Site-to-Site VPN with Wireguard and Docker

Most people interact with one or two networks on a daily basis. The defaults work for watching Netflix, checking your email or catching up on cute Instagram accounts 🐕🐈.

If you manage multiple networks, though, it can start to get tricky to access internal resources across different internal networks. Maybe you want to login to a file server at a second house. Maybe you need to change some Wi-Fi settings to troubleshoot an issue with a coworker at another office. Maybe your mom is having trouble printing.

A site-to-site network extends a private network across multiple places. So if you have more than home you can still access the stuff at Home A from Home B and vice versa. The best part is you can do it without putting that stuff on the public Internet — keeping your resources safe and secure on your extended private network. And, because it happens at the network level, you also don’t need to worry about connecting / disconnecting to a client VPN on each device.

Continue reading

Can’t Send Outgoing Mail (Virtualmin + Postfix)

After a recent operating system update on my Virtualmin server, outgoing emails (accounts, forwarding, system generated) stopped working. Connections to the SMTP server worked fine, authentication had no issues, and mail could be sent locally to domains on the same server.

But when trying to mail to on external address (Gmail for example), the mail client and mail logs showed an error: “Relay access denied”. It took quite a while to discover the offending settings so I thought I’d share what worked for me (finally) here.

Postfix_logo

Near the end of the /etc/postfix/main.cf you should ensure the settings are as follows:

smtpd_sasl_auth_enable = yes
#smtp_sasl_auth_enable = yes

Where ‘smtp_sasl_auth_enable” is commented out. After making this change I was again able to send mail to external domains.

Make sure you test your setup to a few different mail providers though. The update enabled IPv6 for my Postfix server, and because I don’t have reverse DNS for IPv6 enabled on my server Gmail rejected all mail. You might also wish setup reverse DNS for IPv6, or make the following change so that only IPv4 is used:

inet_protocols = ipv4

TD Bank US for Canadians

Angled_debitcardEarlier this year I opened a TD Convenience Checking account at TD Bank — the US equivalent to TD Canada Trust. This isn’t like the US Dollar accounts you can open up at almost any Canadian bank: TD Bank N.A. is a full fledged American bank with over a thousand locations in the eastern United States. Its operated separately from its Canadian parent.

There are some helpful connections between the two, though, that make managing US money much easier (and faster) for Canadians. Funds can be instantly wired between your TD Bank US and TD Canada Trust accounts for free. The process requires calling in to the TD Cross Boarder Banking phone line, but its reasonably quick and painless. The representative reads an agreement, lets you know the exchange rate, and completes the transaction for you. You’re accounts (US and / or Canadian) may be debited for a wire transfer fee, but in my experience it is refunded within about a day.  Continue reading

Moving from cPanel + WHM to Virtualmin

Until this year I was using cPanel + WHM on my server to help manage the various websites I’m responsible for. The software makes it reasonably easy to add new sites, manage features like databases + email + DNS + FTP, and is familiar to users who have been using other hosts. The problem is that on a small scale its just so expensive. Its also not terribly flexible, so making changes or customization can be challenging. So I decided to look for an cPanel alternative.

Screen Shot 2015-09-13 at 10.05.37 PM

After some research I decided to try Virtualmin GPL. It has all of the features I was using in cPanel and is free to use. It even includes a super useful import tool for cPanel backups. Migrating my sites from the cPanel server to my Virtualmin setup was as easy as creating a full backup in cPanel and opening the migration tool. It was able to import the home directory, databases and even email accounts.

It comes with a great remote incremental backup solution, DNS clustering, site and reseller access levels, and other features that were important to me. It took a a few days to get everything set up the way I liked–but the result has been great so far!

Prepaid SIM at Terminal 5

 Its hard to imagine navigating, choosing a restaurant or communicating with friends without a smartphone. So when travelling to the UK recently, I considered options for purchasing a prepaid SIM card with data. On previous trips I’ve visited carrier shops (EE) to activate a SIM card, but this requires an extra trip and time. It also requires finding a store without data. Annoying.

So I was glad to learn about vending machines (VendPoint) that sell SIMs in many London area airports. They have a selection from a few different service providers like Three, EE, and Lyca with a few different packages each.

Since I was connecting to a domestic UK flight, I purchased a SIM from a machine in the connections area of Terminal 5 (had to look back and to the left I walked out of the corridor). I chose the £20 Three SIM that includes 300 UK minutes, 3000 UK texts and unlimited data.

It was pre-activated so all I had to do was put it in my iPhone to start the service. It worked great while I was in Northern Ireland, and roaming was included when I visited the Republic of Ireland, too. I used about 4GB of data over two weeks without issue. Although Three notes tethering is not included, I was able to turn on and use Personal Hotspot on my phone without issue as well.

 

Delete Sparsebundle from a Network Drive

You probably want to delete a sparsebundle (disk image or Time Machine Backup) from for your Time Capsule or other NAS (network attached storage). Maybe you want to start a fresh backup. Or you may have moved your backup to another device. This can be a somewhat challenging task!

sparsebundle

  1. Dig out a Windows computer or install Windows in a virtual machine (try VirtualBox)
  2. Make sure it is connected to the same network, Ethernet or WiFi will do
  3. Install the AirPort Utility for Windows (this enables AirDisk discovery)
  4. Restart the Time Capsule or NAS to make sure nothing else is accessing the image
  5. Open Computer and select the network drive, its often called Data
  6. Double click on the sparsebundle you wish to delete
  7. Drag bands folder to the Recycle Bin
  8. Hit Yes and wait for a while (but not that long)

It will still take in the realm of minutes to hours to delete, depending on how large your disk image was. After a few minutes the dialog box will show progress and estimate how long is remaining. It will work, too, which is more than be said about command line based options.

If you want to use a supported, non-Windows method you can also use AirPort Utility on a Mac to erase the disk completely. This is super fast but it was not an option for me as I needed to retain othe backups.

Tangerine Bank First Impressions

I’ve been with a BC credit union for a long time, but recently they have been making me sad. I decided to give Tangerine Bank a try about three weeks ago–and so far it has been a great experience. Setting up my savings and checking accounts was easy. The process was basically…

  1. Fill a form on the website with my details and contact info
  2. Write myself a cheque (drawn on my Coast account)
  3. Use the Tangerine app to deposit the cheque into my new Tangerine account

That’s it! The account was opened right away and I received my debit card just over a week later. The setup process, the website and the mobile app are well designed. Its easy to follow the steps and understand whats going on (like holds or transfers) with the new account.

png_base6454d09e919ceff080I called in to see what the service was like, and I was almost surprised at how friendly and helpful the staff were. I received the two $50 bonuses in my new chequing and savings accounts after about two weeks, and a third bonus a few days after my first payroll deposit went through. They’re offering those proportions until the end of this June.

My only gripe would the be hold times for cheques and transfers. It’s five business days (a week however you slice it), and remains even after the funds have been received by Tangerine. That’s annoying. I’m told that as the account matures more funds will be immediately available without holds, so I look forward to that.

The debit card they send can only be used to access your chequing account, in case you’re wondering. So deposits or withdrawals will have to be transferred before using an ABM. Good news is that transfers are instant and there aren’t any fees.

You can setup the saving accounts for Electronic Funds Transfer services though (like PayPal, Square or AdSense for example). You can also setup direct deposit, or payroll deposit, to a Tangerine savings account and it works just fine.

Tangerine Signup
If you decide to try Tangerine use someone’s Orange Key on the signup page.
You’ll both get a $25 bonus–find a friend or use mine

41530812S1

Prepaid Data in Mexico

SIMOn a recent trip to Puerto Vallarta, me and fellow travellers wanted to stay connected without paying huge money for roaming or shoddy hotel wifi. So I looked into getting a Mexican SIM card for my iPhone. Its not quite as easy as prepaid in the US or Europe, but the good news is that if you want to get online while visiting Mexico it is relatively simple and inexpensive.

Actual calling tariffs in Mexico are very confusing. They’re based on regions and, depending on where you call within Mexico, your calls could be very cheap or very expensive (like long distance in Canada). You’re also charged extra if you travel outside of your very small home region. So I decided to skip native calling and texting altogether, and opt for data-only instead. VOIP, email and app based texting.

There are a number of cellphone companies in Mexico. Telcel, Movistar, Isuacell, Nextelamong others, but Telcel and Movistar have the most widespread 3G networks that are compatible with iPhones and other unlocked GSM devices. And between those Telcel is said to have to greater coverage at somewhat higher cost.

I was ready to try out either Telcel or Movistar, but it turned out that we drove past a Telcel shop first. It was right on the big highway in Bucerias (Nuevo Vallarta area). There are plenty of these little stores and you shouldn’t have trouble finding one. We went inside and I explained what I wanted to do. There was a language barrier, but in my case a salesperson’s friend was visiting and he spoke perfect English. You might want to write down or save a couple phrases in Google Translate before heading to the shop.

I’ve read online that some have had to go into a big city and have their passport scanned. But in my case they just had me write down the spelling of my name, the hotel I was staying at and we were good to go. Activation was done over the phone.

The SIM card was $149MX (just over $10CAD). There’s plenty of data plans to choose from, but I went with the 1GB/7days for $199MX (about $15CAD). They activated it for me it was working right away. If you need to reload your account to buy more data or check your usage you can do it from the Telcel self-serve website. The site accepts international credit cards.

Coverage was OK. It worked just about everywhere, except inside the lobby of the hotel where there were some dead spots. It was mostly 3G but I saw Edge sometimes too. Speeds aren’t amazing but better than the hotel wifi.

I used the Personal Hotspot feature on my phone, and we had up to 5 devices surfing and emailing harmonioulsy.

Free Visual Voicemail in Canada

Visual voicemail is an idea that’s been around for a long time, but most people are still using archaic dial-in systems. One problem is that carrier and handset support for the feature is uncommon, and another is that it usually has an associated cost.

So lets devise that plan that nets you visual voicemail that works on any handset, most carriers and doesn’t cost you anything extra. For this to work you’ll need data and push email accounton your phone. You’re plan must also support conditional call forwarding. And finally we’ll need an account at freephoneline.ca (where the real magic happens here).

The first thing you should do is setup your account at Free Phone Line. These guys offer a free Canadian phone number, voicemail, long distance and more. Follow the instructions and make sure you choose a local number. Once your account is created and verified, we can start to setup the voicemail. The first thing you might want to do is record your voicemail greeting. Download and open the FPL softphone app on your computer, dial *98 (or click the voicemail button) and follow instructions to record your greeting.

Now you should configure the system to email the voicemails to you. On the FPL website, make sure you’re logged in and click on the Change Details page. Set the “Correspondence Email” to your push email account, and at the bottom of the page set “Enable voicemail to email” to copy or forward. Copy will email your voicemails to you and keep a copy on the FPL server (so you could dial in and check if you wanted) and forward will simply email you the voicemails and then delete them from the FPL system. Click save.

Test what we have so far. Call your FPL number, leave a voicemail and make sure it gets pushed to your phone.

iOS 5 email notification

OK, now for the tricky part. Get your mobile and dial these three sequences to connect your phone to the FPL voicemail:

  1. Dial *67*[FPL phone number]# and SEND “Call forward if busy”
  2. Dial *61*[FPL phone number]# and SEND “Call forward if not answered
  3. Dial *62*[FPL phone number]# and SEND “Call forward if unreachable”

Now your phone should be setup with the FPL voicemail system. Test the system in three different ways to make sure all missed calls go to your new voicemail. Call your phone and let it ring until it goes to voicemail, call your phone and ignore the call by pressing the end or sleep keys, and call your phone while its completely turned off or in airplane mode.

If all of these tests send you to the right mailbox, and all your VMs are pushed to your phone then you’re all done! Another benefit is that you’ll be able to access your voicemail from any device that has your email account.

Notes

  • Some email providers may accidentally mark your voicemails as spam. Test your setup, and if you have trouble receiving your voicemails at your correspondence email try checking the junk folder.
  • If you are with Rogers / Fido and have a voicemail package you might have trouble with the conditional call forwarding setup. It may be necessary to disable voicemail or remove your voicemail feature completely.
  • Depending your plan minutes may be deducted from your monthly bucket. Also, if you’re roaming you may be charged a roaming minute for each time someone hits your voicemail. I suggest never roaming with your Canadian SIM and buying local SIMs instead.

Header photo by Emrah Ömüriş.

VirtualBox “Failed to load..”

Lately I’ve been using the wonderful VirtualBox software to run my Windows virtual machines (Internet Explorer testing etc). It’s just about as good as Parallels or Fusion, but its completely free and open source. What’s not to love?

But once and a while I run into strange errors when trying to boot my VM’s. Errors like “VERR_SUPLIB_WORLD_WRITABLE”, which basically mean the file permissions on some component of VirtualBox are too general.

You can fix most of these errors by opening up Disk Utility (Spotlight search or Applications > Utilities). From there select your system hard drive (likely Macintosh HD) and click Repair Disk Permissions. This process may take a few minutes. When its done restart your computer, open up VirtualBox and you should be good to go!

If you still have trouble, open up the Applications folder and find the VirtualBox app. Right click and open the Get Info screen. At the bottom in the permissions section, make sure “Everyone” only has read access.

Header screenshot by Rafa Espada.