- main - earth.li

Shorewall messages
by Chris Walker 19 Sep '15

19 Sep '15

Hello, If I run dmesg, it scrolls away with loads of this type of message :- [ 9958.682112] Shorewall:net-fw:DROP:IN=enp6s0 OUT= MAC=40:61:86:05:f9:31:00:24:a5:bd:b4:dc:08:00 SRC=192.168.1.1 DST=192.168.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=53299 DF PROTO=TCP SPT=43075 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 In an effort to fix this, I've looked at the installed packages and I see that not only do I have shorewall installed, but also shorewall6. Should I have both? I've looked online at this page to start with - http://www.shorewall.net/manpages6/shorewall6-zones.html - but I can't see which bits of the system are causing the error and hence which bits I should change. So, what can I do to suppress these messages as they're filling up the disc? Any help appreciated. -- __ __| |_ __ __ .----------------------------------------------. / _/ _` \ V V / | mailto:alug_cdw@the-walker-household.co.uk | \__\__,_|\_/\_/ |______________________________________________|

3 3

mailman/apache2.4/cgi-bin issues
by Jenny Hopkins 09 Sep '15

09 Sep '15

Hullo, I'm struggling to get mailman up and running again after changing a virtual server to a new platform, upgrading to debian jessie in the process. I've made the permissions on the new platform for /usr/lib/cgi-bin/mailman identical: (e.g.):-rwxr-sr-x 1 root list 10K Apr 6 16:45 admin I've altered /etc/group to match the old server like this: list:x:38:lurker lurker:x:109:list,www-data /etc/mailman/apache.conf contains these lines: ScriptAlias /cgi-bin/mailman/ /usr/lib/cgi-bin/mailman/ Alias /pipermail/ /var/lib/mailman/archives/public/ Alias /images/mailman/ /usr/share/images/mailman/ <Directory /usr/lib/cgi-bin/mailman/> AllowOverride None Options ExecCGI AddHandler cgi-script .cgi Require all granted </Directory> <Directory /var/lib/mailman/archives/public/> Options FollowSymlinks AllowOverride None Require all granted </Directory> <Directory /usr/share/images/mailman/> AllowOverride None Require all granted </Directory> My first issue is that all site links point to {server}/cgi-bin/mailman/{file}, which gives a "You don't have permission to access /cgi-bin/mailman/create on this server." warning, but if I manually change that to {server}/mailman/{file}, it works. The second issue is that although the link to the archives displays the messages fine, the overview mailman doesn't seem to think I have any existing lists, although /var/lib/mailman is fully synced from the old server. I can't seem to find any file that holds this information. (There is a third that in when I click on one of the mailing list titles, the actual message can't be found, but that's probably moving on to lurker issues). Any ideas welcome! Thanks, Jenny

2 4

LVM /home partition not mounting at boot
by Richard Lewis 08 Sep '15

08 Sep '15

Hello ALUG, For a couple of weeks now I've been getting this problem on my Debian "unstable" laptop. I use LVM for the partitions on my HDD and I'm finding that, maybe three out of four boots, the partition where /home is mounted doesn't get activated. It uses systemd for booting. The boot sequence continues as normal (AFACT) until after [ OK ] Mounted /boot Then it waits for a bit, then I see: [****] A start job is running for dev-mapper-slab/x2dhome.device (42s / 1min 30s) Then after the alloted time, it drops me into "emergency mode". I enter the root password and I can then get the logical volume for /home to mount: # vgchange -ay slab i.e. I set the slab volume group as active and all its logical volumes become active. I can also see from here that, while the other two logical volumes in my volume group are both LV status available (these are /dev/slab/root, where / is mounted, and /dev/slab/swap_1 which is where swap is), the /dev/slab/home logical volume is: LV status NOT available After I issue the vgchange command, I see the kernel message: EXT4-fs (dm-2): mounted filesystem with ordered data mode. Opts: (null) I can then exit "emergency mode" and booting proceeds to the login prompt. From then onwards everything is normal. I've been looking for possible solutions to this and I've tried: * adding lvmwait=/dev/mapper/slab-home to the kernel boot options. This didn't make any difference. * checking the auto_activation_volume_list. At the moment it's undefined, which apparently means that any (all?) volumes can be auto-activated which sounds fine. Any ideas what's going on here? I've been using this LVM set up since the laptop was new (so for 2.5 years) and I've not had this problem before. I tend to keep my packages fairly up-to-date by upgrading every week or so. I guess it's possible some recent upgrade has changed something, but I can't think what. And if it was something that affected lots of people, you'd expect the Web to have some evidence of that, and for there to be some fix on the way. I'm also slightly concerned by the intermittent nature of this (about three in four boots) that it could be a hardware fault. Any thoughts? Richard -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Richard Lewis j: ironchicken(a)jabber.earth.li @: lewisrichard http://www.richardlewis.me.uk/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

1 1

[ALUG Announce] ALUG Norwich Pub Meet Thursday 10th September
by Viperfang 07 Sep '15

07 Sep '15

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce ----- Hello Norwich Aluggers, Our monthly ALUG Norwich social meeting will be held this Thursday, 10th September at The Coach and Horses (82 Thorpe Road, Norwich, NR1 1BA). The meeting officially starts at 8pm, although some people may arrive earlier. More information on those people can be found on the list and the IRC channel. If you are unsure if you will recognise us then make yourself and your intent to attend known by either posting on list or visiting us on IRC so we can look out for you rather than hiding in the corner. Optionally you could ask at the bar if they know where the geeky computer weirdos are and they'll point you in the right direction (seriously!). Another possibility is look for heaps of electronics on a table that may possibly look like movie props that would used for detonating explosives. Feel free to bring electronics/laptops/gadgets to the meet, you will by no means be alone. Ben Bewick aka Viperfang NB: This mail is automated, please refer to the usual sources for more information. ALUG Contact Details: Website : http://www.alug.org.uk/ IRC : #alug on irc.alug.org.uk List : http://lists.alug.org.uk/mailman/listinfo Twitter : http://twitter.com/anglianlug Identica: TBA Facebook: http://www.facebook.com/group.php?gid=2381613902 ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce

1 0

Coding a script
by Chris Walker 07 Sep '15

07 Sep '15

Hello, Can anybody help me please with some coding of a script? I regularly download mp3 files using get_iplayer which I then play in my Humax set top box. I find the Humax will display an image for the file if the image is embedded within the mp3 file. So I wrote a script to go through a folder and add the relevant image file. Here's my script :- for FILE in *.mp3 do bname=$(basename "$FILE") extension="${bname##*.}" filenamewoext="${bname%.*}" imagefile="${filenamewoext}.png" echo adding cover image ... eyeD3 --add-image $imagefile:FRONT_COVER:Picture "$FILE" echo Stripping any version 1 tags id3v2 --delete-v1 "$FILE" # Now for a tidy up and delete the original image file # search and add image img=$(id3v2 -l "$FILE" | grep -i "APIC") if $img =""; then echo "Adding the image failed" exit 1 else rm -f $imagefile fi done The problem comes in the tidy up section. I don't want to delete the image file if adding it has failed but even though I'm getting an error "mp3image.sh: line 47: APIC: command not found", the image is still being deleted. I've tried various ways of writing this code and all have failed. Writing code is far from my strong point so would appreciate some pointers as to where I'm going wrong particularly since if I type out the img=.. command in a console, it seems to work and produces a line like this :- APIC (Attached picture): (Picture)[, 3]: image/png, 58900 bytes so adding the image did work. -- __ __| |_ __ __ .----------------------------------------------. / _/ _` \ V V / | mailto:alug_cdw@the-walker-household.co.uk | \__\__,_|\_/\_/ |______________________________________________|

3 3

Anyone know how to change user on Raspberry Pi GUI login?
by Chris Green 06 Sep '15

06 Sep '15

As per the subject. I have a Raspberry Pi with the latest raspbian installed. I've told it to run the GUI at boot. I want to change the user that it boots into, i.e. I don't want it to boot into the default user 'pi'. How does one do this? Google searching brought up all sorts of things about changing the pi login but not what I wanted to do. -- Chris Green

2 1

hosts.deny
by steve-ALUG＠hst.me.uk 05 Sep '15

05 Sep '15

Hi y’all! Could someone enlighten me about hosts.allow & hosts.deny please? I was reading up on linux networking, and it said I should consider the contents of these files. So networking aside, I've read up a bit and am a lot confused. As far as I can find, 1) if there's an match in hosts.allow an address is allowed to contact the machine. 2) if no match in 1), then if there's a match in hosts.deny, then the address is not allowed to contact the machine 3) if no match in 1 or 2, then the address is allowed to contact the machine. Is this right so far? If so, what's typically in hosts.deny? I ask because I've obviously edited this in the past - I have a vague recollection of doing it because I couldn't get anything working and I just stripped it all out - I know - a very very bad idea. All I've got in there is: ALL: ALL: ::1 As far as I can figure out, the first line, ALL: would do nothing. ALL: ::1 I think would block all IPV6 addresses from contacting. Is my interpretation of the above right? What's typically in the hosts.deny for a server? If it's set up to block by default, then what should I enable? Is it sufficient to use netstat to work out what's listening for a conversation and just allow these things if I think they should be allowed. If so what's the correct use of netstat to find out? If I have things running as cron jobs rather than as a daemon to check things, do I have to specifically allow these to contact the outside world, or is hosts.allow/deny just for daemons? Lastly, does this work like a firewall? As I have firewall already set up, is it a good idea to spend time on hosts.allow/deny as well? Any advice appreciated muchly! Steve

3 4

Linux laptops
by samwise 04 Sep '15

04 Sep '15

So my main HP Pavilion laptop recently died ... it looks pretty permanent. It had a fairly good run, so I'm going to have to start looking for a replacement. Just wondered if anyone had any interesting thoughts or suggestions. I'm looking for a main PC. Sort of interested in shared tablet things like the Lenovo Yoga 3, though I'm not sure if it's a mite small. I see there has been some success getting Debian running on it. Peter. -- I ran the London Marathon 2015 in aid of the PSP Association. All sponsorship gratefully received. :) http://www.bagshot-row.org/marathonformum

4 3

Cambridge Beer?
by Brett Parker 03 Sep '15

03 Sep '15

This probably more belongs on alug-social, but as we've not had a post on there in, like, totally forever... Anyone around the Cambridge area fancy a beer or 3 tomorrow? I recommend the Haymakers, but am happy to be convinced of the merits of other pubs... Cheers! -- Brett Parker

3 3

2600 meeting at 18:00 on Friday the 4th September.
by Viperfang 03 Sep '15

03 Sep '15

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

Disc Errors
by Chris Walker 02 Sep '15

02 Sep '15

Hello, I have 3 SATA discs on my machine. One has Windows on it, another has Mageia 5 and the third is designated as Disc_Swap_Space to allow me to swap files between Windows and Mageia. It's formatted to NTFS. I prefer that to allowing Windows to write to any linux drives. But even though the swap drive functions perfectly under Windows, Mageia won't mount it. It complains 'non-zero exit status 14' and say that the file system is unclean. But I've run all the checks under Windows and that thinks it is clean. So how can I persuade Mageia to use it again? -- __ __| |_ __ __ .----------------------------------------------. / _/ _` \ V V / | mailto:alug_cdw@the-walker-household.co.uk | \__\__,_|\_/\_/ |______________________________________________|

2 3

update-alternatives --config java
by Paul Grenyer 02 Sep '15

02 Sep '15

Hi All I've installed Java 8 on my Linux Mint machine here: /usr/lib/jvm/jdk1.8.0_60 and I want to be able to switch between it and currently installed Java version with: sudo update-alternatives --config java However, I can't find how to add Java 8 to one of the update alternatives options. Can someone help me out, please? -- Thanks Paul Paul Grenyer e: paul.grenyer(a)gmail.com b: paulgrenyer.blogspot.com t: pjgrenyer Have you thought what Naked Element could do for you? http://nakedelement.co.uk/ It's time to get technical: http://norfolkdevelopers.com

1 0

Want an application for scanning and maximising WiFi signals
by Chris Green 30 Aug '15

30 Aug '15

I'm currently playing with an Alpha Networks external/outdoor USB WiFi device. It's essentially just a WiFi dongle with an aerial in a waterproof box on the end of a long USB cable. Thus you can position it in a window or up a pole outside to get a connection to a fairly distant WiFi source. I need a way to find and then maximise WiFi signals, you can't really just use Network Manager as there no easy way to monitor a signal while waving the aerial around. I have found wpa_gui which isn't very good, I can't get it to scan repeatedly at any reasonable rate. I have also tried iwScanner which is better but is no longer maintained and crashes at intervals, it would be nice if it could scan faster too. Can anyone recommend a good tool for this job, just needs to allow one to select a WiFi signal and then show its signal strength as a bar which is refreshed reasonably frequently. -- Chris Green

2 5

Sort of OT (off Linux) but still - outdoor router that supports EAP-SIM authentication
by Chris Green 16 Aug '15

16 Aug '15

It's not really specifically Linux but it's computery. Does anyone know of an outdoor WiFi client box (i.e. something similar to the TP-Link TL-WA7210) that supports EAP-SIM authentication? EAP-SIM is authentication using data from a SIM but authenticates a WiFi connection. There are descriptions of how to do EAP-SIM authentication via wpa_supplicant in a Linux box but that requires the WiFi hardware to be in (or directly connected to) the Linux box. I'm after a way of doing it in a remote outdoor router connected by ethernet to my Linux box. I'm already investigating the alternative way of doing this with an outdoor USB WiFi adapter plugged into the Linux box. This is possibly the way to go but it's not all that straightforward getting USB WiFi adapters to work with Linux so the above external router method might be easier. -- Chris Green

1 0

Exploit
by Anthony Anson 13 Aug '15

13 Aug '15

Can't remember where I saw this, but in case it's news to anybody: https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-w… -- Tony http://www.girolle.co.uk/

1 0

[ALUG Announce] ALUG Norwich Pub Meet Thursday 13th August
by Viperfang 12 Aug '15

12 Aug '15

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce ----- Hello Norwich Aluggers, Our monthly ALUG Norwich social meeting will be held this Thursday, 13th August at The Coach and Horses (82 Thorpe Road, Norwich, NR1 1BA). The meeting officially starts at 8pm, although some people may arrive earlier. More information on those people can be found on the list and the IRC channel. If you are unsure if you will recognise us then make yourself and your intent to attend known by either posting on list or visiting us on IRC so we can look out for you rather than hiding in the corner. Optionally you could ask at the bar if they know where the geeky computer weirdos are and they'll point you in the right direction (seriously!). Another possibility is look for heaps of electronics on a table that may possibly look like movie props that would used for detonating explosives. Feel free to bring electronics/laptops/gadgets to the meet, you will by no means be alone. Ben Bewick aka Viperfang NB: This mail is automated, please refer to the usual sources for more information. ALUG Contact Details: Website : http://www.alug.org.uk/ IRC : #alug on irc.alug.org.uk List : http://lists.alug.org.uk/mailman/listinfo Twitter : http://twitter.com/anglianlug Identica: TBA Facebook: http://www.facebook.com/group.php?gid=2381613902 ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce

1 0

Huge file transfers?
by John Cohen 07 Aug '15

07 Aug '15

Apart from dropbox and other proprietary syncing software, how do you share large files (Say, 30 or 50GB) easily and securely with another person/client? I could buy wetransfer plus etc but I'd rather keep the files under my roof, saving time (not having to upload them somewhere else before sharing them) and not worrying about privacy issues. I have an FTP server which works fine, but when it comes to customers and other teamworkers who aren't that tech savvy, they just prefer using wetransfer or similar services, where files are dropped and uploaded on a browser and users notified by mail with a download link. (plus FTP isn't secure, and SFTP is complex if using keys when sharing with customers) I've tried the the following F*EX Pros: 1) pretty good because it's not PHP based and therefore hasn't got php / apache upload limitations. 2) The system feels pretty robust after trying it out and uses minimal resources. Cons: 1) Pretty ugly, and customization is basic unless you're a guru (which I'm not) 2) Relies on a mail server. I have postfix installed but I'd rather not have to rely on it as it's another layer of complication (namely emails arriving in clients spam folders, etc) Zendto Pros: 1) looks much more sophisticated in terms of functionality 2) looks very slick. Cons: 1) Php based. upload limits are 2gb unless tweaked, but even then not a great way to serve VERY large files (customers download interruptions etc) 2) Still relies on installing a mail server for notifications Owncloud Pros 1) Has a sync client for huge files, good for file sharing between work colleagues 2) easy to use for everyone 3) can send notifications with external mail server Cons: 1) Bit of a resource hog as it's designed for file syncing, not sending a large file from A to B 2) When sharing with others outside the team (via links), apache and browser limitations still exist. I can't guarantee clients have an up-to-date browser, and I wouldn't rely on sharing a file that large via php. Is there any other open source solution that you've tried which is both robust for huge file sharing and easy for the average folk to use? Any personal experiences? John

3 2

How to prevent Google redirects to www.googleadservices.com?
by Chris Green 06 Aug '15

06 Aug '15

I use Google Shopping quite a lot but I'd like to prevent the redirects that record one's clicks through to sellers' web sites. These redirects also occur on the advertising links returned when you do a normal Google search. E.g. if you search for 'Sandals' in Google you will see a number of adverts (for places selling sandals amazingly) down the right hand side with a little yellow "Ads" at the top. I want to be able to click on these adverts and *not* get redirected via www.googleadservices.com. This is the default means by which advertisers see that you have clicked through from a Google search. Some advertisers don't go via www.googleadservices.com (e.g. eBay and Amazon), presumably they do their own thing somehow. Anyway I just want to go direct to the advertiser's/seller's site when I click the link, both for provacy and for speed. Surely there's a Firefox add-on that does this for me, all it needs to do is extract //www.toolandfix.com/carters-862e28-replacement-spade-and-fork-bent-taper-t-shovel-handle-28.html%3Futm_source%3Dgoogle_shopping from http://www.googleadservices.com/pagead/aclk?sa=L&ai=CPuTM3g-5VdO6NKLk7gb16a… -- Chris Green

2 1

2600 meeting at 18:00 on Friday the 7th August.
by Viperfang 04 Aug '15

04 Aug '15

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0

What Ad blockers do you use?
by Chris Green 28 Jul '15

28 Jul '15

What Ad blocking plugins do people use here (Firefox on Xubuntu mostly)? -- Chris Green

5 8

Huge file transfers?
by John Cohen 24 Jul '15

24 Jul '15

Apart from dropbox and other proprietary syncing software, how do you share large files (Say, 30 or 50GB) easily and securely with another person/client? I could buy the service of wetransfer plus etc but I'd rather keep the files under my roof, saving time (not having to upload them somewhere else before sharing them) and not worrying about privacy issues. I have an FTP server which works fine, but when it comes to customers and other teamworkers who aren't that tech savvy, they just prefer using wetransfer or similar services, where files are dropped and uploaded on a browser and users notified by mail with a download link. I've tried the the following F*EX Pros: 1) pretty good because it's not PHP based and therefore hasn't got php / apache upload limitations. 2) The system feels pretty robust after trying it out and uses minimal resources. Cons: 1) Pretty ugly, and customization is basic unless you're a guru (which I'm not) 2) Relies on a mail server. I have postfix installed but I'd rather not have to rely on it as it's another layer of complication (namely emails arriving in clients spam folders, etc) Zendto Pros: 1) looks much more sophisticated in terms of functionality 2) looks very slick. Cons: 1) Php based. upload limits are 2gb unless tweaked, but even then not a great way to serve VERY large files (customers download interruptions etc) 2) Still relies on installing a mail server for notifications Owncloud Pros 1) Has a sync client for huge files, good for file sharing between work colleagues 2) easy to use for everyone 3) can send notifications with external mail server Cons: 1) Bit of a resource hog as it's designed for file syncing, not sending a large file from A to B 2) When sharing with others outside the team (via links), apache and browser limitations still exist. I can't garantee clients have an up-to-date browser, and I wouldn't rely on sharing a file that large via php. Is there any other open source solution that you've tried which is both robust for huge file sharing and easy for the average folk to use? Any personal experiences? Cheers, John

1 0

IFTTT and FOSS alternatives
by Mark Rogers 21 Jul '15

21 Jul '15

Background: A couple of times I've had my garage freezer defrost. I'm pretty sure it's not failed, just that the door isn't properly shut, so I want to find a simple way to monitor it. I already have some basic wireless energy monitors and I figure a reduction in average usage (eg it failed) or an increase (door open) would be a good place to start. I've not done anything like this before and I'm thinking about building it around a Pi. But for the "if the energy drops below X or goes above Y for a period of Z then send me an email/text message/other alert" bit I figure I should use something standard. IFTTT came to mind (never used it, been aware of it for years). Or, if I care about my data, a FOSS alternative (Huginn and Bip.io came up from a Google search). Anyone here had any experience of anything like this to make a recommendation? This is intended to be the start of an adventure where I start playing with all sorts of potential triggers and actions so to be honest I'm not so fussed about a specific solution as I am in finding a gateway into something to play with. IoT is something I'd like to experiment with in general, but due to lack of time I really need to be able to get something useful up and running pretty easily that I can then extend when time permits. Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

5 12

Adobe Flash alternatives
by Bev Nicolson 18 Jul '15

18 Jul '15

And getting them working in Firefox, specifically. Given that version 18 of Flash is unlikely to be heading to to an update manager near me any time soon (or indeed anytime at all) and Firefox has restricted it, I'd be quite keen to swop. I've got gnash and lightspark installed now, but how do I get Firefox to recognise them. Bev.

5 9

[ALUG Announce] ALUG Norwich Pub Meet Thursday 9th July
by Viperfang 06 Jul '15

06 Jul '15

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce ----- Hello Norwich Aluggers, Our monthly ALUG Norwich social meeting will be held this Thursday, 9th July at The Coach and Horses (82 Thorpe Road, Norwich, NR1 1BA). The meeting officially starts at 8pm, although some people may arrive earlier. More information on those people can be found on the list and the IRC channel. If you are unsure if you will recognise us then make yourself and your intent to attend known by either posting on list or visiting us on IRC so we can look out for you rather than hiding in the corner. Optionally you could ask at the bar if they know where the geeky computer weirdos are and they'll point you in the right direction (seriously!). Another possibility is look for heaps of electronics on a table that may possibly look like movie props that would used for detonating explosives. Feel free to bring electronics/laptops/gadgets to the meet, you will by no means be alone. Ben Bewick aka Viperfang NB: This mail is automated, please refer to the usual sources for more information. ALUG Contact Details: Website : http://www.alug.org.uk/ IRC : #alug on irc.alug.org.uk List : http://lists.alug.org.uk/mailman/listinfo Twitter : http://twitter.com/anglianlug Identica: TBA Facebook: http://www.facebook.com/group.php?gid=2381613902 ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce

1 0

2600 meeting at 18:00 on Friday the 3rd July.
by Viperfang 30 Jun '15

30 Jun '15

Quick heads up about this months Norwich 2600 meeting, more info at http://www.norwich2600.co.uk

1 0