and
> there are others, like HP's ECS, Logec, G2, etc.
>
> My friend Doug Stevenson is a specialist in event correlation and wrote
the
> Maji spec: the open source event correlation engine being developed under
> the umbrella of OpenNMS (yeah, so, it'll be java - but it will also be
very
> feature rich). He masterfully defines some of the layers of granularity
that
> one might see amongst the different offerings in the Event Correlation
> space. Types we talked about tonight include event correlation (reducing
> traps) and device correlation (mapping switch states to events). His
> definitions are listed below...
>
> Mike
>
>
>
> <snipped message>
> OK...
>
> Here goes...
> § Event Correlation
>
> § Alarm Correlation
>
> § Device Correlation
>
> § System Correlation
>
> § Service Correlation
>
> § Performance Correlation
>
> § Security Correlation
>
> Event Correlation - This is a correlation where multiple events are
filtered
> and processed, thereby reducing the number of events presented. This is
> primarily done with event tally counts and trap problem verification.
>
> Alarm Correlation - This is a correlation of alarms and alerts depicting
> true problems or root causes and their current status. Side effect alarms
or
> alarms occurring as a result of a root cause alarm are suppressed or
become
> subordinate to the root cause alarm.
>
> Device Correlation - This is a correlation of devices, their specific
> internal components (both hardware and software), and the device's
behavior
> with other devices. Additionally, device correlation lends itself toward
> configuration management as it is a dynamic inventory of devices,
> subsystems, components, and behaviors.
>
> System Correlation - This is a correlation of devices and managed objects
as
> they pertain to an overall system. This level of correlation enables one
to
> manage and classify a conglomeration of managed objects as a manageable
> entity.
>
> Service Correlation - This correlation is used to determine the devices
and
> systems that make up an IT service. In essence, this is the correlation of
> managed objects and systems to business rules; similar to a translation of
> terms from computers and systems to business services. The Service
> Correlation can be extended to customer impact analysis, business
> profitability impact analysis, etc.
>
> Performance Correlation - This correlation is used to determine the
effects
> performance has with regards to a fault. It is unique in that performance
> correlation can be applied to enhance the correlation of all of the other
> categories.
>
> Security Correlation - This correlation is used to determine the degree of
> threats caused by security incidents. It is unique in that security
> correlation is embedded among all the other six categories described
above.
>
> HTH,
>
> Doug...
>
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
Oct. 12, 2001
Re: Looking for advice for home server
by John Stoffel
>>>>> "Kevin" == Kevin Stratton via WLUG <wlug(a)lists.wlug.org> writes:
> I am looking for a cheap solution for the following:
> 1) Email server/redireector. I want to have a full custom domain and
> email addre0ss.
> 2) FTP server on the same domain as the email server.
Please no! Setup 'sftp' instead. This does require two IPs on the
system since sftp (ftp over ssh) will take up one port because ideally
you'd setup virtual users who can't actually login to the system...
> 3) GUI setup preferred, I do not want to invest the time (right now)
> to get this working as a 'ground up' project.
I'd think about Ansible, which lets you do repeatable test builds at
home. The trick, of course, is getting your email setup working that
way. There's a bunch of parts:
postfix for SMTP incoming/outgoing
dovecot for IMAP
postscreen
rspamd - spam filtering
dkim - for singing your outgoing emails
nginx - for hosting various files for google and others to check
for you being who you say you are. Fun fun.
And a bunch of other stuff. I'd actually suggest maybe you look at
https://mailinabox.email/ do you your setup. I think if I had to do
it again, i'd go that route.
The most important part though, and the most annoying, if getting your
VPS and making sure it's not in a spam block, or likely to get added
into one. Its... painful. I've been running stoffel.org for 20+
years now for email and it's gotten harder and harder.
Nowdays you need to have SPF keys setup in DNS, DKIM keys for signing
emails, you want to make sure you don't relay anything any more,
because that will get you banned. Which reminds me I need to stop
relaying too. Sigh...
> 4) Total bandwidth needs should be negligible.
Very true, a mail server is pretty low bandwidth.
> How would you approach this?
> At a very high level, I am considering:
> 1) Dedicating a DDR3 (RAM) era Intel I3 P.C. (sorry, I don not know the
> generation) and installing NAS software with the appropriate docker
> plugins, if they exist. I do not know if this is even reasonable.
> Suggestions are appreciated. I am using a home ISP account. I am aware
> of DynDNS type services to get around the lack of a static IP. I do not
> currently plan on using this device as an actual NAS due to security
> concerns. If necessary, I will use sneaker-net to transfer data,
> although I am thinking about ssh or even RS232.
If you're thinking of running this at home on your home internet then
you're in for probably a rude surprise. Most big mail providers tend
to block home IP blocks and not accept email because the volume of
spam from them is so high.
I'm on a Linode droplet right now, but thinking of moving to something
else.
> 2) Renting out space on a service like Amazon Web services. Maybe they
> have an image that is already what I want.
Again, those AWS IP blocks tend to get blocked and dropped because of
the spam levels.
> Any ideas/thoughts/experiences would be appreciated. I hope to be at
> the meeting next Thursday.
Happy to chat then. I'd suggest you going the postfix.org mailing
list and look through the archives. If you do go with a VPS, you'll
really want something with 2gb of RAM or more, because rspamd is a
hog. Postfix and dovecot are simple.
It's the getting others to accept your email that sucks.
John
Aug. 4, 2024
Re: Ripple?
by Jon "maddog" Hall
I can not speak for every fiber provider or implementation, but I had
Comcast Cable for a number of years, paying a premium for (at that time)
300 Mbps down and 60 Mbps up. The stability was fairly good, and I did
not really see any degradation during "heavy use" times of the day. Then
again, at that time my real-time use of the Internet was not extensive. I
usually did email and upload/download of modestly large files (few greater
than 4 Gbytes).
At the same time a friend had fiber in Nashua, NH (about seven miles away)
and was getting 1 Gbit sync up/down. I was jealous, but it was not on the
horizon with Comcast.
Then about five or so years ago Fidium came to down and offered fiber at 1
Gbit sync. I ordered that and when they were installing it in our
community I talked with the installer and he told me that it would be
capable of 10Gbit sync in the future.
The 1 Gbit offer seemed to be "fast enough" and it was great.
Later I found out they were offering 2 Gbit/sec to new customers at the
same price I was paying. I called up and mentioned this.
"Oh, you are right"...then TWEAK TWEAK and magically I had 2 Gbit/second
sync.
About that time my husband moved in and. He started working from home and
I found that he was using ONE TERABYTE of data every month. Curious as to
what was going on, I found that he was bit-blitting his workstation screen
from Boston up to his monitor in our office (long, detailed technical story
about why he felt this was necessary). I had not even noticed this load on
the fiber or on the routing system in my house (long, detailed technical
explanation why I put installed this in the first place).
In the three years that he has been using "bit-blit" he is almost
constantly in video contact with his co-workers (simultaneously with
bit-blit) and I have other video meetings, watch YouTube videos, etc and no
QoS issues.
There was once where we have lost service for an hour, but we received
messages through cellular telling us about it and then it was fixed.
Other than that it has been rock solid (at least at the times we would
notice it
There are things I might change (and maybe I can now, I just have not asked
lately).
o Better use of IPv6. I can use it, but they will not commit to whether I
have full control over the low order 64 bits or just the low order 48 bits.
o Better use of my own Routers - they have WiFi routers that use load
balancing in the WiFi for better QoS. Of course I can put my own routers
off theirs, but I currently have no use case where I strongly need that.
This may change soon.
o No static IP (at least not at my price point). Of course there are ways
around this.
All in all, Fiber is one of the best things that ever happened to me....it
is very close to being the #2 "best thing", but that slot is currently held
by Hugo, my husband. #1 is being born.
md
On Sun, Feb 15, 2026 at 11:56 AM Mike Peckar via WLUG <wlug(a)lists.wlug.org>
wrote:
> Excited that a fiber option is coming to the neighborhood. Curious if
> anyone here who has switched has had any issues QOS-wise.
>
> Mike
> _______________________________________________
> WLUG mailing list -- wlug(a)lists.wlug.org
> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
> Create Account: https://wlug.mailman3.com/accounts/signup/
> Change Settings:
> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
> Web Forum/Archive:
> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/CKK2N…
>
Feb. 16, 2026
Re: [Wlug] (no subject)
by Tim Keller
Here's my .02 cents on building a machine.
1. Memory. You can never have too much of it. I'd say try to get a board
that'll do 8GB with the expectation you'll be there at some point.
2. CPU: go duel at a minimum. If you could swing a quad I'd say go for it.
3. Video card: Get something that will do HDMI and is capable of duel head.
I've got a Nvidia GeForce 8400 GS with 512MB of video memory and it cost me
a whopping 40 dollars!
4. Harddrives: If your going to spring for 1, go ahead and buy two and then
mirror them. Mirrored drives have now saved my ass on three occasions.
5. Case: Honestly I like cases that don't resemble a disco under my desk.
I'm also fond of 120mm case fans. They move a shit load of air and are
quiet.
Power Supply: I wouldn't go smaller than a 350W. If you ever decide to
suddenly add two more drives or a burner, nothing sucks more than your power
supply being the weak link.
6. OS: Do it yourself. I'm not sure if Ubuntu will let you mirror drives at
install, I know the Red Hat family of distros will. Doing your own install
will at least give you an explicit understanding of what packages you've
installed. Heck we could probably make a meeting out of helping you install
and tweak your machine!
Later,
Tim.
On Mon, Aug 10, 2009 at 8:02 AM, Gregory Avedissian <avedis.g(a)verizon.net>wrote:
>
>
> Brian McLinden wrote:
>
> >
> > What do you think about this workaround --
> > http://www.inatux.com/order These are FSF/FOSS people. I can't see
>
> I would recommend more than their base system. Go with a dual-core cpu and
> probably 2G memory, since it's so cheap now ($30-40 at newegg), and bigger
> hard drive (e.g. 250GB for around $50). How much do they want with those
> upgrades?
>
> >
> > And, for cable broadband and live streaming of audio and video, what
> > combination or package(s) of HW ad SW should I ask for. Wired case?
> > Wireless case?
>
> If you're talking about wired vs. wireless network, it's a lot easier to
> go with wired. Any linux distro will get you online with a basic desktop
> installation. (OK, there are probably exceptions.) You'll also get audio
> and video players. For audio and video, you might need to install
> additional codecs, but that's generally pretty easy to do.
>
> Why don't you want to install the OS yourself?
>
>
>
> > 4. What Linux distribution would you pair with Unix?
> >
> > And, what will I learn from one that I don't learn from the other?
> >
>
> I'm just going to reiterate what others said. You'll learn a lot from
> installing the OS yourself. Ubuntu is a good choice if you're new to
> linux, but anything in the top 5 or 10 in the list at distrowatch.com is
> probably a good choice. The installation procedure is pretty easy these
> days (on the major distros).
>
> Leave room on your hard drive for additional partitions to try other
> flavors of linux if you want. That's sometimes a better choice than trying
> it in a VM, because then you get to see how the OS works with your
> hardware. That tends to be more of an issue when you're using the latest
> hardware.
>
>
> Greg
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
--
I am weary of the allegiances of any politician who refers to their
constituents as "consumers".
Aug. 13, 2009
Re: Uptime!
by Jon "maddog" Hall
Mike,
Believe it or not, both VMS and Digital Unix systems were the same way.
They would go months and years without rebooting.
The US Navy had two hospital ships, the "Mercy" and the "Hope". One
stationed on the East Coast and one in San Diego. The one on the East
Coast used WNT for the servers and the one in San Diego used GNU/Linux.
The ship using WNT had to have twice as many servers as the one in San
Diego because the Navy rules said that a WNT server HAD to be rebooted
every 30 days, whereas there was no such requirement for GNU/Linux. Since
a Naval deployment could last longer than 30 days, and since they needed
the server services to be up constantly that whole time, they needed twice
as many WNT servers.
md
On Thu, Apr 21, 2022 at 8:58 AM Mike Peckar via WLUG <wlug(a)lists.wlug.org>
wrote:
> Fun Story, Maddog. Around 20 yrs ago I was consulting for Bloomberg in
> Skillman, NJ, a big Solaris shop. The HP app I was working with bellied up
> with memory leaks and I suggested they reboot that server. I was told flat
> out they don't reboot Solaris servers period. They cleaned up the mess and
> isolated where in the HP code that the pointer was lost, leaving me the
> not-so-fun task of filing the bug report with HP.
>
> Mike
>
> On Wed, Apr 20, 2022 at 7:39 PM Jon "maddog" Hall via WLUG <
> wlug(a)lists.wlug.org> wrote:
>
>> Tim,
>>
>> What was the reason for shutting it down?
>>
>> This reminds me of a story from years ago where a young friend contacted
>> me before a trip to the University of New Hampshire for a Linux LUG meeting.
>>
>> He asked me if I would go to a particular dorm and knock on the door of
>> what had been his door room. I was to ask if I could unplug the box that
>> was in the corner of the closet in the room. The system had been running
>> for five years in his former dorm room and he had forgotten the login
>> password. He did not want the machine back, just wanted it unplugged.
>>
>> A young woman answered the door, heard my explanation and let me unplug
>> the machine. "We were afraid to unplug it" she said.
>>
>> Your machine beat his machine on uptime.
>>
>> md
>>
>> On Wed, Apr 20, 2022 at 5:07 PM Tim Keller via WLUG <wlug(a)lists.wlug.org>
>> wrote:
>>
>>> I just shutdown a linux machine with 3169 days of uptime!
>>> It had userland processes that have been actively running since 2013!
>>> Tim.
>>>
>>> --
>>> I am leery of the allegiances of any politician who refers to their
>>> constituents as "consumers".
>>> _______________________________________________
>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>> Change Settings:
>>> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>> Web Forum/Archive:
>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/PW3ML…
>>>
>> _______________________________________________
>> WLUG mailing list -- wlug(a)lists.wlug.org
>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>> Create Account: https://wlug.mailman3.com/accounts/signup/
>> Change Settings:
>> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>> Web Forum/Archive:
>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/KSUVD…
>>
> _______________________________________________
> WLUG mailing list -- wlug(a)lists.wlug.org
> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
> Create Account: https://wlug.mailman3.com/accounts/signup/
> Change Settings:
> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
> Web Forum/Archive:
> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/ZZZSN…
>
April 21, 2022
Re: [Wlug] Gentoo
by John Platt
Just a couple of thoughts. 1. for a good commentary on the gentoo
handbook I recommend the blog postings of Vincent Zoonekynd. He's
French, he's modest and he's very insightful.
http://zoonek.free.fr/blosxom/Linux/2006-01-01_Gentoo.html
2. You can probably install it with a slax cd. Or a gentoo disk of
course. Either has a /proc/config.gz which will work very well with
genkernel to compile a kernel. After you have emerged genkernel type:
zcat /proc/config.gz > /usr/share/genkernel/x86/kernel-config-2.6
Then genkernel all to create a kernel and initramfs. Of course for a
64-bit machine you should zcat it to the appropriate subdirectory
which I believe is x86_64
On Wed, Mar 23, 2011 at 2:10 PM, Jamie Guinan <guinan(a)bluebutton.com> wrote:
> On Wed, 23 Mar 2011, Eric Martin wrote:
>
>> On 03/23/11 12:19, Joshua Demallistre wrote:
>> >
>> > I was thinking about giving Gentoo a try. It would be nice for some
>> > one in the group could give me a hand.
>> >
>> What sort of help are you looking for? There used to be a
>> disproportionately large Gentoo user base in WLUG, although I don't know
>> how large it is anymore. I use it at home and work and I'd be glad to
>> help you out. For me, the great thing about Gentoo is the learning
>> experience; I learned a lot about GNU/Linux by doing my first Gentoo
>> installs, and I'm still learning. If you haven't already, grab the
>> install discs and peruse through the install docs. If you have a 64bit
>> machine, I suggest grabbing the 64bit disc. Maintaining Gentoo x64
>> isn't terribly hard, and you can use memory more efficiently.
>
> Gentoo user here, too. Although I haven't done a fresh install in
> quite a while, I just keep updating.
>
> What I like best about Gentoo is picking and choosing which packages
> to include and leave out, both applications and libraries. For
> example, the other day I wanted to install "gtkpod", but I really
> don't want to have Mono or QT4 installed on my system, for various
> reasons. Doing a test install, I can verify that they are left out:
>
> # emerge -ptv gtkpod
>
> These are the packages that would be merged, in reverse order:
>
> Calculating dependencies... done!
> [ebuild N ] app-pda/gtkpod-1.0.0 USE="aac flac mp3 ogg -curl" 1,856 kB
> [ebuild N ] media-libs/libgpod-0.8.0 USE="gtk iphone python udev -mono -static-libs" 975 kB
> [nomerge ] media-libs/libgpod-0.8.0 USE="gtk iphone python udev -mono -static-libs"
> [nomerge ] sys-apps/sg3_utils-1.30
> [ebuild N ] sys-apps/rescan-scsi-bus-1.48 21 kB
> [ebuild N ] sys-apps/sg3_utils-1.30 863 kB
> [ebuild N ] app-pda/libimobiledevice-1.0.4 USE="python" 404 kB
> [ebuild N ] app-pda/usbmuxd-1.0.6 57 kB
> [ebuild N ] app-pda/libplist-1.3 67 kB
> [ebuild U ] dev-util/cmake-2.8.3-r1 [2.8.0-r2] USE="ncurses -emacs -qt4 -vim-syntax" 5,310 kB
> ...
>
> The USE= "-mono" and "-qt4" flags indicate that the listed packages
> will be built without that support. Gentoo handles that by passing
> the necessary options to "configure" when it builds the package, and
> that is IMO the main point of using a source-based distribution.
>
> If you *did* want support for mono, you could edit "/etc/make.conf"
> (system-wide) or "/etc/portage/package.use" (package-specific), add
> the "mono" flag (or remove "-mono"), and try again.
>
> For better or worse, I think gentoo kind of peaked in popularity
> several years ago. Related article,
>
> http://news.cnet.com/8301-13505_3-10047439-16.html?tag=mncol;title
>
> But it still meets my needs on several of my computers.
>
> And finally, yes, I am aware of "http://funroll-loops.info/", and I
> don't care. :)
>
> -Jamie
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
March 23, 2011
Re: [Wlug] synce, is a wonderful thing
by Wes Allen
Yeah, I've figured out the boot-loader part....but I haven't been daring
enough to try it out. I was thinking about starting the process tonight, but
I couldn't get my win4lin installation to tell that I have a serial port on
my computer, and so I couldn't install the boot-loader. And since I can't
get synce to work right, I was kinda stuck.....
I can't wait until I get rid of pocketPC2002..... activesync is just a pain in
the neck.
Wes
On Monday 09 December 2002 5:35 pm, brad wrote:
> On Monday 09 December 2002 03:13 pm, Wes Allen wrote:
> > Thanks,
> > Only now I can't connect to my computer again with synce. Screw it,
> > I've got my data backed up. linux here I come...... Where do I stop the
> > install process and put qtopia on instead of X (and is qtopia in ipkg
> > format anywhere?).
>
> The install is in phases. Though i believe there are some packages will
> combine the root and the graphics (that would combine steps 2 and 3 below).
>
> 1st - you'll need to install a boot loader so you can boot into linux (this
> is the only dangerous part).
>
> 2nd - you'll need to install the base linux system, or the root (you'll
> probably want the familiar distro). You do this through the boot loader.
>
> 3nd - at this point you'll have linux installed but no graphics. You want
> to make sure you can connect you're ipaq to the internet so it can download
> packages. Choose which graphics package you want, X, GPE, Qtopia, or OPIE,
> and install it.
>
> All the graphics packages are a set of packages, so you can install the
> packages you will find useful. I would suggest OPIE, since that's what i
> use, and that seems to be the most featureful and mature of them all.
>
> This will probably make for an intersting mini-demo at a meeting. It's been
> a long time since i've gone through all this stuff though (since i
> installed linux on my ipaq a year and a half ago and a lot has changed).
>
> --brad
>
> > Wes
> >
> > On Wednesday 04 December 2002 10:30 pm, brad wrote:
> > > On Wednesday 04 December 2002 09:55 pm, Wesley Allen wrote:
> > > > Hi all, I've actually managed to get my iPAQ connected to my linux
> > > > laptop using my usb cable....and I've even gotten some files off it
> > > > and opened them up with OOo. All-in-all, I'm happy.
> > >
> > > Nice.
> > >
> > > > But I would like to back up the address files and convert them into
> > > > something Linux can use. What files does pocket-pc use to keep their
> > > > addressbook data in?
> > >
> > > I believe that the address book, is something that only outlook can
> > > read. I had a hard time trying to figure this one out to when i
> > > switched from WinCE to linux. What i did was found a machine with
> > > outlook and sync-ed to that. Opened up outlook and exported the address
> > > book in csv format. Then i could actually read the data.
> > >
> > > Cheers,
> > > --brad
> > >
> > >
> > > _______________________________________________
> > > Wlug mailing list
> > > Wlug(a)mail.wlug.org
> > > http://mail.wlug.org/mailman/listinfo/wlug
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
--
------
This message may be signed using GPG, for my public key please
send me a message with "Key Request" in the subject line.
Dec. 10, 2002
Re: [Wlug] printers
by Son Nguyen
Keith,
>From: Keith Wright <kwright(a)free-comp-shop.com>
>Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org>
>To: wlug(a)mail.wlug.org
>Subject: Re: [Wlug] printers
>Date: Fri, 3 Sep 2004 17:26:53 -0400
>
> > From: "Son Nguyen" <snguyen(a)hotmail.com>
> >
> > I would recommend not using LPRng. It is too old.
>
>As an old codger in training, I take that personally.
>You remind me of Perlis's comment on Algol60:
> Not perfect, but a big improvement over its successors.
>
This commend is not meant to insult. Just that almost every distributions
are using cups. I have had request from my users that I should retro fit
lrpng into my network. Although it is not impossible, it is less versitile
than cups. I have not had much problems with both the applets and web based
configuration.
>I don't even know what LPRng is, I suppose it's the New-Gnu version
>of the ancient bin/lpr program, from back in the days when programs
>were more prized for working than for having a Web interface.
I totally agree. I would rather use the console command instead, but it is
nice to have an alternative configuration method for those who are not
confortable at the command line.
>
>My printer is attached to a dual boot machine that now runs
>Linux only, with a Samba server so that Diane can print
>via the network from her laptop. It worked pretty much
>the first time, the main problem being getting the Windows
>laptop to notice it.
>
>I can print from the printer/Linux machine, but when I tried
>to use the much-touted CUPS web-based set-up to connect to the
>printer from another Linux machine, it went totaly wonky.
>Certain buttons sent the browser in an apparent infinite loop.
>(By Turing, you can never be sure, but I waited long with no action)
>Sometimes it would take me to some crazy random place in the
>Internet, to pictures of buildings that had the same name
>as my server machine, as though some mad programmer had
>rewritten bin/hostname to search Google for its name.
>
Have you considered connecting the printer to the windows box, share it and
then map it via the linux? How about a a dsl router with the network
printer capability? I love the external jetdirect parrellel to ethernet
device.
>It was not high priority, since ftp works and I have to walk
>to the printer machine anyway to get the paper, so I quit.
>
> > I understand that CUPS seems difficult, but once you understand
it,
> > it is the next best thing.
>
>At first I thought you were recommending it as second-best, but
>maybe "next best" means Best Real Soon Now.
>
> > In my office, I have setup my kickstart
> > to install 300+ printers on all of my Redhat Linux V3 Workstation
> > machines (100+).
>
>Eh? You need 300 printers for 100 workstations?
>
My offices are in Bedford (MA), McLean (VA), NJ, and Tampa (FL). I have to
allow users to printer to any printers on my network for virtual meeting
purposes.
Sonny
> > You can configure it via console, applet, or even web.
>
>Not me, maybe you can.
>
> > Fedora and Redhat has gone that route and I believe that
> > others have too. It is much better than LPRng can every be.
>
>Oh, I suppose, but much better can you make something that
>does what I used to with "cat scratch.ps >/dev/lp0"?
>
> -- Keith
>_______________________________________________
>Wlug mailing list
>Wlug(a)mail.wlug.org
>http://mail.wlug.org/mailman/listinfo/wlug
Sept. 6, 2004
Re: [Wlug] Instant Messaging Software
by Theo Van Dinter
On Fri, Mar 19, 2004 at 01:37:25PM -0500, Gary Hanley wrote:
> Ha. I still, for the life of me, have not seen the value-added benefit of
> IM over a good old-fashioned telephone or conference call.
Just a few reasons from my POV:
1) phones aren't available everywhere, and cell phone coverage is
spotty/dead in lots of areas. (for example, inside my company's
colo facility...)
2) it's quick and easy if you're already online. need to shoot a command
to someone or ask a quick 5 second question? it'll take me longer to
find/remember/dial their phone number than it is to goto my IM "buddy"
listing and type it.
3) unless you record it, there's no trail of conversations on the phone.
I "record" all IM conversations that I have -- really excellent to
remember little snippets of information. as an example, I opened a
hardware case with IBM the other day, but a coworker was going to be
the contact, so I IMed the case # to him. The next day, I needed to
call IBM about the case... Without having the conversation "recorded",
I'd have had no way to know what the case # was (didn't write it down,
and the coworker was unavailable). I've also done this type of thing
with conversations I had over a year ago. (this is the same reason
I pretty much save all email I send/receive btw...)
4) IM is good for multiple short conversations throughout the day --
my wife/friend/coworker can IM me in the morning, and I can just keep
the window open for any thoughts/questions/etc throughout the day.
5) If I'm not around, but someone IMs me a question, I'll see it when I
get back to my computer and can respond directly. If someone calls me
(see #6 below) I'd either have to tell them to call me back later when
I'm at my computer, or they'd leave me voice mail and I'd have to go
through the bother of getting the VM then calling back, etc, etc.
6) I can walk away from my IM window and get lunch or something --
if people knew my cell phone number, I'd have yet another electronic
leash.
7) I pay for phone calls, I don't pay for IM. If I'm using my home
phone (pay per call + per minute) or my cell phone (pay per minute),
that costs me money that I normally wouldn't have to pay... Not to
mention the fact that sometimes you want to talk to people who
aren't local which costs more money. However, I'm already paying
for bandwidth no matter how much I use.
8) I usually type more "correctly" than I talk.
9) I spend a lot of time working on open source software (one program
specifically), and sometimes need to converse with other developers
on the project. I'm here in MA, some are in CA, some in Canada,
some in Germany, etc... It's easier to IM than setup a multi-country
conference call.
10) if you're on the phone and want to talk to someone else either
about the call or something different, then you'd have to hang up
and call someone else, or get multiple phones, or ... an example:
I was on a con call with several of the above mentioned open source
developers, and the legal department of a large company we're
conversing with -- but we (developers) wanted to chat during the
call without having the other group overhear, so we had an IM chat
session going in the background.
11) I don't like using the phone. :P
I don't think IM is a replace-all for phones or in-person meetings,
but it does better handle/allow a lot of communications in a more
efficient manner. IMHO.
--
Randomly Generated Tagline:
"... although it's better if you call it an osculating circle because nobody
knows what it means. Except those smarty-pants math professors..."
- Prof. Farr
March 19, 2004
Re: Dec meeting.. not the 14th! 21st or 28th?
by Althea Shaheen
What I do is have the wireguard clients be on a different subnet than my other hosts, all behind the firewall. Then, in pfsense I made wireguard an interface like any other, and that allows me to make firewall policies, such as letting wireguard clients only to my DNS servers on port 53, or my web servers on 443. Also, since each wireguard client has a static IP reserved, I can make my phone access more than my cloud server, since I trust the security of my phone a tad more (but only a tad).
For routing, I have the config for the clients either as 0.0.0.0/0 to send all traffic over the tunnel, or my private networks only for the split tunnel, and let the firewall policy handle it from there.
So, you could certainly make it so that your VPS connects to your wireguard endpoint, and then send your backup traffic to it's client IP if you are going outbound to the VPS, and block the VPS from your internal network, or vice versa just open up the port you need to the host you need from the VPS to internal.
Hope this helps
On Thu, Dec 14, 2023, at 12:42, John Stoffel wrote:
>>>>>> "Althea" == Althea Shaheen via WLUG <wlug(a)lists.wlug.org> writes:
>
>> I run it on my pfSense firewall, but pivpn is also a great option if
>> you'd rather port forward to a different device.
>
> Do you have it so that if you have multiple internal devices behind
> your firewall, your external client can reach all those devices?
>
> I'ev been playing, but I'm sure I'm mssing something. For example:
>
> Internal network: 192.168.1.0/24
> host A 192.168.1.10/32
> host B 192.168.1.20/32
>
> Firewall: 192.168.1.254
> WG: 192.168.200.0/24
>
> Client: 200.150.100.50 (made up)
>
>
> Ideally I'd like my client to be able to access host A or B from the
> road using the WG tunnel. Would I need to assign WG addresses to
> these hosts? Or would I just rounte 192.168.1.0/24 via wg0 on the
> client?
>
> That's the trouble I'm having.
>
> I also want to setup a Wireguard tunnel between home and my VPS in the
> cloud to make backups easier and simple. I could just do an SSH
> tunnel, but I'd prefer not since it's a pain for this one application
> to setup.
>
> So my VPS has both it's public IP, and then I have a WireGuard IP and
> route setup so that I can reach into the home network. And possibly
> also allow connections to the VPS from other clients as well. Very
> mesh like.
>
> John
>
>
>
>
>> On Wed, Dec 13, 2023, at 16:30, John Stoffel wrote:
>>>>>>>> "Althea" == Althea Shaheen via WLUG <wlug(a)lists.wlug.org> writes:
>>>
>>> I've been busy, so I'm coming back to this late...
>>>
>>>> I use a wireguard VPN on my phone anytime I leave my house, mainly
>>>> for ad blocking. I run pi-hole at home to block ads network wide,
>>>> and when I leave wifi, my phone automatically joins the VPN at home
>>>> and uses the same pi-hole servers for DNS. Internet traffic is still
>>>> directly through my carrier (so split tunnel) but my DNS is hidden
>>>> from them and ad free!
>>>
>>> Do you run wireguard on your firewall or do you pass it inside into a
>>> base host?
>>>
>>>> -thea
>>>
>>>> On Sat, Dec 9, 2023, at 03:54, Jon "maddog" Hall via WLUG wrote:
>>>
>>>>> However, they still rely on the trust in the ownership/VPN service country's laws and
>>>> policies.
>>>>> A VPN service is effectively a 'man in the middle'.
>>>> This is why everyone should train their mother to offer a secure ISP/VPN service.
>>>> "Mom's VPN: Do you trust your Mom?"
>>>> md
>>>
>>>> On Fri, Dec 8, 2023 at 11:44 AM Kevin Stratton via WLUG <wlug(a)lists.wlug.org> wrote:
>>>
>>>> VPN services are a good tool for privacy. However, they they still rely
>>>> on the trust in the ownership/VPN service country's laws and policies.
>>>> A VPN service is effectively a 'man in the middle'.
>>>
>>>> On 12/8/2023 3:13 AM, Robert Schwein via WLUG wrote:
>>>>>
>>>>> You've pretty much hit the high points Chuck. From my own experience
>>>>> when going overseas if I'm able to VPN to the country I'm going to,
>>>>> the rental car reservation is considerably less in cost to reserve
>>>>> that car than if I reserved it from state side. I'm assuming there is
>>>>> a difference between a poor native and a rich American.
>>>>>
>>>>> Bob
>>>>>
>>>>> On 12/8/2023 12:56 AM, Chuck Anderson via WLUG wrote:
>>>>>> On Thu, Dec 07, 2023 at 09:08:00PM -0500, Doug Mildram via WLUG wrote:
>>>>>> So, maybe or maybe not, that's the kind of VPN I suspect they're selling,
>>>>>> but I don't see the value for normal folks....or maybe anyone. (educate
>>>>>> me!)
>>>>>> Unless their hosted-server-world-route network security is a win.
>>>>>> Thanks for listening, and my thursday's look better than usual this month,
>>>>>> so hoping for WLUG virtually dec 14. -doug
>>>>>> Yes. Those "modern" VPNs are used for many reasons. Here are a couple:
>>>>>>
>>>>>> - To appear to servers/services that you are physically located in a
>>>>>> different geographical area. This can help you bypass
>>>>>> geographically restricted content, such as watching sports programs
>>>>>> that content owners don't want you to see based on where you live
>>>>>> (local sports broadcast blackouts). Or trick hotels into giving you
>>>>>> a better price--yes, hotels can hike the rates they present to you
>>>>>> if they think you are nearby--assuming you need last-minute
>>>>>> accomodations while you are away on vacation.
>>>>>>
>>>>>> - To hide your real IP address from servers and/or hide your browsing
>>>>>> from intermediaries (your ISP for example) for privacy. This could
>>>>>> be so you can avoid being tracked and having your browsing habits
>>>>>> sold to advertisers (something your ISP can easily do--SSL does not
>>>>>> hide DNS queries although that is changing with the availability of
>>>>>> DNS-over-HTTPS and similar), to hide from authorities/copyright
>>>>>> enforcers, or for life-and-death reasons (hide from unfriendly
>>>>>> governments.)
>>>>>> _______________________________________________
>>>>>> WLUG mailing list --wlug(a)lists.wlug.org
>>>>>> To unsubscribe send an email towlug-leave(a)lists.wlug.org
>>>>>> Create Account:https://wlug.mailman3.com/accounts/signup/
>>>>>> Change Settings:https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/ZC4W3…
>>>>>
>>>>> _______________________________________________
>>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/TI4DE…
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/2OD7Q…
>>>
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive:
>>>> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/E6KIC…
>>>
>>>> _______________________________________________
>>>> WLUG mailing list -- wlug(a)lists.wlug.org
>>>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>>>> Create Account: https://wlug.mailman3.com/accounts/signup/
>>>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>>>> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/532CN…
>> _______________________________________________
>> WLUG mailing list -- wlug(a)lists.wlug.org
>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>> Create Account: https://wlug.mailman3.com/accounts/signup/
>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/NK7RY…
Dec. 15, 2023