main

main@lists.alug.org.uk

1 participants
10372 discussions

Re: VPN options
by Mark Rogers 09 Jul '24

09 Jul '24

On Thu, 13 Jun 2024 at 11:08, BD <dzidek23(a)gmail.com> wrote: > An example that I have seen working was a ZTNA configuration with Fortinet hardware and SDN for network separation. That sort of thing will be out of my budget! > I suspect the same thing could be achieved using pfSense and network management (with > a nice GUI to control it). Quick search on the Internet for "pfSense zero trust" returned a > few interesting sites. Additionally pfSense can serve as a VPN concentrator too. I spent a bit of time looking into this. The biggest issue for me is that it's FreeBSD and most of our stuff is hosted at DigitalOcean, and they no longer offer FreeBSD as an option. I can of-course look elsewhere, but DO combine the bandwidth of all your services and we're nowhere close to using it all, so putting a VPN which could potentially be fairly heavy traffic somewhere it can use that bandwidth makes sense if I can. I spent ages playing with Wireguard - there are some useful tools for building the config ([1], [2]) but I never got a configuration which worked properly with my phone over mobile data (or my laptop using mobile data over a hotspot) and as that's one of the main things I needed to achieve I ended up walking away from my attempts (in part because I managed to get the old SSL-based VPN working over those connections by turning off "FastSSL". I'd like to get this working at some point but a day and half of experimenting and getting nowhere useful was as much (more if I'm honest) as I could afford to allocate to it. [1] https://www.wireguardconfig.com/ - Configuration builder [2] https://github.com/mvpsnet/wireguard4vps - PHP-based manager -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0344 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

3 6

OT Firefox 125 won't show me btl comments
by Bev Nicolson 17 Jun '24

17 Jun '24

Or at least, Firefox 125 and onward on Linux Mint won't show much content under a Guardian article, nor can I sign in. All I see is a kind of swirly whiteness like it might be trying to load but can't. It's fine on my tablet. I have tried it in safe mode and tried clearing the cache. I have no idea what else to do. Bev

2 2

Re: LSI megaraid recovery
by Phil Ashby 17 Jun '24

17 Jun '24

On 15/06/2024 12:00, Laurie Brown <laurie(a)brownowl.com> wrote: > ... > Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, > 1952448512 sectors > > Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): > 512 bytes / 512 bytes > ... > Device Boot Start End Sectors Size Id Type > /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT > ... > So it has a partition - but I can't find a way to mount it.> > mount /dev/mapper/ddf1_RAID10-part1 /mnt/test mount: /mnt/test: > special device /dev/mapper/ddf1_RAID10-part1 does not exist. Hi Laurie, I'd guess that whatever distro you are running doesn't like the GPT partition format, so hasn't created the device file(s) for each partition. I'd go for the simple option of creating a loopback device using the sector size & offsets in the partition table: # losetup -o 512 -b 512 -f /dev/mapper/ddf1_RAID0 This should make you a new /dev/loop<n> that avoids existing ones (probably your USB boot stick), which you can mount as NTFS or whatever. If losetup doesn't like having a block device underneath, then more messing with dmsetup should be able to achieve the same (but I've never done that...) Good luck, Phil. PS: Did you check in /dev/disk/... for those partitions?

2 5

LSI megaraid recovery
by Laurie Brown 14 Jun '24

14 Jun '24

I'm at my wits' end on this one, folks, and I could do with some help please. This is all for a customer who is desperate to get this data back... I have an LSI RAID card (Broadcom MegaRAID SAS 9341-4) which has suddenly stopped working. I've been to hell and back trying to get a couple of newer machines to recognise the card and let me near the BIOS. In fact, this card has been working as a 4-disc RAID10 array for more than a year in a 'Doze 11 machine but just stopped a couple of weeks ago. I bought a new card, a different mobo, new cables, the lot. Nothing. The customer shipped me the original machine so I have access to all that was there before. I eventually found an older (Ubuntu) machine in my junk pile in which the PCIe slot let me into the BIOS so I recovered the RAID array, but the megaraid_sas driver in Ubuntu refused to work, so I couldn't access the data. I won't go into the pain involved in getting to this point, but it was extreme and lengthy! I have finally given up on the card, and dropped the 4 drives straight into an Ubuntu box, where I'm trying to get to the data. What I have now is the four disks all seen by the system, and a /dev/mapper device which is the RAID array. ---- cut here ---- # blkid /dev/sda: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdb: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdc: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sdd: UUID="LSI ^P" TYPE="ddf_raid_member" /dev/sde1: LABEL_FATBOOT="Windows USB" LABEL="Windows USB" UUID="8B53-C0AB" BLOCK_SIZE="512" TYPE="vfat" PARTUUID="a85d43c9-01" /dev/loop0: TYPE="squashfs" /dev/mapper/ddf1_RAID10: PTTYPE="PMBR" ---- cut here ---- /sde1 is the USB stick I booted from. fdisk -l gives me 2 mapper devices: ---- cut here ---- Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, 1952448512 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x00000000 Device Boot Start End Sectors Size Id Type /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT ---- cut here ---- fdisk on the mapper devices says this: ---- cut here ---- Disk /dev/mapper/ddf1_RAID10: 931 GiB, 999653638144 bytes, 1952448512 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x00000000 Device Boot Start End Sectors Size Id Type /dev/mapper/ddf1_RAID10-part1 1 4294967295 4294967295 2T ee GPT ---- cut here ---- So it has a partition - but I can't find a way to mount it. mount /dev/mapper/ddf1_RAID10-part1 /mnt/test mount: /mnt/test: special device /dev/mapper/ddf1_RAID10-part1 does not exist. ---- cut here ---- ---- cut here ---- mdadm --examine /dev/mapper/ddf1_RAID10 /dev/mapper/ddf1_RAID10: MBR Magic : aa55 Partition[0] : 4294967295 sectors at 1 (type ee) ---- cut here ---- Any help appreciated! Cheers, Laurie. -- --------------------------------------------------------------------- Laurie Brown laurie(a)brownowl.com ---------------------------------------------------------------------

1 0

VPN options
by Mark Rogers 13 Jun '24

13 Jun '24

The scenario: Two individuals both with fast home Internet connections, plus an office on a pretty basic VDSL connection. All three have distinct subnets. Routers in all three locations have VPN support. The home ones support OpenVPN and Wireguard, the office OpenVPN only, but I'd consider replacing the router if it gave us what we needed. Objective: I want to link all three locations so that IPs on each network can be reached from the others, but in a configurable way. Ie neither individuals home devices should be accessible to the other individual (albeit they may use the VPN themselves to access them personally). Some office-based resources may not be shared. Etc. How can I do this? I'm assuming I'll get a cheap VPS somewhere to act as VPN server and have all three routers connect to that, and after that it's "just" a question of managing access and routing. But I need the result to be maintainable and ideally not just by me, which would mean either some kind of GUI or some really simple commandline tools. When I started looking at this I figured there'd be some simple appliance-type applications I could install on the VPS that would do this but I've come up short so far. I don't have any real budget for this - I'm OK with a few quid a month on a VPS and likewise on a subscription service if I have to go down that route (I'd rather not). (We do already have an office dial-in VPN option which could be used on the routers but I don't think putting all our domestic devices into one bit VPN is a good idea for all sorts of security reasons.) -- Mark Rogers

2 1

Re: KVM shared folders (Mark Rogers)
by peter.northerly＠gmail.com 03 Jun '24

03 Jun '24

I am finding this a very useful point of research for these kinds of question. Not always right, but it mostly gets you there if you persist. https://www.perplexity.ai/search/how-to-set-rxsxMNWDRjeuwX3WssHVRQ

2 1

KVM shared folders
by Mark Rogers 30 May '24

30 May '24

I'm trying to migrate away from VirtualBox. One feature I use a lot in VBox is shared folders, ie making a directory on the host (Ubuntu) appear as a mapped drive on the VM (Windows). This is close enough to trivial in VBox but I've never quite made sense of how to do it in KVM, so I'm hoping someone here can advise? -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0344 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

1 0

Re: NAS
by Srdjan Todorovic 14 May '24

14 May '24

On Mon, 13 May 2024 at 16:42, <steve-ALUG(a)hst.me.uk> wrote: > On 09/05/2024 22:01, Srdjan Todorovic wrote: > And also this particular evening, I am battling a dead NVME drive > (with lots and lots of important files I've not yet had a chance to > backup to my NAS) which means I also cannot boot my desktop, even with > a Kubuntu Live DVD. So it's a poignant reminder to have a backup and > have something that is redundant as well in case of hardware failure > or bit-rot. :( > Ouch. Hope you made progress with this. I pulled the NVME out of the desktop and put it in my laptop, thinking I can just mount it and get the files. However my desktop OS booted up on my laptop - looks like NVME is fine, and the motherboard has something wrong with it. Ended up replacing the motherboard, which was a world of pain (long story, wifi, kubuntu upgrades, display, dnsmasq). I do need to organise my files and make sure they are on my NAS. Best, Srdj

1 0

NAS
by steve-ALUG＠hst.me.uk 13 May '24

13 May '24

OK, so in my quest to simplify things, I'm going to eventually do-away with my server. Can anyone recommend a NAS? Old me would probably have rolled-my-own with FreeNas or similar, but perhaps I need to go "of-the-shelf". Should I get RAID, or not bother? My fileserver is RAIDed (mirrored). Any thoughts? Cheers Steve

2 2

Mail Woes - new provider needed.
by steve-ALUG＠hst.me.uk 24 Apr '24

24 Apr '24

Posted Midday Friday 12/4/24 I'm not sure if my previous post yesterday about mail problems will get posted on the group or not. This supersedes it. Yesterday I became aware that I couldn't send outgoing email. I run my own mailserver, and it seems that due to my email addresses being harvested and used in spam, my mailserver's IP address had been blacklisted, so I couldn't send email. After emailing my ISP and one of the websites that had me listed, I find I can send email again. This is good. But being able to send email is quite important to me (!), so being unable to do has increased the need to migrate away from my own mail server soon. So - where to go? What do I do/need? I have taken advantage of my mailserver's forwarding, so that I can have email addresses like user-suffix@mydomain will all route to user@mydomain, no matter what suffix. I have no idea of what suffixes I have used over the years. :-( I'd like to be able to continue that, but if not, it shouldn't reject user-randomsuffix@mydomain and instead route it to a default recipient. Hopefully! 3 main users. For 2 I'd probably like to do a blanket redirect to other email addresses that they mainly use now. e.g. user2@mydomain, and user2-anysuffix@mydomain redirect to user2@gmail I can probably move the whole domain to a new provider. I don't have a website or FTP. I use VPN to remote in to it, to access machines, but I can probably hack that with a dynamic DNS. So it's mainly email. Any thoughts please? Steve

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main