- Roundtable - muug.ca

Fwd: Re: How to set up and use static IP from Rogers/Shaw
by Hartmut W Sager 14 Feb '24

14 Feb '24

Vijay, I'm forwarding this into MUUG-RoundTable, since it's obviously part of the discussion. ----- Original message ----- From: Vijay Sankar <vsankar(a)foretell.ca> To: hwsager(a)marityme.net Subject: Re: [RndTbl] How to set up and use static IP from Rogers/Shaw Date: Tuesday, February 13, 2024 18:59 Yes, you’re right. It’s the Hitron one. Vijay Sankar ForeTell Technologies Limited vsankar(a)foretell.ca > On Feb 13, 2024, at 2:50 PM, Hartmut W Sager <hwsager(a)marityme.net> wrote: > > I presume your Shaw business modem is a Hitron, possibly the Hitron CODA-5810. That one, just like the former Shaw residential Hitron CGNM-2250, also allows selective IP pass-thru on a per port basis. I wish those dumb residential XB6/XB7/XB8 modems would do that. > > Hartmut > > On Tue 13 Feb 2024 at 13:27:13 -06:00, Vijay Sankar <vsankar(a)foretell.ca> wrote: >> Sure thing. My Shaw business modem is setup the same way Adam mentioned. It also allows me to use wifi and Ethernet NAT’ed through the 192.x interface and just port 2 bridged through to static IP. As you said that does require two firewalls in my case (could have done it with one of course). >> >> Sent from my iPhone >> >>> On Feb 13, 2024, at 13:20, Kevin McGregor <kevin.a.mcgregor(a)gmail.com> wrote: >>> >>> Thank you, Vijay! I'll try to get it working without any additional hardware first, and failing that I'll let you know what I need. >>> >>> On Tue, Feb 13, 2024 at 10:27 AM Vijay Sankar <vsankar(a)foretell.ca> wrote: >>>> Hi Kevin, >>>> >>>> Most of the systems I can give away are older than 5 years. They do have intel Xeon or i7, hot swappable drives, 2 to 6 gbics, 8 to 32 GB etc.. Also I have a 12 port microtik router that may be useful in your situation (I used that to bond a bunch of services from Shaw a few years ago) >>>> >>>> Please let me know if any of this is of interest. >>>> >>>> Thanks, >>>> >>>> Vijay >>>> >>>> Vijay Sankar >>>> ForeTell Technologies Limited >>>> vsankar(a)foretell.ca >>>> >>>> >>>>> On Feb 13, 2024, at 8:32 AM, Kevin McGregor <kevin.a.mcgregor(a)gmail.com> wrote: >>>>> >>>>> I considered bridge mode, but I'm trying to do this without obtaining additional hardware (i.e. a firewall box of some kind). Unless some kind soul out there has a suitable spare box to donate to a non-profit? >>>>> >>>>> On Mon, Feb 12, 2024 at 10:18 PM Adam Thompson <athompso(a)athompso.net> wrote: >>>>>> With my Shaw account, I got them to put the modem into Bridge mode, then I treated the Ethernet 1 port as though it was a port on their router, i.e. I set my firewall’s IP to the assigned static IP.__ >>>>>> If you want to do it with the Shaw modem acting as a router, I have no idea, sorry.__ >>>>>> -Adam__ >>>>>> __ __ >>>>>> *From:* Roundtable <roundtable-bounces(a)muug.ca> *On Behalf Of *Kevin McGregor >>>>>> *Sent:* Monday, February 12, 2024 9:34 PM >>>>>> *To:* Continuation of Round Table discussion <roundtable(a)muug.ca> >>>>>> *Subject:* [RndTbl] How to set up and use static IP from Rogers/Shaw__ >>>>>> __ __ >>>>>> I'm helping out someone with a Shaw Business account, and they have a static IP they'd like to set up and use for one specific server.__ >>>>>> __ __ >>>>>> So generally, how do you set this up? Shaw forwards traffic with that static IP (and the dynamic one, too) to the router, and then... Enable the DMZ feature of the router and set the IP address of the server to the static one from Shaw and it just works? Or is there some other work to do?__ >>>>>> __ __ >>>>>> Thanks for any help,__ >>>>>> Kevin__ >>>>>> __ __ >>>>>> _______________________________________________ >>>>>> Roundtable mailing list >>>>>> Roundtable(a)muug.ca >>>>>> https://muug.ca/mailman/listinfo/roundtable >>>>> _______________________________________________ >>>>> Roundtable mailing list >>>>> Roundtable(a)muug.ca >>>>> https://muug.ca/mailman/listinfo/roundtable >>>> _______________________________________________ >>>> Roundtable mailing list >>>> Roundtable(a)muug.ca >>>> https://muug.ca/mailman/listinfo/roundtable >>> _______________________________________________ >>> Roundtable mailing list >>> Roundtable(a)muug.ca >>> https://muug.ca/mailman/listinfo/roundtable >> _______________________________________________ >> Roundtable mailing list >> Roundtable(a)muug.ca >> https://muug.ca/mailman/listinfo/roundtable >> > > _______________________________________________ > Roundtable mailing list > Roundtable(a)muug.ca > https://muug.ca/mailman/listinfo/roundtable

1 0

Bridging the "Giga" Bell Modem for Fibre
by Alberto Abrao 14 Feb '24

14 Feb '24

Hello everyome, following up on our last meeting's conversation about the Bell "Giga Hub" modem, I would like to ask if someone knows a way to properly set it to "bridge mode". The modem web interface provides a "Advanced DMZ" mode. There, one is able to provide a MAC Address of an interface who'd be receive external IP as the leased address after a DHCP request. The problem with that is, if you reboot the machine, although subsequent DHCP requests will successfully provide the external IP, Internet connectivity gets extremely choppy. The only way to fix it is to reboot the modem. There are many guides on how to do this for Bell, but that refers to Bell itself, not BellMTS. Others also point to settings fotr Bell Alliant (Maritimes). I could not find anything specific for Bell MTS. These settings are often a PPPoE incantation of sorts, username/password and potentially a specific VLAN. Folks in Ontario had luck with 35, Maritimes use 15 or something along those lines, others said you can just use your Bell ID and password. The patterns provided do not make any sense for MTS, as far as I could tell. Calling support would be useless - I tried - seeing that they're all based in Ontario now. Would anyone here know, or know someone who would, the incantation to make this work? -- Kind regards, Alberto Abrao

3 3

How to set up and use static IP from Rogers/Shaw
by Kevin McGregor 14 Feb '24

14 Feb '24

I'm helping out someone with a Shaw Business account, and they have a static IP they'd like to set up and use for one specific server. So generally, how do you set this up? Shaw forwards traffic with that static IP (and the dynamic one, too) to the router, and then... Enable the DMZ feature of the router and set the IP address of the server to the static one from Shaw and it just works? Or is there some other work to do? Thanks for any help, Kevin

2 3

Re: [RndTbl] How to set up and use static IP from Rogers/Shaw
by Vijay Sankar 13 Feb '24

13 Feb '24

3 3

DHCP lease renewal on Debian/Ubuntu
by Kevin McGregor 13 Feb '24

13 Feb '24

Is there a way to force the DHCP client on Debian/Ubuntu to renew its lease ahead of time? For example, if the lease duration is a week, but you want the client to refresh the list of DNS servers immediately. Will "netplan apply" do it? Or "systemctl restart systemd-networkd"? That seems extreme; I don't want a network/service interruption -- things like IP address/netmask/gateway won't change in the case I'm thinking of but other configuration details may need updating. Mind you, I have little idea what all systemd-networkd is responsible for. In Windows, for example, you'd run "ipconfig /renew". Is there an equivalent for Debian/Ubuntu?

2 2

MUUG Meeting, Tonight, Feb 6, 7:30pm (Date Change, In-person/Hybrid Meeting) -- Firejail
by Gilbert Detillieux 06 Feb '24

06 Feb '24

A reminder that the MUUG meeting will be this evening, both in person and online... The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting IN PERSON, on Tuesday, February 6th, at 7:30pm. Yes, that's a week early, i.e. the FIRST Tuesday of the month... Firejail Want to add an extra layer of protection when using complex or untrusted programs, like browsers or Steam? Short on time and fed up with overbearing whole-system solutions like SELinux or resource-hogging virtualization? Well, protect yourself the easy and painless way with Firejail! In this month's presentation, Trevor Cordes will outline why you want to use Linux Firejail, how you use it, and why it may be better for your use case than other protection solutions. Cool demos may ensue. Where to find the Meeting: Fortress Software Inc., 350 Keewatin St -- Unit #2 We have a new in-person meeting location now! Brad Vokey has graciously let us use his work office for our next in-person meeting. The meeting room will be open by 7:00 pm, with the actual meeting starting at 7:30 pm. If driving, enter the lot using the most north east entrance and drive around to the south west corner of the building (see route in map detail on poster linked below). You can use any of the free, ample, and safe parking spots that say "reserved" in front of units #1 through #4 before entering unit #2. Bus stops #30814 and #30880 (route 77) are only 150 meters away. The last bus leaves for Polo Park at 10:15 pm and for Garden City at 10:31 pm. Logan Ave. bus routes #19, #26, and #27 are a 600 meter (8 minute) walk to the south. For those unable or preferring not to attend in person, the meeting will also be available online, using BBB as usual. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) *Date Change* Please note the change in meeting date for this month, and for the rest of the current year: We are now meeting on the first Tuesday of each month. The group now holds its meetings at 7:30pm on the *first* Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

MUUG Meeting, Tuesday, Feb 6, 7:30pm (Date Change, In-person/Hybrid Meeting) -- Firejail
by Gilbert Detillieux 31 Jan '24

31 Jan '24

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting IN PERSON, on Tuesday, February 6th, at 7:30pm. Yes, that's a week early, i.e. the FIRST Tuesday of the month... Firejail Want to add an extra layer of protection when using complex or untrusted programs, like browsers or Steam? Short on time and fed up with overbearing whole-system solutions like SELinux or resource-hogging virtualization? Well, protect yourself the easy and painless way with Firejail! In this month's presentation, Trevor Cordes will outline why you want to use Linux Firejail, how you use it, and why it may be better for your use case than other protection solutions. Cool demos may ensue. Where to find the Meeting: Fortress Software Inc., 350 Keewatin St -- Unit #2 We have a new in-person meeting location now! Brad Vokey has graciously let us use his work office for our next in-person meeting. The meeting room will be open by 7:00 pm, with the actual meeting starting at 7:30 pm. If driving, enter the lot using the most north east entrance and drive around to the south west corner of the building (see route in map detail on poster linked below). You can use any of the free, ample, and safe parking spots that say "reserved" in front of units #1 through #4 before entering unit #2. Bus stops #30814 and #30880 (route 77) are only 150 meters away. The last bus leaves for Polo Park at 10:15 pm and for Garden City at 10:31 pm. Logan Ave. bus routes #19, #26, and #27 are a 600 meter (8 minute) walk to the south. For those unable or preferring not to attend in person, the meeting will also be available online, using BBB as usual. Stay tuned to our muug.ca home page for the official URL, which will be made available about a half hour before the meeting starts. (Reload the page if you don't see the link, or if there are issues with connecting.) *Date Change* Please note the change in meeting date for this month, and for the rest of the current year: We are now meeting on the first Tuesday of each month. The group now holds its meetings at 7:30pm on the *first* Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. For more information about MUUG, and its monthly meetings, check out their web server: https://muug.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board, or linking to it on social media: https://muug.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.ca> Manitoba UNIX User Group Web: http://muug.ca/

1 0

[SECURITY] Fedora 38 Update: ncurses-6.4-7.20230520.fc38
by Trevor Cordes 30 Jan '24

30 Jan '24

Wow, this bug must have been in ncurses for decades. Yikes. However, I'm at a loss to think of any setuid ncurses program?? Seems to have warranted a 7.8 severity though. https://nvd.nist.gov/vuln/detail/CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable. Begin forwarded message: Date: Wed, 31 Jan 2024 01:42:30 +0000 (UTC) From: updates(a)fedoraproject.org To: package-announce(a)lists.fedoraproject.org Subject: [SECURITY] Fedora 38 Update: ncurses-6.4-7.20230520.fc38 -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-96090dafaf 2024-01-31 01:41:22.934193 -------------------------------------------------------------------------------- Name : ncurses -------------------------------------------------------------------------------- Update Information: Update to newer ncurses version, which fixes CVE-2023-29491 and CVE-2023-50495. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 22 2023 Miroslav Lichvar <mlichvar(a)redhat.com> 6.4-7.20230520 - ignore TERMINFO and HOME only if setuid/setgid/capability * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.4-6.20230520 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 27 2023 Debarshi Ray <rishi(a)fedoraproject.org> 6.4-5.20230520 - move foot entries to -base (#2217982) * Mon May 22 2023 Miroslav Lichvar <mlichvar(a)redhat.com> 6.4-4.20230520 - update to 6.4-20230520 - build with options disabling root file access and environment -------------------------------------------------------------------------------- References: [ 1 ] Bug #2191704 - CVE-2023-29491 ncurses: Local users can trigger security-relevant memory corruption via malformed data https://bugzilla.redhat.com/show_bug.cgi?id=2191704 [ 2 ] Bug #2254244 - CVE-2023-50495 ncurses: segmentation fault via _nc_wrap_entry() https://bugzilla.redhat.com/show_bug.cgi?id=2254244

2 2

Ras Pi Help needed.
by Andrew Popowich 11 Jan '24

11 Jan '24

Without going into TOO much detail, We are using 2 Rasp Pi Gen 4 We are trying to run them connected via the internet. 1 is at a barn. To be used when a sensor is triggered, it sends that alarm to the 2nd ras pi, via the internet to a house 10 kms away. ALARM will not stop until someone can press a key on ALARM sending machine in Barn. Alarm does NOT play in barn, just at 10km house. We are at the stage to just see if we can get Terminal to start up automatically when the rasp pi' s turn on, and if it can auto start terminal, run a script to just say Hello world. We have tried many "working google solutions" and all have failed. Is there anything we can try to see if getting terminal to autostart at bootup and to write hello world ? Please any ideas would be appreciated. Andrew

5 4

Problems with setting up off-site backup via Shaw (residential)
by Kevin McGregor 02 Jan '24

02 Jan '24

I've been trying to set up off-site backups from my home (site A) to another person's home (site B). My home internet (i.e. site A) is provided by Shaw. Site B has internet services provided by Telus, which is provided by Altima Telecom... which is provided by Shaw (as near as I can tell). Both sites have a server running TrueNAS. In the past I had this setup working, although the internet providers were different at the time. It involved forwarding a port by the router at site B to the destination server within site B. I haven't been able to get this to work since the change in providers. The destination simply doesn't respond no matter what port-forwarding settings I use. I ran a traceroute from site B to google.ca: Tracing route to www.google.ca [142.251.211.227] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms router.home [192.168.1.1] 2 10 ms 8 ms 8 ms 50.71.160.1 3 * * * Request timed out. 4 10 ms 9 ms 9 ms rc3sc-be2.wp.shawcable.net [24.244.58.169] 5 35 ms 35 ms 36 ms 104.159.27.13 6 37 ms 34 ms 34 ms 10.70.50.1 7 37 ms 37 ms 36 ms van-b1-link.ip.twelve99.net [62.115.145.124] 8 38 ms 38 ms 40 ms sea-b3-link.ip.twelve99.net [62.115.138.40] 9 47 ms 41 ms 42 ms sea-b1-link.ip.twelve99.net [62.115.132.157] 10 40 ms 39 ms 38 ms 74.125.51.236 11 41 ms 43 ms 42 ms 142.251.70.99 12 40 ms 40 ms 40 ms 216.239.43.121 13 43 ms 41 ms 41 ms sea30s13-in-f3.1e100.net [142.251.211.227] Trace complete. >From site A to site B, the traceroute shows: Tracing route to 104.159.x.y over a maximum of 30 hops 1 3 ms 3 ms 2 ms 192.168.1.1 2 7 ms 5 ms 6 ms 10.0.0.1 <site A is double-NATted :-( > 3 15 ms 16 ms 17 ms 50.71.160.1 4 19 ms 14 ms 17 ms rc3sc-be101-1.wp.shawcable.net [64.59.179.233] 5 18 ms 17 ms 17 ms 24.244.61.61 6 20 ms 18 ms 21 ms 24.244.58.173 7 18 ms 17 ms 22 ms rc3sc-be2.wp.shawcable.net [24.244.58.169] 8 34 ms 30 ms 28 ms rc3so-be110-1.cg.shawcable.net [66.163.76.61] 9 41 ms 42 ms 45 ms rc1bb-be6-1.vc.shawcable.net [66.163.78.38] 10 * 42 ms 41 ms rd3bb-tge0-3-0-14.vc.shawcable.net [66.163.69.42] 11 49 ms 49 ms 47 ms altimatelecom-ic-369545.ip.twelve99-cust.net [62.115.145.125] 12 50 ms 46 ms 47 ms <WAN IP of site B (104.159.x.y)> 13 79 ms 78 ms 98 ms <WAN IP of site B, again> 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 Can anyone explain what I'm seeing here? E.g. Why does the site B IP address appear twice? Why all the following request timeouts? I've used the WAN IP address of site B as the destination and set up port forwarding from that router to my remote NAS box, but as I said there is never any response. Does anyone have any suggestions as to what to try next?

4 3