Hmm. Okay. All right. So far, the network?
We have the external. And the IP is 1.50.
We have the internal, 100. 122/24.
Um, I would also toss out there that the external, if you can go back to it, Lee.
Hang on.
Okay. Okay? Um, this could also be analogous to if your ISP was using what's called carrier grade NAT.
As in, they have so many customers, they can't afford globally routable IPs.
So, they reuse and abuse NAT. at the carrier level.
So, you could view this external. as carrier grade NAT. It'd be the same type of thing.
Go ahead, Lee.
And I'm sorry, our picture didn't come up here.
Demo gods, man. There, yes.
Yeah, tell me about it. Let me go out and find it.
While he's looking for that. Gary, did I sufficiently answer your question about the 1001 versus.
1-1. Okay.
Yeah, I think so. It was handy in the early days of V4, but, uh.
Cause more confusion than… Then it's worth to draw. We're looking for… Bye.
Oh… Yeah!
Oh, that thing. Oh, that's, um… IEP tables, the flow through the kernel, all the different places you can hook in at all the different layers.
with IP tables at some point in the past.
And NFTables is a complete rewrite, which takes that… turns it on its end, and shakes it all over the place.
We used to have a lot of that picture memorized.
Oh, we're missing some slides here, sorry about that.
AI did… drove me fruit this afternoon.
Tell you what, let's… One of the things I do want to talk about.
to… Build a pie.
You have to… image a chip.
So, before you get this pie running. You have to find a version.
Raspberry OS, Raspy OS. you have to write that to an SD card.
microSD card, rather. And since we're in the Linux world, we would use DD.
So, there are some… Basic concept here, and some gotchas.
That we want to… Take a look at.
We want to write that PIOS to microSD.
If, uh… You can either… the images come format or compressed, rather.
XZ is the compression. When you download them, they're about a third the size of what they are when they're burned.
So, one way to do this, which people have done for years.
You do the, the, uh… Uncompressed on the fly.
Running through PV. progress value?
And then you actually run the DD command here.
Output it to slash dev slash SD whatever, which is the chip hanging on your computer.
With a block size of 4 meg, which is a reasonable number.
And when you're done, you make sure you do a sync.
Because some chips, and as I found out the hard way yesterday.
some adapters. tend to do really stupid things.
And it can take them… Minutes, and even hours.
Are… just hang. in closing… They're riding a ship.
One of the… things to check.
Disk stats slash proc slash disk stats.
Normally.
You know, this is what's on the pie. Are you have… different devices. This is the actual hardware down here, hardware drives.
If you did a wash.
And changing every 2 seconds. If any of these numbers are changing.
Uh, you can also do a grep if you had…
Uh, like, SDI or something like that?
So you just see those lines in this case, uh, P2 is the larger partition.
And if these numbers are changing. After… You did your DD.
Walk away and go get a cup of coffee, because it's not done yet.
Go ahead.
I'll enter… Um, what happens when DD finishes.
is it has written to the file that Linux.
kernel is providing. That is… has been cached in memory.
And the kernel is still actually flushing that cache out to disk.
Yeah, and in fact. first adapter I had.
The DD command came back in, like, 3 minutes.
And I looked at this stats, an hour later.
And it was still incrementing. Hmm? Yeah. So, needless to say.
Yeah.
I killed it, I pulled it. And then put it back in.
And ran it a different way, which I'm going to talk about here in a minute.
So the problem is, if you ever have any suspicion that.
The chip is not writing fast enough, or has not finished.
Look at disk stats. figure out which device line it is.
And then you can always go in and filter that with a graph.
So, you've only got that line. Make sense?
I was going to mention on that there were… pipe it into PV, to my understanding, it stands for pipe.
Viewer. And I kind of do that when I write to an SD card or whatever, but… I kind of simplify it. I just take the output of PV, and I just do the… greater than sign, and just redirect it to, uh.
slash death slash whatever the SDX or whatever. And it's almost the same syntax as cat, you know?
If you uncompress the… XZ file.
Oh, okay.
What? What… what Lee's showing.
Go ahead, Grant.
is he… if you use the greater than redirection like you're talking about.
It is using your privilege, your user's privilege, to write to that file.
Whereas in the example that Lee is showing, it is actually running DD.
as root… So Lee can run this as his normal user that cannot write to block devices.
Normally. So he does…
Yeah, correct, yeah. Okay, my mistake. I have a bad habit of always having a root terminal open, so… Yeah. Nevermind.
Fair enough.
Yeah. Well, and if you had a root terminal open, you know, you would have to be in this image directory here.
per XE to find the file. Mm-hmm. Which… Yeah, are you using Absolute Path?
Or use a pack, too.
Okay, anybody else?
relative path will work, too. nitpicking. Somebody's got to.
Yeah. Now, first off, you have to uncompress the image.
Row 1. Secondly, you always write to the whole device.
An image file includes multiple partitions. In the majority of times.
And it also includes any master boot information that has to be in the.
initial disk. Information.
all the way in, uh… in a master boot record.
You can't write that if you're writing a partition.
So you always have to write to the whole drive, whole disk.
So the key thing on that last slide. is the one at the end of the second line that's indicating.
Which, uh, which partition on the device you're writing to.
Oh.
And we've got a little loss here. What the Stand by.
Um, so, you want to write to the device.
like, slash dev slash… SDC… Sam Delta Charlie.
Uh, not SDC1. One is the partition.
Most images include the partition table, and potentially. boot sector, so you need to use… The raw device slash dev slash SDC.
What the heck?
I think it was probably a different document?
Oh, right, you're right. I was in the burn one.
Thanks, Grant.
Yep.
My, uh… this year-long day and month. at work has gone about like the demo gods are messing with us today, Lee.
Mm-hmm. Tell me about it. Okay, absolute rules, that looks familiar.
There you go.
It is always… you always need to unmount. Uh, most Linux systems, when you add a disk.
in a port, it will automatically try to mount it.
If there is a file system on it, it will complete the mount, and will show it in your.
navigation tool, whatever that is. So, one of the things you need to do is be sure to unmount it.
before you do the DD, before you do the… The right.
There are a lot of people use… Uh… CONV equals FSYNC.
I'm sorry, I don't remember what the SUNV… Grant will convert FSYNC.
Convert. Yeah, I'm not sure what fsync does. Let me check Man page real quick.
But CONV is conversion.
A lot of people would stick that on the end of your DD command.
To ensure that… The chip is written.
Completely before it returns. But I tried that yesterday, and that is what.
actually hung the right process.
Uh, it seems as F-Sync. is an alternative for FDA sync.
Um, which it's… trying to add some logic for making sure that it is.
committed and flushed. I'm sorry, flushed out of cash and committed to disk.
And I'm not surprised with all the various different types of caching that that.
had an issue. Or it may have been… that it actually was working perfectly fine.
But it was the command that took a couple of hours to run, and.
it had finished the command. looked like it had finished 10 minutes ago.
But it was still flushing the cache.
Right. And again, the reason that bit me is the adapter I used first.
It was… not working properly, and… It never finished.
Hmm.
Which was totally freaking. Yeah.
Ouch.
What's flushing your cash such a long operation?
Because it tends to be slow to write to a chip.
Um…
They are not designed for speed.
Yeah, the image… Lee, you said the uncompressed form was, like, 3 times the compressed size.
What was your size, and do some math, and what do you think uncompressed was?
Correct.
Uh, compressor's, like, 1.3 gig uncompressed was, like, 4.
Oh, okay.
Okay. Yeah, so it's… probably writes that, if you've got a lot of memory on your computer.
It soaked up a lot of that in the disk cache.
And it's just waiting on the flash. which most flashes slow.
Especially inexpensive flash like used for SD cards on Pis.
It is slow, continuous right. You know, it may have 128 megabytes.
Of cash on the chip. But… you're dumping 4GB to it.
at maybe single-digit megabytes per second. So it's gonna take a while.
Yep. Especially with microSD.
They are not, uh… Design for any sort of… Fast data transfer.
You've got… it's… not quite USB.
on SD cards or any form of. But you've got its speed limitation.
And you've also got the speed limitation of your USB bus.
That your adapter is plugged into.
Rule 5 always run sync after. And that ensures that it is completed.
And if you need to, you can jump over to another shell and check your disk stats.
Just to verify that the right's completed.
True.
I have a recommendation there. Um… I always run eject.
space slash dev slash SDC. If it is the third… SCSI device. Um, eject… is actually a command built in.
That knows how to monitor the disk caching or hooks into.
the kernel and gracefully does that. So I'll usually do a DD.
Command, uh, ampersand, ampersand space eject slash. dev slash SDC, or… Whatever.
So the DD may finish, it's written to memory.
and eject actually pokes the kernel and says. flush. It actually confirms.
that the kernel has, um… Clean things up.
Uh, did you close the Tmox on… On the pie?
Not knowingly. I might have accidentally.
Okay, you want to go ahead and join again?
Can you show us that command?
Yeah, I'll… Oh, uh… type out, like, your DD, or the eject command.
Yeah.
Eject space slash dev slash SDC, or whatever it is.
Okay, I can't do that here. Uh, that would… that's mean…
Uh, okay, sure, saying just eject, and then slash dev slash device.
Yes.
Everybody knows… speaking of which, everybody knows LS Block, right?
That shows you what physical devices you have. Now, here's my work… my main workstation.
We showed this before in a presentation. But this is the simplest way to show what physical devices are built on the system.
Whether they're… hardware, RAID… our RAID partitions.
Alright, rule 5, always run sync. As I showed you a while back.
And finally… Disc activity… Always beats screen output.
So, check disk stats if you have any question whatsoever about the right being completed.
Uh, we mentioned you can't… GD, a compressed image.
So you either must decompress it first, or… stream decompressant in real time.
I usually uncompress it first, that way it. Shaves a good portion of the pipe, but… decompression does run in memory, so it's not a very big overhead.
So what that gives us…
Assuming you aren't compress it.
And then, when you want to ride it. Or you can write it on a single line, there's a backslash missing here, sorry about that.
If it pauses, if you can't figure out what's going on.
If you did a PV. And you're not seeing any status, that's what happened to me.
Remember that the right itself. Can be fast.
Because it's going to be cached in memory. But then the physical act of.
Writing all that memory out to the chip. Is what takes the vast amount of time.
Which is why you do the sync after. the DD command returns.
To make sure that the ride is complete. And if there's any thought whatsoever that it is not done.
Go check disk stats.
During the actual write process. You're not gonna have a lot of CPU load.
The disc LED may actually stop. But you're not, uh… On the adapter.
Hang on, Lee, I accidentally muted you.
Try the lower left corner of the window you're showing.
Microphone… Sorry about that.
There it is, okay. No worries.
Okay, when you're actually doing it. I showed you LS Block.
You don't need to worry about all the rest of it, because most systems, it's only a page or two anyway.
If it were SDI, which is… Typically, what mine… Shows up.
29GB microSD.
or 32GS microSD, rather, SDI. It might have multiple… one or more partitions on it.
But as long as that's your target. You know, you have to… Unmount it?
And Mount slash dev slash STI star. Wildcard works.
Good, right, uh, good burn command, I call it burn.
This is the… fairly recent Trixie.
Which is the current version. Uncompress it.
pipe value… Don't forget that you have two different authentication levels here.
The top part is user level, the bottom part, where you're actually writing in a block, requires pseudo permissions.
And when you're done… and after that, you do a sync.
If you have any questions in your mind, check disk stats.
This is a command I was showing you before.
Watch… Update every second, number of seconds one.
Grab SDI… slash proc slash discuss.
Uh, you can also look for… dirty or write-back buffers and mempho.
Or you can watch the messages. quality messages.
Things that break cards. Hmm. If you do Ctrl-C during the flush, pulling the chip early.
Writing to a partition instead of the physical device.
using FSYNC. are assuming silence equals failure.
define brake card? Does that just mean it's not going to work?
Or does that mean you've ruined. the card. No, it means that whatever image you're writing is corrupted.
In most cases, you can rewrite it.
Yeah, the data corruption, not physical damage.
Right.
Raspberry Pi now has a… An imager program that.
You can use. And in addition to writing it, it also asks you.
What you want your username and password to be, and… What's the SSID of your Wi-Fi, and what's the password for the Wi-Fi?
And I think he even sets up the SSH for you.
But, uh, be aware that they had a version, and I think it was 1.9, it might have been 1.8.
that had problems. So, now I think they're up to 2-something.
So, you know, be aware if you're gonna get that.
Because I seemed like a lot of people were having problems.
After they would run that amateur program. And then it wouldn't connect up for their internet.
Yeah, dude, do they even have a version for Linux?
That, I don't know. I would assume so, but… Uh, I do know, I think they've got it for, uh.
Windows, and I think they even got a… I think it's even on the Raspberry Pi itself.
Okay.
So, you know, you're on the Raspberry Pi. If you look at a menu, you'll see something about an imager.
Yeah. Okay.
All right, I talked about… Do not use FSYNC, use sync.
We talked about PV… IOStack can help us, in some instances, showing I.O. Activity.
If you combine Shapes Remove with Sync. It'll actually tell you when it's safe to remove.
And we talked about disk stats. Okay, everybody ready to go out and burn their own ship?
smoke them if you got them.
Welcome infugaro.
All right, Grant, I think it's about time to turn the floor over to you.
Okay. Uh, firewall's built.
to build a firewall for us.
Okay?
There it is. See? Um… I have been… doing… and do a iptables-save. Apparently, I'm on a different.
Scream than you are.
How do I… the next screen in TmUx.
On a curse is great.
Okay. Okay, let's see.
Okay, uh, here is the absolute. bare minimum… IP tables, firewall.
Um, you can use NF tables, IP tables, UFW.
Whatever your preferred poison is. I've been using IP tables for… 25 plus years.
So, I will… it's what I know by heart, live and breathe.
So, I will just go through the lines and.
Let's pipe it through NL. So, really, there's… Five rules.
and a couple of settings. Um, Lee, you talked about we want to make sure that.
We can SSH from the LAN, but not the outside.
That is what rural on Line 6 is doing.
We are specifying that. Anything from the land, including SSH.
can come back, or can connect in. Uh, and that is ETH0.
And the source subnet. rules on line 7.
says anything can come in the outside interface. If it is an established connection.
And if you recall from a recent presentation where we talked about, uh.
Natting and staple packet inspection. This is the stateful packet inspection going.
You are not an established connection, you are not an established connection, hey, you're a reply to something that went out a moment ago? Yeah, sure, come on back in.
That's where the state-related and established comes in. So the input rules are what's coming into.
the system. The forward rules on line 8 and 9.
are traffic that passes through or forwards. through the system. And it's kind of very similar.
Um, we're allowing any traffic. in on line 9 that is from the internal network.
it can go out. So, passed from the inside ET0.
to the outside ETH1, just go through. Line 8 is, again, that same stateful packet inspection.
is it a reply? If it is, let it through.
The other thing we're doing. is on line 19. I've chosen to use the masquerade.
Target instead of actual source netting because of some parameter minutiae.
But that basically says anything that goes out. The outside interface, ETH1.
change its source IP to be whatever IP address is on that interface.
And that's good for dynamic connections, or any time you don't know.
What the parameters are gonna be, it's just kind of a… Big Hammer, change the source to be the interface.
send it out.
Chance, I'll be back in a few minutes.
Um, and the only other tweaks that I have changed.
is on line 3 and 4. where I said, if it is not… allowed in the other rules?
drop it. Don't do anything with it. So, to me.
This is a minimum viable. IP tables firewall.
5 rules and 2 settings. And 4 of the rules are almost identical to each other.
Lead, does that make sense?
Certainly does.
Any questions? Sorry.
That's good. Does anybody have any questions about… Any of the parameters we're talking about here?
And things like UFW or firewall Builder, or other things.
build these… types of rules.
for you. I just predate those tools, and I… Sprecken IP tables.
Okay, the online 18, uh, 18. 17. Uh… Okay, post routing accept.
Okay, so what are the… what are the two numbers?
Um…
in the, uh, brackets representing.
I believe one, and I'd have to check the man page, I believe the left number.
It's either different directions, or… number of connections.
Or packets versus bytes. they're in.
So, and you have similar thing on the input.
On line 3, I believe that is… when I ran it.
There are 6 packets that were dropped. Totaling 438 bytes.
Huh.
Uh, give me a moment…
Yeah, so… there we see… that that particular rule has seen 86 packets.
At, uh, 5,455 bytes. And so, the post routing default except.
is 20 packets at. 21 or 2,173 bytons. It's packets and bytes.
Does that answer your question, Gary?
Yes. Now, the next question is the significance. Uh… is there any… I mean, should we be… Carefully recording that number? Should we be… What number would make me worry, uh…
Seeing there.
It is highly dependent on… the firewall rules that you're using.
I very seldom… Worry about the count on… what are called the chains, the lines starting with the, uh… colon, so, like, line 3 is the input.
Chain inside of the filter table. And tables start with the asterisk.
Um, I generally do not worry about those. It's not been a part of my firewalling methodology normally.
Mm-hmm.
Um, I might care, like, when I listed the previous command to show.
The details of the post-routing table in the NAT.
I'm sorry, post-routing chain in the net table. Uh, packets or bytes.
Mm-hmm.
I care about that if I have a more complex rule set, like my personal system. In the past, I have had.
Different rules for each type of ICMP packet, so I can get counters of.
How many echo requests? passed in one direction, how many echo replies?
Or how many times did somebody try to send.
Uh, something they shouldn't have. it kind of goes into accounting.
And it is really dependent on what do you want to see, what do you want to know.
about your traffic. As a general, I just want it to work and pass things.
you don't care.
Okay.
As long as we mentioned it, going back to line 3.
Any, uh… Any, uh, sensitivity to those numbers that we should worry about?
Not really. Um, that is… Since we are allowing.
Everything from the LAN to come in. It is either an address that is not part of the 10,000-24.
or it is something from the outside that did not match the stateful packet inspection.
Since I have not explicitly allowed it in. the default action is to drop it.
Um… to me, that is an indication. that something on the outside network on the ISP, wink, nudge nudge, one of Lee's other networks.
It may be broadcast traffic. That has no bearing on us.
But it did increment a counter. And you can get much more detailed and log things and see a whole bunch more.
Lee, was there anything… specific you wanted me to… Mentioned?
Um, I'm just wondering what's all… something that's confused me a lot in the past is the difference between a save.
And the actual rules that you input.
Ah, okay. So… You get to the right window… So, IP tables-save, all one word.
outputs the current. IP tables, configuration in kernel.
Conversely, that… is just… The output of the filter table.
and specifying filter. really doesn't change anything. That's the default.
I tend to work across. tables, uh, filter table for filtering things, and map.
for packet modification, like. uh, nading or masquerading.
Or mangle if I'm really wanting to be devious, so I just… happen to habitually type.
dash T table name. But this output IP tables versus IP tables save.
is… the rules in one view.
Of one table. possibly one chain.
therein. It is not the entire set.
IP table save and corresponding IP tables for store.
is meant to deal with the entire configuration as an atomic.
unit. Um, it is meant for… you can do an IP tables-save.
and redirect it to a file.
And subsequently.
you can read it back in, to reload it.
So, different distros. will actually, or different… firewall initiation scripts.
Use something like what I created, the temp IP Tables Rules.
And it is literally… That data, the IP tables restore.
Turns into the thing to put in the kernel.
IP tables by itself. more detailed interaction, but not the.
full thing. Did that answer?
Lee, I'm having trouble hearing you if you're talking.
Yeah, think about it. No, that's okay. I was pinging Gary to see if… Yeah, we're mumbling.
Oh, yeah. Uh, I heard what you say, I gotta think about it some to make sure.
truly understand it, but yeah.
I…
Yeah, while he's thinking. Uh, I've seen other projects where they were… there were custom firmware, or you used, like, a Linux-type kernel.
on, you know, some legacy routers. You know, basically custom firmware made by.
somebody other than the manufacturer. But this, you know, now that I see this, you've taken the Raspberry Pi.
Yeah, Steve Goldman.
And the IP tables… uh… configuration is basically doing all the routing.
it is doing the filtering. Routing is actually done by the kernel.
So, in network…
Okay. But it's all be… yeah, instead of using… you know, some other hardware, we're using the… all these features that already exist in the Linux kernel that runs on the Pi, so it's…
Okay, yeah, it was different than what I was expecting, but this is actually very interesting.
Yes, sir.
Go ahead. I just wanted to make sure I was seeing what I thought I was seeing.
Yeah, um… I have… you are seeing it. Um… I have done a lot of very complex networking things.
And my go-to. firewall or router in just about any situation.
is an old PC running Linux. and I have made… been able to get it.
Okay.
I have been able to make it get up and run circles around.
just about anything else. usually at a very large.
Right.
cost savings. Um, one of the things that will compel me to go to something other than a box running Linux.
is if I need a custom physical interface. that I cannot economically get a card.
in a PC. So if I need to interface with.
some esoteric network technology. Um… that I can get… you know, brand name router that I cannot put in a Linux box.
I kind of have to go with a brand name router.
But I have had Linux routing and firewalling. between 4 megabit, like, all the way back to 4 megabit token ring.
up through 10… or faster gigabit Ethernet.
it does it. You start bumping into some things with the performance of the backplane on the motherboard.
But there are some ways to deal with that.
And it's in the kernel. It is actually possible.
to build a Linux. Firewall and router.
that runs the only thing running is the kernel.
As in, it loots up, configures itself. and then goes into a shutdown, but not power-off mode.
The kernel's still running. it's still routing. It's still firewalling.
you just can't manage it. without rebooting back into a mode where you can log in.
It's real hard. to break into something.
that has no user space processes running.
So, like, in a net one.
Uh, more like an init… Zero.
Okay.
shut down, but power off.
Okay. So, yeah, because, uh… since you're using just a generic Raspberry Pi image, I mean, probably if you had a, uh… HDMI… monitor plugged into it, you'd see the.
you know, the Debbie and GUI there. But in this case, you don't care.
Correct. Uh, in fact.
So it's… it's there, it would be available if you want to, but… Okay.
Yeah. We actually… texted me at one point and went, crap!
I put a desktop image on there. Will that be a problem?
Nope. It'll work just fine. Um, I would recommend, if you are using something that is a desktop image, you go through and harden some other things.
you know, don't start the X server, or Wayland, or whatever it is these days.
don't run a CUPS printing, Damon. Your general security, you don't need those other things?
Right.
So don't have them. But they will function, they will perform the routing and firewalling function.
perfectly fine. It's just not security best practices to have that other stuff.
Yeah, if this pie were to be put into production, I would.
coming along with it.
you would never have any kind of GUI on it, because there's just too many.
pieces of code out there that have to be secured.
And even if you configure them to not start up.
When you go to apply regular OS patches. Like, if you… I ran into this with Solaris servers, people would install kitchen sink installs.
there'd be full gnome, full Firefox, full Thunderbird. for an Oracle database server.
So we would get Patrick emergency notifications. for things we're never using.
And it's like, no, rip those things off so I don't even have to patch them or deal with the disk space or deal with the backups.
you know, function. they just cause other care and feeding problems.
Does that make sense?
Yes, actually, yeah. I'm liking this.
Yeah. Yeah.
Um, looks like Dumpster Fire Dylan has an interesting comment.
Yes, there is something to be said for the power of.
the desktop and PC. My consulting career.
had been… I could… when I went into a client.
They almost always had somebody. that needed a new computer.
So it's like, I need a computer. to turn into a router or firewall for you.
And I can make it do whatever I want.
Who's got the oldest computer? Who needs the upgrade? So, they get the upgrade, and I would repurpose their old hardware.
And yes, there is some power consumption. But when you're in a business that is manufacturing and has.
double-digit thousand dollars a month. electric bill for the equipment on the plant floor.
the power consumption of a single PC. is negligible, and if that device.
ever failed, you know, lightning struck 3 miles away.
I could grab whoever's on vacation. their computer, I could pull the drive out of the router and put it in the person that's on vacation computer.
and get that customer back up and running. in less time than it takes to drive to their office.
And it's a standard platform, standard hardware, it's serviceable.
So, yeah, power is a concern, but the other benefit.
always outweighed it for my customers.
Did that. I don't know if you have a microphone and can chat.
Or if you can respond. Uh, if I spoke to your points.
Yeah, and you mentioned you're running on a Pi 3B, I think it was?
leave for the demo here, yes.
Or… Yeah, and uh… I'm sure aware of, like, the Pi 5s are available now, which I've tinkered with that one a little bit, but that.
Well, I guess where I'm going to, is there any… is the Pi 3 sufficient to do what this needs?
It depends on your… depends on your network interface.
Um, to meet… Yeah, to me…
The, uh, on the 3B. Both the hardware interface on the card and the USB was limited to 100 megabit.
Ah, okay.
So, one of the problems we had was the ONT does not do 100 meg, it won't… it won't… connect slower than a gig.
So we actually had to, uh, play around with that a little bit.
Yeah, but this idea, what the Linux kernel is doing.
going between multiple network interfaces. you can pick up and apply to any other system that runs Linux.
that has multiple network interfaces. We just happen to… choose this particular pie, because Lee has multiple.
a lot of people getting their hands on a pie and an extra network card.
That's kind of easy, you know, that's… if you catch them on sale, that might be less expensive than a fancy dinner out.
And how many people have a pie they're playing with at home?
Yeah. Well, people in this conversation, probably most of us, but.
Yes, indeed.
There are also some other computers. Um, probably more powerful than a pie.
That are… I don't know. Maybe more… more built for that task.
That, uh, probably more reliable. That are inexpensive as well.
Absolutely.
There was a device called an orange pie or banana pie, I don't remember which one.
that had two… 10 100 meg interfaces, and this was back before they got gig interfaces.
That were not on the same. USB bus. So there are absolutely other small single-board computers.
or small form factor computers that can do this.
Um, it's… everybody knows what a pie is.
they probably could put their hands on one easily.
it's to demo concepts, and you can apply it wherever it works best for you.
Yeah, in fact, BananaPie has pies that are actually built for routers.
If I remember correctly, one of them had two.
10 gig, uh, 10 base T ports.
I have a CM4. Or a compute module board right in front of me that.
Because, uh, a second nick attached to the. Compute modules, PCI bus.
I think the compute module is very interesting. I don't know… Raspberry Pi hardware well enough.
to know how much of that is the carrier board.
the compute module is plugged into versus the compute module itself.
The compute module itself has, um… the PCI connection, so… part of the compute module's, um.
interface that you plug into has that 1X PCI lane to the.
processor. than the carrier board has.
That wire, or it's into… Um, a NIC, or… So if you want to know more.
Chef Yearling has a whole bunch of videos on.
Yeah. Um, and… Dumpster Fire is saying that.
he's still playing with outdated, uh… Netgear TP-Link routers, reflash them with DDWRT.
Uh, yeah, I have done that in the past.
it was very interesting. I installed a few of them.
But I went back to the oldest computer in the place.
Because I found that if that Netgear or TP-Link or comparable.
had a hardware failure. the backup… options or service restoration.
left me wanting, because the clients didn't have. one of those devices spare.
That they could go without. Whereas almost all my clients.
Uh, yeah, so-and-so's out on maternity leave. You can use her computer to get us back up and operational in.
3 hours instead of… we have to order parts, and it's going to be 2 days, or I have to… drive to Best Buy and get something that won't do exactly what we need, or… What have you. And DDWRT.
it is a stock, I believe, fairly stock Linux kernel. There may be some patching under it.
and some interesting… Packaging. It's a very capable thing.
I just chose generic CentOS. type systems back when I was doing that.
Um, back when CentOS was still a thing. It's… whatever works best for you. If you like the low-power stuff.
same methodology applies. Knock yourself out, have a ball, learn.
make the world a better place.
I think, uh… I think OpenWRT.
Lee, do you have any questions about this?
partnered with Orange Pie, if I remember right. And they now have a router letter that I think has dual 1 gigabit ports on it.
And I think it's under $100, if I remember right.
Nice.
Yeah, I found BananaPie.org, and they've got a… Banana pie, BPI-R3 router board.
Bushtaka has 5… gigabit Ethernet ports.
So it probably does this, but… Yeah.
Sorry, will you clarify, is that… something by.
5 gigabit has the speed. Or 5 as a quantity of 1 gigabit.
Um, I believe it looks like 5 gigabit E, 5GBE network port, and looking, they've got a little picture here.
So, for two ports that are 5 gigabit Ethernet capable.
And…
Yeah, from the picture has 5 Ethernet ports. Um, you know, without getting too carried away here.
Yeah. Okay.
Yeah, but… yeah, I don't know if it's under $100, but… if you're wanting a super router.
But anyway, yeah. I'm through interrupting.
You're fine.
I haven't heard leave for… a few minutes, so I'll… give him a moment to see if he's… hiding in the shadows, or he or Gary are off to the side scheming.
Which one of the, uh, lottery tickets do you think we should bet on? What number should we use? Oh, oh, oh, we're on the microphone.
You've got an open mic. Go ahead, Lee.
No, I was just, uh… Gonna show a couple things here.
So this is another… another example of a… system that has been built.
This one has… Uh, this is actually a Pi 2.
If I remember correctly. It has one interface on the board.
Which talks to the public world. It has another interface on… USB, which talks the internal network.
It has another interface on USB. It talks the 1001 network, which is the phone system here in the office.
This guy, uh, let's see…
This is a little bit more sophisticated.
Because… well, let's see… That's interesting.
What?
No, I'm just, uh… I'm not sure where all these rules come from.
Unless each one of those is a peer. from our, uh, ship truck provider.
Looks like the NSA finally got in.
Uh, let's see, which is which, uh…
She, I think it's, uh… Which one is it?
Yeah, here it is. If you use… USB network.
NIC devices. Every once in a while, if you take a power hit.
are… The system crashes for some unknown reason.
There is a small but not insignificant chance that when it reboots.
the USB devices are going to change. Name.
This is one place. that it took me a long time to figure out, probably 6 months.
Because… When the power… when one of the interfaces went down.
And I had to replace it. I couldn't get it to initialize with.
the proper name. Which meant it could not pick up the proper config.
from the IP tables rules. So… This is an example of taking a USB.
ID? And… setting up a rule.
Okay.
In… The persistent rules, 70 persistent rules.
That will take a USB device with that ID and force it.
to have the interface name that you need for your firewall rules.
There's ETH1, which is USB, ETH2, which is USB.
So, effectively, using the IS, or the… USB ID as a MAC address.
Not at the MAC address, but an identifier of the device.
Kinda, sort of.
No, that's…
Yeah, so, yeah, you could think of it like a MAC address.
Okay. Yeah, it's unique across the USB world.
What?
Right.
No, it… that actually is… the MAC address. The UDEV rules have various criteria, one of which, particularly for network devices.
is there's an attribute that. is the MAC address of the device.
You're telling Udev. The device that comes in that is a network.
Hmm.
It's during an ad, and it has that D8 EB dot dot dot dot dot dot dot dot.
MAC address, name it, or rename it. to ETH 2. That's standard UDEV.
Your motivation is to make sure that that. physical USB NIC.
Okay.
dongle always gets the name. ETH2.
So, you can always… Plum it in like you wanted it before.
Or like you had before. through a reboot or whatever.
Right. And obviously, if one fails, then you have to go in here and change the UDEV rule.
Yep.
So that it can be initialized with the same function that the previous device had.
Oh, okay, so if you did an LSUSB, you would probably see the USB ID.
But from what he was saying. Okay, it's… So that device has a USB ID and, as you were saying, a MAC address, since it is a network device.
Okay, so that makes a little more sense.
Yep. Um, Lee will… I think it's… LSUSB space dash… lowercase S.
space, um… one of… like, uh, 001:003.
Hit enter. Add a dash V in front of the dash S.
Please. Correct. Or verbose in this case.
As in Victor?
And if you scroll up, you might be able to see… No, there is not exposed.
MAC address. Actually, in there.
I didn't see it. Scroll down…
No. You can get it through the… probably assists file for that.
But if you do a if config. you will probably find that, uh… The address from your UDEV.
is the MAC address.
Uh… scroll… That's not…
Yeah, here it is. Eth2… 00 to 41.
ETH2… no? It's different.
Yeah, what's the… the ETH Z1 is 00E0.
Scroll back down, or… Um… rerun your UDEF rules while… if config is on the screen.
Yeah, your ETH1, it's probably matching, so ETH0 is on board.
Right.
that one gets renamed to ETH1, and the third one will be ETH 2.
So you have probably replaced. ETH2, not updated the file, but due to the others matching.
you ended up with what you wanted.
Well, see, we're in each one, 00 and 58.
Uh, see, we don't see him here, though.
How do I… how do I look at the, uh… where you see the Mac again for each one?
And you may…
Uh, where it's… the attribute address 00E04C534458.
Right, I'm saying… Where can I verify that?
Yeah. Uh, ifconfig space ETH1.
or IP link, show, Dev, ETH1.
Yep. There you go.
00 Charlie 53445. Yeah. So your onboard will always come up… should always come up before USB.
So it will get ETH 0. that one gets ETH1 because of the UDEV rule.
And it's a very large degree of certainty that the other will be.
ETH 0. I'm sorry.
So I probably… I probably need to update that.
I would suggest that at some point.
Yeah.
Yeah, you're… and Linux combines many…
functions to do things here. You're combining UDEV. rules to cause devices to get specific names.
IP tables is using specific device names. kernel is using… specific device names for IP address configuration. There's multiple things working in concert with each other.
Yep. In fact, I can show you over here… Uh…
This is a firewall rule set for our firewall box here in the shop.
And… One of the things we do up to make it more logical is we use aliases.
So, instead of seeing… tunnel or IP address, or… random device names.
We've got function names. So, when you're reading the rule.
In other words, if the input is from the external.
input is from… PW… Which is the… one of the VPNs.
Extern… PH3… PMG…
You know, it makes it a lot easier to read it.
Mm-hmm.
Alright, any questions? For anybody.
How long has this guy been up and running?
The one you're on now?
Which one? Uh… 17 days since we took a power hit.
Oh, okay.
But… the system, uh… let's see.
It looks like 2022.
Cool.
Warriors.
This guy's… this guy's a little older. who's 23 years old.
What is he can be drinking. This is one of them I gotta replace one of these days.
And what they say, don't drink en route.
Yeah. Trying to do that, not faced would not be a good idea.
Balmer Peak thing.
Oh, I know, is it… do I… wait a minute, it's even older. The, uh, the Colonel's from 2007.
And this is a pie that's in production. This is actually a mail server.
But, uh… 8 years old.
This guy's been up a little longer. Almost in here… couple months short of a year.
All right, any questions?
I'll show views on questions and… Specific to tonight's talk.
I guess the, uh, the, uh, recording will be available in a few days.
But while you're musing, thinking. I'll make a…
Yeah, it'll… we'll get it posted up here probably by… By the weekend.
Thank you for all the time you've taken to.
present that, so it was very informative.
Excellent. Glad you enjoyed it. Yeah, thank you for recognizing all the effort they put in.
Dan would probably… have some choice words.
Both Lee and…
for us, if somebody did not ask. for the people that are joining for the.
first time or coming back. After being away for a while.
Um, we are curious what brought you in this evening.
And how did you hear about us?
Well, just, uh, happened to be looking at, uh.
meetup, and I have been a member for, you know, more than a year, but… I, uh, got kind of disconnected.
And then I saw that you were presenting this topic on.
Uh, creating your own router, I found that pretty intriguing, so I thought I'd tune in.
Great, cool, excellent. It's interesting, it sounds like you just stumbled on it meetup, because.
We had… I thought we had gotten the membership list out of Meetup and sent out an email to everybody.
But, uh, so, yeah, if you didn't get the email, I appreciate knowing that that does not work, so…
No, I probably got the email. I'm just so overwhelmed with emails. I don't read everything.
Okay, okay. Understood.
I can relate to that.
Mm-hmm. Alright.
myself, you'll recall, I don't know, a year or so ago, I had a, uh… Problem with, uh, Spectrum Internet.
to where it wouldn't connect to my… Cisco router that I used for… had been using for a decade, probably.
And they decided to update their equipment. And told me I needed to get a new modem.
So I did… haha. And then just had increasing problems with just being able to get it to connect, and finally.
The solution was to give them the finger. and switched to AT&T.
And it's been working quite well since then, except for… Uh, two, maybe 3 weeks ago.
Yeah.
I got up one morning and was, you know, hopped on the internet, or tried to.
And nothing was working. Well, okay, so… feared that the modem had actually died, or we have my router, rather, had actually died. Turns out it.
Fortunately, it was just a little power brick. The plugs into the outlet.
Um, but the original symptoms that I worked through were that… was at the.
My router had died. Um… but then… Um, you know, I was able to get it fixed by ordering, you know, the.
Micro Center didn't have a power supply that worked, and Best Buy.
Nobody within driving distance. that I could find. So I ordered one from Amazon, and it's running on that right now.
But I thought, well… This router's… you know, Cisco announced that it's out of service and out of support, and they don't even want to hear the.
model number anymore. Um, I thought, maybe I need a plan to get.
Um…
get, uh, you know, should something really happen. Um, so yeah, I… saw this come up on your, uh… you know, the emails that pop up, I thought, hmm, maybe I should stop it.
Sure. Yeah, yeah, yeah.
See that one, so yeah.
See?
Um, I wonder… Is… have you logged in to a command line? Is it an iOS router, or is it… possibly a Lynxys with a Cisco badge.
Uh, I'm most certain it's a Cisco… Period.
Okay.
So, it doesn't have a GUI. Okay.
Correct. Well, it's got a web GUI.
I've had some problems. I've had some problems the last couple of months with AT&T.
I live out in the boonies, and uh… I finally got disgusted, and I just.
I still gotta have a fight with them over how much do I owe them or not, but.
I bought a Starlink. And it's got much better speed, and so far, it always works.
It's been up, I don't know, a month or two now.
Good. Absolutely.
And they're only charging me 50 bucks a month, so…
Cool. So your problem, Steve, is going to be hammer… when you get 6 inches of snow covering up your antenna.
Oh, then it turns on the heater, it has a heater, Lee.
Oh, it has a heater? Huh? I love it!
As a heater.
There you go!
One of the advantages of having your own router, particularly when switching.
ISPs is you probably retain your configuration and control point.
that interfaces with your network. And you can replace whatever equipment the ISP provides.
And do the minimal configuration change to work for the new ISP.
Yeah. Right, and… I had done that before, where I basically unplugged from one.
While still retaining the vast majority.
ISP modem to another. And it was exactly what you said. Or, if there… if the ISP is down altogether.
Yep.
all my stuff still worked. you know, everything in my house, like, I can… You know, do everything that's inside, like, I've got all my videos and most of my music digitized, so I could.
do all my own stuff. Um, the only thing I'm disappointed with, with AT&T is that they don't have fiber in my neighborhood, which is… annoying, but… I mean, it works… it works good enough that.
have wire in my neighborhood.
I don't care. Yeah, mine's the, like, the old telephone wire.
Oh, God, I tried that once years ago. That was terrible.
Twisted bear stuff.
And, uh, the other problem is we have, uh… really aggressive mice out here.
Yeah.
And the phone companies got all their wires buried, of course, and of course the mice.
When they see that little green post sticking up.
It really has no bottom. So it's not sealed. Sort of mice just crawl under it and eat the wires.
eating the wires off my truck, at least once.
Just… Ah, not going…
heard…
Yeah, in fact, I heard where Ford was one of them, and probably other manufacturers, where they were… the big push to.
use green materials in the construction of, you know, like the… wire insulation and seat padding and all that kind of stuff.
Mm-hmm.
Turns out that the, uh, critters, like mice and possum and that kind of stuff, whatever it was they were making, something.
Yep.
You know, made out of soybean or whatever. They thought, hey, that stuff is delicious, and so… and so, yeah, I've got a… A friend in the amateur radio club, and him and his wife were living out somewhere in the Boondocks.
And they were always having. you know, things go wrong, electrical problems with their cars, because.
you know, the mice and whatever get up there and just eat the insulation off the wire, and then… It's all downhill from there.
Oh, man.
If they got inside, they'd, like, eat the. padding, you know, what the foamy-type padding of the seat cushions and all that, so it was kind of a nightmare.
I haven't had that problem, but…
No, they haven't really got inside the interiors on any of my vehicles yet.
They're still… The older one's got some water leaks, unfortunately, but.
You know, it's… it's not a bad enough leak that mice can get in.
That's an old stinky diesel from. 96, 97.
They ain't interested, but they changed, and that's exactly what happened to my Ranger and my Focus.
They went to a wiring insulation that's built on soybeans.
Yeah, right.
Oh, the mice love it! That's… it's been a bad enough problem across the country that.
I have heard that the newest cars, they have been mixing capsaicin in.
With the, uh, soybean… whatever. And that supposedly seems to fix it.
Um, comment about the routers. I have actually… taken to, uh… running virtual machines.
has routers, and this… the same methodology. packages, configuration, etc.
Works just fine on a VM. So, at my house for a while.
I had a physical virtualization server. And my AT&T ONT.
plugged into one network port. And did… what Lee demonstrated this evening.
But inside of a virtual machine. to other virtual networks.
I just checked my speed on Starlink, it's, uh… 99 megabits.
And that's with, uh, you know. us hacking on Zoom.
I have no clue how efficient Zoom is, but I bet it's not.
Are there any other questions regarding the presentations this evening?
While people are thinking of that, I'm going to throw out just a couple of things that I should have mentioned earlier, or could have mentioned earlier.
Uh, first off, elections. As I mentioned, uh, SLUG is actually a, uh.
501c Corporation. Uh, we did that some, well, over 30 years ago to give it some continuity and some structure.
Uh, part of that is there is a legal board of directors. There are 5 people on it.
Uh, it's a rotating 3-year terms, and uh. So, there are two seats, which are up for election, uh, at this time.
Um, so… If you attend it. any two of our meetings in the last calendar year.
You are an eligible voter. Uh, and, uh, of the 5 people on the board of directors, the 2 who are up for, uh, election are the.
to current occupants of those seats, I should say, just happen to be our presenters this evening. Uh, Lee Lambert.
And Grant Taylor. Uh, boy, have they ever got a campaign strategy, I tell you, these guys are right on top of it, doing a presentation right before the election. Jeez, so… Um, however, if, uh, if you'd like to really make their day, you could run against them, and…
Take the receipts on the board of directors, or as Stan, uh, always announces it when he's making the election announcement, if you don't want your name on the ballot, get $10 to stand before, uh.
Or February 1st. Before February 1st. Um, so basically, in the month of February, you can vote by email, you can vote by U.S. Mail.
Um, there's a number of different ways you'll be able to vote. Uh, we'll get that all formalized, and the information will be available, hopefully, here in the next couple weeks.
Um, but, uh, yes, if anyone would like to vote or run those seats, let us know. We'll put you on the ballot.
And having a position… It's not mean you to do breathing.
Oh…
Yeah. Makes… February to, uh… Bend yourself.
I just end up doing a fair number of them.
Oh, I'm sorry.
Okay, I'm sorry, Steve and Grant, you're both talking at the same time, and it got… Okay, uh, Steve, you talk first, say what you're gonna say.
Oh, I was just gonna say, make sure you're here when it comes to the, uh, election. Make sure you're here to, uh.
Make sure you don't get elected.
And Grant, what were you gonna say?
Um, being in one of the positions does not mean you are obligated to doing presentations.
it just happens to be that Lee and I have lots of ideas, and many of them we think would be interesting presentations.
That's an excellent point, thank you, Sue. Thank you, Sue.
So… Oh.
As I said, being… being, uh… Uh, actually, the steering committee meets much more often than the board of directors does.
Uh, and uh… in either one of those groups, you're there to make sausage.
And, uh… he likes us.
What was your last presentation, Gary, and when are you doing another one?
Um, funny you should ask, because. of Monday, right about 1996. Monday, this coming Monday.
is the anniversary date in 1886 of the founding of Burroughs Corporation.
Uh, and, uh, so my last presentation had something to do with the borough's computer, I think.
But, uh, Burroughs was founded just north of downtown St. Louis, uh, obviously 1886.
Wasn't a computer company, it was founded as an adding machine company, one of the first adding machine companies.
And, uh, but, uh, they're now merged into a company called Unisys.
But I think they probably still count as the oldest computer company because, you know, as far as their legal parentage, that's what they're.
Corporation's papers say, is 1886. So, uh… and the reason why I bring all that up is since it is a St. Louis thing.
I keep mentioning, it'd be nice to. have a party, celebrate their birthday.
Uh, however, in the last couple of years during COVID, uh, boroughs closed their St. Louis office, and I don't.
No, I haven't found a St. Louis office anymore for Burroughs.
Um, so, I don't know if there's anybody here in town, but if anybody knows of somebody, or would like to help track down, I just haven't had time to.
beat the bushes and find… somebody, but uh… but yeah, otherwise, it'll be a very… very, uh, non-party birthday next week for, uh, Burroughs.
So, our Unisys, as they're now called.
Alright, so we'll go ahead and close the recording?
I guess so, unless anybody has any other top… Question? Yeah.
Hey, I have a quick question. But years ago.
Uh… had some software, it was running on Solaris back then.
that monitored your syslogs, and if it saw what appeared to be attack or whatever, it would null route that.
destination? Anybody remember that, or familiar with it?
Um, I have no idea what. software you were running.
It was something open source one of the guys at work found.
I… there's failed… uh, fail to ban, deny hosts.
play in this space. They are both open source products.
They monitor logs, and um… can either current incarnations, I think.
default to using host-based firewall, be it IP tables on Linux or PF on VSD.
Um, and I think the F on Solaris as well.
block them, but you can also configure them relatively easily to null route.
I had, um, failed the band doing that for a number of years.
That sounds familiar, that might have been what it was.
Thank you.
Yeah.
Also, two other brief announcements I wanted to make. I think I may have mentioned them earlier.
Uh, next Thursday? is, uh, Ken Johnson. He's doing the, uh, St. Louis Linux user group presentation.
Uh, the topic is… Uh, your first 10 minutes on an unfamiliar system.
Uh, so… basically, if the boss says, that's broke, go fix it, and, you know, you… You've not worked on that box before? What do you got to figure out in the first 5 or 10 minutes to.
figure out what this box is supposed to do, how it's set up, and uh… Um, so it's basically, uh… Enhanced replay of a presentation that, uh, uh, Andrew Latham did.
Uh, for this group back in 2014, I believe.
Wow.
Uh, if you'd like to preview it. Um, if you go out to the… right now, it's on the calendar.
Uh, I put the entry for Andrew's original talk, so you can go out, pull up his original talk if you want to preview what Andrew did.
Um, 8 years ago. Um, and then, uh, as I say, Ken will do a new version this coming Thursday.
Next month, uh… I hope, I think we're going to get a presentation from Red Hat. I don't know whether it'll be the general meeting.
Or whether it'll be the, uh, LUG meeting. But, uh, I've been talking to the guys at Red Hat, and they think they're gonna have a presentation for us next month.
Boy, that'd be nice.
Yeah.
Did we miss anything, Stan?
Stan?
Ah.
Stan's here, he's weird faces wiggling his eyebrows.
I just joined about 3 minutes ago.
I haven't heard Stan in a while, he. fall asleep or something?
No, he was… he was at a meeting.
I just got in. I was at the county library, I was attending the, uh… information session on the radiation exposure Compensation Act.
Okay.
Okay. I take it as for all of us in North County.
Oh. Yeah, half in North County, and a lot of St. Charles County.
Hmm.
It even stretches through the city of St. Louis, I don't know.
Yeah, the old building down there on North St. Louis. Yeah, yeah, kind of the line along the North.
Riverfront on the north side of St. Louis.
What was the outcome of that? Are you gonna get rich?
No, but uh… I'm eligible, I presume, for $25,000 tax-free.
uh, death benefit from our late wife.
Huh.
What did she pass away from?
Multiple myeloma, which is a qualifying cancer that. in the list.
So that's what my wife Carol passed away from, and… She grew up in the area where.
Okay, and uh, there's somebody eligible for the death benefit.
was covered.
Okay.
Which, uh… go to the… you can go to the, uh… The, um… St. Louis County Library, let me put that in the chat so that, uh.
Yeah, because I'll check the website out. Thank you.
Okay. Yeah.
There were about… oh, about 80 people there tonight listening to this session.
Wow.
And, uh…
Is that at SICL.org?
Yeah, it's got your name on it.
Sierra, Charlie, Lima.
Um, what'd I put? Where'd it go?
Uh, Sierra Lima, Charlie Lima… That's for St. Louis CountyLibrary.org, O-R-G.
slash RECA. That's for the radiation exposure compensation Act.
You haven't… you have until the end of, uh, 2027 to file.
Okay.
If you had… if you lived in the area for 20… essentially, if you lived in the area for.
A total of 24 months. since any time since 1949.
Depending on a list of 21 cancers. You can… if you were diagnosed with… depending on when you were diagnosed for cancer, you can file, and you may get up to.
If you're still alive, you can get, like, $50,000.
Hmm.
Tax-free. Or, they can cover your actual medical expenses if you got all the receipts.
Wow.
If it's more than that, out of pocket. Okay? And if you, uh, had a spouse or sibling or a parent that died from cancer, and they lived in the area during that time, any time after 1949, any of those.
area codes… Somebody can file for the death benefit, $25,000.
Yeah, I just put that thing in the county library, and it comes back page not found.
Yeah, spell it right, yes, R E, uh… REA.
Oh, I misspelled it. My bad.
I would Steve or Stan provided. And went there, and it expands and redirects to something else.
And I put the long link, it expands to right below.
Steve's comment, it's a clickable link.
The short thing is easier to remember. It just expands. The computer does work for you.
Yeah.
Okay? Um…
Do not… do not go to a lawyer to file for this stuff. They're scamming you.
You do not need a lawyer, you just fill out the forms.
You don't need a lawyer?
And provide the documentation. Any documents you submit, either the original or certified copies.
will be returned to you afterwards.
Okay.
Social Security said that with my birth certificate. But they never sent it back.
I called them, and they said, well, we got no record of getting it.
Well…
1.
Well…
Uh, it's certified copies are for.
That's what it was.
Now Joe is the man who never was.
Oh, I had to replace it so I could get a real ID.
Yeah.
Ah.
Somebody's using it somewhere.
We should.
Ah.
Uh, any questions or comments for… either of the presentations before I drop out for the night.
Once again, Grant, thank you, thank you, thank you very much.
Yeah, good presentation. You too, Lee.
You're welcome. Thank you.
Neat.
Alrighty, I think we're gonna wrap it up and show it.
night, guys, I'm dropping.
Bookend, please. Bookend. This was the, uh, uh, General SLUG meeting for January the 14th, Wednesday.
2026. Uh, our presenters tonight, Grant Taylor. did a tutorial on, uh… Um… Host aliases, thank you.
postaliases.
And, uh, Grant and Lee, uh, jointly did a presentation on.
how to build a router. So, they did a great job of telling us how to take a.
Raspberry Pi, and build it up into a router.
So