ONLY VPN traffic on F20 wireless interface?
by Steve Snyder
How can I ensure that in Fedora 20 my wireless interface is *only* used
for VPN traffic?
After the initial connection to the access point I want to guarantee
that no traffic passes through the interface other than through the
OpenVPN tunnel.
Ideally, I'd like to be able to ensure this from a terminal window, but
use of a GUI interface is OK if that is what is needed to ensure no
leakage of unencrypted data.
Can someone point me to a guide that explains how to do this?
Thanks.
10 years, 4 months
Can Win7 be run dual-boot and in a virtual machine?
by Matthew Saltzman
I have a machine with a dual-boot setup with Windows 7 Pro and Fedora
20. I wonder if it is possible these days to run the Win7 installation
in a virtual machine using the raw disk and still be able to boot it on
the bare metal when necessary. THe hardware is a Dell Latitude E6430
laptop, in case it matters.
What is the best VM tool for doing this these days?
TIA.
--
Matthew Saltzman
Clemson University Math Sciences
mjs AT clemson DOT edu
10 years, 4 months
Fedora 20 + stunnel crashing
by slamp slamp
Hello All,
Anyone able to use stunnel successfully in Fedora 20? It has been working
for me for awhile prior to upgrading.
Stunnel starts up fine, but as soon as it is used, it crashes but no
indication as to why.
I really only use stunnel to interface my sendmail with my ISP, if there is
a simple way of doing this with sendmail, I'll remove stunnel.
I believe I am using a simple config:
$ cat /etc/stunnel/stunnel.conf
; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
; Some debugging stuff useful for troubleshooting
debug = 7
output = /var/log/stunnel.log
; Use it for client mode
client = yes
verify = 0
; Service-level configuration
[pseudo-ssmtp]
accept = relay-domain:2525
connect = smtp.verizon.net:465
------------------
logs:
2014.01.05 15:51:42 LOG7[613:3071158144]: Clients allowed=500
2014.01.05 15:51:42 LOG5[613:3071158144]: stunnel 4.56 on
i686-redhat-linux-gnu platform
2014.01.05 15:51:42 LOG5[613:3071158144]: Compiled/running with OpenSSL
1.0.1e-fips 11 Feb 2013
2014.01.05 15:51:42 LOG5[613:3071158144]: Threading:PTHREAD
Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP
2014.01.05 15:51:42 LOG5[613:3071158144]: Reading configuration from file
/etc/stunnel/stunnel.conf
2014.01.05 15:51:42 LOG5[613:3071158144]: FIPS mode is enabled
2014.01.05 15:51:42 LOG7[613:3071158144]: Compression not enabled
2014.01.05 15:51:42 LOG7[613:3071158144]: Snagged 64 random bytes from
/dev/urandom
2014.01.05 15:51:42 LOG7[613:3071158144]: PRNG seeded successfully
2014.01.05 15:51:42 LOG6[613:3071158144]: Initializing service
[pseudo-ssmtp]
2014.01.05 15:51:43 LOG7[613:3071158144]: SSL options set: 0x00000004
2014.01.05 15:51:43 LOG5[613:3071158144]: Configuration successful
2014.01.05 15:51:43 LOG7[613:3071158144]: Service [pseudo-ssmtp] (FD=12)
bound to 127.0.0.1:2525
2014.01.05 15:51:43 LOG7[737:3071158144]: Created pid file
/var/run/stunnel.pid
2014.01.05 16:21:57 LOG7[737:3071158144]: Service [pseudo-ssmtp] accepted
(FD=3) from 127.0.0.1:34007
2014.01.05 16:21:57 LOG7[737:3078183744]: Service [pseudo-ssmtp] started
2014.01.05 16:21:57 LOG7[737:3078183744]: Waiting for a libwrap process
2014.01.05 16:21:57 LOG7[737:3078183744]: Acquired libwrap process #0
2014.01.05 16:21:57 LOG7[737:3078183744]: Releasing libwrap process #0
2014.01.05 16:21:57 LOG7[737:3078183744]: Released libwrap process #0
2014.01.05 16:21:57 LOG7[737:3078183744]: Service [pseudo-ssmtp] permitted
by libwrap from 127.0.0.1:34007
2014.01.05 16:21:57 LOG5[737:3078183744]: Service [pseudo-ssmtp] accepted
connection from 127.0.0.1:34007
2014.01.05 16:21:57 LOG6[737:3078183744]: connect_blocking: connecting
206.46.232.100:465
2014.01.05 16:21:57 LOG7[737:3078183744]: connect_blocking: s_poll_wait
206.46.232.100:465: waiting 10 seconds
2014.01.05 16:21:57 LOG5[737:3078183744]: connect_blocking: connected
206.46.232.100:465
2014.01.05 16:21:57 LOG5[737:3078183744]: Service [pseudo-ssmtp] connected
remote server from 172.16.133.25:56457
2014.01.05 16:21:57 LOG7[737:3078183744]: Remote socket (FD=14) initialized
2014.01.05 16:21:57 LOG7[737:3078183744]: SNI: sending servername:
smtp.verizon.net
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect):
before/connect initialization
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect): SSLv3 write
client hello A
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect): SSLv3 read
server hello A
2014.01.05 16:21:57 LOG7[737:3078183744]: Starting certificate
verification: depth=3, /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions,
Inc./CN=GTE CyberTrust Global Root
2014.01.05 16:21:57 LOG6[737:3078183744]: CERT: Verification not enabled
2014.01.05 16:21:57 LOG5[737:3078183744]: Certificate accepted: depth=3,
/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust
Global Root
2014.01.05 16:21:57 LOG7[737:3078183744]: Starting certificate
verification: depth=3, /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions,
Inc./CN=GTE CyberTrust Global Root
2014.01.05 16:21:57 LOG6[737:3078183744]: CERT: Verification not enabled
2014.01.05 16:21:57 LOG5[737:3078183744]: Certificate accepted: depth=3,
/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust
Global Root
2014.01.05 16:21:57 LOG7[737:3078183744]: Starting certificate
verification: depth=2, /C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore
CyberTrust Root
2014.01.05 16:21:57 LOG6[737:3078183744]: CERT: Verification not enabled
2014.01.05 16:21:57 LOG5[737:3078183744]: Certificate accepted: depth=2,
/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
2014.01.05 16:21:57 LOG7[737:3078183744]: Starting certificate
verification: depth=1, /O=Cybertrust Inc/CN=Cybertrust Public SureServer SV
CA
2014.01.05 16:21:57 LOG6[737:3078183744]: CERT: Verification not enabled
2014.01.05 16:21:57 LOG5[737:3078183744]: Certificate accepted: depth=1,
/O=Cybertrust Inc/CN=Cybertrust Public SureServer SV CA
2014.01.05 16:21:57 LOG7[737:3078183744]: Starting certificate
verification: depth=0, /C=US/ST=Texas/L=Irving/O=Verizon Data Services
LLC/OU=SLB Mail/CN=smtp.verizon.net
2014.01.05 16:21:57 LOG6[737:3078183744]: CERT: Verification not enabled
2014.01.05 16:21:57 LOG5[737:3078183744]: Certificate accepted: depth=0,
/C=US/ST=Texas/L=Irving/O=Verizon Data Services LLC/OU=SLB Mail/CN=
smtp.verizon.net
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect): SSLv3 read
server certificate A
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect): SSLv3 read
server key exchange A
2014.01.05 16:21:57 LOG7[737:3078183744]: SSL state (connect): SSLv3 read
server done A
10 years, 4 months
avoiding renaming of the wlan0 device
by Kevin Wilson
I have fedora 20, and when I connect a wireless usb nic, I get this messages:
Jan 4 21:33:08 localhost kernel: [ 273.797184] ieee80211 phy0:
rt2x00_set_chip: Info - Chipset detected - rt: 2573, rf: 0002, rev:
000a
Jan 4 21:33:09 localhost kernel: [ 273.893135] usbcore: registered
new interface driver rt73usb
Jan 4 21:33:09 localhost systemd-udevd[1712]: renamed network
interface wlan0 to wlp0s29f7u5u1
and with iwconfig I indeed see wlp0s29f7u5u1 (was wlan0 in fedora 18)
Is there a way to avoid it ?
I saw here:
https://mailman.archlinux.org/pipermail/arch-dev-public/2013-January/0242...
this suggestion:
mask the rule: ln -s /dev/null /etc/udev/rules.d/80-net-name-slot.rules
But I do not have /etc/udev/rules.d/80-net-name-slot.rules.
The other suggestion in the link above is to create a udev rule, but I
do not know how to do it.
rpm -q systemd gives:
systemd-208-9.fc20.x86_64
regards,
Kevin
10 years, 4 months
complete unattended install process for FC/Centos
by bruce
Hi.
As a test, I want to have a complete remote/unattended install process
for a box.
The steps I'd like to have are:
1) ssh into the box, do a reboot.
2) the reboot process invokes an install process that installs the
OS on the box
3) the install process uses http, to get the external iso/packages
required for the install
I've seen parts of this via pxeboot, but I'm dealing with older boxes
that might not have the nic card with pxe functionality.
I've seen parts of this as well, for systems that start with a cd, and
go from there...
I've seen parts of this that use the grub.conf mod, but it feeds back
to a vncserver, which isn't what I'm looking for..
I'm looking for a system, where, once the "kickstart"/install process
is defined, then it can then be used to do remote/unattended/complete
installs of the OS.
I was thinking that it should be doable to have the grub.conf stanza
that gets invoked on boot, to then instantiate the installation
process, but I can't quite get my head around how this can work.
If you have pointers to sites/articles, feel free to point me to
something I might have missed.
Thoughts/Comments are more than welcome.
Thanks
10 years, 4 months
Fedora 20 - ssh keys
by Dave Cross
I've installed Fedora 20 on a new desktop PC. I installed it from the
Live DVD and have been installing other packages as and when I notice
they are missing.
But one thing has been really bugging me. Gnome isn't prompting me for
my ssh key passphrase when I ssh to another machine. Instead I get a
text mode prompt every time and the passphrase isn't being cached
anywhere, so I get prompted every time. This is particularly boring
when I'm using something like github.
I thought it was the Gnome keyring that did this, and I seem to have
that package installed:
[dave@giles ~]$ rpm -qa | grep keyring
gnome-keyring-3.10.1-1.fc20.x86_64
gnome-keyring-pam-3.10.1-1.fc20.x86_64
libgnome-keyring-3.10.1-1.fc20.x86_64
Is there something else I need to do in order to get this working correctly?
Cheers,
Dave...
--
Dave Cross :: dave(a)dave.org.uk
http://dave.org.uk/
@davorg
10 years, 4 months
F20: missing font (for emacs use)
by Ranjan Maitra
Hello,
I usually use the fixed font 10x20 with emacs (before F20) but my F20
installation seems to be missing it. (Not sure why, but no doubt the
package containing it is not installed.) Where is this font and
additionally, as a learning experience, how would I find the package
supplying it(on my own, using yum or for that matter, dnf, since that
seems to be discussed a lot over the past few days)?
Many thanks again for any help, and best wishes,
Ranjan
--
Important Notice: This mailbox is ignored: e-mails are set to be
deleted on receipt. Please respond to the mailing list if appropriate.
For those needing to send personal or professional e-mail, please use
appropriate addresses.
____________________________________________________________
FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop!
Check it out at http://www.inbox.com/earth
10 years, 4 months
gnome 3 vs kde
by William Biggs
I would like to know witch one would you use and why gnome 3 or kde ?
10 years, 4 months
unattended install using kickstart/http
by bruce
Hi,
Looking to create a test process to be able to do unattended installs
to a machine based on kickstart/http process.
As I go through this, I'm looking to be able to talk to/exchange
kickstart files, as well as thoughts/information on putting this
together, wiht someone.
Anyone interested in conversing on this process?!!
Thanks.
10 years, 4 months
NetworkManager
by Timothy Murphy
What has happened to Network Management Settings
in recent versions of NM?
Right clicking on the NM icon (in Fedora-20/KDE)
brings up an unintelligible (to me) window
with 4 arrows whose function I do not understand.
Also NM is bringing up small "activation/deactivation" windows
that seem to persist indefinitely unless manually closed.
I wish there were an alternative to NM
which worked as well as the old Windows "Connect to".
Basically, I would like a small map showing available access points,
with the last point accessed chosen by default.
Clicking on one of the other access points
would indicate if an encryption key is needed,
and if so would offer a text area to allow this to be entered.
There used to be something like this in NM
(not as simple as Windows but at least usable),
but this seems to have disappeared.
In my view NM is ludicrously over-complicated,
and steadily getting more complicated
as more and more "features" are added.
I would like a program that just deals with WiFi
and does not bother with ethernet, VPN, mobile phones, etc,
all of which in my experience work perfectly well
with or without NM.
"A program should do one thing, and do it well."
--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
School of Mathematics, Trinity College, Dublin 2, Ireland
10 years, 4 months