<html><head></head><body>Hey, <br>
<br>
I did not added a section on caching, merely on ensuring a user has the right cert. The documentation wad written with a user in mind who would only flash the same router one time and want to save the cert to ensure they are always talking to the same device.<br>
<br>
s2e<br><br><div class="gmail_quote">Dan Staples <danstaples@opentechinstitute.org> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">Hi Dan,<br /><br />When a browser sees a self-signed or unknown certificate, it will give<br />you a warning, then ask you to either accept it, or reject it. If you<br />accept it, by default it will save it *permanently*, which is likely<br />where your trouble comes from.<br /><br />The first time you connected to <a href="http://101.100.79.1">101.100.79.1</a>, you probably accepted the<br />certificate, and so now your browser permanently associates that IP<br />address with that particular certificate at that time. If you have since<br />reflashed the node, that same IP address will now have a *different*<br />certificate, and your browser freaked out and won't let you proceed.<br /><br />So the solution is first to remove the cached certificate associated<br />with that IP address from your browser, as you already did. After that,<br />you can either do the same thing every time you reflash the node, or you<br />can accept the certificate *temporarily*
instead of permanently. Here's<br />a Firefox add-on I use that makes the default browser behavior to accept<br />certificates temporarily:<br /><a href="https://addons.mozilla.org/en-US/firefox/addon/y-u-no-validate">https://addons.mozilla.org/en-US/firefox/addon/y-u-no-validate</a>/.<br /><br />Regarding your certificate authority question, the certificates<br />presented by the nodes are self-signed, meaning they have no certificate<br />authority.<br /><br />I hope this helps. If you have any other questions, let me know! Seamus<br />was working on documentation regarding the certificate warnings, so<br />maybe he has a section about how the browser caches them?<br /><br />Dan<br /><br />On 10/24/2013 01:11 AM, Daniel Hastings wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">In regards to the certificate error message I've been getting. I've been<br />trying to access the router from whatever URL
was randomly generated for<br />the router in this case <a href="http://101.100.79.1">101.100.79.1</a> or the assigned IP I manually gave<br />the plug interface in this case <a href="http://192.168.8.2">192.168.8.2</a>. Each ip still gives me the<br />same same error message. I found this<br />article: <a href="https://support.mozilla.org/en-US/kb/Certificate%20contains%20the%20same%20serial%20number%20as%20another%20certificate">https://support.mozilla.org/en-US/kb/Certificate%20contains%20the%20same%20serial%20number%20as%20another%20certificate</a><br /><br />somewhat helpful. Removing the servers is easy since you can find the<br />IP address of the server and remove it. Removing the certificate<br />authority where it gets confusing. I have no idea who generated the<br />certificate authority so I do not know which one to remove from the<br />authorities tab. I still cannot access most of my routers from Firefox. <br /><br /><br />On Mon, Oct 21, 2013 at 5:09 PM,<br
/><commotion-discuss-request@lists.chambana.net<br /><mailto:commotion-discuss-request@lists.chambana.net>> wrote:<br /><br />Send Commotion-discuss mailing list submissions to<br />commotion-discuss@lists.chambana.net<br /><mailto:commotion-discuss@lists.chambana.net><br /><br />To subscribe or unsubscribe via the World Wide Web, visit<br /><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a><br />or, via email, send a message with subject or body 'help' to<br />commotion-discuss-request@lists.chambana.net<br /><mailto:commotion-discuss-request@lists.chambana.net><br /><br />You can reach the person managing the list at<br />commotion-discuss-owner@lists.chambana.net<br /><mailto:commotion-discuss-owner@lists.chambana.net><br /><br />When replying, please edit your Subject line so it is more specific<br />than "Re: Contents of Commotion-discuss digest..."<br /><br
/><br />Today's Topics:<br /><br />1. Re: Web Browser Certificate Error after Factory Reset<br />(Dan Staples)<br />2. Re: DNS Issues (Dan Staples)<br />3. Re: Commotion-discuss Digest, Vol 13, Issue 8 (Dan Staples)<br />4. Re: [Commotion-dev] Has anyone tried this out? netspot<br />(Dan Staples)<br /><br /><br /><hr /><br /><br />Message: 1<br />Date: Mon, 21 Oct 2013 09:56:49 -0400<br />From: Dan Staples <danstaples@opentechinstitute.org<br /><mailto:danstaples@opentechinstitute.org>><br />To: commotion-discuss@lists.chambana.net<br /><mailto:commotion-discuss@lists.chambana.net><br />Subject: Re: [Commotion-discuss] Web Browser Certificate Error after<br />Factory Reset<br />Message-ID: <526532A1.50308@opentechinstitute.org<br /><mailto:526532A1.50308@opentechinstitute.org>><br />Content-Type: text/plain; charset=ISO-8859-1<br /><br />What URL are you visiting that causes this error? We are trying to move<br />away from the <a
href="http://192.168.1.20">192.168.1.20</a> alias for the nodes since each node will use<br />that same address and each present a different self-signed certificate,<br />resulting in these types of errors.<br /><br />Can anyone else from the dev team chime in with the status of this?<br /><br />-Dan<br /><br />On 10/17/2013 08:43 AM, Dan Hastings wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">In DR2 I've had to do a couple of factory default resets. I've found<br />that I get the following error in Firefox after factory resting<br /></blockquote>the router:<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Secure Connection Failed<br /><br />An error occurred during a connection to <a href="http://192.168.1.20">192.168.1.20</a>. You have<br /></blockquote>received<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt
1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">an invalid certificate. Please contact the server administrator or<br /></blockquote>email<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">correspondent and give them the following information: Your<br /></blockquote>certificate<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">contains the same serial number as another certificate issued by the<br />certificate authority. Please get a new certificate containing a<br /></blockquote>unique<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">serial number. (Error code: sec_error_reused_issuer_and_serial)<br /><br />The page you are trying to view cannot be shown because the<br />authenticity of the received data could not be verified.<br />Please contact the
website owners to inform them of this problem.<br />Alternatively, use the command found in the help menu to report this<br />broken site.<br /><br />I've tried removing the certificates from my Firefox under<br />preferences>advanced>certificates but still cannot log back into the<br />router. Do I have to do something in Firefox or in the router?<br /><br />Thanks<br /><br />Dan<br /><br /><br /><hr /><br />Commotion-discuss mailing list<br />Commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:Commotion-discuss@lists.chambana.net><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a></blockquote><br /><br />--<br />Dan Staples<br /><br />Open Technology Institute<br /><a href="https://commotionwireless.net">https://commotionwireless.net</a><br />OpenPGP
key: <a href="http://disman.tl/pgp.asc">http://disman.tl/pgp.asc</a><br />Fingerprint: 2480 095D 4B16 436F 35AB 7305 F670 74ED BD86 43A9<br /><br /><br /><hr /><br /><br />Message: 2<br />Date: Mon, 21 Oct 2013 09:59:55 -0400<br />From: Dan Staples <danstaples@opentechinstitute.org<br /><mailto:danstaples@opentechinstitute.org>><br />To: commotion-discuss@lists.chambana.net<br /><mailto:commotion-discuss@lists.chambana.net><br />Subject: Re: [Commotion-discuss] DNS Issues<br />Message-ID: <5265335B.30706@opentechinstitute.org<br /><mailto:5265335B.30706@opentechinstitute.org>><br />Content-Type: text/plain; charset=ISO-8859-1<br /><br />Have you tried changing the dns server in the commotion profiles<br />(/etc/commotion/profiles.d/quickstartAP or something like that)?<br />Anything in /tmp/ will be lost on reboot, so that's why you're seeing<br />that behavior.<br /><br />Dan<br /><br />On 10/18/2013 02:35 AM, Daniel Hastings wrote:<br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">I've actually found that some of open dns requests are being received<br />and others are not. The sites that of course I do not want to get<br />forwarded through Google's servers (youtube, vimeo) are getting<br /></blockquote>through<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">somehow. I tried change the default DNS under /tmp/resolv.conf.auto<br />however once the router reboots it restarts the default back to<br /></blockquote><a href="http://8.8.8.8">8.8.8.8</a><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Any help on this would be great. Students get back to school today and<br />having 30 or so on youtube means our network will revert back to 56k<br />speeds of the 90's. Or if anyone knows how to block https
youtube<br />using firewall rules without blocking other Google services that would<br />work as well.<br /><br /><br />On Thu, Oct 17, 2013 at 8:18 PM, Ben West <ben@gowasabi.net<br /><</blockquote>mailto:ben@gowasabi.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:ben@gowasabi.net <mailto:ben@gowasabi.net>>> wrote:<br /><br />This is actually an open issue for Commotion-OpenWRT.<br /><a href="https://github.com/opentechinstitute/commotion-openwrt/issues/52">https://github.com/opentechinstitute/commotion-openwrt/issues/52</a><br /><br /><br />On Thu, Oct 17, 2013 at 12:10 PM, Daniel Hastings<br /><dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org><br /><</blockquote>mailto:dhastings@abaarsotech.org<br /><mailto:dhastings@abaarsotech.org>>> wrote:<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px
solid #ad7fa8; padding-left: 1ex;">I'm still having strange issues with the DNS servers I would<br />like my requests to be forwarded to on my student network.<br /></blockquote>Under<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">DHCP AND DNS I have the DNS Forwardings set to two Open DNS<br />servers so I can block specific content on the student<br /></blockquote>network.<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">I enabled the log and found these entries. For some reason the<br />default DNS forwarder that is being used is Google's<br /></blockquote><a href="http://8.8.8.8">8.8.8.8</a> No<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">where on any network in the school am I using this server. Is<br />there anyway I can get the routers to forward
requests to my<br />open dns servers? Is there a dnsmasq config file I can edit?<br /><br />Log Files: (the second server <a href="http://208.67.220.220">208.67.220.220</a> is the server I<br />would like to be the default)<br /><br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using nameserver<br /></blockquote><a href="http://8.8.8.8">8.8.8.8</a>#53<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote"
style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using nameserver<br /><a href="http://208.67.220.220">208.67.220.220</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using local addresses only<br />for domain mesh.local<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a
href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: read /etc/hosts - 2<br /></blockquote>addresses<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">--<br />*Dan Hastings*<br />/Abaarso School Computer Science Department/<br />dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org> <mailto:dhastings@abaarsotech.org<br /><mailto:dhastings@abaarsotech.org>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br />Commotion-discuss mailing list<br />Commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:Commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:Commotion-discuss@lists.chambana.net<br
/><</blockquote>mailto:Commotion-discuss@lists.chambana.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a><br /><br /><br /><br /><br />--<br />Ben West<br /><a href="http://gowasabi.net">http://gowasabi.net</a><br />ben@gowasabi.net <mailto:ben@gowasabi.net><br /><</blockquote>mailto:ben@gowasabi.net <mailto:ben@gowasabi.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">314-246-9434 <tel:314-246-9434> <tel:314-246-9434<br /><</blockquote>tel:314-246-9434>><br /><br /><br /><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">--<br />*Dan Hastings*<br />/Abaarso School
Computer Science Department/<br />dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org><br /><</blockquote>mailto:dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org>><br /><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br />Commotion-discuss mailing list<br />Commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:Commotion-discuss@lists.chambana.net><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a></blockquote><br /><br />--<br />Dan Staples<br /><br />Open Technology Institute<br /><a href="https://commotionwireless.net">https://commotionwireless.net</a><br />OpenPGP key: <a href="http://disman.tl/pgp.asc">http://disman.tl/pgp.asc</a><br
/>Fingerprint: 2480 095D 4B16 436F 35AB 7305 F670 74ED BD86 43A9<br /><br /><br /><hr /><br /><br />Message: 3<br />Date: Mon, 21 Oct 2013 10:03:07 -0400<br />From: Dan Staples <danstaples@opentechinstitute.org<br /><mailto:danstaples@opentechinstitute.org>><br />To: Daniel Hastings <dhastings@abaarsotech.org<br /><mailto:dhastings@abaarsotech.org>>, commotion-discuss<br /><commotion-discuss@lists.chambana.net<br /><mailto:commotion-discuss@lists.chambana.net>>, Seamus Tuohy<br /><s2e@opentechinstitute.org <mailto:s2e@opentechinstitute.org>><br />Subject: Re: [Commotion-discuss] Commotion-discuss Digest, Vol 13,<br />Issue 8<br />Message-ID: <5265341B.1040901@opentechinstitute.org<br /><mailto:5265341B.1040901@opentechinstitute.org>><br />Content-Type: text/plain; charset=ISO-8859-1<br /><br />I am hoping Seamus can chime in with the LuCI error regarding QS values.<br /><br />Commotion comes with a few default profiles
(defaultMesh, defaultAP,<br />etc). But once you go through the QuickStart, the node creates and<br />starts using another set of profiles: quickstartPlug, quickstartMesh,<br />quickstartAP, quickstartSec (or something similar). So those are the<br />profiles you will want to change.<br /><br />When I get into the office today I'll take a look at the web interface<br />for changing the profiles. Are you using DR1 or DR2?<br /><br />Dan<br /><br />On 10/18/2013 06:32 AM, Daniel Hastings wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Changed the nameservers on the default plug and access point interface<br />but still was resolving with <a href="http://8.8.8.8">8.8.8.8</a><br /><br />Oct 18 10:14:32 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>> <<a
href="http://daemon.info">http://daemon.info</a>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">dnsmasq[3142]: forwarded <a href="http://kat.ph">kat.ph</a> <<a href="http://kat.ph">http://kat.ph</a>> <<a href="http://kat.ph">http://kat.ph</a>> to<br /></blockquote><a href="http://8.8.8.8">8.8.8.8</a><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">I also changed the default dns to <a href="http://208.67.222.222">208.67.222.222</a> on the mesh and<br /></blockquote>on the<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">sec.<br /><br />I'm still confused how to edit a profile under commotion > mesh<br /></blockquote>profile<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left:
1ex;">- I selected interface > ap (using quickstartAp)<br /><br />profile > defaultAP and got the following error message<br /><br />/usr/lib/lua/luci/dispatcher.lua:448: Failed to execute call<br /></blockquote>dispatcher target for entry '/admin/commotion/meshprofile_submit'.<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">The called action terminated with an exception:<br />...sr/lib/lua/luci/controller/commotion/meshprofile.lua:308:<br /></blockquote>attempt to index field 'QS' (a nil value)<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">stack traceback:<br />[C]: in function 'assert'<br />/usr/lib/lua/luci/dispatcher.lua:448: in function 'dispatch'<br />/usr/lib/lua/luci/dispatcher.lua:195: in function<br /><</blockquote>/usr/lib/lua/luci/dispatcher.lua:194><br /><br /><br /><br /><br /><br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">On Fri, Oct 18, 2013 at 9:46 AM,<br /><commotion-discuss-request@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss-request@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss-request@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss-request@lists.chambana.net>>> wrote:<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Send Commotion-discuss mailing list submissions to<br />commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left:
1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">To subscribe or unsubscribe via the World Wide Web, visit</blockquote><br /><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">or, via email, send a message with subject or body 'help' to<br />commotion-discuss-request@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss-request@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss-request@lists.chambana.net<br
/><</blockquote>mailto:commotion-discuss-request@lists.chambana.net>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">You can reach the person managing the list at<br />commotion-discuss-owner@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss-owner@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss-owner@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss-owner@lists.chambana.net>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">When replying, please edit your Subject line so it is more<br /></blockquote>specific<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">than "Re: Contents of
Commotion-discuss digest..."<br /><br /><br />Today's Topics:<br /><br />1. Web Browser Certificate Error after Factory Reset (Dan<br />Hastings)<br />2. DNS Issues (Daniel Hastings)<br />3. Re: DNS Issues (Ben West)<br />4. Re: DNS Issues (Andrew Reynolds)<br />5. Re: DNS Issues (Daniel Hastings)</blockquote><br /><br /><br /><hr /><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Message: 1<br />Date: Thu, 17 Oct 2013 15:43:14 +0300<br />From: Dan Hastings <dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">To:
commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Subject: [Commotion-discuss] Web Browser Certificate Error after<br />Factory Reset<br />Message-ID: <525FDB62.2000707@abaarsotech.org<br /><</blockquote>mailto:525FDB62.2000707@abaarsotech.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:525FDB62.2000707@abaarsotech.org<br /><</blockquote>mailto:525FDB62.2000707@abaarsotech.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex;
border-left: 1px solid #ad7fa8; padding-left: 1ex;">Content-Type: text/plain; charset=ISO-8859-1<br /><br />In DR2 I've had to do a couple of factory default resets. I've<br /></blockquote>found<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">that I get the following error in Firefox after factory<br /></blockquote>resting the<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">router:<br /><br />Secure Connection Failed<br /><br />An error occurred during a connection to <a href="http://192.168.1.20">192.168.1.20</a>. You<br /></blockquote>have received<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">an invalid certificate. Please contact the server<br /></blockquote>administrator or email<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex;
border-left: 1px solid #ad7fa8; padding-left: 1ex;">correspondent and give them the following information: Your<br /></blockquote>certificate<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">contains the same serial number as another certificate issued<br /></blockquote>by the<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">certificate authority. Please get a new certificate containing<br /></blockquote>a unique<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">serial number. (Error code: sec_error_reused_issuer_and_serial)<br /><br />The page you are trying to view cannot be shown because the<br />authenticity of the received data could not be verified.<br />Please contact the website owners to inform them of this<br /></blockquote>problem.<br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Alternatively, use the command found in the help menu to<br /></blockquote>report this<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">broken site.<br /><br />I've tried removing the certificates from my Firefox under<br />preferences>advanced>certificates but still cannot log back<br /></blockquote>into the<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">router. Do I have to do something in Firefox or in the router?<br /><br />Thanks<br /><br />Dan<br /><br /><br /><br /><br /><hr /><br /><br />Message: 2<br />Date: Thu, 17 Oct 2013 20:10:50 +0300<br />From: Daniel Hastings <dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt
1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">To: commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Subject: [Commotion-discuss] DNS Issues<br />Message-ID:<br /><br /><br /><</blockquote>CAKxU6K1KCkrfeWNRFEA_YWO+T-zEuQgJ86GYm1tS5ib518OMTA@mail.gmail.com<br
/><mailto:CAKxU6K1KCkrfeWNRFEA_YWO%2BT-zEuQgJ86GYm1tS5ib518OMTA@mail.gmail.com><br /><br /><mailto:CAKxU6K1KCkrfeWNRFEA_YWO%2BT-zEuQgJ86GYm1tS5ib518OMTA@mail.gmail.com<br /><mailto:CAKxU6K1KCkrfeWNRFEA_YWO%252BT-zEuQgJ86GYm1tS5ib518OMTA@mail.gmail.com>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Content-Type: text/plain; charset="iso-8859-1"<br /><br />I'm still having strange issues with the DNS servers I would<br /></blockquote>like my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">requests to be forwarded to on my student network. Under DHCP<br /></blockquote>AND DNS I<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">have the DNS Forwardings set to two Open DNS servers so I can<br /></blockquote>block<br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">specific content on the student network. I enabled the log and<br />found these<br />entries. For some reason the default DNS forwarder that is<br /></blockquote>being used is<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Google's <a href="http://8.8.8.8">8.8.8.8</a> No where on any network in the school am I<br /></blockquote>using this<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">server. Is there anyway I can get the routers to forward<br /></blockquote>requests to my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">open dns servers? Is there a dnsmasq config file I can edit?<br /><br />Log Files: (the second server <a
href="http://208.67.220.220">208.67.220.220</a> is the server I would<br />like to<br />be the default)<br /><br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br />nameserver <a href="http://8.8.8.8">8.8.8.8</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br />nameserver <a href="http://208.67.220.220">208.67.220.220</a>#53<br />Oct 17
16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br />local addresses only for domain mesh.local<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: read<br />/etc/hosts - 2 addresses<br /><br />--<br />*Dan Hastings*<br />*Abaarso School Computer Science Department*<br />dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org><br
/><</blockquote>mailto:dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">-------------- next part --------------<br />An HTML attachment was scrubbed...<br />URL:<br /><br /><</blockquote><a href="http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/4276588f/attachment-0001.html">http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/4276588f/attachment-0001.html</a>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br /><br />Message: 3<br />Date: Thu, 17 Oct 2013 12:18:07 -0500<br />From: Ben West <ben@gowasabi.net <mailto:ben@gowasabi.net><br /><</blockquote>mailto:ben@gowasabi.net <mailto:ben@gowasabi.net>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex;
border-left: 1px solid #ad7fa8; padding-left: 1ex;">To: Daniel Hastings <dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Cc: commotion-discuss <commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8;
padding-left: 1ex;">Subject: Re: [Commotion-discuss] DNS Issues<br />Message-ID:<br /><br /><br /><</blockquote>CADSh-SNXLudC3Y19v4A4w7VXYSgbLDt4Qprrt_sOeh=L_pbb6A@mail.gmail.com<br /><mailto:L_pbb6A@mail.gmail.com><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:L_pbb6A@mail.gmail.com <mailto:L_pbb6A@mail.gmail.com>>><br />Content-Type: text/plain; charset="iso-8859-1"<br /><br />This is actually an open issue for Commotion-OpenWRT.<br /><a href="https://github.com/opentechinstitute/commotion-openwrt/issues/52">https://github.com/opentechinstitute/commotion-openwrt/issues/52</a><br /><br /><br />On Thu, Oct 17, 2013 at 12:10 PM, Daniel Hastings<br /><dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org><br /><</blockquote>mailto:dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt
1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">wrote:<br /><br />I'm still having strange issues with the DNS servers I would<br /></blockquote></blockquote>like my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">requests to be forwarded to on my student network. Under<br /></blockquote></blockquote>DHCP AND<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">DNS I<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">have the DNS Forwardings set to two Open DNS servers so I<br /></blockquote></blockquote>can block<br
/><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">specific content on the student network. I enabled the log and<br /></blockquote>found these<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">entries. For some reason the default DNS forwarder that is being<br /></blockquote>used is<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">Google's <a href="http://8.8.8.8">8.8.8.8</a> No where on any network in the school am I<br /></blockquote></blockquote>using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">this<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex;
border-left: 1px solid #8ae234; padding-left: 1ex;">server. Is there anyway I can get the routers to forward<br /></blockquote></blockquote>requests<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">to my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">open dns servers? Is there a dnsmasq config file I can edit?<br /><br />Log Files: (the second server <a href="http://208.67.220.220">208.67.220.220</a> is the server I<br /></blockquote></blockquote>would<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">like to<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">be the default)<br /><br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br
/><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">nameserver <a href="http://8.8.8.8">8.8.8.8</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">nameserver <a
href="http://208.67.220.220">208.67.220.220</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">local addresses only for domain mesh.local<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: read<br
/><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">/etc/hosts - 2 addresses<br /><br />--<br />*Dan Hastings*<br />*Abaarso School Computer Science Department*<br />dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org><br /><</blockquote></blockquote>mailto:dhastings@abaarsotech.org <mailto:dhastings@abaarsotech.org>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"><hr /><br />Commotion-discuss mailing list<br />Commotion-discuss@lists.chambana.net<br /><</blockquote></blockquote>mailto:Commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left:
1ex;">mailto:Commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:Commotion-discuss@lists.chambana.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a></blockquote><br /><br /><br /><br />--<br />Ben West<br /><a href="http://gowasabi.net">http://gowasabi.net</a><br />ben@gowasabi.net <mailto:ben@gowasabi.net><br /><</blockquote>mailto:ben@gowasabi.net <mailto:ben@gowasabi.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">314-246-9434 <tel:314-246-9434> <tel:314-246-9434<br /><</blockquote>tel:314-246-9434>><br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">-------------- next part --------------<br />An HTML attachment was scrubbed...<br />URL:<br /><br /><</blockquote><a href="http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/27c083c5/attachment-0001.html">http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/27c083c5/attachment-0001.html</a>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br /><br />Message: 4<br />Date: Thu, 17 Oct 2013 16:09:02 -0400<br />From: Andrew Reynolds <andrew@opentechinstitute.org<br /><</blockquote>mailto:andrew@opentechinstitute.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:andrew@opentechinstitute.org<br
/><</blockquote>mailto:andrew@opentechinstitute.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">To: commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Subject: Re: [Commotion-discuss] DNS Issues<br />Message-ID: <526043DE.10800@opentechinstitute.org<br /><</blockquote>mailto:526043DE.10800@opentechinstitute.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left:
1ex;">mailto:526043DE.10800@opentechinstitute.org<br /><</blockquote>mailto:526043DE.10800@opentechinstitute.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Content-Type: text/plain; charset="iso-8859-1"<br /><br />Nameservers are associated with commotiond interface profiles.<br /></blockquote>Each<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">profile has a dns= line. Just change that to your preferred<br /></blockquote>nameserver.<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Profiles are stored in /etc/commotion/profiles.d and are<br /></blockquote>accessed using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">the commotion > mesh profile menu. You can
either edit your<br /></blockquote>existing<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">profiles (one per interface) or create new ones, then apply<br /></blockquote>them using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">the profile tool.<br /><br />-andrew<br /><br />On 10/17/2013 01:10 PM, Daniel Hastings wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">I'm still having strange issues with the DNS servers I would<br /></blockquote></blockquote>like my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">requests to be forwarded to on my student network. Under<br
/></blockquote></blockquote>DHCP AND<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">DNS I<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">have the DNS Forwardings set to two Open DNS servers so I<br /></blockquote></blockquote>can block<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">specific content on the student network. I enabled the log and<br /></blockquote>found these<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">entries. For some reason the default DNS forwarder that is being<br /></blockquote>used is<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt
1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">Google's <a href="http://8.8.8.8">8.8.8.8</a> No where on any network in the school am I<br /></blockquote></blockquote>using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">this<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">server. Is there anyway I can get the routers to forward<br /></blockquote></blockquote>requests<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">to my<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">open dns servers? Is there a dnsmasq config file I can edit?<br /><br />Log Files: (the second server <a href="http://208.67.220.220">208.67.220.220</a> is the server I<br
/></blockquote></blockquote>would<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">like to<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">be the default)<br /><br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">nameserver <a href="http://8.8.8.8">8.8.8.8</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a
href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">nameserver <a href="http://208.67.220.220">208.67.220.220</a>#53<br />Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: using<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">local addresses only for domain mesh.local<br
/>Oct 17 16:46:09 Computer-Lab3681343115 <a href="http://daemon.info">daemon.info</a><br /><</blockquote></blockquote><a href="http://daemon.info">http://daemon.info</a>><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><a href="http://daemon.info">http://daemon.info</a>> dnsmasq[3412]: read<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;">/etc/hosts - 2 addresses<br /><br /><br /><br /><hr /><br />Commotion-discuss mailing list<br />Commotion-discuss@lists.chambana.net<br /><</blockquote></blockquote>mailto:Commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:Commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:Commotion-discuss@lists.chambana.net>><br /><blockquote
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"><a href="https://lists.chambana.net/mailman/listinfo/commotion-discuss">https://lists.chambana.net/mailman/listinfo/commotion-discuss</a></blockquote><br /><br /><br />-------------- next part --------------<br />A non-text attachment was scrubbed...<br />Name: signature.asc<br />Type: application/pgp-signature<br />Size: 901 bytes<br />Desc: OpenPGP digital signature<br />URL:<br /><br /><</blockquote><a href="http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/c7475258/attachment-0001.sig">http://lists.chambana.net/pipermail/commotion-discuss/attachments/20131017/c7475258/attachment-0001.sig</a>><br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"><hr /><br
/><br />Message: 5<br />Date: Fri, 18 Oct 2013 09:35:49 +0300<br />From: Daniel Hastings <dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org><br /><<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:dhastings@abaarsotech.org<br /><</blockquote>mailto:dhastings@abaarsotech.org>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">To: Ben West <ben@gowasabi.net <mailto:ben@gowasabi.net><br /><</blockquote>mailto:ben@gowasabi.net <mailto:ben@gowasabi.net>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Cc: commotion-discuss <commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net><br /><<blockquote class="gmail_quote" style="margin: 0pt
0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">mailto:commotion-discuss@lists.chambana.net<br /><</blockquote>mailto:commotion-discuss@lists.chambana.net>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Subject: Re: [Commotion-discuss] DNS Issues<br />Message-ID:<br /><br /><br /><</blockquote>CAKxU6K07kNssVHqxr5RJqtwrA6aZNsmSVfLD6AvyTs0AehDVpQ@mail.gmail.com<br /><mailto:CAKxU6K07kNssVHqxr5RJqtwrA6aZNsmSVfLD6AvyTs0AehDVpQ@mail.gmail.com><br /><br /><mailto:CAKxU6K07kNssVHqxr5RJqtwrA6aZNsmSVfLD6AvyTs0AehDVpQ@mail.gmail.com<br /><mailto:CAKxU6K07kNssVHqxr5RJqtwrA6aZNsmSVfLD6AvyTs0AehDVpQ@mail.gmail.com>>><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">Content-Type: text/plain; charset="iso-8859-1"<br /><br />I've actually found that some of open dns requests are being<br
/>received and<br />others are not. The sites that of course I do not want to get<br /></blockquote>forwarded<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;">through Google's servers (youtube, vimeo) are getting through<br />somehow. I<br />tried change the default DNS under /tmp/resolv.conf.auto however<br />once the</blockquote></blockquote></pre></blockquote></div><br>
-- <br>
Sent from my Android phone with K-9 Mail. Please excuse my brevity.</body></html>