<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Scott,<div class=""><br class=""></div><div class="">As Kenny suggested, assuming your Winlink traffic is good, you can use the firewall features of the modem itself to prevent windows/etc from talking out, by just allowing the traffic you need.</div><div class=""><br class=""></div><div class="">Nigel<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Oct 31, 2019, at 13:11, Kenny Richards <<a href="mailto:richark@gmail.com" class="">richark@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Scott,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">You are asking some questions which have come up several times and I don't think we have ever really successfully answer them.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Re: Window10 Chattyness: You could put a firewall between the Windows10 box and the HamWAN radio, blocking anything which wasn't directed to WinLink systems. (After turning off as much of the auto-updates and other phone home things as you can in Windows) I agree that nearly all this is over TLS connections now.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">I don't have a good suggestion for the call into the Winlink CMS system, unless there is some kind of proxy you can put in the middle. Maybe you stick the logs on a server some where and make them available, so you are not obfuscating anything going over the link? (giant hack)</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br class=""></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">73,<br class="">Kenny</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Oct 31, 2019 at 11:52 AM Scott Currie <<a href="mailto:scott.d.currie@gmail.com" class="">scott.d.currie@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr" class=""><div class="gmail_default" style="font-size:small">Hi Gang,</div><div class="gmail_default" style="font-size:small">I'm in the process of re-building my Winlink Gateway, with the intent to move it to the local fire station hose tower (a much better location). I am planning to use the data ring for access to the Winlink system, and the site does have coverage from Tiger. </div><div class="gmail_default" style="font-size:small"><br class=""></div><div class="gmail_default" style="font-size:small">I have two problems, I think....</div><div class="gmail_default" style="font-size:small">First, I think that "RMS Packet", the server application, has switched to an SSL connection to the Winlink CMS system. I believe they do still support the non-SSL port, so I think I can force that using the hosts file. </div><div class="gmail_default" style="font-size:small"><br class=""></div><div class="gmail_default" style="font-size:small">The bigger problem is that this will be running on a Win10 host to support the Vara FM protocol, which is currently Windows only. Win10 tends to be rather "chatty", and I suspect (though I have not confirmed) that most of it's background noise is SSL/TLS. Has anyone looked at this, and can Win10 be made to "shutup"?</div><div class="gmail_default" style="font-size:small"><br class=""></div><div class="gmail_default" style="font-size:small">I suppose I could run LinBPQ on a RasPi as the main gateway, and just use the Win10 box as a modem on an isolated segment, but that seems like a lot of work.</div><div class="gmail_default" style="font-size:small"><br class=""></div><div class="gmail_default" style="font-size:small">Thoughts?</div><div class=""><br class=""></div>-- <br class=""><div dir="ltr" class=""><div dir="ltr" class=""><b class=""><i class="">-Scott</i></b></div></div></div>
_______________________________________________<br class="">
PSDR mailing list<br class="">
<a href="mailto:PSDR@hamwan.org" target="_blank" class="">PSDR@hamwan.org</a><br class="">
<a href="http://mail.hamwan.net/mailman/listinfo/psdr" rel="noreferrer" target="_blank" class="">http://mail.hamwan.net/mailman/listinfo/psdr</a><br class="">
</blockquote></div>
_______________________________________________<br class="">PSDR mailing list<br class=""><a href="mailto:PSDR@hamwan.org" class="">PSDR@hamwan.org</a><br class="">http://mail.hamwan.net/mailman/listinfo/psdr<br class=""></div></blockquote></div><br class=""></div></body></html>