VPN options
by Keith Lofstrom
I am planning on running a Virtual Private Network from my Fedora
firewall out to a UML virtual colo (running RH9) at another site.
That site will be the place I present services to the world;
httpd, ssh, sftp, smtp. This is to comply with the "no servers"
and dynamic ip restrictions on my Comcast connection to the net;
if my firewall always drives an outbound connection to the
colocation site, I am not worried about changes of ip address,
and I am not opening any inbound ports.
There are a number of options for the VPN - the most attractive
are cipe ( http://sites.inka.de/sites/bigred/devel/cipe.html )
and FreeSwan ( http://www.freeswan.org/ ), though I am told that
one can do all this through an ssh tunnel. I would rather have
simple and secure than super-duper; I have plenty of bandwidth,
and will send outbound http and smtp from the firewall, so the
main bandwidth user will be incoming spam/b/b/b/b mail.
Anyone have some experiences to share about setting up VPN? Is
there anything about either cipe or FreeSwan that is likely to
break with FC1 or FC2?
Keith
--
Keith Lofstrom keithl(a)ieee.org Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs
1 month
copy and paste from mouse when window full of icons?
by Gianluca Cecchi
Hello,
while using "Files", the explorer application (version 3.28.1-stable) in my
Fedora 28 system, I have sometimes this kind of problem:
- I normally use what should be "list view" with list of file names
- if I have to paste a file/dir or group of copied files/dirs into a
location where the page listed is full (no blank space inside it), it seems
that I cannot paste: the right mouse click doesn't offer the paste option.
In these cases I temporarily switch to what should be "icon view" and in
this case I always have some blank space because of how items are displayed.
I select a blank space and then right-mouse --> paste
Then I come back to list view...
Is this a sort of bug or what?
Based on this link
https://help.gnome.org/users/gnome-help/stable/files-copy.html.en
I should have "paste" option in menu, but it doesn't happen, see screenshot:
https://drive.google.com/file/d/1X1ZPYPJ5B8IRDA6T_LL5AfbCD2YFAy6_/view?us...
NOTE: keyboard shortcut ctrl+c and ctrl+v works, though
Thanks in advance.
Gianluca
3 months, 3 weeks
Modem/Router/Router -
by Bob Goodwin
.
I have a new problem with my internet connection which a few others on
this list may have encountered. They [Viasat] replaced the modem and
antenna in upgrading the system. The new modem has an integral router
having none of the feature I need to manage data usage, I've already
used more than 80% of my allowance in the first week. I normally use a
router with DD-WRT installed providing the features I need, showing the
amount of data used and which devices used it.
The problem is feeding their router data through my DD-WRT router. An
ethernet port is provided which they claim work but provide no
information for doing so. They sent a "technician" a few days ago and he
knew nothing more about it than I do except he assured me it should work
but did not know how to set up both routers, tried what he could for an
hour and said if you can't make it work and call for help, tell them to
send someone else ...
Yesterday I tried with my router set up on a different subnet and
seemingly working until in one of many equipment reboots their router
assigned my nfs server a new address, of course all I knew was it would
not mount until I connected a display and keyboard this morning, Now I
made theaddresspermanentusing network manager. Before this the modems
provided an ethernet port to which a wifi router was connected and
connecting to that was straight forward.
Certainly I am not the first one to see this problem, feeding data from
the ISP router to another one, and my hope is that someone can point me
in the right direction if not offer a solution. Google searches have not
led to a solution.
Bob
--
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
box83 FEDORA-29/64bit LINUX XFCE Fastmail POP3
7 months
Updated info about disabling tracker related processes?
by Gianluca Cecchi
Hello,
I have recently begun to use again gnome session and I have reinstalled
nautilus.
I see that nautilus depends on tracker and so the reinstall put in tracker
and its things
And this morning in my F28 system with SSD disk (I don't imagine on a
normal sata based environment) I had to kill tracker-extract and
tacker-miner processes because they hogged my cpu for several minutes..
Searching with google I found different info about disabling (or at least
calm down) tracker, but they all seem not updated, in the sense that
several commands/services are not present in my f28 environment.
Any pointer about configuring and/or disabling it?
Thanks in advance,
Gianluca
7 months, 1 week
update to F30 seems to have failed
by Neal Becker
I just attempted update f29->f30 using
sudo dnf system-upgrade download --refresh --releasever=30
After reboot
sudo dnf system-upgrade reboot
The system got to
running transaction
But then seemed to hang. I waited about 15 minutes. The laptop fan was not
running, indicating it was not using cpu. Alt-F2 etc would not switch
consoles, so I could not get a bash shell to check. The only thing that
responded is, on any keypress, it would repaint the screen with the list of
packages to be installed etc. So it wasn't dead. But I don't think it was
making any progress either. This is a fast machine with SSD, so I wouldn't
expect to wait too long to see something happen.
7 months, 1 week
Eclipse and Fedora 30 upgrade issue
by Matthew Saltzman
Is there a workaround for the issue where the Fedora 30 upgrade decides
that all of Eclipse is not compatible with Fedora 30 and removes the
complete collection of Eclipse packages?
If it's best to wait until the issue is resolved before upgrading,
will GNOME Software automatically update my downloaded upgrade
packages? If not, how to make sure that update happens before the
install?
Thanks.
--
Matthew Saltzman
School of Mathematical and Statistical Sciences
Clemson University
mjs AT clemson DOT edu
7 months, 2 weeks
Freeradius bootstrap overwrite my certs
by Rafael Leiva-Ochoa
Hi Everyone,
I recently upgraded to Freeradius 3.0.19-1 and I noticed after I
restarted the service I was getting the following errors:
Apr 29 22:01:29 freeradius systemd[1]: Starting FreeRADIUS high performance
RADIUS server....
Apr 29 22:01:30 freeradius sh[1970]: make: *** No rule to make target
'server.cnf', needed by 'passwords.mk'. Stop.
Apr 29 22:01:30 freeradius systemd[1]: radiusd.service: Control process
exited, code=exited status=2
Apr 29 22:01:30 freeradius systemd[1]: radiusd.service: Failed with result
'exit-code'.
Apr 29 22:01:30 freeradius systemd[1]: Failed to start FreeRADIUS high
performance RADIUS server..
Apr 29 22:01:30 freeradius audit[1]: SERVICE_START pid=1 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='unit=radiusd comm="systemd
" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
I got it from Fedora 28 Repo: freeradius-3.0.19-1.fc28.armv7hl. After a lot
of digging, I found that a "bootstrap" script on the /etc/raddb/certs/
directory was being called on the /usr/lib/systemd/system/radiusd.service.
This script overwrote my current certificate files. I had to comment out
the ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap to fix the problem. I
am not sure if anyone else encountered this problem before.
Here is what I have on my /usr/lib/systemd/system/radiusd.service script
for systemd
[Unit]
Description=FreeRADIUS high performance RADIUS server.
After=syslog.target network-online.target ipa.service dirsrv.target
krb5kdc.service
[Service]
Type=forking
PIDFile=/var/run/radiusd/radiusd.pid
ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd
#ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap
ExecStartPre=/bin/chgrp -R radiusd /etc/raddb/certs/
ExecStartPre=/usr/sbin/radiusd -C
ExecStart=/usr/sbin/radiusd -d /etc/raddb
ExecReload=/usr/sbin/radiusd -C
ExecReload=/bin/kill -HUP $MAINPID
[Install]
WantedBy=multi-user.target
Is this being addressed on future releases?
Thanks,
Rafael
7 months, 2 weeks
