April 2020 - Roundtable

DNS linters / consistency checkers?
by Adam Thompson 06 Apr '20

06 Apr '20

Between roughly 10 and 20 years ago there was a bevy, nearly a plethora, of tools to scan your various BIND zone files and check that everything was in order, no illegal names existed, PTRs matched up with As, etc., etc. Today I can only find two, one is dead (dlint) and doesn't check zone files only live DNS, and the other (validns) doesn't do PTR<-->A checks which is what I really wanted. Where did all the other zone consistency-checking tools go? Anyone have any pointers / links? Thanks, -Adam

2 1

Gmail spam filtering super-aggressive lately
by Hartmut W Sager 03 Apr '20

03 Apr '20

I've had a lot of trouble in the last few months with Gmail's spam filtering having become super-aggressive, but tonight we have a live case worthy of analysis. In the thread "Opinions on Fedora Server" initiated by Alberto Abrao <alberto(a)abrao.net>, *both* of Alberto's postings went to my Gmail spam, while Trevor Cordes's posting came through fine. A detail on my use of Gmail: I use it as infrastructure for my own e-mail addresses @marityme.net. Incoming e-mails to @marityme.net are forwarded into my Gmail address from somewhere else, and outgoing e-mails from @ marityme.net are sent from Gmail where I set up these addresses as valid "from" addresses. Yeah, I suspect the trouble is somewhere in Gmail's new expectations re TXT SPF, DKIM, DomainKeys, and such. Hartmut W Sager - Tel +1-204-339-8331

5 24

Main firewall / router for public facing subnet
by Alberto Abrao 02 Apr '20

02 Apr '20

Hi folks, hope everybody is safe and sound. This may be a basic question for most of you, but at any rate, I would rather ask here as I like the way MUUG members approach things. I have a Shaw connection with a few Static IPs. As of now the modem is bridged, and each machine grabs its own IP and goes to town, be it a static for servers or a dynamic for my local network router. On each of these, I set up firewall and whatever else is needed. I have the feeling that's redundant. That, and having a main router in front of them would help me set up things such as QoS and a central firewall. I am used to doing this for simple NAT duties, but this time I would have a router managing public facing IP addresses. Any tips on what should I look for to get started? Thanks! -- Alberto Abrao 204-202-1778 204-558-6886 www.abrao.net

5 11