firewalld - what needs to be added?
by Ed Greshko
OK, firewall rules aren't in my wheelhouse.
I've got an IPv6 network with a /56 prefix assigned to me by my ISP. This, I understand,
is rather large and it breaks some functionality. It is meant that this be broken up into
256 /64 networks or smaller.
On my ISP facing router the LAN has a /64 segment defined and all systems on the same LAN
work just fine.
I created a static route to a host with 2 LAN interfaces. It can be reached by using
either IP address. I have made these additions
net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.all.proxy_ndp = 1
to a config file in /etc/sysctl.d
However in order to reach that second system from the internet I need to disable the
firewall on the first. Otherwise I get....
May 12 18:47:59 f30-k kernel: FINAL_REJECT: IN=enp0s3 OUT=enp0s8
MAC=08:00:27:62:b8:24:00:11:32:76:13:a8:86:dd SRC=2001:0470:0066:0cce:0000:0000:0000:0002
DST=2001:b030:112f:0001:0000:0000:0000:0010 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=875364
PROTO=TCP SPT=54428 DPT=22 WINDOW=65320 RES=0x00 SYN URGP=0
So, I'm sure I need to add a "rich rule" or something to the firewall but I've no idea
what it should be. :-(
--
Right: I dislike the default color scheme Wrong: What idiot picked the default color scheme
4 years, 11 months
how to have dual boot on new laptop
by Gianluca Cecchi
Hello,
I have a laptop with preinstalled Win10 where I want to side install fedora
30 too.
Current layout of partitions on disk is this one, if I start from an usb
live:
# fdisk -l
Disk /dev/nvme0n1: 477 GiB, 512110190592 bytes, 1000215216 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: .....
Device Start End Sectors Size Type
/dev/nvme0n1p1 2048 534527 532480 260M EFI System
/dev/nvme0n1p2 534528 567295 32768 16M Microsoft reserved
/dev/nvme0n1p3 567296 998574734 998007439 475.9G Microsoft basic data
/dev/nvme0n1p4 998576128 1000214527 1638400 800M Windows recovery
environment
Any suggestion on how to proceed?
Thanks in advance
Gianluca
4 years, 11 months
Curious sshd log messages about kex exchange
by Tom Horsley
Any theories about the origin of these messages on my home system?
I suspect it has something to do with my system at work trying to
ssh into my system at home while my system at home
is in the process of rebooting. At least that seems to be the time
frame they show up. If my home system is completely up and running
and I force my work system to reconnect, these messages don't
come out.
May 12 11:34:08 zooty sshd[7412]: error: kex_exchange_identification: banner line contains invalid characters
...repeat a few times...
I'm running fedora 30 on both of them, so presumably the ssh
is compatible with itself :-).
4 years, 11 months
Upgrade to F30 on Dell Precision T1700 goes into emergency mode
by Ranjan Maitra
Hi,
After a three successful upgrades to F30 from F29 under my belt, a cocky me has been floored. Everything went through fine (or so it seemed) using dnf upgrade --releasever 30 but I ended with, upon reboot:
You are in emergency mode. After logging in, type "journalctl -xb" to view system logs, "systemctl reboot" to reboot, "systemctl default" or "exit" to boot into default mode.
Give root password for maintenance.
(or press Control-D to continue):
One problem is that I do not have a root password. I have actually gone in using a livecd and the devices (1 ext4 and 2 xfs) appear to be clean.
Any suggestions on how to proceed.
Many thanks and best wishes,
Ranjan
--
Important Notice: This mailbox is ignored: e-mails are set to be deleted on receipt. Please respond to the mailing list if appropriate. For those needing to send personal or professional e-mail, please use appropriate addresses.
4 years, 11 months
Modem/Router/Router -
by Bob Goodwin
.
I have a new problem with my internet connection which a few others on
this list may have encountered. They [Viasat] replaced the modem and
antenna in upgrading the system. The new modem has an integral router
having none of the feature I need to manage data usage, I've already
used more than 80% of my allowance in the first week. I normally use a
router with DD-WRT installed providing the features I need, showing the
amount of data used and which devices used it.
The problem is feeding their router data through my DD-WRT router. An
ethernet port is provided which they claim work but provide no
information for doing so. They sent a "technician" a few days ago and he
knew nothing more about it than I do except he assured me it should work
but did not know how to set up both routers, tried what he could for an
hour and said if you can't make it work and call for help, tell them to
send someone else ...
Yesterday I tried with my router set up on a different subnet and
seemingly working until in one of many equipment reboots their router
assigned my nfs server a new address, of course all I knew was it would
not mount until I connected a display and keyboard this morning, Now I
made theaddresspermanentusing network manager. Before this the modems
provided an ethernet port to which a wifi router was connected and
connecting to that was straight forward.
Certainly I am not the first one to see this problem, feeding data from
the ISP router to another one, and my hope is that someone can point me
in the right direction if not offer a solution. Google searches have not
led to a solution.
Bob
--
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
box83 FEDORA-29/64bit LINUX XFCE Fastmail POP3
4 years, 11 months
Updated F29 kernel and grub went bye bye
by Ranbir
Hi Everyone,
I started an update of my F29 system today. Everything seemed to be
going fine until the system locked up. I waited for a few minutes and
then, hesitantly, I power cycled the computer. Sure enough, the boot
didn't start and instead dropped into the grub shell. :/
I managed to manually boot Fedora. I reviewed the dnf history to see
which packages were getting upgraded. I ended up redoing the entire
operation, rewrote the grub2 config for good measure and rebooted: the
same problem occurred again. Drat!
Once the desktop was running again, I decided to only reinstall the
kernel packages that were upgraded. That's when I saw this:
Running transaction
Preparing : 1/1
Reinstalling : kernel-core-5.0.10-200.fc29.x86_64 1/2
Running scriptlet: kernel-core-5.0.10-200.fc29.x86_64 1/2
Running scriptlet: kernel-core-5.0.10-200.fc29.x86_64 2/2
grubby fatal error: unable to find a suitable template
grubby: doing this would leave no kernel entries. Not writing out new config.
I must have missed those errors when I redid the update earlier.
What I've found online so far doesn't reference F29 so I'm not sure
what I can do to fix the problem.
I did find the following two broken symlinks:
[ranbir@master ~]$ ls -l /etc/grub*
lrwxrwxrwx. 1 root root 22 Oct 4 2018 /etc/grub2.cfg -> ../boot/grub2/grub.cfg
lrwxrwxrwx. 1 root root 31 Oct 4 2018 /etc/grub2-efi.cfg -> ../boot/efi/EFI/fedora/grub.cfg
I don't know if they're supposed to be broken or not.
Does anyone have any suggestions on how I can fix my now broken grub
config?
--
Ranbir
4 years, 11 months
Grub fails with unrecognized number
by Robin Lee
I just upgraded one of my computers from Fedora 29 to 30 and after that
grub doesn't work any more as it should. Now when I boot up I get
briefly the following message
Booting from Hard Disk...
.
error: ../../grub-core/kern/misc.c:465:unrecognized number.
then it boots the default kernel. I was expecting the grub menu.
Anybody knows what's going on?
Cheers
Robin
4 years, 11 months
simple scan no longer prints?
by ToddAndMargo
Hi All,
Fedora 30
$ rpm -qa simple-scan
simple-scan-3.32.2-2.fc30.x86_64
It looks like I lost my ability to print directly
from Simple Scan. Is this a regression or am I
missing something?
-T
4 years, 11 months
dnf upgrade to 29 fails with coreutils and jre1 package problems
by Alex
Hi,
I have a fedora28 desktop I'm trying to upgrade to fedora29 and having
a problem:
# dnf system-upgrade download --refresh --releasever=29
Before you continue ensure that your system is fully upgraded by
running "dnf --refresh upgrade". Do you want to continue [y/N]: y
Last metadata expiration check: 0:00:00 ago on Fri 10 May 2019 08:24:27 AM EDT.
Error:
Problem: package jre1.8.0_25-1.8.0_25-fcs.x86_64 requires
/bin/basename, but none of the providers can be installed
- coreutils-8.29-7.fc28.x86_64 does not belong to a distupgrade repository
- problem with installed package jre1.8.0_25-1.8.0_25-fcs.x86_64
This machine has been successfully upgraded through many previous
releases and haven't had a problem. I've followed the steps here:
https://fedoraproject.org/wiki/DNF_system_upgrade
This includes ensuring all fedora28 updates have been applied. I've
also tried rebuilding the rpm database using "rpm --rebuild" and it
still fails.
# rpm -qva|grep -E '^coreutils|jre1'
coreutils-8.29-7.fc28.x86_64
jre1.8.0_25-1.8.0_25-fcs.x86_64
coreutils-common-8.29-7.fc28.x86_64
# rpm -e jre1
error: package jre1 is not installed
# dnf repolist
repo id repo name status
adobe-linux-x86_64 Adobe Systems Incorporated 3
*fedora Fedora 28 - x86_64 57,327
google-chrome google-chrome 3
*rpmfusion-free RPM Fusion for Fedora 28 - Free 563
*rpmfusion-free-updates RPM Fusion for Fedora 28 - Free - Updates 289
*rpmfusion-nonfree RPM Fusion for Fedora 28 - Nonfree 203
*rpmfusion-nonfree-updates RPM Fusion for Fedora 28 - Nonfree - Updates 96
*updates Fedora 28 - x86_64 - Updates 22,062
Thanks,
Alex
4 years, 11 months