linux

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Pantherina, in Privacy DNS Chooser Script v1.0 "Snow Breeze"

Cool project! Do you know Captive portals? Because there you need to use DHCP DNS a lot, and turn off dnssec and dot afaik

Baritone5371, (edited )

Hello! That's something that I should keep an eye on! When speaking about Captive Portals, I just assume everyone uses 4G/5G (which doesn't require these portals to be used) instead of open networks. My script already has DNSSEC disabled since it has caused some problems during testing. BTW, just a question : Are these portals very common? I haven't seen one since years now.

Pantherina,

In Germany every public wifi, train (ICE windows block cell internetand they are currently lasering small waves in them), hotels, cafes, private wifis even if you are a guest.

Because of “data protection” everyone needs to accept TOS so every network has them.

No idea where you live but cell data is often expensive.

I just use the MullvadVPN app, my systemd-resolved is plain and insecure and Mullvad does all the secure DNS stuff. Obviously sucks and is not scalable at all.

Systemd implementing a switch that could then be integrated into GUIs, like KDE6’s captive portal opener, is crucial. So for the portals you would make the DNS insecure, log in and secure it again. Best automatically.

progandy, (edited )

No need for a systemd switch. It should work with a dedicated “portal” browser that bypasses the global dns and has a built-in resolver using the dns from dhcp.

Pantherina, (edited )

Yes if that works for sure. Problem here is that GNOME and KDE use different webengines, so yay no standards. Firefox doesnt support that I think?

I use a seperate firefox profile with a shortcut like


<span style="color:#323232;">blabla desktop entry
</span><span style="color:#323232;">Name=Captive Portal
</span><span style="color:#323232;">Exec=mullvad-exclude firefox -P captive http://captive.kuketz.de
</span>

I wanted to do something with mullvad-exclude but that didnt work for some reason, as when excluding it I think it had no internet?

Baritone5371, (edited )

Ok. I will see that! If you have a GitHub account. You can make an issue right now, so tracking the issue would be better for me. Or I could do that myself.

Edit : I have made a prototype that I could release it soon as an alpha. When it gets released, your goal is to test in a place where captive portals are present. Sadly, the script won't be automatic but requires user interaction.

Edit 2 : it is now available as alpha on the releases page.

Pantherina,

Cool!

_s10e,

Have you looked into how existing software handles captive portals. I believe, both Ubuntu (or Gnome or Network-Manager) and Firefox do check for such portals and detect real internet access. (They simple poll some URL detectportal.vendor.com and check for the expected return code. Portals usually redirect.)

Now I’m thinking, what if this check could trigger a change to the DNS configuration. That is use DoT when internet is available, otherwise fall back to DHCP announced DNS

Pantherina,

That is neat! It is a specific response so it should work.


<span style="color:#323232;">#!/bin/bash
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Function to set insecure DNS
</span><span style="color:#323232;">function insecure-dns() {
</span><span style="color:#323232;">  # Backup the original resolved.conf file
</span><span style="color:#323232;">  cp /etc/systemd/resolved.conf /etc/systemd/resolved.conf.bak
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Modify resolved.conf to disable custom DNS, DoT, and DNSSEC
</span><span style="color:#323232;">  sed -i 's/^DNS=.*/#DNS=/; s/^Domains=.*/#Domains=/; s/^DNSOverTLS=.*/#DNSOverTLS=/; s/^DNSSEC=.*/#DNSSEC=/' /etc/systemd/resolved.conf
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Restart systemd-resolved
</span><span style="color:#323232;">  systemctl restart systemd-resolved
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;"># Function to set secure DNS
</span><span style="color:#323232;">function secure-dns() {
</span><span style="color:#323232;">  # Restore the original resolved.conf file
</span><span style="color:#323232;">  mv /etc/systemd/resolved.conf.bak /etc/systemd/resolved.conf
</span><span style="color:#323232;">
</span><span style="color:#323232;">  # Restart systemd-resolved
</span><span style="color:#323232;">  systemctl restart systemd-resolved
</span><span style="color:#323232;">}
</span><span style="color:#323232;">
</span><span style="color:#323232;">while true; do
</span><span style="color:#323232;">  response=$(curl -sI captive.test.com | head -n 1 | cut -d' ' -f2)
</span><span style="color:#323232;">
</span><span style="color:#323232;">  if [ "$response" == "200" ]; then
</span><span style="color:#323232;">    insecure-dns
</span><span style="color:#323232;">    xdg-open captive.test.com
</span><span style="color:#323232;">    sleep 30
</span><span style="color:#323232;">    # something to wait until window is closed, otherwise spam!
</span><span style="color:#323232;">  else
</span><span style="color:#323232;">    secure-dns
</span><span style="color:#323232;">  fi
</span><span style="color:#323232;">
</span><span style="color:#323232;">  sleep 5
</span><span style="color:#323232;">done
</span>

This should work. What would be needed is to track the process of the login and only continue when the window is closed again.

_s10e,

That was also my question. A broader question is how to access services on the local network that are announced through local DNS? Like your router’s web interface or any similar device.

Can you have split routing? Most queries go to our preferred DNSoverTLS endpoint, but some go to DNS53 on the local network.

This would also solve the captive portal if the host used to detect captive portals is always resolved locally.

Pantherina,

Yes I think you can exclude local IPs in systemd-resolved

bizdelnick, in What am I doing wrong?

The main thing you are doing wrong is reading howto articles in the web. Most of them are written by newbies who did the thing they describe for the first time, got something likely working and want to describe this for themselwes an for the other world. This does not mean they did everything right, and howtos usually contain numerous mistakes. Better read official documentation. This will take longer time but you will understand what you do. I don’t know if Mint has GUI tools to configure samba server. I would better edit config file manually, it is more or less simple.

GreyFalcon, in Alright, I'm gonna "take one for the team" -- what is with the "downvote-happy" users lately?

I vote down stuff I don’t want to read. Nothing more than that.

rinzler, in GNOME's Dynamic Triple Buffering "Ready To Merge"

Some gnome changes totally break an smol distro that i was using after that i change to kde until they find a stable point to all extensions

K_REY_C, in Bluetooth dongle recommendation

No clue about Bluetooth 5.x, but your no hassle bet is always to start at ThinkPenguin. www.thinkpenguin.com/…/networking-gear-gnu-linux

azvasKvklenko, in Video editor for Linux?

Kdenlive is preety good now

tiny_electron, in Video editor for Linux?

Pitivi is really nice

Damaskox, in Alright, I'm gonna "take one for the team" -- what is with the "downvote-happy" users lately?
@Damaskox@kbin.social avatar

something completely insignificant like internet points

Nothing has any value until someone gives value to something.
I give value to my reputation points - it's a force that drives me further into coming up with and posting content 😁 And sometimes I enjoy comparing my points to someone else!
I started fediverse with Lemmy but moved to kbin pretty much because of the reputation system being here.

Don't get me wrong though - I don't care that much about downvoting and I don't let it affect negatively on my behavior. At the end of the day, regarding other people in the Internet has more value to me than Internet points 😌

JustEnoughDucks, (edited ) in What am I doing wrong?
@JustEnoughDucks@feddit.nl avatar

Hey, just to let you know, software raid nowadays is quite a bit better for home NAS that hardware raid. I would suggest using ZFS and zpools as a software raid.

arstechnica.com/…/zfs-101-understanding-zfs-stora…

If you are already past that point though. As far as sharing, if you are just using it as a small home server or NAS and want things simple, you could just use TrueNAS. It would make things much easier.

If you are running your main computer and sharing the files, I would suggest trying NFS instead of Samba. Samba shares are notoriously unreliable and buggy. Windows has NFS support for a while now for your other machines blog.netwrix.com/…/mounting-nfs-client-windows/

h3ndrik, (edited )

100% agree. Software RAID is the thing you want as a consumer. Doesn’t need to be ZFS. mdraid is another good and well tested option for the traditional way of using RAID.

Baleine, in What am I doing wrong?
@Baleine@jlai.lu avatar

Sometimes it can be nice to run the gui as root

Link, (edited ) in Debian Bug report logs: #1057843 - linux: ext4 data corruption in 6.1.64-1

I don’t understand why they haven’t pulled the update… it is still in the repo and your system will upgrade to it if you run apt update.

copycat,

I just tried to update and it failed with error 403 when it tried to download the kernel, so it seems like they took measures.

joyofpeanuts, in What am I doing wrong?

If you want to simply make a folder containing media accessible to all on the network, I suggest to install minidlna, a UPnP server. All you need is to have the media folders accessible by minidlna. Otherwise the config is a simple text file.

nitrolife, (edited ) in What am I doing wrong?
@nitrolife@rekabu.ru avatar

Raid: wiki.archlinux.org/title/RAID

Don’t forget part “email notifications”. In addition to configuring the raid, you need to understand when the disk crashed, otherwise the raid will not help.

If you share files with windows. Basic way SMB share: wiki.archlinux.org/title/Samba

if you want share files with linux or windows with not basic ways you have many choises. NFS for example, or sshfs if you need folder time to time, or share directory with nginx ( stackoverflow.com/…/how-to-configure-nginx-to-ena… ), or overkill: nextcloud server.

UPD: In general, you just need to find a linux distributive with good documentation and use this documentation for the first time. Some things are solved differently in Linux than in Windows and you just won’t know about it without reading the wiki.

chitak166, in Easiest way to switch distros

Back up home and install the new distro from scratch.

chitak166, in Video editor for Linux?

I just use KDEnlive.

possiblylinux127,

Ahhh, so that’s why its called Kdenlive

  • All
  • Subscribed
  • Moderated
  • Favorites
  • linux@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #