Firewall ACL Bypass
February 28th, 2008
This feature isn’t new, it’s been around since IOS 12.3(4)T, but since the router that I run CBAC on is limited to 12.3 mainline, it’s something that I just found out.
Traditionally (i.e. before 12.3(4)T), Access Control Lists (ACL) applied on an interface that rely on CBAC to open specific sockets tend to reflect the entire [...]
Pakistan turns off Youtube for the World
February 26th, 2008
A few days back, the Pakistani Government decided to turn off Youtube for their country, and (unfortunately) turned it off for the rest of the world as well. Many technical details have emerged from this incident but here’s a very good, concise summary of the whole issue. If you’ve only got 10 minutes, read this.
Pakistan [...]
doskey macro and putty
February 23rd, 2008
By default, putty just takes too many clicks to open a single ssh connection.
If you’re used to simply typing ssh <hostname> on your UNIX based shell,
here’s how you can get the same effect on Windows.
Use the following command to map the ssh command to putty.
C:\windows\system32\doskey ssh=c:\putty\putty.exe -ssh $*
(source: lee.e.rian[at]census[dot]gov on cisco-nsp mailing list)
Real Broadband
February 19th, 2008
Singapore Broadband Rates
8Mbps “Unlimited” ADSL service by Singnet costs SGD$50.60/month
8Mbps “Unlimited” Cable service by Starhub Maxonline costs SGD$44/month
Reality check:
UK Free Software Network [ ukfsn.org ]
Unlimited 8Mbps ADSL service for £168.00/month.
That’s approximately SGD$466.
When UKFSN claims that they do not practice traffic shaping, I somewhat believe that there’s a reasonable amount of truth in their claim.
Is [...]
NANOG 42
February 17th, 2008
Having lurked on the NANOG mailing list for quite some time already, here’s something to share with those who aren’t aware of the NANOG meetings.
NANOG 42 Agenda [ nanog.org ]
The NANOG agenda always seems very interesting, and I’m not just talking about the food and drink sessions. The tutorials just seem to be full of [...]
cisco vpn client on ubuntu 6.06 LTS
February 16th, 2008
This probably isn’t anything new since there are already a couple of guides out there. But hopefully this little how-to that is directed at 6.06 LTS will make things a little simpler.
Kittyhawk
February 9th, 2008
No, we’re not talking about the aircraft carrier.
Instead, this is about the potential for Blue Gene/P [ domino.research.ibm.com ] to be used as a massive high performance web server. Okay, perhaps not just massive, but…. alright, my vocabulary probably doesn’t contain a term that can sufficiently describe it.
This was featured on slashdot a few days [...]
multi-threaded apache and php5
February 3rd, 2008
Sometimes the old archaic model of the Prefork Multi-Processing Module (MPM) on apache just doesn’t cut it anymore. So here comes along other new-fangled multi-threaded MPMs like the Worker and Hybrid per-child MPMs. Alright, not that new perhaps, but definitely newer than Prefork.
For ages, people wanting to use multi-threaded MPMs have been warned about PHP’s [...]
remote access ipsec vpn
February 2nd, 2008
There are a lot of sample configs out there on the internet that tell you how to get remote access ipsec vpn running on your little (or big) Cisco IOS router.
The config I use is based on this [ cisco.com ]
But as always, simply copying and pasting configs from Google won’t always do the job. [...]