190 reputation
9
bio website
location
age
visits member for 4 years
seen yesterday

I enjoy (La)TeX, well-designed free/open fonts, Emacs, black & green & bush teas, Nepali, Caribbean & Ethiopian cuisine, classic blues, reggae, traditional folk music, Anglo-Saxon poetry, Linux, Vedic rituals, Rockbox, khukuris, cricket, aperiodic tilings, Rastafarian philosophy, and steam-powered analytical engines.


Dec
29
comment iptables rules for machine running as openvpn server
Thanks! That seems to work now. THough I have two similar looking lines now: -A INPUT -s 192.168.1.0/24 -i wlp3s0 -p tcp -m tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT -A INPUT -s 192.168.1.0/24 -i wlp3s0 -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT. Do I need both? Does it matter?
Dec
29
revised iptables rules for machine running as openvpn server
added changes tried
Dec
29
comment iptables rules for machine running as openvpn server
Well, I can connect internally now. But I don't seem to be able to make an OpenVPN connection anymore from outside.
Dec
29
comment iptables rules for machine running as openvpn server
Hmm...now internal SSH doesn't work though. How do I allow for SSH connections within my home network? iptables -A INPUT -i wlp3s0 -p tcp -s 192.168.1.0/24 --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -o wlp3s0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
Dec
29
comment iptables rules for machine running as openvpn server
When I tried doing iptables-restore with the rules changed as above, I get a message iptables-restore v1.4.21: multiple -j flags not allowed; Error occurred at line: 16.
Dec
29
comment iptables rules for machine running as openvpn server
So I should change :INPUT ACCEPT [323:24107] to :INPUT DROP [323:24107] and add -A INPUT -i wlp3s0 -j ACCEPT -m udp -p udp --dport 1194 -m state --state NEW -j ACCEPT after -A INPUT -i tun+ -j ACCEPT?
Dec
29
accepted iptables rules for machine running as openvpn server
Dec
29
comment iptables rules for machine running as openvpn server
So is there a security hole the way I have it now? I have been able to connect successfully to it.
Dec
29
asked iptables rules for machine running as openvpn server
Dec
15
comment Can no longer start Chrom{ium|e} as normal user
(Un?)fortunately I cannot test this solution, as I "fixed" this problem by re-installing Arch Linux.
Dec
4
awarded  Curious
Dec
3
asked Pulseaudio issues - line out/headphones defaulting; connection to other programs (“not running as session daemon”)
Nov
20
comment Can no longer start Chrom{ium|e} as normal user
@RyanLoremIpsum - no, same behaviour
Nov
19
comment Can no longer start Chrom{ium|e} as normal user
@RyanLoremIpsum: I have lrwxrwxrwx 1 root root 18 Sep 16 10:53 /usr/lib/libdbus-1.so.3 -> libdbus-1.so.3.8.7
Nov
19
comment Can no longer start Chrom{ium|e} as normal user
@mtahmed: added.
Nov
19
revised Can no longer start Chrom{ium|e} as normal user
added link to strace output for running chromium as root
Nov
19
asked Can no longer start Chrom{ium|e} as normal user
Nov
12
comment mbsync not fetching/pushing with [Gmail]/Folders
Hmmm...running the new git-version, if I have CertificateFile /etc/ssl/certs/ca-certificates.crt in my .mbsyncrc it complains that "unknown/misplaced keyword 'CertificateFile'". If I don't, it reports that it's connecting to Gmail and opening up the slave, but doesn't get any further (it just indefinitely sits there).
Nov
12
comment mbsync not fetching/pushing with [Gmail]/Folders
@slm Ah, that was the trick. I didn't have the -dev version installed. Thanks!
Nov
12
comment mbsync not fetching/pushing with [Gmail]/Folders
Yes, it returns lots of entries, including entries for various versions of Berkeley Database Libraries. I've tried installing libdb6.0, but when I try to compile isync-git, it still complains about not being able to find Berkley DB >= 4.2.