Hey Everybody,
It's that time of month again! yeah, we're still remote, but soon... maybe
soon we won't be!!!
Date: March 11th, 2021
Time: 7PM
Location: Jitsi @ https://meet.jit.si/WlugMA
Topic: The usual random smattering of fun stuff. I'm sure we'll talk about
the massive exchange hack.. the OVH fire and much more.. fully expect us to
fall down various rabbit holes.
As usual, snacks and refreshments won't be provided and we won't be going
out for dinner afterwards.
I hope to see you there!
Later,
Tim.
--
I am leery of the allegiances of any politician who refers to their
constituents as "consumers".
doug> Pardon my non-meeting-attendance all but 1? month since
2020...anyways,
(new fun thing or things I got to learn, below) Mostly this email is a
Fun/FYI,
but I suspect OpenShot could be popular and maybe some of you use it,etc
and
maybe even one/some of you are dabbling,etc at video editing. Myself,
barely so far.
TMI
Since a friend (for sister's anniversary) wanted to create a
slideshow+music ( MP4, say )
I discovered how easy that is on Linux lately (googling offers ~10 or Top
Ten choices of SW).
And since I put linux on this friend's desktop, it's a great match and way
to teach/learn.
(gawd, these life-story-in-pictures quests sure can
make a camera-bound picture owner/taker have to cope w their mess of jpegs
in cellphone)
DRUM ROLL:
I only tried one offering for video editing, and scored.
.......................chose one that some review(s?) said is most user
friendly.
It (OpenShot) seems great,
for my too-simple needs (slideshow of static pics, adding music/mp3)
and can obviously do so much more.
Output and input choices have huge lists
(eg AVI,MP4 variants,etc for output..... you generate/export to).
SO ANOTHER THING i learned doing this is:
There's a release/package thing I wasnt aware of ...
....seems a too-easy alternate, in favor of pkgs/release-dependent
installs/updates.
IT IS CALLED an App Image
and it really appears to me to be THIS SIMPLE:
a) You download one big file, eg for OpenShot a 130-140mb one-executable
file
that they name OpenShot-v2.5.1-x86_64.AppImage , you can get from
https://www.openshot.org/download/ .....which
says.........
b)
AppImage requires no installation. Just download, make executable, and run.
doug> Correct, it doesn't unzip anything, and the one executable "fits
all". Wow!
I will admit that (on my Mint desktop) the first time I run it (as
me/plain-user),
the GUI intro/setup dialog/window does ask me Yes/No ? for
some question about creating something for?on? the Desktop,
and I said YES and I did not get anything added to my ~/Desktop.
But who cares?
More fun anyways to launch it from a terminal and watch the stdout as you
run the GUI.
p.s. it DOES save PROJECT (not output/export result, but your per-video
project setups)
in your linux homedir under ~/.openshot_qt/ ...mine looks like:
doug0@host:IN_MY_HOMEDIR:~$ ll .openshot_qt/
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 14:23 transitions
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 14:23 profiles
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 14:23 preview-cache
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 14:23 presets
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 14:23 assets
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 15:17 cache
-rw-rw-r-- 1 doug0 doug0 1453 Feb 27 15:57 libopenshot.log
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 15:57 title
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 15:57 thumbnail
drwxrwxr-x 2 doug0 doug0 4096 Feb 27 15:57 blender
drwxr-xr-x 30 doug0 doug0 4096 Feb 28 10:15 ..
drwxrwxr-x 2 doug0 doug0 4096 Feb 28 10:39 recovery
drwxrwxr-x 12 doug0 doug0 4096 Feb 28 10:43 .
-rw-rw-r-- 1 doug0 doug0 17352 Feb 28 10:43 openshot.settings
-rw-rw-r-- 1 doug0 doug0 1774732 Feb 28 10:43 openshot-qt.log
Around 4mb of setup for (so far my only) 66mb MP4 mini-video of PICS w/
6min of music,
the MP4 I exported elsewhere. ( the above HIDDEN dir is a bit of a secret
to ignore. )
"Transitions" is a cool feature of the software.
----- I miss the braintrust of you, my friends...my own fault for
retiring,moving,etc. -doug
(how clueless am I for not knowing about some open SW released w/ AppImage
until now?)
Daryll who?
>On April 9, 2010 McBride purchased the SCO Mobility intellectual property
from The SCO Group for $100,000.
Imagine paying 100,000 USD in 2010 for something that was proven to be
worth nothing. Even the name "SCO" is so tarnished after what McBride and
his cohorts did that it is worth nothing.
On a related note, I made contact with Doug Michels, one of the founders of
the original Santa Cruz Operations. Doug is a good guy and I worked with
him for years during the heady days of the "Common Desktop Environment".
In 1997 Doug was on the board of Uniforum and insisted that Linus Torvalds
get a lifetime achievement award at the tender age of 28.
md
On Thu, Feb 11, 2021 at 12:50 PM Tim Keller via WLUG <wlug(a)lists.wlug.org>
wrote:
> Hey Gang,
>
> We've got a meeting tonight at 7PM!
>
> Location: Our usual Jitsu haunt: https://meet.jit.si/WlugMA
>
> Topic: I think the Itanium thing got beat to death, but we can still talk
> about it.
> Apparently there's still a pa-risc port of linux kicking around? Now I
> want to run it as a VM!
>
> Daryl McBride (SCO asshole) just fired for Chapter 13 so we can laugh at
> his expense.
>
> I'm sure there'll be some 3d printer talk, some Pi PICO chatter, plus
> whatever else.
>
> Later,
> Tim.
>
> --
> I am leery of the allegiances of any politician who refers to their
> constituents as "consumers".
> _______________________________________________
> WLUG mailing list -- wlug(a)lists.wlug.org
> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
> Create Account: https://wlug.mailman3.com/accounts/signup/
> Change Settings:
> https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
> Web Forum/Archive:
> https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/HYKKY…
>
Hey Gang,
We've got a meeting tonight at 7PM!
Location: Our usual Jitsu haunt: https://meet.jit.si/WlugMA
Topic: I think the Itanium thing got beat to death, but we can still talk
about it.
Apparently there's still a pa-risc port of linux kicking around? Now I want
to run it as a VM!
Daryl McBride (SCO asshole) just fired for Chapter 13 so we can laugh at
his expense.
I'm sure there'll be some 3d printer talk, some Pi PICO chatter, plus
whatever else.
Later,
Tim.
--
I am leery of the allegiances of any politician who refers to their
constituents as "consumers".
"Robert N. Evans via WLUG" <wlug(a)lists.wlug.org> writes:
> That is not what I see when I query one of the major name servers.
> I would guess your server is configured differently...
Yes, know it's configured differently. On purpose.
I have configured it _not_ to waste time answering
stupid questions from random bots.
If you want to know the address of isc.org, ask a
major name server. My server is for answering
questions about _my_ names. It needs to answer
queries about keithdiane.us and free-comp-shop.com,
for which it is authoritative, which means the major
name servers get their info about those names from _here_.
I would like to configure it to totally ignore such
stupid requests, instead it seems to be answering
with the best data it has in its cache.
That turns out to be the most verbose yet useless
information imaginable---a list of all the root
name servers on the internet!
-- Keith
PS: Don't use my list. It's probably obsolete.
Correct, Keith's server is not configured to current best security practices. His server has what is called "upward referrals" turned on.
https://www.dns-oarc.net/oarc/articles/upward-referrals-considered-harmful
I believe what you want at a minimum is:
additional-from-cache no;
Also, it sounds like you are using your DNS server for two functions: caching for internal clients, and authoritative for your domain name(s). If so you probably should isolate both functions:
"If your nameserver is both authoritative and caching, you really
should separate the two functions. Caching nameservers are susceptible
to poisoning and other types of attacks. You don't necessarily need
separate hardware for each. You might need to use separate IP
addresses, or possibly configure the authoritative nameserver to use
an external address while the caching nameserver uses an internal
address."
See also:
https://kb.isc.org/docs/bind-best-practices-authoritative
and:
https://kb.isc.org/docs/bind-best-practices-recursive
On Thu, Feb 11, 2021 at 10:08:21AM -0500, Robert N. Evans via WLUG wrote:
> That is not what I see when I query one of the major name servers. I would guess your server is configured differently...
>
> rne@P5:~$ dig @1.1.1.1 isc.org
>
> ; <<>> DiG 9.16.1-Ubuntu <<>> @1.1.1.1 isc.org
> ; (1 server found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31866
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ;; QUESTION SECTION:
> ;isc.org. IN A
>
> ;; ANSWER SECTION:
> isc.org. 9 IN A 149.20.1.66
>
> ;; Query time: 24 msec
> ;; SERVER: 1.1.1.1#53(1.1.1.1)
> ;; WHEN: Thu Feb 11 10:03:30 EST 2021
> ;; MSG SIZE rcvd: 52
>
>
> -BE
>
> -----Original Message-----
> >From: Keith Wright via WLUG <wlug(a)lists.wlug.org>
> >Sent: Feb 11, 2021 1:04 AM
> >To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org>
> >Cc: wlug(a)lists.wlug.org, Andre.Lehovich(a)gmx.com, Keith Wright <kwright(a)keithdiane.us>
> >Subject: [WLUG] Re: WLUG Meeting Feb 11th 2021! Topic: Good question!
> >
> >Andre Lehovich via WLUG <wlug(a)lists.wlug.org> writes:
> >
> >>> dig @66.92.74.188 isc.org
> >>
> >> Here you go, hope it's useful...
> >
> >Thank you. That's a lot of information.
> >
> >> quetzal:~ al$ dig @66.92.74.188 isc.org
> >>
> >> ; <<>> DiG 9.10.6 <<>> @66.92.74.188 isc.org
> >> ; (1 server found)
> >> ;; global options: +cmd
> >> ;; Got answer:
> >> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11995
> >> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 27
> >> ;; WARNING: recursion requested but not available
> > ^^^^^^^^^ ^^^^^^^^^ ^^^ ^^^ ^^^^^^^^^
> >That looks good.
> >I don't want to be doing recursion for you (nothing personal).
> >
> >But where did all the rest of that come from?
> >I've never seen anything like that!
> >Did my server send all that? Why??
> >
> >> ;; OPT PSEUDOSECTION:
> >> ; EDNS: version: 0, flags:; udp: 4096
> >> ;; QUESTION SECTION:
> >> ;isc.org. IN A
> >>
> >> ;; AUTHORITY SECTION:
> >> . 348191 IN NS c.root-servers.net.
> >> . 348191 IN NS d.root-servers.net.
> >> . 348191 IN NS e.root-servers.net.
> >> . 348191 IN NS f.root-servers.net.
> >> . 348191 IN NS g.root-servers.net.
> >> . 348191 IN NS h.root-servers.net.
> >> . 348191 IN NS i.root-servers.net.
> >> . 348191 IN NS j.root-servers.net.
> >> . 348191 IN NS k.root-servers.net.
> >> . 348191 IN NS l.root-servers.net.
> >> . 348191 IN NS m.root-servers.net.
> >> . 348191 IN NS a.root-servers.net.
> >> . 348191 IN NS b.root-servers.net.
> >>
> >> ;; ADDITIONAL SECTION:
> >> a.root-servers.net. 348191 IN A 198.41.0.4
> >> a.root-servers.net. 348191 IN AAAA 2001:503:ba3e::2:30
> >> b.root-servers.net. 348191 IN A 199.9.14.201
> >> b.root-servers.net. 348191 IN AAAA 2001:500:200::b
> >> c.root-servers.net. 348191 IN A 192.33.4.12
> >> c.root-servers.net. 348191 IN AAAA 2001:500:2::c
> >> d.root-servers.net. 348191 IN A 199.7.91.13
> >> d.root-servers.net. 348191 IN AAAA 2001:500:2d::d
> >> e.root-servers.net. 348191 IN A 192.203.230.10
> >> e.root-servers.net. 348191 IN AAAA 2001:500:a8::e
> >> f.root-servers.net. 348191 IN A 192.5.5.241
> >> f.root-servers.net. 348191 IN AAAA 2001:500:2f::f
> >> g.root-servers.net. 348191 IN A 192.112.36.4
> >> g.root-servers.net. 348191 IN AAAA 2001:500:12::d0d
> >> h.root-servers.net. 348191 IN A 198.97.190.53
> >> h.root-servers.net. 348191 IN AAAA 2001:500:1::53
> >> i.root-servers.net. 348191 IN A 192.36.148.17
> >> i.root-servers.net. 348191 IN AAAA 2001:7fe::53
> >> j.root-servers.net. 348191 IN A 192.58.128.30
> >> j.root-servers.net. 348191 IN AAAA 2001:503:c27::2:30
> >> k.root-servers.net. 348191 IN A 193.0.14.129
> >> k.root-servers.net. 348191 IN AAAA 2001:7fd::1
> >> l.root-servers.net. 348191 IN A 199.7.83.42
> >> l.root-servers.net. 348191 IN AAAA 2001:500:9f::42
> >> m.root-servers.net. 348191 IN A 202.12.27.33
> >> m.root-servers.net. 348191 IN AAAA 2001:dc3::35
> >>
> >> ;; Query time: 150 msec
> >> ;; SERVER: 66.92.74.188#53(66.92.74.188)
> >> ;; WHEN: Wed Feb 10 20:31:08 PST 2021
> >> ;; MSG SIZE rcvd: 819
That is not what I see when I query one of the major name servers. I would guess your server is configured differently...
rne@P5:~$ dig @1.1.1.1 isc.org
; <<>> DiG 9.16.1-Ubuntu <<>> @1.1.1.1 isc.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31866
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;isc.org. IN A
;; ANSWER SECTION:
isc.org. 9 IN A 149.20.1.66
;; Query time: 24 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Thu Feb 11 10:03:30 EST 2021
;; MSG SIZE rcvd: 52
-BE
-----Original Message-----
>From: Keith Wright via WLUG <wlug(a)lists.wlug.org>
>Sent: Feb 11, 2021 1:04 AM
>To: Worcester Linux Users' Group General Discussion <wlug(a)lists.wlug.org>
>Cc: wlug(a)lists.wlug.org, Andre.Lehovich(a)gmx.com, Keith Wright <kwright(a)keithdiane.us>
>Subject: [WLUG] Re: WLUG Meeting Feb 11th 2021! Topic: Good question!
>
>Andre Lehovich via WLUG <wlug(a)lists.wlug.org> writes:
>
>>> dig @66.92.74.188 isc.org
>>
>> Here you go, hope it's useful...
>
>Thank you. That's a lot of information.
>
>> quetzal:~ al$ dig @66.92.74.188 isc.org
>>
>> ; <<>> DiG 9.10.6 <<>> @66.92.74.188 isc.org
>> ; (1 server found)
>> ;; global options: +cmd
>> ;; Got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11995
>> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 27
>> ;; WARNING: recursion requested but not available
> ^^^^^^^^^ ^^^^^^^^^ ^^^ ^^^ ^^^^^^^^^
>That looks good.
>I don't want to be doing recursion for you (nothing personal).
>
>But where did all the rest of that come from?
>I've never seen anything like that!
>Did my server send all that? Why??
>
>> ;; OPT PSEUDOSECTION:
>> ; EDNS: version: 0, flags:; udp: 4096
>> ;; QUESTION SECTION:
>> ;isc.org. IN A
>>
>> ;; AUTHORITY SECTION:
>> . 348191 IN NS c.root-servers.net.
>> . 348191 IN NS d.root-servers.net.
>> . 348191 IN NS e.root-servers.net.
>> . 348191 IN NS f.root-servers.net.
>> . 348191 IN NS g.root-servers.net.
>> . 348191 IN NS h.root-servers.net.
>> . 348191 IN NS i.root-servers.net.
>> . 348191 IN NS j.root-servers.net.
>> . 348191 IN NS k.root-servers.net.
>> . 348191 IN NS l.root-servers.net.
>> . 348191 IN NS m.root-servers.net.
>> . 348191 IN NS a.root-servers.net.
>> . 348191 IN NS b.root-servers.net.
>>
>> ;; ADDITIONAL SECTION:
>> a.root-servers.net. 348191 IN A 198.41.0.4
>> a.root-servers.net. 348191 IN AAAA 2001:503:ba3e::2:30
>> b.root-servers.net. 348191 IN A 199.9.14.201
>> b.root-servers.net. 348191 IN AAAA 2001:500:200::b
>> c.root-servers.net. 348191 IN A 192.33.4.12
>> c.root-servers.net. 348191 IN AAAA 2001:500:2::c
>> d.root-servers.net. 348191 IN A 199.7.91.13
>> d.root-servers.net. 348191 IN AAAA 2001:500:2d::d
>> e.root-servers.net. 348191 IN A 192.203.230.10
>> e.root-servers.net. 348191 IN AAAA 2001:500:a8::e
>> f.root-servers.net. 348191 IN A 192.5.5.241
>> f.root-servers.net. 348191 IN AAAA 2001:500:2f::f
>> g.root-servers.net. 348191 IN A 192.112.36.4
>> g.root-servers.net. 348191 IN AAAA 2001:500:12::d0d
>> h.root-servers.net. 348191 IN A 198.97.190.53
>> h.root-servers.net. 348191 IN AAAA 2001:500:1::53
>> i.root-servers.net. 348191 IN A 192.36.148.17
>> i.root-servers.net. 348191 IN AAAA 2001:7fe::53
>> j.root-servers.net. 348191 IN A 192.58.128.30
>> j.root-servers.net. 348191 IN AAAA 2001:503:c27::2:30
>> k.root-servers.net. 348191 IN A 193.0.14.129
>> k.root-servers.net. 348191 IN AAAA 2001:7fd::1
>> l.root-servers.net. 348191 IN A 199.7.83.42
>> l.root-servers.net. 348191 IN AAAA 2001:500:9f::42
>> m.root-servers.net. 348191 IN A 202.12.27.33
>> m.root-servers.net. 348191 IN AAAA 2001:dc3::35
>>
>> ;; Query time: 150 msec
>> ;; SERVER: 66.92.74.188#53(66.92.74.188)
>> ;; WHEN: Wed Feb 10 20:31:08 PST 2021
>> ;; MSG SIZE rcvd: 819
>>
>> _______________________________________________
>> WLUG mailing list -- wlug(a)lists.wlug.org
>> To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>> Create Account: https://wlug.mailman3.com/accounts/signup/
>> Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>> Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/JBBKO…
>_______________________________________________
>WLUG mailing list -- wlug(a)lists.wlug.org
>To unsubscribe send an email to wlug-leave(a)lists.wlug.org
>Create Account: https://wlug.mailman3.com/accounts/signup/
>Change Settings: https://wlug.mailman3.com/postorius/lists/wlug.lists.wlug.org/
>Web Forum/Archive: https://wlug.mailman3.com/hyperkitty/list/wlug@lists.wlug.org/message/2A6P2…
I hope to make it. I'll have to borrow Diane's laptop.
My Linux laptop makes a fine computer, but a bad television
It says "Topic: Good question!"
So here's my good question:
I run a name server (DNS). A few days ago it started getting
abut 100 requests/min from many different IP addresses
all for isc.org. Why are they asking me?
I believe I have it set up so that queries from
inside the house are so-called "recurive"---
it searches the internet for an answer, but
queries from outside are anwered only with info
it already has. I am not sure if that means it only
answer queries for which it authoritative, or if
it also anwers if it has the data cached.
I would like it to just blow off any queries
for which it is not authoritative. Tell where
to send mail for @keithdiane.us and not even answer
otherwise. It is remarkably difficult to get it to
put replies into the log file, even if it is logging
the queries.
Could somebody run the following and tell me the
results?
dig @66.92.74.188 isc.org
(that's my IP address)
-- Keith
