- main - earth.li

UPnP vunerability
by steve-ALUG＠hst.me.uk 05 Jun '13

05 Jun '13

Hi all, I came across this and thought I'd better spread it, in case it may affect you. This show http://twit.tv/show/security-now/389 pointed out that someone has discovered that there is a UPnP vulnerability in a large number of routers out there. Basically, UPnP allows devices to configure your router for you, and discover what services are available on the network. UPnP has its flaws, but is reasonably safe if confined within your local area network. Unfortunately, a bunch of routers expose UPnP to the public internet. There is a possibility that if you have one of these routers, a hacker could use UPnP to discover what's on your network, and connect to it, and compromise it. There's an easy way to check. Go to https://www.grc.com/default.htm Click on the link for Shields up (3/4 of the way down the page) Click on the proceed button. Then click on the GRC's Instant UPnP Exposure Test button. This will scan your system. If you see the message "THE EQUIPMENT AT THE TARGET IP ADDRESS DID NOT RESPOND TO OUR UPnP PROBES! (That's good news!)" Then you're ok. If it doesn't say that, then try disabling UPnP on your router, and try again. I personally always disable UPnP - however, I don't have anything that needs it, e.g. XBox games. HTH Steve

3 3

2600 meeting at 18:00 on Friday the 7th June.
by Viperfang 04 Jun '13

04 Jun '13

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

O/T Uninstalling Linux and making Windows boot again
by steve-ALUG＠hst.me.uk 02 Jun '13

02 Jun '13

Hi geniuses :-) I have a laptop that I purchased with Windows XP installed on it. I installed Ubuntu on it, and then migrated that to Lubuntu, but there's still Windows on a partition of it's own, and it still boots. I'm thinking about giving this machine to my kid who doesn't need linux, just windows. Is it possible to uninstall Linux and get the copy of Windows to boot correctly again. The problem is I don't have the windows install disk, so I'm reliant on any windows programs that may be installed on the disk, or any genuine tools that may help - I don't want to download a dodgy copy of Windows to do it! Afaik, if I just format the linux partitions, it will remove most of the initial boot loader, and then it won't boot windows any more. I'm using Grub btw - the old version (V1.??) Has anyone done this before or have any ideas? Cheers Steve

8 20

RAID discs
by Chris Walker 31 May '13

31 May '13

Having seen that others are suffering RAID problems, perhaps now is an opportune time to ask about mine. I have an Edimax enclosure with 2 x 1TB discs in it. I got a notification from it yesterday to say that sdb had either failed or would fail within the next 24 hours. The drives were bought at the same time as the enclosure so given that one is failing or has failed, is it wise for me to replace both? The discs in there at the moment are Seagate drives and I don't think I specified anything special for them i.e. I just bought 2 discs. This time I'm going to go for something like a WD Red drive which are specified for NAS use. So 2 questions. Does anybody have any recommendations for discs or are the Western Digital discs ok? And second, should I replace both or is one ok for the time being?

5 13

ftp problems
by Anthony Anson 31 May '13

31 May '13

Using up-to-date Mint, and happily using Fire FTP. Suddenly, half the page vanishes, leaving me with just the local side and a 'send' arrow. I can navigate through the local directories. Can't restore Fire FTP it to its proper configuration (AFAICS), so have been using Filezilla, mainly successfully - but - from time to time it connects, but the remote site spits my shaking-hand out. Status: Waiting to retry... Status: Connecting to ###.###.###.#:21... Status: Connection established, waiting for welcome message... Response: 438 Access denied. Please contact your support. Error: Could not connect to server (The :21... is kindly supplied by remote server, and should show there. It's a Linux server BTW.) Contacted Support and in the morning received two e-mails, just after I'd successfully ftpeed the file I tried to put up the evening before. No change in user, password or remote address data. Support has no idea why it wouldn't work the previous evening. *Could* the server be too busy, and <rhetoric> if so, couldn't it say so </rhetoric>? Any idea what 438 is? (I don't want to use a search injun using this dongle on GPRS unless I really have to...) -- Tony http://www.girolle.co.uk/

2 2

Compaq Proliant servers going free
by mick 29 May '13

29 May '13

I'm not sure how many freeglers there are on this list, but I thought I'd pass this on anyway. "THREE complete Compaq PROLIANT 8500R servers offered in Eaton: http://norfolkfreegle.org/Post/ViewPost/13591" Mick --------------------------------------------------------------------- blog: baldric.net gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 ---------------------------------------------------------------------

1 0

Software RAID error
by Mark Rogers 29 May '13

29 May '13

I'm having problems understanding what is happening on my RAID array. $ cat /proc/mdstat Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] [raid10] md0 : active raid1 sda1[0] sdb1[1](F) 976629568 blocks super 1.2 [2/1] [U_] To me, that suggests that sdb has failed, however, syslog contains lots of errors on sda but no mention of sdb. Amongst the things I've learned this morning, is the fact that I'm not getting any notifications; this only came to light because a VM that is hosted on this RAID array has lost the ability to write to one of its virtual disks (but not all of them). Should I conclude that both disks have failed? What is the best route to recovery here? Ie which disk do I swap out first with a new disk? Logically swapping out sda is the only thing that makes sense to me but advice welcomed. smartctl reports that neither disk had SMART enabled, which is odd because I thought they had, so there's no information there. I have enabled it this morning but don't want to try doing self-tests at this stage unless someone more knowledgeable than me says I should. Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) @ 13 Clarke Rd, Milton Keynes, MK1 1LG

2 13

Re: [ALUG] how to block new connections whilst allowing existing established
by mick 27 May '13

27 May '13

On Sun, 26 May 2013 20:34:24 +0100 Adam Bower <adam(a)thebowery.co.uk> allegedly wrote: > On Sun, May 26, 2013 at 08:09:07PM +0100, mick wrote: > > > > Before I start playing in earnest, does anyone know of a more > > elegant solution? > > Have you looked at profiling the connection length and how the client > works? I work for a CDN and to be honest since we acquired a > particular customer the scenario changed from us having a traffic > pattern that when taking a node out of our delivery group after 2 > hours it would see no connections, since this new customer even after > removing a node from delivery it will still see significant amounts > of traffic after 24 hours. > > The way we deal with it is to let some customers get "unlucky" but > then given the client immediately does a new dns lookup and goes to a > new server it means the interruption to them would be very brief. > > Anyhow, you might want to look at some kind of load balancer like > varnish for this scenario as if not a stuck connection might mean your > reboot never happens. > > Also, see if the clients can support range headers, if so they can > resume the download from the missing bit. This means it's not the end > of the world when a download fails. > Adam Thanks for this. But I should have said that my mirrors are on VMs in datacentres I don't control. So I have no chance of sticking a load balancing proxy in front of the servers. Furthermore, the "customers" are not paying me anything (I give the mirrors to the community) so I have no form of communication with them. I /could/ just be brutal, but I don't want to be - and as you will see from my answer to Nev, it turns out I don't have to be either. Cheers Mick --------------------------------------------------------------------- blog: baldric.net gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 ---------------------------------------------------------------------

1 0

how to block new connections whilst allowing existing established
by mick 27 May '13

27 May '13

Hi guys I run a couple of mirrors serving "tails" over http. Occasionally I need to shut those servers down and reboot (for example I have just upgraded both of them to wheezy). Both servers are reasonably busy (they ship out about 2-3 TiB each per month) and normally have active connections at the time I want to power cycle them. Connections can (of course) come from anywhere and some people may be on slow lines and may be over half way through a download of one of the 700 meg iso files. If I simply power cycle the server they will likely lose the connection and the download. I'd like to be more friendly than that. So what I have in mind is some mechanism that I can invoke to prevent new connections being established but permit the existing ones to complete before I switch off. I've thought about cobbling together an iptables script which will change the lines: BLAH –dport 80 -m state –state NEW,ESTABLISHED -j ACCEPT to BLAH –dport 80 -m state –state ESTABLISHED -j ACCEPT temporarily and then switch it back afterwards. But I have yet to try it. Before I start playing in earnest, does anyone know of a more elegant solution? TIA Mick --------------------------------------------------------------------- blog: baldric.net gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 ---------------------------------------------------------------------

2 2

Network printing again
by Chris Walker 25 May '13

25 May '13

I'm having another try at making network printing work. I bought a Buffalo ADSL router recently with the facility to print using the inbuilt USB port. I connected up the printer and tried to make my system see the it. But it never does. If I set the host address as 192.168.1.1, the system picks the port number as 9100. I've looked on the router and all I can see is a WebAccess External Port set to 9000 so I'm guessing that 9100 isn't likely to be about right. The router can also be used as a media server with a USB disc plugged in instead of the printer. If I do that, the disc is seen as smb://ap0024a5bdb4dc/disk1_pt1/ and I can see and read the files (the buffalo is seen on a wifi network as Buffalo-BDB4DC so that ties in too). But I'm still stuck as to why I can't print. Can anybody suggest a way forward please?

2 4