- Roundtable - muug.ca

Re: [RndTbl] Anyone have any Captive Portal set-up experience?
by Bradford C. Vokey 21 Sep '16

21 Sep '16

From my nephew... Anyone interested in setting up a linux box for this hotel for a fee? -------- Forwarded Message -------- Subject: RE: Roundtable Digest, Vol 141, Issue 6 Date: Wed, 14 Sep 2016 15:36:16 -0500 From: Tech <tech(a)ebytesonline.com> To: 'Bradford C. Vokey' <brad(a)fsi.ca> We totally understand that the hardware we have listed is highly below a “proper” infrastructure. Our 1^st goal was to get internet divided, corporate, and public for security reasons. We then were told to try to, as economically as possible, to replace OLD devices with new ones to give as much performance to the current setup they had. We were able to add an additional router / converted to Access point, for load balancing, for only the 2^nd floor. Understanding the limits, and not being able to change that, the linux box solution if we could implement it in the current network, would be great. Is there a linux box, that we could buy from anyone willing to create it, (we could supply the computer – if a spec list was given // understanding it would need 3 nic cards already mentioned) ? *We would need a quote for your programming time, some minor instruction to add it to our network, and what we would have to change – router settings, etc*. Also to have a friendly GUI (if possible) to only change the wifi password once a month. This would be done by the hotel manager whom does not have any computer experience. ---------------------------------------------------------------------- Message: 1 Date: Mon, 12 Sep 2016 15:09:21 -0500 From: Adam Thompson<athompso(a)athompso.net> <mailto:athompso@athompso.net> To: Continuation of Round Table discussion<roundtable(a)muug.mb.ca> <mailto:roundtable@muug.mb.ca>, Robert Keizer<robert(a)keizer.ca> <mailto:robert@keizer.ca> Subject: Re: [RndTbl] Anyone have any Captive Portal set-up experience? Message-ID:<F20215F7-211C-4AA2-AF09-EA742B3E66E8(a)athompso.net> <mailto:F20215F7-211C-4AA2-AF09-EA742B3E66E8@athompso.net> Content-Type: text/plain; charset="utf-8" Unfortunately, that's a dog's breakfast of consumer-grade hardware that should never have been installed in a commercial setting in the first place. Shaw's offering is actually a pretty good price, surprisingly. He could buy a pfSense/Netgate SG-2440 to replace the (p.o.s., IMHO) RV320 and get captive portal functionality built in. I would replace all the wireless with Ubiquity. But obviously the hotel doesn't want to spend any actual money on this, so... Grab an old PC, put 3 NICs in it, install pfSense Community Edition, and off to the races. -Adam On September 12, 2016 9:46:11 AM CDT, Robert Keizer<robert(a)keizer.ca> <mailto:robert@keizer.ca> wrote: >I've used simple dd-wrt captive portal and it worked. > >I'm fairly certain the ubiquity has a similar feature that I've touched >with as well. > >There are a few companies such as cloudessa that provide 'cloud captive >portal services'.. that might be what you're looking for. I can't vouch >for them at all though; > > * >http://cloudessa.com/products/cloudessa-aaa-and-captive-portal-cloud-servic… > > > > >On 2016-09-12 8:45 AM, Bradford C. Vokey wrote: >> >> My nephew needs a recommendation for a captive portal service for a >> hotel. >> >> Has anybody ever set one of these up? Advice? >> >> Here are his particulars: >> >>> Hello to all who read this, >>> My name is Andrew Popowich, and I was encouraged to send an email to >>> this group in possibly getting some help. A hotel where I live, is >>> needing a Guest Splash page to appear whenever someone connects to >>> the wifi in the hotel. (Every time it is connected ? I will explain) >>> The internet is through Shaw, getting 150 open internet if they >don?t >>> have it already by now. We installed a Cisco RV320 (non WebFi unit) >>> to split the internet into 2 networks. (192.168.130.1 ? corporate // >>> no wifi) and (192.168.123.1 ? Guest wifi // no wired) We added a TP >>> LINK 750 as the router for Wifi communication, connected to a >switch, >>> and then from the switch, 2 X TP LINK Archer C7 1750 as access >>> points(dhcp disabled), and an enGenius 2.4 Ghz outdoor Access point >>> (dhcp disabled) to spread more coverage. My question is this : What >>> can I add to economically get a splash page to show every time a >>> guest connects to the public wifi, including, when they leave the >>> hotel, and come back, they have to re-sign in to that splash page to >>> continue using the internet in their rooms ? I have access to >>> computer parts and etc, if a computer can be added in the line to do >>> this task, or will that idea even work ? Let me know if more >>> information is needed. I appreciate any help I can get on this, >>> Andrew Popowich p.s. I spoke with Shaw Business and they stated >since >>> the hotel has 53 rooms, the cost for Shaw?s Managed Wifi service, is >>> $700 a month. And they would not be able to use ANY of the equipment >>> that we have added in the past 4 months, total of that being around >>> $2000.00 for equipment, and labor. >> === Bradford C. Vokey Treasurer Manitoba Unix User Group === >> >> _______________________________________________ >> Roundtable mailing list >>Roundtable(a)muug.mb.ca <mailto:Roundtable@muug.mb.ca> >>http://www.muug.mb.ca/mailman/listinfo/roundtable > > > >------------------------------------------------------------------------ > >_______________________________________________ >Roundtable mailing list >Roundtable(a)muug.mb.ca <mailto:Roundtable@muug.mb.ca> >http://www.muug.mb.ca/mailman/listinfo/roundtable

1 0

Anyone have any Captive Portal set-up experience?
by Bradford C. Vokey 13 Sep '16

13 Sep '16

My nephew needs a recommendation for a captive portal service for a hotel. Has anybody ever set one of these up? Advice? Here are his particulars: > Hello to all who read this, > My name is Andrew Popowich, and I was encouraged to send an email to > this group in possibly getting some help. A hotel where I live, is > needing a Guest Splash page to appear whenever someone connects to the > wifi in the hotel. (Every time it is connected – I will explain) The > internet is through Shaw, getting 150 open internet if they don’t have > it already by now. We installed a Cisco RV320 (non WebFi unit) to > split the internet into 2 networks. (192.168.130.1 – corporate // no > wifi) and (192.168.123.1 – Guest wifi // no wired) We added a TP LINK > 750 as the router for Wifi communication, connected to a switch, and > then from the switch, 2 X TP LINK Archer C7 1750 as access points(dhcp > disabled), and an enGenius 2.4 Ghz outdoor Access point (dhcp > disabled) to spread more coverage. My question is this : What can I > add to economically get a splash page to show every time a guest > connects to the public wifi, including, when they leave the hotel, and > come back, they have to re-sign in to that splash page to continue > using the internet in their rooms ? I have access to computer parts > and etc, if a computer can be added in the line to do this task, or > will that idea even work ? Let me know if more information is needed. > I appreciate any help I can get on this, Andrew Popowich p.s. I spoke > with Shaw Business and they stated since the hotel has 53 rooms, the > cost for Shaw’s Managed Wifi service, is $700 a month. And they would > not be able to use ANY of the equipment that we have added in the past > 4 months, total of that being around $2000.00 for equipment, and labor. === Bradford C. Vokey Treasurer Manitoba Unix User Group ===

5 4

Another workshop.
by Sean Cody 12 Sep '16

12 Sep '16

Given the confusingly fantastic response to the let's encrypt workshop, I am willing to do 1 or 2 more of the 30-45 minute workshops but am not in tune enough know what topics are of interest. One person thus far is very interested in OpenBSD/PF training (while I'm happy to that's well... a lot of work and a weekend/half-day kind of topic) and the evergreen interest in networking (same deal as previous one... more of a half-day kind of thing). If there is significant interest we can go that route later in the year and would require another person to help me with material. The other caveat is that it will be a Friday, as I have child-rearing duties on Tuesdays until the end of the year. Send me ideas __(OFF LIST)__ of what you are interested in hearing from me on in within the IT/sysadmin/infosec space and we'll see what I can accommodate. One easy one is setting up a pi-hole (https://pi-hole.net/, which is a fun 10 minute activity that is also pretty darned neat/useful). Again what is the community interested in... cross-posting to MUUG. Let me know... (off-list... was I clear there? :P) -- Sean P.S. A VERY cool buddy is ready to schedule a malware analysis workshop and his materials so far look pretty awesome. Let me know (off list) to register interest.

2 1

muug.ca down?
by Theodore Baschak 09 Sep '16

09 Sep '16

Unable to ping/http/etc to v4 and v6 addresses on teh local hotness mirror: muug.ca Theodore Baschak - AS395089 - Hextet Systems https://ciscodude.net/ - https://hextet.systems/ http://mbix.ca/

6 7

MUUG Meeting, September 13, 7:30pm -- Midnight Commander
by Gilbert Detillieux 06 Sep '16

06 Sep '16

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, September 13. The meeting topic for this month is as follows: Midnight Commander Brian Lowe will demonstrate and discuss Midnight Commander. It is a text-mode console-based file manager that combines a pair of easy to navigate file panels with a command line. Together they provide a powerful and versatile environment for viewing, moving, and copying files and directories. RTFM: cal This month, Brad Vokey will demonstrate cal, a simple calendar display program for the command line. Learn some neat tricks about this useful tool. Door Prizes On top of whatever else is on offer this month, we'll have a copy of the O'Reilly book "Advanced Perl Programming" as a door prize. Come out and have a look at it and maybe get your own copy for free! The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ****************************************************************** Please note our *NEW* meeting location for this month: *Room 1M28* (1st floor) Manitoba Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ****************************************************************** For more information about MUUG, and its monthly meetings, check out their web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.mb.ca> c/o Gilbert E. Detillieux Web: http://www.muug.mb.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 0

Re: [RndTbl] how to share/move sensitive data
by Robert Keizer 26 Aug '16

26 Aug '16

Tar it up and compress it. Scp it. On Aug 24, 2016 17:19, "Trevor Cordes" <trevor(a)tecnopolis.ca> wrote: On 2016-08-24 Micah Garlich-Miller wrote: > > - It's about 400 GB, but I dont know the data structure as I > haven't seen it yet. ie, I'm not sure if its naturally chunked. > - It's of a sensitivity that it needs to be crypted before being > sent. > - Sending on a crypted external harddrive is not acceptable in this > situation. I find a very easy, secure way to give people large files from my linux box is via apache. If you already have a linux box you run apache on then this is a breeze. If you don't, you need apache (or any other WS) and have it serve up port 80/443 to the external internet (either directly, through DMZ, or port forwarding). Since you want encrypted, SSL is a must, even if you put in a self-signed ssl cert (just send the fingerprint to the other user to verify in that case). What I do is I have a directory on my web server that has directory indexing turned off in apache. Then I put a directory in it that is some uberlong (like 64 chars) random alphanum string like pYwRYezIOz6EIAi4HijyF2hVe70L2V2hF3CR6UFMbvjCBgaI5XVsvDeiqzTJa307 Then in that directory have directory indexing turned on (you can use .htaccess for this). Put your big files in there. Then email or otherwise get the link to your end user: https://foo.com/hidden/pYwRYezIOz6EIAi4HijyF2hVe70L2V 2hF3CR6UFMbvjCBgaI5XVsvDeiqzTJa307/ Voila, secure, encrypted access to the files. For someone else on the net to gain access, they'd have to intercept your email/backchannel with the link, or guess the random string, which is basically impossible for this 62**64 string (or have local shell access to your server, though creative use of apache group permissions can mitigate this). If you wanted to you could even add .htpassword basic auth to the above. (Also, make sure you don't provide an un-SSL port 80 http:// link to it!) Test that your no-dirindex is indeed working by going to: https://foo.com/hidden/ which should give you an error saying indexing denied. As for breaking up the files, you could use split to break them into chunks, which might be prudent, though many http downloaders/browsers will resume a broken connection so even a single 400G file might be ok (try using wget with resume options for it). To split you'd do: split -b 1000000000 infile dl-me for 1GB-ish chunks. On the other side it's just: cat dl-me* > original-file Even Windbloze might be able to do it, maybe with type? type dl-me*.* > original-file ??? not sure on that one, maybe powershell gives us better options now. Final note, this transfer will saturate your modem's upload connection, so you might want to schedule it for a weekend or something. Ratelimiting with apache is kind of a pain, but the receiving end could use wget's rate-limiting options (aim for 75% your nominal u/l bandwidth maybe). Or you can setup qos / ratelimiting (using tc and iptables) for egress web traffic on your linux web server or linux router you control, but that gets complicated if you've never done it before. Final final note, you may tick off your ISP and/or exceed your monthly transfer limits (uploads are usually quite limited vs downloads). 400GB is a huge amount to upload for normal home/SMB shaw/mts accounts. (You could bzip (or better) the file before starting the whole process to make it smaller, if both sides have enough disk space for 2 copies.) _______________________________________________ Roundtable mailing list Roundtable(a)muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable

4 4

Re: [RndTbl] WTB: dvd-r media (MUUG)
by Hartmut W Sager 25 Aug '16

25 Aug '16

OK, thanks! I'll try to supply. As for including MUUG RoundTable in the reply, I had purposely omitted it because I deemed my reply to be "private commercial". However, as you requested, I'm now continuing in public. Is that OK with the rest of you MUUG-ers here? Hartmut W Sager - Tel +1-204-339-8331 On 24 August 2016 at 17:36, Trevor Cordes <trevor(a)tecnopolis.ca> wrote: > On 2016-08-24 Hartmut W Sager wrote: > > Trevor, I may have quite a lot of these, and they are pretty well all > > name brand, mostly Verbatim. I'll look around. At one time, I > > thought I'd need lots of these, but things have changed. > > > > If you get sufficient quantities elsewhere, do tell me so that I'll > > stop looking around. > > I still need hundreds a year so I'm game for any you find whenever you > find them. I'll never not need them :-) There's no dire rush, as I > maintain sufficient stock. > > Whenever they pop up is fine with me! Thanks a ton, I really > appreciate it. (P.S. If you reply, keep the MUUG in the subject so I > see it right away.) >

1 0

how to share/move sensitive data
by Micah Garlich-Miller 24 Aug '16

24 Aug '16

Hi all, I seem to recall that there was someone in the group that needed to share/move large amounts of sensitive data with other groups on the interwebs. (original film segments IIRC). I'm wondering what was the general strategy? and what were the tools used? What I do know so far: - It's about 400 GB, but I dont know the data structure as I haven't seen it yet. ie, I'm not sure if its naturally chunked. - It's of a sensitivity that it needs to be crypted before being sent. - Sending on a crypted external harddrive is not acceptable in this situation. What I don't know yet that I think may be relevent: - What the target system OS is. - What the degree of technical sophistication at the client end is. I'm hoping that we can get credentials at the target address, but we could make it available via sftp (for example) on our end if necessary. Sorry for the open endedness of the question and lack of details, but the situation is also urgent and I'm expected to be working on it today. I'm grateful for any feedback. Micah -- Micah Garlich-Miller <micahgarlichmiller(a)gmail.com>

2 1

WTB: dvd-r media
by Trevor Cordes 24 Aug '16

24 Aug '16

Still have some old DVD-R blank discs in spindle packages lying around? Maybe some you got at MUUG meetings in the past? I want to buy those blanks! I'll give you $10 cash for full 50-pc spindles ($5 for 25, $20 for 100) for *namebrand* (Fuji, HP, Verbatim, Sony, etc) spindles. If they are noname (ie Ridata, or any Tawain-Inc name) I'll give you 20% less. Must be DVD-R ("dash R") not DVD+R, and not RW's. If you do have a lot of + or RW you want to get rid of, I may be interested also, but at a lower price as they aren't really what I'm looking for. (I need them for my backup system.) Just bring them to the next muug meeting and look for Trevor.

1 0

Serial to IP Gateway?
by Wyatt Zacharias 20 Aug '16

20 Aug '16

So currently at Bluecross we have a pool of modems connected to a cisco 2600. What happens is when a connection is received on the modem line, the cisco router initiates an IP connection to an internal server and forwards the data from the serial line to the server. We're looking to move that Serial to IP functionality over to a Linux server so we can retire the EOL routers. Does anyone know of a way to do this? Also if anyone has any good resources for modem connectivity with linux they can forward me I'd appreciate it. -- Wyatt Zacharias

9 13