Re: Assorted arm-buster problems - network configuration

From	Gene Heskett <gheskett@shentel.net>
Newsgroups	linux.debian.user
Subject	Re: Assorted arm-buster problems - network configuration
Date	2019-07-08 21:50 +0200
Message-ID	<yhHOa-2ce-1@gated-at.bofh.it> (permalink)
References	<yggQ1-6Wt-5@gated-at.bofh.it> <yhGfn-1pj-3@gated-at.bofh.it> <yhGS5-1CP-3@gated-at.bofh.it>
Organization	none,nada,zip

Show all headers | View raw

On Monday 08 July 2019 14:48:59 Lee wrote:

> On 7/8/19, Andrei POPESCU <andreimpopescu@gmail.com> wrote:
> > On Lu, 08 iul 19, 13:37:26, Lee wrote:
> >> On 7/7/19, andreimpopescu@gmail.com <andreimpopescu@gmail.com> 
wrote:
> >> > The dangers are not at all obvious to me, possibly because I
> >> > haven't used it much (if at all).
> >>
> >> Read the first three paragraph of the "Security Considerations"
> >> section https://tools.ietf.org/html/rfc6762#section-21
> >>
> >> Assuming everything on the network is a trusted host is a dangerous
> >> assumption, so paragraph 1 is N/A
> >>
> >> Assuming a trusted host won't get hacked is a dangerous assumption,
> >> so paragraph 3 is N/A.
> >>
> >> All that's left is paragraph 2 -- and uninstalling whatever
> >> software uses mDNS :)
> >
> > Security is not a black/white thing, it's more like a balancing act.
>
> Agreed
>
> > In my opinion mDNS/zeroconf can make perfect sense in some
> > environments and be a complete no-go in others.
>
> Apparently it's not clear that I agree :(
>
> I thought about concluding with something about different people
> making different assumptions & some not wanting or able to set up
> their own dns server & living with the risk, but it seemed like such
> an obvious conclusion that I didn't bother.
>
> Regards,
> Lee

If referring to my problem Lee, dns the way I have it setup since roughly 
1998 works perfectly. Its the lack of a dhcpd-like server, which adds 
needless complexity IMO to an otherwise working system I've been using 
since before I retired my amiga in 2000. In my case, both avahi-daemon 
and dchpcd5 were inventing bogus ip addresses, and setting the metric 
very low, forcing the system to use the bogus 169.254.etc numbers.  And 
they were cached, I suspect in /proc/network, so in order to achieve a 
working system, issueing the testing pings from the machines own 
address, asking the router for the NAT translation.  The router of 
course is running dnsmasq so it caches the common stuff, and if it does 
not have it in the cache its asks my ISP's dns. Takes about 90 ms if it 
has to ask a shentel dns server.

But both the router and the managed switch that connects the rest of my 
machines, respond only to 192.168.71.00/24 stuff, so 169 stuff 
is /dev/nulled as it should be.

So I had no external network access from that machine. I do have a dhcpd 
server in the router, facing the radio when its turned on and supposedly 
responding only to the MAC's of my sons smartfones.  So they can use my 
bandwidth when within range, but their smartfones can't see me. Most of 
the time they are 1000+ miles out of range.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>

Thread

Re: Assorted arm-buster problems #1 Gene Heskett <gheskett@shentel.net> - 2019-07-04 03:10 +0200
  Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-04 09:20 +0200
    Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 10:50 +0200
      Re: Assorted arm-buster problems - network configuration Felix Miata <mrmazda@earthlink.net> - 2019-07-04 11:30 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 11:50 +0200
      Re: Assorted arm-buster problems - network configuration mick crane <mick.crane@gmail.com> - 2019-07-04 12:20 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 16:50 +0200
          Re: Assorted arm-buster problems - network configuration mick crane <mick.crane@gmail.com> - 2019-07-04 19:20 +0200
      Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-05 06:00 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 12:40 +0200
          Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 13:20 +0200
          Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 14:50 +0200
            Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 15:10 +0200
              Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 15:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:30 +0200
            Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:20 +0200
              Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-06 15:50 +0200
                Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-08 14:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-08 15:00 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-08 16:30 +0200
          Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 07:30 +0200
    Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 17:50 +0200
      Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-04 18:20 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 19:40 +0200
        Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-04 21:10 +0200
          Re: Assorted arm-buster problems - network configuration Tixy <tixy@yxit.co.uk> - 2019-07-04 22:00 +0200
            Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-04 22:10 +0200
              Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-04 22:50 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-04 22:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 11:10 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 09:00 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 11:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 19:30 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-05 20:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 13:00 +0200
                Re: Assorted arm-buster problems - network configuration Tixy <tixy@yxit.co.uk> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:40 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:50 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 19:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:30 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 18:00 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 14:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 20:40 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 06:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 10:40 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-05 11:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 16:30 +0200
                Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 15:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 21:30 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-05 22:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 22:30 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-05 22:50 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-06 10:20 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-06 12:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-06 21:40 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 08:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 19:40 +0200
                Re: Assorted arm-buster problems - network configuration Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 20:10 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 20:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-08 21:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 23:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-08 21:20 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-07 11:00 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 19:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:40 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-06 21:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 00:20 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 06:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 07:00 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 17:10 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 09:00 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 13:20 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-07 14:50 +0200
                Re: Assorted arm-buster problems - network configuration Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-07 18:30 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 23:00 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-07 22:00 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-08 20:30 +0200
              Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 23:00 +0200
      Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-04 19:50 +0200
      Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-04 22:50 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 12:10 +0200
          Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-05 18:10 +0200
            Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:20 +0200
              Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 07:10 +0200
              Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-06 18:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 02:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 03:40 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 06:30 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 09:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 13:30 +0200

csiph-web