Archive for February, 2008

 

Firewall ACL Bypass

February 28th, 2008

This feature isn’t new, it’s been around since IOS 12.3(4)T, but since the router that I run CBAC on is limited to 12.3 mainline, it’s something that I just found out.
Traditionally (i.e. before 12.3(4)T), Access Control Lists (ACL) applied on an interface that rely on CBAC to open specific sockets tend to reflect the entire [...]

Read full article      No Comments

Pakistan turns off Youtube for the World

February 26th, 2008

A few days back, the Pakistani Government decided to turn off Youtube for their country, and (unfortunately) turned it off for the rest of the world as well. Many technical details have emerged from this incident but here’s a very good, concise summary of the whole issue. If you’ve only got 10 minutes, read this.

Pakistan [...]

Read full article      No Comments

doskey macro and putty

February 23rd, 2008

By default, putty just takes too many clicks to open a single ssh connection.
If you’re used to simply typing ssh <hostname> on your UNIX based shell,
here’s how you can get the same effect on Windows.
Use the following command to map the ssh command to putty.
C:\windows\system32\doskey ssh=c:\putty\putty.exe -ssh $*
(source: lee.e.rian[at]census[dot]gov on cisco-nsp mailing list)

Read full article      No Comments

Real Broadband

February 19th, 2008

Singapore Broadband Rates

8Mbps “Unlimited” ADSL service by Singnet costs SGD$50.60/month
8Mbps “Unlimited” Cable service by Starhub Maxonline costs SGD$44/month

Reality check:
UK Free Software Network [ ukfsn.org ]

Unlimited 8Mbps ADSL service for £168.00/month.

That’s approximately SGD$466.
When UKFSN claims that they do not practice traffic shaping, I somewhat believe that there’s a reasonable amount of truth in their claim.

Is [...]

Read full article      No Comments

NANOG 42

February 17th, 2008

Having lurked on the NANOG mailing list for quite some time already, here’s something to share with those who aren’t aware of the NANOG meetings.
NANOG 42 Agenda [ nanog.org ]
The NANOG agenda always seems very interesting, and I’m not just talking about the food and drink sessions. The tutorials just seem to be full of [...]

Read full article      No Comments

cisco vpn client on ubuntu 6.06 LTS

February 16th, 2008

This probably isn’t anything new since there are already a couple of guides out there. But hopefully this little how-to that is directed at 6.06 LTS will make things a little simpler.

Read full article      2 Comments »

Kittyhawk

February 9th, 2008

No, we’re not talking about the aircraft carrier.
Instead, this is about the potential for Blue Gene/P [ domino.research.ibm.com ] to be used as a massive high performance web server. Okay, perhaps not just massive, but…. alright, my vocabulary probably doesn’t contain a term that can sufficiently describe it.
This was featured on slashdot a few days [...]

Read full article      2 Comments »

multi-threaded apache and php5

February 3rd, 2008

Sometimes the old archaic model of the Prefork Multi-Processing Module (MPM) on apache just doesn’t cut it anymore. So here comes along other new-fangled multi-threaded MPMs like the Worker and Hybrid per-child MPMs. Alright, not that new perhaps, but definitely newer than Prefork.
For ages, people wanting to use multi-threaded MPMs have been warned about PHP’s [...]

Read full article      No Comments

remote access ipsec vpn

February 2nd, 2008

There are a lot of sample configs out there on the internet that tell you how to get remote access ipsec vpn running on your little (or big) Cisco IOS router.
The config I use is based on this [ cisco.com ]
But as always, simply copying and pasting configs from Google won’t always do the job. [...]

Read full article      No Comments