- main - earth.li

OT Firefox and legacy add-ons
by Bev Nicolson 04 Sep '17

04 Sep '17

Possibly a bit OT. Legacy add ons are not going to be supported in FF57. I wondered if ALUG peeps had any recommendations for add ons they'd use instead of Better Privacy Cookie Monster HTML5 everywhere No Flash ScrapBook (onto my fourth folder so really don't want to lose this!) YouTube All HTML5 to do the same kind of job. Thanks. Bev.

2 1

Nextcloud anyone?
by Phil Thane 01 Sep '17

01 Sep '17

Does anyone use, or have expertise in, Nextcloud? I'm an amateur user with Nextcloud running on a home server. Generally I'm very happy with it, it means I always have a mirror of my desktop stuff which I can access via the web and any photos taken on my phone are synced automatically next time the phone finds a wifi connection. Now it's got an annoying problem though. There is a corrupted .jpg file in the InstantUpload folder which throws up an error message in the desktop sync app. It gives the path and 'Server replied: Locked' The file is almost certainly one of a batch my 4 year old granddaughter took when she figured out how to do selfies. Most were rubbish so I deleted them using the phone, possibly interrupting the upload process. She took the photos at our place so the upload would have been more or less instant. If I use the phone app the file won't open, nor will it it delete, move or rename. Nor will it if I view the files via a web browser. It's not a critical error, everything else works OK, but it's annoying seeing the warning every time files sync. Any suggestions? Anyone with access to 4 year old children for example? -- Phil Thane www.pthane.co.uk phil(a)pthane.co.uk 01767 449759 07582 750607 Twitter @pthane

1 0

OT?: Wordpress hosts
by Mark Rogers 31 Aug '17

31 Aug '17

Can anyone recommend a Wordpress host? By which I mean a company that provides and supports the Wordpress install and just leaves the customer to deal with the content, not a company who provides hosting onto which I could install Wordpress myself. A company my wife works with has been left in lurch after their existing host decided they're going to shut down, and I said I'd ask around, and I know a few people here are involved in hosting. Although it's a FOSS application running on a FOSS O/S it feels like it's only on-topic on a technicality, so I'm happy to take off-list replies or discuss here as others see fit. -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

2 2

2600 meeting at 18:00 on Friday the 1st September.
by Viperfang 30 Aug '17

30 Aug '17

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

[ALUG Announce] ALUG Norwich Pub Meet Thursday 10th August
by Viperfang 08 Aug '17

08 Aug '17

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce ----- Hello Norwich Aluggers, Our monthly ALUG Norwich social meeting will be held this Thursday, 10th August at The Coach and Horses (82 Thorpe Road, Norwich, NR1 1BA). The meeting officially starts at 8pm, although some people may arrive earlier. More information on those people can be found on the list and the IRC channel. If you are unsure if you will recognise us then make yourself and your intent to attend known by either posting on list or visiting us on IRC so we can look out for you rather than hiding in the corner. Optionally you could ask at the bar if they know where the geeky computer weirdos are and they'll point you in the right direction (seriously!). Another possibility is look for heaps of electronics on a table that may possibly look like movie props that would used for detonating explosives. Feel free to bring electronics/laptops/gadgets to the meet, you will by no means be alone. Ben Bewick aka Viperfang NB: This mail is automated, please refer to the usual sources for more information. ALUG Contact Details: Website : http://www.alug.org.uk/ IRC : #alug on irc.alug.org.uk List : http://lists.alug.org.uk/mailman/listinfo Twitter : http://twitter.com/anglianlug Identica: TBA Facebook: http://www.facebook.com/group.php?gid=2381613902 ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce

1 0

Setting up SSH keys for an organisation
by Mark Rogers 04 Aug '17

04 Aug '17

I understand the concepts behind key based SSH authentication, I'm just looking for suggested "best practice". Situation: Small company* using SSH to access various** Linux servers, some internal, some external, currently using password-based SSH for most of this, sometimes key based but managed on an ad-hoc basis. Many of the clients are Windows based using PuTTY. I want to shift everything to key based, and that requires me managing the keys. In particular I want to be able to add a new user (and therefore a new key), add it to servers as required (so not all users will have access to all servers), and remove keys if required too (eg someone leaves). As a starting point, I can create public/private key pairs for each user, add them manually to authorized_keys on appropriate hosts, and give each user their private keys (in PuTTY's PPK format as needed). That leaves me with several keys to manage securely, and a bit of a maintenance headache keeping track of who is authorised where. Suggestions? * Small means, in this case, 3 users, but with plans to expand. ** Various means probably a dozen (maybe twice that) VMs, hosted servers, etc, using a mixture of Debian and Ubuntu. -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

1 0

2600 meeting at 18:00 on Friday the 4th August.
by Viperfang 01 Aug '17

01 Aug '17

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

Re: [ALUG] connect ubuntu to MS VPN
by mark fernandes 21 Jul '17

21 Jul '17

Realise that article is a bit long in the tooth but I think Jonathon may be on the money wrt this https://www.ghacks.net/2010/03/02/connecting-to-a-microsoft-vpn-with-linux/ HTH, Mark

1 0

Connecting Ubuntu to a 'Microsoft' VPN
by Paul Grenyer 21 Jul '17

21 Jul '17

Hi All I'm trying to use OpenVPN to connect to what our client tells us is a 'Microsoft' VPN. There's no certificate, just a url, username and password. All works fine from a Windows desktop, so I know the VPN is working. This is the configuration I've tried: # config.ovpn dev tun0 client proto tcp capath . remote remote.xxx.org.uk 1723 auth-user-pass pass.txt # pass.txt <username> <password> openvpn --config config.opvn gives me: Wed Jul 19 11:15:50 2017 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017 Wed Jul 19 11:15:50 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Wed Jul 19 11:15:50 2017 WARNING: file 'pass.txt' is group or others accessible Wed Jul 19 11:15:50 2017 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Wed Jul 19 11:15:50 2017 WARNING: experimental option --capath . Wed Jul 19 11:15:50 2017 Attempting to establish TCP connection with [AF_INET]81.138.76.148:1723 [nonblock] Wed Jul 19 11:15:51 2017 TCP connection established with [AF_INET]81.138.76.148:1723 Wed Jul 19 11:15:51 2017 TCPv4_CLIENT link local: [undef] Wed Jul 19 11:15:51 2017 TCPv4_CLIENT link remote: [AF_INET]81.138.76.148:1723 Wed Jul 19 11:16:20 2017 Connection reset, restarting [0] Wed Jul 19 11:16:20 2017 SIGUSR1[soft,connection-reset] received, process restarting Wed Jul 19 11:16:25 2017 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Wed Jul 19 11:16:25 2017 WARNING: experimental option --capath . Wed Jul 19 11:16:25 2017 Attempting to establish TCP connection with [AF_INET]81.138.76.148:1723 [nonblock] Wed Jul 19 11:16:26 2017 TCP connection established with [AF_INET]81.138.76.148:1723 Wed Jul 19 11:16:26 2017 TCPv4_CLIENT link local: [undef] Wed Jul 19 11:16:26 2017 TCPv4_CLIENT link remote: [AF_INET]81.138.76.148:1723 And with: sudo tcpdump -i enp0s25 host remote.xxxx.org.uk at the same time, I get: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp0s25, link-type EN10MB (Ethernet), capture size 262144 bytes 15:56:05.845738 IP 192.168.1.31.50766 > remote.xxxx.org.uk.1723: Flags [S], seq 1706890924, win 29200, options [mss 1460,sackOK,TS val 441917 ecr 0,nop,wscale 7], length 0 15:56:05.864738 IP remote.xxxx.org.uk.1723 > 192.168.1.31.50766: Flags [S.], seq 737349215, ack 1706890925, win 8192, options [mss 1402,nop,wscale 8,sackOK,TS val 792826942 ecr 441917], length 0 15:56:05.864773 IP 192.168.1.31.50766 > remote.xxxx.org.uk.1723: Flags [.], ack 1, win 229, options [nop,nop,TS val 441922 ecr 792826942], length 0 15:56:06.845981 IP 192.168.1.31.50766 > remote.wlma.org.uk.1723: Flags [P.], seq 1:17, ack 1, win 229, options [nop,nop,TS val 442167 ecr 792826942], length 16: pptp UNEXPECTED Magic-Cookie!!(c587905e) Magic-Cookie=c587905e UNKNOWN_CTRL_MSGTYPE(62247) 15:56:06.925259 IP remote.xxxx.org.uk.1723 > 192.168.1.31.50766: Flags [.], ack 17, win 260, options [nop,nop,TS val 792828002 ecr 442167], length 0 15:56:08.932319 IP 192.168.1.31.50766 > remote.xxxx.org.uk.1723: Flags [P.], seq 17:33, ack 1, win 229, options [nop,nop,TS val 442689 ecr 792828002], length 16: pptp UNEXPECTED Magic-Cookie!!(c587905e) Magic-Cookie=c587905e UNKNOWN_CTRL_MSGTYPE(62247) 15:56:09.012049 IP remote.xxxx.org.uk.1723 > 192.168.1.31.50766: Flags [.], ack 33, win 260, options [nop,nop,TS val 792830089 ecr 442689], length 0 15:56:12.061655 IP 192.168.1.31.50766 > remote.xxxx.org.uk.1723: Flags [P.], seq 33:49, ack 1, win 229, options [nop,nop,TS val 443471 ecr 792830089], length 16: pptp UNEXPECTED Magic-Cookie!!(c587905e) Magic-Cookie=c587905e UNKNOWN_CTRL_MSGTYPE(62247) 15:56:12.130397 IP remote.xxxx.org.uk.1723 > 192.168.1.31.50766: Flags [.], ack 49, win 260, options [nop,nop,TS val 792833208 ecr 443471], length 0 15:56:20.745268 IP 192.168.1.31.50766 > remote.xxxx.org.uk.1723: Flags [P.], seq 49:65, ack 1, win 229, options [nop,nop,TS val 445642 ecr 792833208], length 16: pptp UNEXPECTED Magic-Cookie!!(c587905e) Magic-Cookie=c587905e UNKNOWN_CTRL_MSGTYPE(62247) 15:56:20.823394 IP remote.xxx.org.uk.1723 > 192.168.1.31.50766: Flags [.], ack 65, win 260, options [nop,nop,TS val 792841900 ecr 445642], length 0 I'm really not sure what I'm looking at. Can anyone guide me in the right direction? Thanks Paul

2 1

[ALUG Announce] Monthly Social Meeting Monday 10 July
by samwise 10 Jul '17

10 Jul '17

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce ----- Hi, all, Just a quick reminder that we have our monthly IOG social meeting tonight in the upstairs rooms of the Thomas Wolsey pub on St Peters Street, Ipswich, from 20:00. If you have any photos from recent walks that you would like to share that haven't made it to Facebook etc., feel free to email me directly, and I'll put some in the slide pack. Hope to see some of you there! Many thanks, Peter. IOG Chair ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce

1 1

[ALUG Announce] ALUG Norwich Pub Meet Thursday 13th July
by Viperfang 10 Jul '17

10 Jul '17

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce ----- Hello Norwich Aluggers, Our monthly ALUG Norwich social meeting will be held this Thursday, 13th July at The Coach and Horses (82 Thorpe Road, Norwich, NR1 1BA). The meeting officially starts at 8pm, although some people may arrive earlier. More information on those people can be found on the list and the IRC channel. If you are unsure if you will recognise us then make yourself and your intent to attend known by either posting on list or visiting us on IRC so we can look out for you rather than hiding in the corner. Optionally you could ask at the bar if they know where the geeky computer weirdos are and they'll point you in the right direction (seriously!). Another possibility is look for heaps of electronics on a table that may possibly look like movie props that would used for detonating explosives. Feel free to bring electronics/laptops/gadgets to the meet, you will by no means be alone. Ben Bewick aka Viperfang NB: This mail is automated, please refer to the usual sources for more information. ALUG Contact Details: Website : http://www.alug.org.uk/ IRC : #alug on irc.alug.org.uk List : http://lists.alug.org.uk/mailman/listinfo Twitter : http://twitter.com/anglianlug Identica: TBA Facebook: http://www.facebook.com/group.php?gid=2381613902 ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via https://lists.alug.org.uk/mailman/listinfo/announce

1 0

2600 meeting at 18:00 on Friday the 7th July.
by Viperfang 05 Jul '17

05 Jul '17

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

Linux with Gnome-2?
by Ted Harding 04 Jul '17

04 Jul '17

Greetings all! As I posted a few days ago, I shall want to install Linux on a new laptop. For years I have been using Gnome 2, since in particular it provides for a row of "workspace" icons at the bottom of the screen. I use 20 of these, since much of the work I do involves switching between different workspaces in which different jobs are going on in parallel (and each could itself use up two or more workspaces). A screengrab of what the screen looks like before I start anything up is at: http://www.zen89632.zen.co.uk/Misc/gnome2-debian-desktop.jpg The 20 workspace icons are at bottom right, and switching between them is easy -- mouse-click, or "Ctrl-Alt-RightArrow" or "Ctrl-Alt-LeftArrow". This does not seem to be available on Gnome 3. So can anyone point me to installation resources for a Linux distribution which has Gbome 2? Scientific Linux: https://www.scientificlinux.org/ used to have Gnome 2 for some time after Gnome 3 came out, but it seems that it now only has Gnome 3 (though I haven't found definite confirmation of this on the SciLin website). Any relevant info anf help will be much appreciated! Thanks, and best wishes to all, Ted.

9 22

Linux with Gnome-2?
by Barry Broom 27 Jun '17

27 Jun '17

Hi Ted, This is my first time posting so I hope it gets through. In Gnome 3 based distributions (Ubuntu/Debian/Fedora etc) you can switch workspaces by going to the Activities screen and using the scroll wheel on the mouse or by clicking on the right pane. Alternatively you can press Super+Page Up (or Super+Page Down) on the keyboard to cycle through your workspaces. If you are using a PC the 'super' key is the Windows key. Barry

1 0

Re: [ALUG] Linux with Gnome-2?
by Mick 26 Jun '17

26 Jun '17

But crucially, with the Mate desktop. (Please forgive the top post. I'm using a mobile mail client. On my hols. )On 26 Jun 2017 20:18, Bev Nicolson <lumos(a)gmx.co.uk> wrote: > > Ah. Well the answer I got a while back was this, Ted: > > https://www.linuxmint.com/ > > I'll have to dive in one day. > > Bev > > > On 26/06/17 18:56, Ted Harding wrote: > > So can anyone point me to installation resources for a > > Linux distribution which has Gbome 2? > > > > Scientific Linux: > > https://www.scientificlinux.org/ > > used to have Gnome 2 for some time after Gnome 3 came out, > > but it seems that it now only has Gnome 3 (though I haven't > > found definite confirmation of this on the SciLin website). > > > > Any relevant info anf help will be much appreciated! > > Thanks, and best wishes to all, > > Ted. > > > > > > _______________________________________________ > > main(a)lists.alug.org.uk > > http://www.alug.org.uk/ > > https://lists.alug.org.uk/mailman/listinfo/main > > Unsubscribe? See message headers or the web site above! > > > > > _______________________________________________ > main(a)lists.alug.org.uk > http://www.alug.org.uk/ > https://lists.alug.org.uk/mailman/listinfo/main > Unsubscribe? See message headers or the web site above!

1 0

Re: [ALUG] MS Office file formats
by mark fernandes 14 Jun '17

14 Jun '17

Hi, I'm assuming that you mean Office 365. Have just been working on a doc for work and saved it to my dropbox and remembered your query. Properties says \ Word 2007 (.docx) HTH, Mark Fernandes

1 0

Re: [ALUG] SSH clients
by Laurie Brown 14 Jun '17

14 Jun '17

On 13/06/17 16:52, Mark Rogers wrote: > On 13 June 2017 at 16:21, Laurie Brown <laurie(a)brownowl.com> wrote: >> >> DNSmasq is your friend... > > It is indeed, but 17.04 isn't letting me talk to it! > > Specifically: dnsmasq is what I have running on a server in my office, > and my desktop is set to use it via DHCP . A lookup for anything with > a dot in it works, but without it doesn't get passed to my dnsmasq > server: > > $ dig myhost.msl-office.co.uk #works > $ dig virtualhost.myhost #works > $ dig myhost #fails > $ dig @192.168.1.5 myhost #works (where 192.168.1.5 is my server > running dnsmasq) Ah! I confess I haven't tried it with 17.04 at all. I use it extensively in 14.04 and it works well. I have a situation where I need split-horizon DNS (which djbdns can do as well). Mobile device users, when in-house, need to access internal services with what is effectively the external domain so that when they leave the internal network, the same domains work, but point to a different IP address. Basically dnscache intercepts the call to an external domain and returns a local address, which is what I think you need. > Not sure if the off-list reply was deliberate so I haven't "corrected" > it, but feel free to reply back to the list. It wasn't! hit the wrong button in a hurry! Sorry! Cheers, Laurie. -- --------------------------------------------------------------------- Laurie Brown laurie(a)brownowl.com ---------------------------------------------------------------------

3 3

SSH clients
by Mark Rogers 13 Jun '17

13 Jun '17

Usually I just SSH directly from my terminal, but that's not a great way to keep track of server IP addresses and keys etc. So, what do others do? -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

6 13

Re: [ALUG] MS Office file formats
by Noel Galer 13 Jun '17

13 Jun '17

You may find the following link useful. Not so much for the obvious explanation, but more for the background :- https://www.howtogeek.com/304622/what-is-a-.docx-file-and-how-is-it-diff erent-from-a-.doc-file-in-microsoft-word/ Personally, I think it is a cynical attempt to keep one step ahead of an 'Open' format, in order to keep the world hooked on MS Office and the spiralling costs. But then I also see Microsoft as a 'single point of failure' for the world. However, the NHS came close to something like that recently. I wonder where the bug came from ? Best regards, Noel XorSyst -----Original Message----- From: main [mailto:main-bounces@lists.alug.org.uk] On Behalf Of Phil Thane Sent: Monday, June 12, 2017 6:31 PM To: main(a)lists.alug.org.uk Subject: [ALUG] MS Office file formats I've used Star Office / Open Office / Libre Office for all my writing work since around 2000. Most editors though want work in MS file formats, previously .doc, now .docx. I notice that Libre Office 5 'save as' function gives me the option to save in MS Word 2007 - 2013 XML (docx). Does anyone know if that's the latest? What does the new-fangled 'MS Office as a Service' use? Are we going to run into compatibility issues all over again? -- Phil Thane www.pthane.co.uk phil(a)pthane.co.uk 01767 449759 07582 750607 Twitter @pthane _______________________________________________ main(a)lists.alug.org.uk http://www.alug.org.uk/ https://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!

2 1

KeePass, was Re: SSH clients
by Mark Rogers 13 Jun '17

13 Jun '17

On 12 June 2017 at 11:57, samwise <samwise(a)bagshot-row.org> wrote: > KeePass is a lot more powerful than first appears! > I've played with Keepass in the (distant) past but not recently, and it's looking like I should take another look. I currently use LastPass (cue cries of horror...) because its Android client generally works pretty well at auto-filling apps (including but not limited to browser). A quick Google shows that there are KeyPass clients for Android (and more than one to choose from!) but a quick glance suggests that while they may give access to the passwords it wasn't clear that auto-fill would be there. (KeePassDroid doesn't seem to have much in the way of feature documentation, but reading the documentation on Keepass2Android, which looks pretty well specified, it allows switching to a Keepass keyboard to auto-enter passwords but that doesn't sound as seamless as LastPass.) What do others use for synchronising their Keepass data securely between machines (including mobiles)? Is it possible to share certain sets of data between users? Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

4 3

sudo &
by Mark Rogers 13 Jun '17

13 Jun '17

Is there an easy was to launch a process with sudo and send it into the background? $ sudo myapp & .. will go straight into the background then stop, waiting for a password to be entered. So I have to bring it back to the foreground (fg), enter the password, stop it (ctrl-z) then send it back into the background (bg). Of-course what normally happens is that I don't realise it's stopped at all, only to come back several hours after a long process should have been running to find it hasn't yet started.... I'm sure there's a better way? Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

6 8

MS Office file formats
by Phil Thane 12 Jun '17

12 Jun '17

I've used Star Office / Open Office / Libre Office for all my writing work since around 2000. Most editors though want work in MS file formats, previously .doc, now .docx. I notice that Libre Office 5 'save as' function gives me the option to save in MS Word 2007 - 2013 XML (docx). Does anyone know if that's the latest? What does the new-fangled 'MS Office as a Service' use? Are we going to run into compatibility issues all over again? -- Phil Thane www.pthane.co.uk phil(a)pthane.co.uk 01767 449759 07582 750607 Twitter @pthane

1 0

Re: [ALUG] Need new laptop AND seek recovery of files from VirtualBox
by Phil Ashby 11 Jun '17

11 Jun '17

On 28/05/17 12:00 Chris Green <cl(a)isbd.net> wrote: > Ted Harding <ted.harding(a)wlandres.net> wrote: >> The Linux filesystems are in VirtualBox ".vdi" files on >> the Windows XP system, which I was able to locate after >> booting with the Slackware CD. I've been looking around >> extensively for info about how to set about this. This >> does not seem to be straightfoward unless the VDI file >> is transerred (somehpow ... ) to another machine on which >> VirtualBox is installed. >> > I think that's the only practical way, copy the .vdi files to a system > which has VirtualBox installed and then get that system to boot the > virtual linux. > > -- Chris Green I've done similar in the past. Get the new machine sorted first, then either: boot up a live CD on the victim and export the local storage to the new machine (probably using the nice easy GUI 'sharing' stuff in Gnome these days); or remove the physical disk(s) and attach to the new machine via a USB caddy / directly into a disk slot if you have one spare, this may be easier than trying to get sharing guff to work. Either way, you can copy off the whole VirtualBox VMs folder from the victim's storage, then work on a nice new/fast/not-broken machine to get them going again. I use a similar approach to properly scan machines for malware, on the basis that one should never try and scan from within the possibly compromised OS. I export the raw disks using a live CD to another machine and scan from there. Cheers, Phil.

3 2

Any DNS/systemd experts here? I have a DNS problem on new xubuntu install
by Chris Green 08 Jun '17

08 Jun '17

My new laptop has xubuntu 17.04 installed and that runs systemd-resolved for local DNS rather than the previous dnsmasq (run by Network Manager). I have a local server on my network that provides DHCP and DNS for the systems on the LAN and thus I can find things by name. From all my older (xubuntu 16.04) systems this works for both unqualified and FQDNs:- chris$ host backup backup.zbmc.eu has address 192.168.1.101 chris$ host pi pi.zbmc.eu has address 192.168.1.2 chris$ host backup.zbmc.eu backup.zbmc.eu has address 192.168.1.101 chris$ host pi.zbmc.eu pi.zbmc.eu has address 192.168.1.2 chris$ However, from the xubuntu 17.04 system, it doesn't work for unqualified names:- chris@t470$ host pi Host pi not found: 2(SERVFAIL) chris@t470$ host backup Host backup not found: 2(SERVFAIL) chris@t470$ host backup.zbmc.eu backup.zbmc.eu has address 192.168.1.101 It looks like it should work because systemd-resolve's configuration seems right:- chris@t470$ systemd-resolve --status Global DNS Domain: zbmc.eu DNSSEC NTA: 10.in-addr.arpa 16.172.in-addr.arpa 168.192.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa corp d.f.ip6.arpa home internal intranet lan local private test Link 3 (wlp4s0) Current Scopes: DNS LLMNR setting: yes MulticastDNS setting: no DNSSEC setting: no DNSSEC supported: no DNS Servers: 192.168.1.2 8.8.8.8 DNS Domain: zbmc.eu Link 2 (enp0s31f6) Current Scopes: none LLMNR setting: yes MulticastDNS setting: no DNSSEC setting: no DNSSEC supported: no Hey! I think I see the problem, I set LLMNR to 'no' in the configuration but above it's still 'yes'. Why isn't it no? :- root@t470:/etc/systemd# more /etc/systemd/resolved.conf # This file is part of systemd. # # systemd is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. # # Entries in this file show the compile time defaults. # You can change settings by editing this file. # Defaults can be restored by simply deleting this file. # # See resolved.conf(5) for details [Resolve] #DNS= #FallbackDNS=8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844 Domains=zbmc.eu LLMNR=no #DNSSEC=no #Cache=yes #DNSStubListener=udp root@t470:/etc/systemd# ... and I have restarted the service. Help! -- Chris Green

2 4

Can anyone point me at a VLAN tutorial aimed at small 'soho' users?
by Chris Green 07 Jun '17

07 Jun '17

I'm trying to use VLANs to separate areas of my home LAN, mostly for security by, for example, keeping guest/Windows WiFi connections isolated from the rest of the system. It appears that just about every manufacturers' idea of what VLAN means is different! I have VLAN ability offered by my TP-Link VDSL router, by my Draytek Vigor 2820n router and by a TP-Link TL-SG108E managed switch. They all seem very different! On the TP-Link router (TD-W9980) the VLAN facility is closely connected with what it calls LAN groups. You can create groups and put the physical LAN ports and WiFi SSIDs into specific groups. Each group has its own DHCP server and thus a different IP range. You can't put anything (LAN port or SSID) into more than one group. In reality there seems to be little real separation between groups as, if you put (say) LAN port 2 into a group by itself any device connected to LAN port 2 will still get replies DHCP requests it sends from any/all the other LAN ports. A different subnet will run on LAN port 2 but if you configure a device connected to that port with a different subnet address it will happily talk to devices on the other ports. The 2820n is quite different. If you set up VLANs on that they all have the same DHCP server (in the 2820n) and are thus on the same subnet, but they are separated and unable to communicate with each other. Devices can be assigned to multiple ports. Thus it's possible to have one VLAN (to which everyone can belong) that has access to the internet and not much else and another VLAN which is the more secure internal VLAN. Finally the TL-SG108E offers three sorts of VLAN - Port based, tagged and MTU (confusing abbreviation that last one, it doesn't mean Maximum Transmission Unit). The manual isn't very helpful, it does the usual TP-Link thing of repeating what the words on the GUI confuguration tell you with no indication of *why* you would want to do anything. Port based VLANs are a bit like the 2820n ones described above except that they seem to expect different subnets, the others I'm not really sure about (as in I don't really understand them) but looking around the internet I gather that the descriptions confuse others too because they don't use the same terms for the same things as others (mostly Cisco) do. Help! :-) I just need a simple explanation of how to split up my LAN such that I can separate a 'Guest WiFi' part (more than one WiFi device), an area that all local users can access (with printer, DNS, etc.) and a more private area (my desktop, backup system, etc.) that only I can access. All users need access to the internet of course. -- Chris Green

1 0