BALUG-Talk

balug-talk@lists.balug.org

1 participants
141 discussions

Possible solution of blankness or editing outline-only on BALUG DokuWiki?
by aaronco36＠sdf.org 22 Apr '21

22 Apr '21

A blank window/page or editing outline currently appears when visiting the BALUG DokuWiki at [1]. According to a recent DokuWiki User Forum post 'Blank Page after Change Template'[2], one can apparently "make an edit to conf/local.php". Someone know how to [properly!] edit that particular PHP file, assuming that the blankness (or editing outline) on the BALUG DokuWiki happens to be this situation? On the outside chance that it's somehow related to the above, BALUG/SF-LUG/BerkeleyLUGs' last scheduled outage was apparently on Wed 2020-07-22 8:15am-4:45pm PDT US/Pacific according to [3]. -A ================================================================ REFERENCES ================================================================ [1]https://www.wiki.balug.org/wiki/doku.php [2]https://forum.dokuwiki.org/d/19095-blank-page-after-change-template [3]https://lists.balug.org/pipermail/balug-talk/2020-July/000216.html ================================================================

2 2

"Slides", etc. from this Tuesday's meeting: Michael Paoli: sed - Streaming EDitor+
by Michael Paoli 17 Mar '21

17 Mar '21

Archive copy of the "slides", etc. from this Tuesday's meeting: Michael Paoli: sed - Streaming EDitor+ are available here: https://www.archive.balug.org/2021/2021-03-16/ The "slides" are in Libre Office Impress format. Eratta?! 8-O I did find at least one item that wasn't on the "slides" and should've been. For latest version(s), may also want to peek at: https://www.mpaoli.net/~michael/unix/sed/ which will likely be getting updated soon (but that location above may not be as persistent or available as the BALUG archive location/copy). The URL above is also linked to from the archived "slide" set.

1 0

Re: [BALUG-Talk] Larry Platzek - contact update? [BALUG-Admin] Fwd: Mail delivery failed: returning message to sender (larryp@inow.com)
by Michael Paoli 04 Aug '20

04 Aug '20

[Bcc: Dick Verna] Anyone have updated/current contact information for Larry Platzek ? Hope all is well. > From: "Rick Moen" <rick(a)linuxmafia.com> > Subject: Re: [BALUG-Admin] Fwd: Mail delivery failed: returning > message to sender (larryp(a)inow.com) > Date: Mon, 3 Aug 2020 14:18:18 -0700 > Quoting Michael Paoli (Michael.Paoli(a)cal.berkeley.edu): > >> Dropping larryp(a)inow.com from the forwarding aliases. >> inow.com has two NS, neither of which function. >> >> Let me know if/when I should add it back. > > For those who don't know or have forgotten, that's Larry Platzek, > longtime member of the Linux community. A very long time ago > (2005-ish), after founders Art Tyde and David Sifry bowed out of BALUG, > Larry Platzek and Dick Verna ran BALUG (including primary listadmin > duty) and coordinated the meetings at Four Seas Restaurant in > Chinatown's upstairs banquet room. > > I think he's been living in the South Bay lately, but wouldn't swear to > it. My efforts to find current contact information are coming up dry. > > Lessons to learn: > > 1. Don't register your domains at GoDaddy. ;-> > 2. Make sure your whois data gives meaningful out-of-band contact > methods. > 3. If you have only two authoritative nameservers, shoot your > admins and get some who understand the RFCs and how to administer > DNS. > > It might be worth asking on balug-talk if anyone has a telephone number > or alternate e-mail address for Larry. > > If only because, y'know, we're all mortal, and I worry when people just > seem to vanish.

1 0

BALUG/SF-LUG/BerkeleyLUG Scheduled outage W 2020-07-22 8:15am-4:45pm PDT US/Pacific
by Michael Paoli 21 Jul '20

21 Jul '20

BALUG/SF-LUG/BerkeleyLUG Scheduled outage W 2020-07-22 8:15am-4:45pm PDT US/Pacific PG&E has a scheduled ("maintenance") power outage: W 2020-07-22 8:30am-4:30pm PDT US/Pacific So, that almost certainly means an outage for the BALUG Virtual Machine (VM), which also hosts (excepting DNS slaves), all things: BALUG SF-LUG (except SF-LUG's list) BerkeleyLUG (except BerkeleyLUG's list) Expect it may be down or offline for any and/or all of: W 2020-07-22 8:15am-4:45pm PDT US/Pacific I probably won't send an update unless things significantly exceed the specified parameters. For the curious, expected to impact up to everything on these IPs: 96.86.170.224/29 2001:470:66:76f::/64 2001:470:67:76f::/64 2001:470:1f04:19e::/64 2001:470:1f05:19e::/64 2603:3024:1b29:0:5054::/64

1 0

Re: [BALUG-Talk] Company in Concord seeks to donate older PCs to a LUG
by Michael Paoli 27 Jun '20

27 Jun '20

Also replied to 'em off-list regarding Partimus and such. references/excerpts: > From: "Michael Paoli" <Michael.Paoli(a)cal.berkeley.edu> > To: "Cameron Abrams" <cameronabrams25(a)gmail.com>, "Christian > Einfeldt" <christian(a)partimus.org>, "Grant Bowman" > <grant(a)partimus.org>, "James Howard" <james(a)partimus.org> > Cc: "Rick Moen" <rick(a)linuxmafia.com> > Subject: Re: Company in Concord seeks to donate older PCs to a LUG > Date: Fri, 26 Jun 2020 02:15:09 -0700 > Cameron / Partimus folks, perhaps y'all ought connect. :-) > > I believe Partiums is (approximately?) based in(/around?) San Francisco, > and also does / has done work with some East Bay (Oakland, if I > recall correctly) school(s). I believe Grant is also out in East Bay, > East of Concord. > > Also including link to list of lists (of [L]UGs), in case that's > also useful. > > Thanks for reaching out and asking! > > http://www.partimus.org/ > http://www.partimus.org/contact.php > > https://www.wiki.balug.org/wiki/doku.php?id=balug:bay_area_open_source_linu… > > references/excerpts: > http://linuxmafia.com/pipermail/dvlug/2020q2/000608.html > http://linuxmafia.com/pipermail/dvlug/2020q2/000609.html > https://groups.google.com/g/berkeleylug/c/Tr_WRg1STpI/m/qOZ_8bheCQAJ > https://lists.balug.org/pipermail/balug-talk/2020-June/000213.html > >> From: "Rick Moen" <rick(a)linuxmafia.com> >> To: dvlug(a)linuxmafia.com >> Subject: [dvlug] Company in Concord seeks to donate older PCs to a LUG >> Date: Thu, 25 Jun 2020 11:02:25 -0700 > >> ----- Forwarded message from Cameron Abrams >> <cameronabrams25(a)gmail.com> ----- >> >> Date: Thu, 25 Jun 2020 09:28:39 -0700 >> From: Cameron Abrams <cameronabrams25(a)gmail.com> > From rick(a)linuxmafia.com Thu Jun 25 18:11:04 2020 > Date: Thu, 25 Jun 2020 11:10:49 -0700 > From: Rick Moen <rick(a)linuxmafia.com> > To: BALUG-Talk(a)lists.balug.org > Subject: [BALUG-Talk] Company in Concord seeks to donate older PCs to a LUG > > ----- Forwarded message from Cameron Abrams <cameronabrams25(a)gmail.com> ----- > > Date: Thu, 25 Jun 2020 09:28:39 -0700 > From: Cameron Abrams <cameronabrams25(a)gmail.com> > To: dvlug-owner(a)linuxmafia.com > Subject: Do you take donations? > > Hello, > > I am contacting you on behalf of the company I work for. We are located in > Concord, and are in the midst of a transition. We would like to get rid of > some older PCs we have replaced with newer ones, and we are in the midst of > wiping all of our hard drives. We were wondering if perhaps this was a > Linux group that took donations, as we would rather put the PCs to use than > scrap them as e-waste. If you do accept donations and would like to discuss > this matter further, or if you do not accept donations but do know of other > local groups that accept donations, please email me back. > > Thanks, > > Cameron > > ----- End forwarded message -----

2 1

Company in Concord seeks to donate older PCs to a LUG
by Rick Moen 25 Jun '20

25 Jun '20

----- Forwarded message from Cameron Abrams <cameronabrams25(a)gmail.com> ----- Date: Thu, 25 Jun 2020 09:28:39 -0700 From: Cameron Abrams <cameronabrams25(a)gmail.com> To: dvlug-owner(a)linuxmafia.com Subject: Do you take donations? Hello, I am contacting you on behalf of the company I work for. We are located in Concord, and are in the midst of a transition. We would like to get rid of some older PCs we have replaced with newer ones, and we are in the midst of wiping all of our hard drives. We were wondering if perhaps this was a Linux group that took donations, as we would rather put the PCs to use than scrap them as e-waste. If you do accept donations and would like to discuss this matter further, or if you do not accept donations but do know of other local groups that accept donations, please email me back. Thanks, Cameron ----- End forwarded message -----

1 0

Thoughts on home brew routers?
by Charles Hathaway 23 Jun '20

23 Jun '20

Hey all, I'm looking into replacing my Verizon Fios router with one I can manage (configure DNS black hole, possibly setup a VPN connection, etc. etc.), but I'm hitting an overwhelming number of options, so I'm wondering what everyone else is doing. I'm basically looking for something which lets me access the underlying OS so I can easily fix(/break) things, and weighing the pros/cons of also having it do some file sharing stuff (Samba/NFS) or using it for hosting toy projects to show friends, with at least GbE speeds. In terms of hardware, I've seen ClearFog Pro <https://www.solid-run.com/marvell-armada-family/clearfog/> and it's big brother, ClearFog GT 8k <https://shop.solid-run.com/product/SRM8040S64D04GE008V12GE/>, both of which support running Linux (and then I could use things like iptables and dns-masq or whatever), but the review seem to be underwhelming. There is also pi-hole, which runs on Raspberry Pi hardware (and likely anything else), but I think that just does DNS, so I'd have to configure the routing on top of that; the problem there is that there is only 1 ethernet port on the Raspberry Pi, and a managed switch sounds a bit over the top for my setup (plus, noise). The other option I see is a small tower with 2 ethernet ports, probably a standard x86 box, and a standard switch. One pro to that is I might be able to get 10GbE, which I feel like will matter within the next 5 years (my FioS connection is already 1GbE), the con is needing two separate devices. In either case, I'd need a wireless AP, which is something I know next to nothing about. I think I want something supporting 802.11ac? Thanks in advance for the suggestions! I'm relatively new to this list, coming from the Philly Linux User Group, so I don't know if there are different expectations :). Charles -- Charles Hathaway, PhD Phone: +1 (518) 817-8024 charles@mcom:~$ fortune -s computers If at first you don't succeed, you must be a programmer.

2 3

Dynamic DNS updates and letsencrypt.org ... yummy! :-)
by Michael Paoli 07 May '20

07 May '20

Dynamic DNS updates and letsencrypt.org ... yummy! :-) So, not too long back, I had a wee little mini-project that gave me motivation to start using, or at to at least seriously consider starting to use, dynamic DNS updates. I'll skip the full details on that, but key bit was, to be able to give specific individual(s), ability to relatively easily and quickly edit DNS data ... but only very specific DNS data. Notably, generally, that of a specific subdomain (Pi.BerkeleyLUG.com) - and any subdomains thereunder. And without giving them ability to alter any other DNS data in or under the zone (BerkeleyLUG.com). Without dynamic DNS updates, there would generally be two possible ways to approach that. One would be to create delegated subdomain. That then fully hands that off, but then burdens them with additional need to have DNS servers, and needing static Internet Protocol addresses (IPs) for those etc., and part of the earlier motivation was that they didn't have static IPs. So that also would burden them with DNS nameservers and need for static IPs - so that would at best be far from idea. Other approach, would be to leverage existing DNS infrastructure, and allow them only to change data in and under the subdomain (Pi.BerkeleyLUG.com) of existing zone (BerkeleyLUG.com). That would be rather to quite difficult, as allowing them to only make DNS changes in the zone file appropriate for the subdomain (and any thereunder), would be a quite non-trivial configuration task. So, such an approach also wasn't very feasible. Not to mention there are generally hazards with allowing folks to edit DNS master zone file(s) - notably errors there can cause significant problems with DNS (up to and including breakage or other issues with up to the entire zone). Well, enter dynamic DNS. With that, I could set up key that could be used only to alter DNS data for the subdomain (and any subdomains thereunder), but that key couldn't change any other DNS data at all. So that was the general approach I pursued. To test, and before enabling dynamic DNS on production (BerkeleyLUG.com) domain/zone, I created a temporary test delegated subdomain, and tested dynamic DNS on that zone (and restricting to a subdomain thereof, and any subdomains thereunder). I then created one more such temporary test delegated subdomain for some further testing. After I was fully satisfied with all that, I moved on to dropping those two temporary test delegated subdomains, and enabling dynamic DNS updates for the production domain/zone, and setting up key that could only change the specifically configured subdomain (Pi.BerkeleyLUG.com) within (and any subdomains thereunder). Anyway, after having that infrastructure in place, I thought of another potentially very useful use case. letsencrypt.org Certificate Authority (CA) TLS(/"SSL") certificates (certs). To validate those, http can be used - but not for wildcard certs, or DNS and including wildcard certs. Since many of the certs I use and prefer (if not "require" - does make things quite a bit simpler) use wildcards, well, DNS validation is the way to go on that. But that's been a quite semi-manual process. Notably, I'd been doing it where requesting client tells me what DNS data to add, I manually add it (add it to zone file and update serial number, reload, wait for that to propagate to the responding authoritative nameservers) ... and do that for each such verification data that needs be added, manually doing each, getting the cert, then removing those temporarily added no longer needed bits of DNS data. Well, certbot(8) (client for letsencrypt.org) has hooks/capabilities to use dynamic DNS updates and/or call programs in place of (or as part of) the "manual" verification (and cleanup) steps. So, by either by giving it access to suitable key (and/)or by having it call programs to handle creating the validation data, those steps can be automated. For DNS, such program(s) would be being given a [sub]domain, and a specific text string, and would then create the relevant TXT record under that [sub]domain. So, I set up a key with the appropriate access to use dynamic DNS (and had earlier set dynamic DNS up across all the zones where I'm master), and set up some helper programs, to allow certbot(8) to leverage the specific key, to make the DNS additions - and also remove them again after validations have completed. So ... generating keys, CSRs, requesting certs, temporarily inserting DNS validation data, getting certs, and removing that temporarily inserted data. That used to be a semi-manual process. The manual part mostly being adding DNS data, checking its propagation, proceeding through that validation step ... for numerous domains across multiple certs. Typically that would take me, oh, maybe roughly 30 minutes or more, maybe once every about 85 days or so (the certs have a lifetime of only 90 days). But with dynamic DNS, and certbot(8) then using the hooks to programs I wrote ... full automated. What used to typically take about 30 minutes or more about every 85 days or so ... much faster and fully automated. Now down to ... under 4 minutes (3m21.050s)! Anyway, I show that below - the/my command used (I did this one against letsencrypt.org test environment, as I don't need to get new certs at present, and test doesn't have the rate limiting of the production environment, and also saves production from having that additional traffic where it's not needed - otherwise production is essentially identical). $ time myCERTBOT_EMAIL= \ > myCERTBOT_OPTS='--preferred-challenges dns --test-cert --server > https://acme-v02.api.letsencrypt.org/directory --manual-auth-hook > mymanual-auth-hook --manual-cleanup-hook mymanual-cleanup-hook' \ > Getcerts \ > '*.balug.org,balug.org,*.archive.balug.org,*.beta.balug.org,*.ipv4.balug.org,*.ipv6.balug.org,*.new.balug.org,*.secure.balug.org,*.staging.balug.org,*.test.balug.org,*.php.test.balug.org,*.wiki.balug.org' > \ > '*.sf-lug.org,sf-lug.org,*.ipv4.sf-lug.org,*.ipv6.sf-lug.org,*.sflug.org,sflug.org,*.sflug.com,sflug.com,*.sflug.net,sflug.net,sf-lug.net,www.sf-lug.net,sf-lug.com,www.sf-lug.com' > \ > 'mpaoli.net,*.mpaoli.net,*.blackie.mpaoli.net,*.old-debian.mpaoli.net,digita…' > \ > '*.balug.org,balug.org,*.lists.balug.org,berkeleylug.com,*.berkeleylug.com' \ > 'berkeleylug.com,*.berkeleylug.com,berkeleylug.org,*.berkeleylug.org' \ > '*.pi.berkeleylug.com,pi.berkeleylug.com'; echo "$?" ... real 3m21.050s user 0m23.092s sys 0m4.706s $ (for f in *_cert.pem; do openssl x509 -noout -text -in "$f" 2>&1 > done) | > sed -ne 's/^ *$Not After :.*$$/\1/p > /DNS:/{s/^ *//;s/, */,/g;s/DNS://g;p}' Not After : Jun 25 16:57:17 2020 GMT *.archive.balug.org,*.balug.org,*.beta.balug.org,*.ipv4.balug.org,*.ipv6.balug.org,*.new.balug.org,*.php.test.balug.org,*.secure.balug.org,*.staging.balug.org,*.test.balug.org,*.wiki.balug.org,balug.org Not After : Jun 25 16:57:24 2020 GMT *.ipv4.sf-lug.org,*.ipv6.sf-lug.org,*.sf-lug.org,*.sflug.com,*.sflug.net,*.sflug.org,sf-lug.com,sf-lug.net,sf-lug.org,sflug.com,sflug.net,sflug.org,www.sf-lug.com,www.sf-lug.net Not After : Jun 25 16:57:28 2020 GMT *.blackie.mpaoli.net,*.digitalwitness.org,*.mpaoli.net,*.old-debian.mpaoli.net,digitalwitness.org,mpaoli.net Not After : Jun 25 16:57:33 2020 GMT *.balug.org,*.berkeleylug.com,*.lists.balug.org,balug.org,berkeleylug.com Not After : Jun 25 16:57:38 2020 GMT *.berkeleylug.com,*.berkeleylug.org,berkeleylug.com,berkeleylug.org Not After : Jun 25 16:57:43 2020 GMT *.pi.berkeleylug.com,pi.berkeleylug.com $ And at the end there, for the certs obtained I show when they expire and the domains/names in their SAN data. Note also in the above, the leading "> " is not literally entered, but PS2 (essentially the shell prompting us that it needs more input to complete the command). So, 6 certs, each with Subject Alternative Name (SAN) having multiple names/domains, and each with at least one, if not more, having wildcard ... all done automatically in 3m21.050s elapsed time. Oh, and another advantage with dynamic DNS updates. Serial numbers handled automatically - one less place for us mere mortal humans to screw up DNS. Also, on the helper programs ... I only wanted the invoking ID to be able to make very certain specific changes to DNS records - the validation records are of a very specific type and format, etc. I could restrict the key a fair bit on that, but not fully to only and exactly just the needed. So, I handle that via the helper programs and a little bit of sudo. The ID doing the request never actually has access to the key itself. Instead, via sudo, the key is used on its behalf - and in program that further checks and restricts, such that only and exactly needed validation data is added (and later removed) - nothing else is allowed. Very feasible that way. Also, the helper programs that add the DNS data - also checks that it's propagated to the responding authoritative nameservers, before continuing (so it should then pass letsencrypt.org's validation tests). But back to, e.g. Pi.BerkeleyLUG.com. Were that to instead be done the "old school" way of editing master zone file, would be quite challenging to set something up that could only update DNS data for that subdomain and subdomains thereunder ... but very easy to limit to only and exactly that on dynamic DNS. So, dynamic DNS updates ... already able to do multiple useful things for me (and other(s)). :-)

1 3

Re: [BALUG-Talk] BALUG list(s) unsubscribe (egad, us listadmins get mail)
by Michael Paoli 02 May '20

02 May '20

"Joseph Perla" <joseph(a)jperla.com> Ah, what listadmins get to deal with :-/ ... (if anyone has constructive criticism on how this process/instructions can be improved, feel free to chime in). I'm sorry, "Joseph Perla" <joseph(a)jperla.com>, but now you're getting annoying. BALUG has over 800 list subscribers, but alas, you're now the less than 1 in 800 that can't figure out how to get the email address you have subscribed, unsubscribed. The instructions from the list and web pages are pretty straight-forward. I also specifically and personally emailed you and the email address subscribed that's apparently getting that subscribed email to you, relevant instructions. Yet it appears you still fail to follow those instructions. It ain't rocket science. I don't know how much more clear it can be. There's a subscribed, opted in (probably double opted in) email address that's receiving email from the list. Great. You say it's some catch-all you can't sent from - whatever, not my problem, that doesn't prevent you (or whomever controls that email) from unsubscribing. By default, you even get monthly password reminder - you shouldn't share that password with anyone (not even me) ... whatever, you also included it in your email. So, okay, go to the web interface - you know what that is, you know what Internet and browser and web are, right? Did you read my email? Did you comprehend it? You put the subscribed email in the box to unsubscribe ... don't have the password, you can request password reminder, and it'll email it to you. So, subscribed email address, password, web form, clicky-clicky, boom, unsubscribed. With that, it's immediate, no email confirmation or the like needed (I think it kicks out one final email that the email address has been unsubscribed) ... and yeah, I just retested all that, works 100% perfectly fine lickety split. So, ain't too damn hard, just friggin' do it. If you can't handle that, give the email address and password to someone else who might volunteer do do that for you - but I'm not going to do that for you. Just do it - get it done - boom, unsubscribed, not that hard. If you can't figure out the instructions, maybe search on the web on how to unsubscribe from a mailman list - probably a few zillion examples/tutorials out there too - it ain't hard. And if that "catch-all" email doesn't want to be unsubscribed, too bad for them - they're apparently forwarding you the list email ... that also allows you to control the subscription of that email ... that's just the way it is. I have absolutely zero control of what email sent to balug.org(a)jperla.com gets forwarded to "Joseph Perla" <joseph(a)jperla.com> Not my problem, if you have issue with that, I suggest you take it up with balug.org(a)jperla.com. Sorry if this sounds frustrated, but well, it is. I get too many of these kinds of darn emails (not frequently, but they do occasionally keep coming up ... relentless occasional dribble/trickle). If you've got useful criticism on how the instructions and such can be improved, sure, send it. If you can provide any diagnostics of where things are failing where they're in fact nor functioning as they ought, great, please provide it - but you've not done any of that. You're basically just "please unsubscribe me". No, it's self-serve - you (or balug.org(a)jperla.com) self-subscribed, and have all the needed access to as, or even more easily, likewise self-unsubscribe the balug.org(a)jperla.com address yourself. So, please do so. Hmmm, hey, I guess this isn't the best time to also put out a pitch, Hey, who'd also like to also volunteer to be a list admin and deal with emails from folks that can't read and follow instructions, on a recurring basis? > From: "Joseph Perla" <joseph(a)jperla.com> > Subject: Re: BALUG list(s) unsubscribe > Date: Sat, 02 May 2020 01:18:38 +0000 > It?s a catch all address and I can?t send email from it. Please unsubscribe > > On Fri, May 1 2020 at 6:16 PM, Michael Paoli < > Michael.Paoli(a)cal.berkeley.edu > wrote: > >> >> >> >> balug.org(a)jperla.com, [Cc: "Joseph Perla" <joseph(a)jperla.com>] >> >> >> >> (Also, "Joseph Perla" <joseph(a)jperla.com>, if your issue is with >> balug.org(a)jperla.com sending/forwarding email to you that you don't want, >> I suggest you take that up with balug.org(a)jperla.com, as balug.org has no >> control over what balug.org(a)jperla.com does with their email). >> >> >> >> Subscribe/unsubscribe is completely self-service on BALUG lists. >> >> >> >> So, you should be able to fully take care of that yourself. >> >> >> >> See the reference information (links, etc.) provided further below. >> >> >> >> Note also: >> o every list mailing contains URL(s) towards end of message body >> to manage subscription(s) - including unsubscribing o in addition to the >> above, every list posting sent also contains >> unsubscribe information within the message headers (notably the >> "List-Unsubscribe: " header contains information on how to >> unsubscribe both via email and via URL) >> >> >> >> If that doesn't work for you, please provide: o The error diagnostic(s) >> (if any) you're getting when you attempt to >> unsubscribe. >> o What steps you're following that result in the above (never tell me/us >> nor anyone your list password, but otherwise provide relevant details) o >> FULL EMAIL HEADERS of an example message that you're getting or still >> getting that you're trying to unsubscribe from. >> >> >> >> Hopefully you should be able to self-unsubscribe, but if that fails, >> please let us know, as noted above. >> >> >> >> Thanks for your attention to this and your cooperation, >> >> >> >> The busy BALUG / list administrator folks. >> >> >> >> See also / references / excerpts / hints: >> https://www.balug.org/#Lists >> https://lists.balug.org/cgi-bin/mailman/listinfo/balug-announce >> https://lists.balug.org/cgi-bin/mailman/listinfo/balug-talk >> https://lists.balug.org/cgi-bin/mailman/listinfo/balug-admin >> https://lists.balug.org/cgi-bin/mailman/listinfo/balug-test >> https://lists.balug.org/cgi-bin/mailman/listinfo >> >> >> >> references/excerpts (redacted): >> >> >>> >>> >>> From: "Joseph Perla" <joseph(a)jperla.com> Subject: Re: lists.balug.org >>> mailing list memberships reminder Date: Fri, 01 May 2020 06:14:36 +0000 >>> >>> >>> >>> Please remove balug.org(a)jperla.com I cannot. >>> >>> >> >> >> >> > >> >> >>> >>> >>> On Thu, Apr 30 2020 at 10:00 PM, < mailman-owner(a)lists.balug.org > wrote: >>> >>> >> >> >> >> > >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> This is a reminder, sent out once a month, about your lists.balug.org >>>> mailing list memberships. It includes your subscription info and how to >>>> use it to change it or unsubscribe from a list. >>>> >>>> >>> >>> >> >> >> >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> You can visit the URLs to change your membership status or configuration, >>>> including unsubscribing, setting digest-style delivery or disabling >>>> delivery altogether (e.g., for a vacation), and so on. >>>> >>>> >>> >>> >> >> >> >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> In addition to the URL interfaces, you can also use email to make such >>>> changes. For more info, send a message to the '-request' address of the >>>> list (for example, mailman-request(a)lists.balug.org) containing just the >>>> word 'help' in the message body, and an email message will be sent to you >>>> with instructions. >>>> >>>> >>> >>> >> >> >> >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> If you have questions, problems, comments, etc, send them to >>>> mailman-owner(a)lists.balug.org. Thanks! >>>> >>>> >>> >>> >> >> >> >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> Passwords for balug.org(a)jperla.com: >>>> >>>> >>> >>> >> >> >> >> >> >> >> >> >> >> >> >>> >>>> >>>> >>>> List Password // URL >>>> ---- -------- balug-announce(a)lists.balug.org [REDACTED] >>>> https://lists.balug.org/cgi-bin/mailman/options/balug-announce/balug.org%40…

1 0

test DNS that returns SERVFAIL? ... ! :-)
by Michael Paoli 19 Apr '20

19 Apr '20

test DNS that returns SERVFAIL? ... ! :-) For when one may want a target DNS domain to test against that will generally return SERVFAIL ... I didn't super easily find one out there, so ... (at least for now) created one. ... on the master (IPs for the MNAME in SOA are on this host) $ hostname balug-sf-lug-v2.balug.org $ dig +noall +answer +multiline balug.org. SOA | awk '{if(NR==1)print $5;}' ns0.balug.org. $ dig +short ns0.balug.org. A ns0.balug.org. AAAA 96.86.170.229 2001:470:1f05:19e::2 $ ip a s | egrep 'inet.*(96\.86\.170\.229|2001:470:1f05:19e::2)' inet 96.86.170.229/29 brd 96.86.170.231 scope global eth0 inet6 2001:470:1f05:19e::2/64 scope global $ So, add RR: # nsupdate -l << \. update add servfail.balug.org. 300 IN NS servfail.balug.org. send . # Ah yes, I'm quite starting to get used to and like/prefer dynamic DNS update. Significantly more goof-resistant, and most of the time I don't even have to think about the zone serial number. Which reminds me, I do still want to add some version "control" (tracking) ... driven via cron, so I'll at least have periodic snapshots of changes (since no longer using ye olde manual method & manual version control). For more recent changes, and fine-grained history of changes, logs cover that quite well. But for the longer historical record ... wee bit 'o gap presently to fill on that. Automation is generally a good thing. :-) And with no other (explicit - some DNSSEC automagic bits may be added but we'll ignore those presently) RRs for that domain. So, we then typically get, e.g.: $ dig +noall +answer +comments servfail.balug.org. ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26642 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 $ Note that not all flavors of query against servfail.balug.org. will return SERVFAIL: $ dig +noall +norecurse +answer +authority +comments @ns0.balug.org. servfail.balug.org. ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20976 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; AUTHORITY SECTION: servfail.balug.org. 300 IN NS servfail.balug.org. $ But in general, trying to do a recursive query on the domain for most RR types, will give SERVFAIL. (Useful for testing, ...)

1 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

BALUG-Talk