tag:blogger.com,1999:blog-211023332011-08-31T13:23:16.669-07:00Rants, raves, comments and tips about computer hardware and software -- from a software developer's point of view.Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.comBlogger421100tag:blogger.com,1999:blog-21102333.post-54574444554979012582009-09-22T11:43:00.002-07:002009-09-29T14:36:09.027-07:00Hello fans of Joe's Bit Bucket. This site has recently moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. See you there!<br /><br />Latest stories at <a href="http://nerdboys.com/">NerdBoys.com</a>:<br /><ul><li><a href="http://nerdboys.com/2009/09/28/case-mod-how-to-for-the-alix-single-board-computer/">Case Mod How-To for the Alix Single Board Computer</a><br /></li></ul><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-5457444455497901258?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-66230971950971682252009-05-11T13:13:00.003-07:002009-12-04T13:46:07.753-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2009/05/11/linux-t-shirts/">location</a>.<br /><!--<br />When I'm not at the office, I live in T-shirts. As such, I go through a lot of t-shirts and I have to replenish my supply regularly. But what's a good geek supposed to do when he can't find one he likes at his local mall? That's right, he makes his own!<br /><br />I recently used <a href="http://www.zazzle.com/">zazzle.com</a> to make some cool Linux T-Shirts for my own use. When me friends saw me wearing them, they wanted to buy them too. So, I released my Linux T-shirts to the public. Check out my Linux T-shirts at <a href="http://www.zazzle.com/cyboc2000">my Zazzle store</a>.<br /><br />You'll notice that many of my Linux T-shirts feature <a href="http://en.wikipedia.org/wiki/Tux">Tux the penguin</a>, the mascot of Linux. Tux was designed by <a href="http://www.isc.tamu.edu/%7Elewing/linux/">Larry Ewing</a>, using <a href="http://www.gimp.org/">The GIMP</a>.<br /><br />If you decide to take a whirl at making your own shirts, please be respectful of others' intellectual property and either make your own graphics, use graphics that are in public domain or get the permission of the creator. For example, according to Larry Ewing's website, he grants you permission to use the Tux logo as long as you acknowledge both him and the GIMP.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-6623097195097168225?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-70504739579454694652008-11-24T06:47:00.002-08:002009-12-04T13:44:26.291-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/11/24/stupid-sed-tricks/">location</a>.<br /><!--<br />Here are some handy sed one-liners I've come across recently. Maybe someone else will find them handy.<br /><br />Wrap each line with quotes (quotation marks) - version 1:<br /><pre class="code-hs">sed 's/^[^$]*$/"&amp;"/'</pre><br />Wrap each line with quotes (quotation marks) - version 2:<br /><pre class="code-hs">sed 's/.*/"&amp;"/'</pre><br />Replace space with escaped space:<br /><pre class="code-hs">sed 's/ /\\ /g'</pre><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-7050473957945469465?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-84020070581929170652008-11-14T15:17:00.005-08:002009-12-04T13:42:57.760-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/11/14/how-to-find-out-who-is-logged-on-at-a-windows-computer/">location</a>.<br /><!--<br />Sometimes it's handy to find out who is logged on at a remote Windows computer. For example, before rebooting a critical server after hours, you might want to make sure your boss isn't logged in at his computer.<br /><br />In Linux, this is easy. You simply login to the remote computer with <span style="font-family:courier new;">ssh</span> (or <span style="font-family:courier new;">telnet</span>...yikes) and run the <span style="font-family:courier new;">who</span> command. For example:<br /><pre class="code-hs"><br />me@bosscomputer:~$ who<br />boss tty7 2008-10-16 07:57 (:0)<br />me pts/0 2008-11-14 15:25 (mycomputer)<br /></pre><br />In Windows, I found two ways of doing this. Both ways work with Windows XP and Windows 2003 (and perhaps other versions too).<br /><br />The first way uses the <a href="http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx">psloggedon</a> command, which is part of the <a href="http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx">pstools</a> suite created by Mark Russinovich. For example:<br /><pre class="code-hs"><br />C:\tools\pstools>psloggedon.exe \\bosscomputer<br /><br />loggedon v1.33 - See who's logged on<br />Copyright ⌐ 2000-2006 Mark Russinovich<br />Sysinternals - www.sysinternals.com<br /><br />Users logged on locally:<br />11/14/2008 9:35:31 AM MYDOMAIN\BOSS<br /></pre><br />In the example above, we see that my boss is currently logged into BOSSCOMPUTER and he logged in at 11/14/2008 9:35:31 AM.<br /><br />Often, you'll see error messages like these in the output, which you can ignore:<br /><pre class="code-hs"><br />Error: could not retrieve logon time<br />NT AUTHORITY\LOCAL SERVICE<br />Error: could not retrieve logon time<br />NT AUTHORITY\NETWORK SERVICE<br /></pre><br />The neat thing about <span style="font-family:courier new;">psloggedon</span> is that it tells you not only about a logon from a user sitting in front of the computer but it can also tell you about remote logons to the computer via protocols like Remote Desktop Protocol (RDP). Here is an example of invoking <span style="font-family:courier new;">psloggedon</span> on a computer running Citrix Server (like Terminal Services):<br /><pre class="code-hs"><br />C:\tools\pstools>psloggedon.exe \\citrixbox<br /><br />loggedon v1.33 - See who's logged on<br />Copyright ⌐ 2000-2006 Mark Russinovich<br />Sysinternals - www.sysinternals.com<br /><br />Users logged on locally:<br />11/14/2008 9:27:15 AM MYDOMAIN\john<br />11/14/2008 6:44:56 AM MYDOMAIN\mary<br />11/14/2008 6:29:42 AM MYDOMAIN\steve<br />11/14/2008 6:34:21 AM MYDOMAIN\martha<br /></pre><br />All of the users in the above example were logged in remotely (despite the misleading word "locally" in the output).<br /><br />If you only care about logins from a user sitting in front of the computer, you can use another method: <a href="http://social.technet.microsoft.com/Forums/en-US/winservercore/thread/ab6c7e6e-4ad4-4237-bab3-0349cd76c094">wmic.exe</a>. For example<br /><pre class="code-hs"><br />C:\tools\pstools>wmic /node:"bosscomputer" ComputerSystem GET UserName<br />UserName<br />MYDOMAIN\boss<br /></pre><br />In the above example, you can see that my boss is logged in at BOSSCOMPUTER. When using the <span style="font-family:courier new;">wmic</span> command, I recommend you get in the habit of wrapping the computer name in quotation marks. If you don't, and the name contains a hyphen, you'll see the error "Invalid Global Switch".<br /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-8402007058192917065?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-42261717786028724952008-11-14T09:14:00.005-08:002009-12-04T13:41:29.393-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/11/14/how-to-find-uptime-in-windows/">location</a>.<br /><!--<br />Sometimes it's useful to find out the uptime for a Windows computer. For example, if you are rebooting a whole bunch of Windows computers and you aren't careful about keeping track of which ones you have just rebooted, you can check the uptime.<br /><br />In Linux, it's easy to find out how long a computer has been up and running. You just runtime the good ol' <span style="font-family:courier new;">uptime</span> command. For example:<br /><pre class="code-hs">me@mycomputer:~$ uptime<br />09:17:32 up 23 days, 19:13, 3 users, load average: 0.36, 0.54, 0.49<br /></pre><br />In Windows, it's almost as easy but not quite as intuitive. The following command should work on Windows XP, Windows 2003 and perhaps other versions: <span style="font-family:courier new;">net statistics server</span>. You could also use the shorthand version of that command: <span style="font-family:courier new;">net stats srv</span>. For example:<br /><pre class="code-hs"><br />c:\temp>net stats srv<br />Server Statistics for \\MYCOMPUTER<br /><br />Statistics since 11/13/2008 1:40 PM<br /><br />Sessions accepted 1<br />Sessions timed-out 1<br />Sessions errored-out 1<br /><br />Kilobytes sent 3734<br />Kilobytes received 491<br /><br />Mean response time (msec) 0<br /><br />System errors 0<br />Permission violations 0<br />Password violations 0<br /><br />Files accessed 82<br />Communication devices accessed 0<br />Print jobs spooled 0<br /><br />Times buffers exhausted<br /><br />Big buffers 0<br />Request buffers 0<br /><br />The command completed successfully.<br /></pre><br />The line that starts with "Statistics since", shows when the computer came up. That's not quite the same as uptime but it's close enough. Microsoft just makes you do the math (like they always do).<br /><br /><hr /><br /><span style="font-weight: bold;">FOLLOW UP</span>:<br />I found an even easier way getting uptime in Windows. You can use <a href="http://technet.microsoft.com/en-us/sysinternals/bb897550.aspx">psinfo</a>, which is part of the <a href="http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx">pstools</a> suite of tools created by Mark Russinovich. For example:<br /><pre class="code-hs"><br />C:\tools\pstools>psinfo \\somecomputer Uptime<br /><br />PsInfo v1.75 - Local and remote system information viewer<br />Copyright (C) 2001-2007 Mark Russinovich<br />Sysinternals - www.sysinternals.com<br /><br />System information for \\somecomputer:<br />Uptime: 0 days 4 hours 7 minutes 57 seconds<br /></pre><br /><hr /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-4226171778602872495?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-20786115507189658852008-10-27T15:22:00.006-07:002009-12-04T13:39:56.285-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/10/27/how-to-create-a-tar-file-that-excludes-hidden-files-and-folders/">location</a>.<br /><!--<br />Today I wanted to create a tar file that excludes hidden files and folders: ones that start with a dot (i.e. '.').<br /><br />Like a good boy, I read the fine man page (RTFM - sometimes the F is replaced with a ruder word than "fine") but I couldn't get it to work after several different variations of the exclude pattern. It seems that the exclude pattern that tar expects doesn't follow any of the <a href="http://en.wikipedia.org/wiki/Regular_expression">regular expression</a> (a.k.a. regex) syntaxes that <span style="font-style: italic;">I'm</span> familiar with. Someone enlighten me here if you know what it expects.<br /><br />Anyway, after lots of unsuccessful googling, I finally found a relevant <a href="http://www.linuxquestions.org/questions/slackware-14/excluding-hidden-directories-when-using-tar-393653/#post2031708">post</a>. Here's an example of the magical incantation to do this trick (it seems to work in my brief testing using <span style="font-weight: bold;">Ubuntu</span> Linux):<br /><pre class="code-hs">tar -cf test.tar foo/ -exclude '.*'</pre><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-2078611550718965885?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-30020980218511018452008-10-22T11:35:00.006-07:002009-12-04T13:37:32.876-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/10/22/how-to-use-sudo-tar-in-a-script-without-password-prompt/">location</a>.<br /><!--<br />If you are rolling your own backup shell script on your Ubuntu Linux box, chances are you might want to use <span style="font-family:courier new;">tar</span> or perhaps <span style="font-family:courier new;">rsync</span> somewhere in that script. For this example, let's say you've chosen to use <span style="font-family:courier new;">tar</span>.<br /><br />At some point, you will probably want to use <span style="font-family:courier new;">cron</span> or some other mechanism to automate your backup. Furthermore, if you want to coordinate the backup of several computers from one central computer, you will probably end up running the backup by making an <span style="font-family:courier new;">ssh</span> connection from the central computer to each backup target computer. In that case, the user that is running the backup will probably not be <span style="font-family:courier new;">root</span> (unless you allow root logins on your ssh servers) and may therefore have limited privileges.<br /><br />If that's the case, the user will not be able to backup some files with <span style="font-family:courier new;">tar</span> unless you use <span style="font-family:courier new;">sudo tar</span>. The problem with this is that <span style="font-family:courier new;">sudo</span> will prompt you for a password. If you want to prevent this prompt so that you can totally automate the backup over ssh, you'll need to do two things.<br /><br />First, you'll need to use ssh private key authentication where the private key has no password. There are lots of <a href="http://www.mustnofee.com/tutorials/37-tutorials/87-setting-up-no-password-ssh">tutorials</a> for how to do this. If you're nervous about using a no-password private key, you could use a key ring mechanism instead. That's beyond the scope of this article so just google it.<br /><br />Second (and this is the main point of this article) you'll need to add a <span style="font-family:courier new;">NOPASSWD</span> line for <span style="font-family:courier new;">tar</span> in your <span style="font-family:courier new;">sudoers</span> file. Using <span style="font-family:courier new;">visudo</span>, add the following line to your <span style="font-family:courier new;">sudoers</span> file (replace <span style="font-family:courier new;">mybackupusername</span> with the name of your backup user):<br /><pre class="code-hs">mybackupusername ALL = NOPASSWD: /bin/tar</pre>That line tells <span style="font-family:courier new;">sudo</span> that the backup user can run <span style="font-family:courier new;">sudo tar</span> without prompting for a password. If you're paranoid, you can fine-tune that line so it only allows certain options (switches) for <span style="font-family:courier new;">tar</span> (you might want to prevent the -x switch). For example:<br /><pre class="code-hs">mybackupusername ALL = NOPASSWD: /bin/tar -czf * -C *</pre>Here's another, slightly different example:<br /><pre class="code-hs">mybackupusername ALL = NOPASSWD: /bin/tar -c*</pre><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-3002098021851101845?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-84348783626043501932008-09-19T13:28:00.004-07:002009-12-04T13:35:42.616-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/09/19/windows-dfs-brain-damage/">location</a>.<br /><!--<br />So we just started using Windows' <a href="http://www.microsoft.com/windowsserver2003/technologies/storage/dfs/default.mspx">Distributed File System</a> (or DFS for short). More specifically, we have been using the DFS Namespaces portion of DFS, which basically allows you to have one virtual share point to one or more underlying physical shares on any arbitrary physical server.<br /><br />In theory, this level of indirection makes maintenance easier because on the client side you can map a drive letter to the virtual share, allowing you to change the physical share behind the scenes without any configuration changes on the client. For example, you could have a virtual share called <span style="font-family:courier new;">\\myADDomain\corp\files</span> that is configured to point to the physical share <span style="font-family:courier new;">\\myFileServer\files</span>. On the client, you can map a drive letter (e.g. Z:) to <span style="font-family:courier new;">\\myADDomain\corp\files</span>. Behind the scenes, that gets translated to <span style="font-family:courier new;">\\myFileServer\files</span> when the client uses the drive letter.<br /><br />Today a user got the following error when logging into his Windows XP Pro machine: "An error occurred while reconnecting Z: to \\myADDomain\corp\files. Microsoft Windows Network: The system cannot find the file specified. The connection has not been restored."<br /><br />My first instinct was to reboot the client, as suggested in many DFS troubleshooting tips. So, I tried rebooting but upon logging in, the user got the new error: "Z:\ refers to a location that is unavailable."<br /><br />Sigh...<br /><br />In DFS jargon,<span style="font-family:courier new;"> \\myADDomain\corp</span> is called a DFS root and the <span style="font-family:courier new;">files</span> portion of <span style="font-family:courier new;">\\myADDomain\corp\files</span> is called a link. To make things more complicated, the DFS root points to these things called Root Targets, for example, <span style="font-family:courier new;">\\myDC1\corp</span> and <span style="font-family:courier new;">\\myDC2\corp</span>. Essentially, there are two levels of indirection here. <span style="font-family:courier new;">\\myADDomain\corp</span> points <span style="font-family:courier new;">\\myDC1\corp</span> (and <span style="font-family:courier new;">\\myDC2\corp</span>) and <span style="font-family:courier new;">\\myDC1\corp\files</span> (and <span style="font-family:courier new;">\\myDC2\corp\files</span>) points to <span style="font-family:courier new;">\\myFileServer\files</span>. I told you it was complicated.<br /><br />The temporary workaround in this case was to map Z: drive directly to <span style="font-family:courier new;">\\myFileServer\files</span>. Of course, this renders DFS useless so I had to find a permanent fix. Below are the steps I followed:<br /><ol><li>Opened the DFS (Distributed File System) admininstrative tool on <span style="font-family:courier new;">myDC1</span>.</li><li>Noticed that <span style="font-family:courier new;">\\corp.myADDomain.com\CORP</span> (alias <span style="font-family:courier new;">\\myADDomain\corp</span>) DFS root was pointing to 2 root targets: <span style="font-family:courier new;">\\myDC1\corp</span> and <span style="font-family:courier new;">\\myDC2\corp</span>.</li><li>Right-clicked on each root target and clicked Check Status. Each one got a green check mark after the status check. This is good.</li><li>Noticed that the DFS root had the following DFS link: <span style="font-family:courier new;">files</span>.</li><li>Right-clicked on the link and clicked Check Status. It got a red X after the status check. This is BAD.</li><li>I then ran the DFS admin tool on <span style="font-family:courier new;">myDC2</span>. When I checked the status of root targets and link on this computer, ALL got green checkmarks. This is good.</li><li>On both <span style="font-family:courier new;">myDC1</span> and <span style="font-family:courier new;">myDC2</span>, I ran Windows Explorer and opened the folder that maps to the CORP share. For example, the root target <span style="font-family:courier new;">\\myDC1\CORP</span> maps to <span style="font-family:courier new;">C:\dfsroot</span> on <span style="font-family:courier new;">myDC1</span>. Similarly, the root target <span style="font-family:courier new;">\\myDC2\CORP</span> maps to <span style="font-family:courier new;">C:\dfsroot</span> on <span style="font-family:courier new;">myDC2</span>.</li><li>In the <span style="font-family:courier new;">C:\dfsroot</span> folder on <span style="font-family:courier new;">myDC1</span>, the only child folder I saw was a hidden one called <span style="font-family:courier new;">DO_NOT_REMOVE_NtFrs_PreInstall_Directory</span>. However, on <span style="font-family:courier new;">myDC2</span>, the folder had the <span style="font-family:courier new;">files</span> child folder in addition to the funky hidden one.</li><li>AFAIK, you cannot manually recreate the missing child folder on <span style="font-family:courier new;">myDC1</span> with Explorer because they it does not seem to be a real folder (right click to see the properties and you will see what I mean). In other words, it is a "magical" pseudo-folder.</li><li>Instead, in the DFS admin tool on <span style="font-family:courier new;">myDC1</span>, I right clicked on the <span style="font-family:courier new;">\\myDC1\corp</span> root target and clicked Remove Target.</li><li>Then I recreated the <span style="font-family:courier new;">\\myDC1\corp</span> root target by right clicking the DFS root (<span style="font-family:courier new;">\\corp.myADDomain.com\CORP</span>) and clicking New Root Target. For the server name I entered <span style="font-family:courier new;">myDC1</span>.</li><li>Then, magically, the files child folder in <span style="font-family:courier new;">C:\dfsroot</span> on <span style="font-family:courier new;">myDC1</span> reappeared!</li><li>After that, the user logged out, logged in and Z: drive got mapped correctly. Woot!</li></ol>How did myDC1 get into the bad state in the first place? I don't know. Go ask Microsoft...<br /><br /><hr /><span style="font-weight: bold;"><br />FOLLOW UP (November 14, 2008)</span>: This has happened two more times since writing this article. It seems to happen whenever we reboot one of the domain controllers that is hosting a Root Target. I'm not sure how to prevent the problem but at least the workaround described above always fixes it. Sigh...<br /><br /><hr /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-8434878362604350193?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-69598798276062223412008-03-18T13:14:00.003-07:002009-12-04T13:33:34.975-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/03/18/how-to-see-the-members-of-a-group-in-linux/">location</a>.<br /><!--<br />As far as I know, there is no standard Linux command to find out the users that are members of a given group. Intuitively, you would think there would be a command like <span style="font-family: courier new;">members</span> that takes the group name as a parameter. Unfortunately, it seems that no such command exists. In lieu of this command, you can simply <span style="font-family:courier new;">grep</span> the file <span style="font-family:courier new;">/etc/group</span> like this:<br /><br /><span style="font-family: courier new;">grep "^thegroupname:" /etc/group</span><br /><br />Obviously, you need to replace <span style="font-family: courier new;">thegroupname</span> with the group you are searching for. The character '^' means "beginning of line". The character ':' is the field separator between the group name and the group password in the group file.<br /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-6959879827606222341?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-45452415219981923962008-03-14T06:41:00.003-07:002009-12-04T13:31:44.263-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/03/14/how-to-find-out-which-version-of-linux-you-are-running/">location</a>.<br /><!--<br />This is a brief howto for finding out which version of Linux you are running. I say "brief" because this is certainly not comprehensive. There are a few ways to skin this cat, depending on which Linux distribution you are running. I will only cover Debian and Ubuntu. Similar techniques may work on other distros (especially Debian derivatives) but your mileage may vary.<br /><br />But first, why should you even care which version you are running? There are many reasons why you should care, but perhaps the best reason is that it comes in handy when you are troubleshooting errors. For example, if you are a Linux newbie and you post an error message on a forum asking for help troubleshooting it, you can bet that the first response will include the question: "Which version of Linux are you running?". Knowing the version can sometimes also come in handy when you are installing new packages when the package is dependent on a certain version of Linux.<br /><br />Note that the question "Which version of Linux are you running?" is actually sort of ambiguous. Sometimes you want to know the version of the Linux <span style="font-style: italic;">kernel</span> and other times you want to know the version of the Linux <span style="font-style: italic;">distribution</span>.<br /><br />To get the version of the Linux kernel, you use the <span style="font-family:courier new;">uname</span> command, which I believe should be available on all distributions. For example:<br /><pre class="code-hs">me@mycomputer:~$ uname -r<br />2.6.18-5-686</pre><br />In the above example, we see that the kernel version is 2.6.18-5-686. You can also use the <span style="font-family:courier new;">-a</span> option to get even more information:<br /><pre class="code-hs">me@mycomputer:~$ uname -a<br />Linux mycomputer 2.6.18-5-686 #1 SMP Fri Jun 1 00:47:00 UTC 2007 i686 GNU/Linux</pre><br />To find out the version of the Linux distribution, there are a few ways, depending on the distro. In Ubuntu, version information is stored in the files <span style="font-family:courier new;">/etc/issue</span> and <span style="font-family:courier new;">/etc/lsb-release</span>. You can simply <span style="font-family:courier new;">cat</span> these files to see the information. Here is what I found on an Ubuntu 7.10 box:<br /><pre class="code-hs">me@mycomputer:~$ cat /etc/issue<br />Ubuntu 7.10 \n \l</pre><pre class="code-hs">me@mycomputer:~$ cat /etc/lsb-release<br />DISTRIB_ID=Ubuntu<br />DISTRIB_RELEASE=7.10<br />DISTRIB_CODENAME=gutsy<br />DISTRIB_DESCRIPTION="Ubuntu 7.10"</pre><br />On Debian and Debian derivatives (e.g. Ubuntu), version information is stored in the file <span style="font-family:courier new;">/etc/debian_version</span>. Here is what the file contained on a Debian 4.0 box:<br /><pre class="code-hs">me@mycomputer:~$ cat /etc/debian_version<br />4.0</pre><br />And here is what the file contained on an Ubuntu 7.10 box:<br /><pre class="code-hs">me@mycomputer:~$ cat /etc/debian_version<br />lenny/sid</pre><br />I did some googling and found that some other distros follow this <span style="font-family:courier new;">/etc/*version</span> convention. For example, apparently Red Hat stores version infomation in <span style="font-family:courier new;">/etc/redhat-version</span>. I don't have a Red Hat system lying around (I haven't had one since they split into Red Hat and Fedora) so I couldn't try it. Therefore, I'll just take it as a matter of faith that this is true. On other distros, chances are that you'll have a <span style="font-family:courier new;">*version</span> file in your <span style="font-family:courier new;">etc</span> directory.<br /><br />Finally, another way you can find out the distro version is with the <span style="font-family:courier new;">lsb_release</span> command. Here is the output from an Ubuntu 7.10 box:<br /><pre class="code-hs">me@mycomputer:~$ lsb_release -a<br />No LSB modules are available.<br />Distributor ID: Ubuntu<br />Description: Ubuntu 7.10<br />Release: 7.10<br />Codename: gutsy</pre><br />And here is the output from a Debian 4.0 box:<br /><pre class="code-hs">me@mycomputer:~$ lsb_release -a<br />No LSB modules are available.<br />Distributor ID: Debian<br />Description: Debian GNU/Linux 4.0r1 (etch)<br />Release: 4.0r1<br />Codename: etch</pre><br />I'm not sure if that command is available on all distros or just Debian and its derivatives. For other distros, I leave that as an exercise to the reader. If the command is not installed on your Debian or Debian derivative box, you can install it with: <span style="font-family:courier new;">apt-get install lsb-release</span>. Note that you might need to <span style="font-family:courier new;">su</span> or <span style="font-family:courier new;">sudo</span> before installing it. Note also that the package name has a hyphen ("-") whereas the command has an underscore ("_"). That difference got me the first time.<br /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment or send me an email!<br /></span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-4545241521998192396?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com4tag:blogger.com,1999:blog-21102333.post-24199597084804896912008-02-12T06:10:00.001-08:002009-12-04T13:29:12.133-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/02/12/barts-boot-cd-with-broadcom-netxtreme-57xx-gigabit-controller/">location</a>.<br /><!--<br />Are you having problems getting <a href="http://www.nu2.nu/bootcd/">Bart's Boot CD</a> to recognize the Broadcom NetXtreme 57xx Gigabit Controller network interface card?<br /><br />I work with some Dell computers (models: Optiplex SX280, Optiplex GX620, Precision 690 and Precision 370) that have this NIC and the current version of Bart's Boot CD is unable to recognize it. The automatic NIC detection fails with a message to the effect of "could not find any device, you can try manually selecting a driver" (sorry, I can't remember the exact error).<br /><br />Naturally, I looked on Bart's site to see if there was a new driver cab file that would fix this problem. There I found <a href="http://www.nu2.nu/download.php?sFile=b57.cab">b57.cab</a>, which had the description "Broadcom NetXtreme Gigabit Ethernet NDIS2 Driver v7.03 (031002)". That seemed like it would be the right one so I put it on my boot disk and tried it. Again, auto-detection failed.<br /><br />I tried manually loading the driver in <code>b57.cab</code> but I got "Error 7306: The driver failed to initialize." I tried manually loading some of the other drivers on the disk but I got "Error 7321: Network-card drivers failed to load."<br /><br />The good news is that I figured out how to fix this issue, after doing some research. Essentially, I made a custom version of <code>b57.cab</code>. Read on for more details. Note that you could apply these techniques for making custom versions of any of Bart's network driver cabs.<br /><br />First, let me explain how (I think) the auto-detection works. Each of the network driver cabs includes a file called <code>ndis.pci</code>. Here are the contents of <code>ndis.pci</code> from the latest released version of <code>b57.cab</code> (ver 1.6):<br /><pre class="code-hs">ret="B57"<br />ven=14E4 "Broadcom"<br />dev=1645 "NetXtreme Gigabit Ethernet (BCM5701)"<br />1644 "NetXtreme Gigabit Etherent (BCM5700/5401)"<br />16A7 "NetXtreme Gigabit Ethernet (BCM5703X)"<br />165D "NetXtreme Gigabit Ethernet (BCM5705M 10/100/1000)"<br />165E "NetXtreme Gigabit Ethernet (BCM5705M 10/100/1000)"<br />166D "NetXtreme Gigabit Ethernet (BCM5705MFE 10/100)"<br />16A6 "NetXtreme Gigabit Ethernet (BCM5702 10/100/1000)"<br />164D "NetXtreme Gigabit Ethernet (BCM5702FE 10/100)"<br />1648 "NetXtreme Gigabit Ethernet (BCM5704C 10/100/1000)"<br />1696 "NetXtreme Gigabit Ethernet (BCM5782 10/100/1000)"<br /></pre><br />"Ven" stands for "vendor id", which identifies the manufacturer of the card. "dev" stands for "device ID", which identifies the model or chip set of the card. Operating systems use the <a href="http://en.wikipedia.org/wiki/PCI_Configuration_Space">vendor and device IDs</a> to implement <a href="http://en.wikipedia.org/wiki/Plug-and-play">plug-and-play</a> for PCI devices. When plug and play works, the operating system can automatically load the correct drivers for a device.<br /><br />In this case, the manufacturer is Broadcom (vendor id 14E4) and all of the listed devices seem to be NetXtreme 57xx Gigabit devices of some sort. So why did autodetection fail? A clue is to look at the revision history of <code>b57.cab</code>. For example, look at this note: "v1.2 Updated by Oivind Pettersen from IBM, added dev=1644". Hmm, perhaps I need to add a new device ID to the list but how do I know which one to add?<br /><br />To answer that question, I loaded Windows on a Dell Precision 690 and started poking around in Control Panel. I found the information I needed by drilling down to <code>Control Panel | System | Hardware | Device Manager | Network Adapters | Broadcom NetXtreme 57XX Gigabit Controller | Details</code>. There I found the string "PCI\VEN_14E4&amp;DEV_1600&amp;SUBSYS_01C01028&amp;REV_02\4&amp;F667E4F&amp;0&amp;00E0".<br /><br />In that string, you can clearly see the vendor id, 14E4, and the device id, 1600. If you examine the device id list above, you'll note that 1600 is missing. Therefore, I added it. Similarly, for the Dell Optiplex SX280 and GX620, I had to add the device id 1677. I can't remember what the device id was for the Precision 370 but it was either one of the old ones of one of the two new ones.<br /><br />After making the changes, my new <code>ndis.pci</code> file looked like this:<br /><pre class="code-hs">ret="B57"<br />ven=14E4 "Broadcom"<br />dev=1600 "NetXtreme Gigabit Ethernet (BCM57xx)"<br />1645 "NetXtreme Gigabit Ethernet (BCM5701)"<br />1644 "NetXtreme Gigabit Etherent (BCM5700/5401)"<br />16A7 "NetXtreme Gigabit Ethernet (BCM5703X)"<br />165D "NetXtreme Gigabit Ethernet (BCM5705M 10/100/1000)"<br />165E "NetXtreme Gigabit Ethernet (BCM5705M 10/100/1000)"<br />166D "NetXtreme Gigabit Ethernet (BCM5705MFE 10/100)"<br />1677 "NetXtreme Gigabit Ethernet (BCM57xx)"<br />16A6 "NetXtreme Gigabit Ethernet (BCM5702 10/100/1000)"<br />164D "NetXtreme Gigabit Ethernet (BCM5702FE 10/100)"<br />1648 "NetXtreme Gigabit Ethernet (BCM5704C 10/100/1000)"<br />1696 "NetXtreme Gigabit Ethernet (BCM5782 10/100/1000)"<br /></pre><br />After changing <code>ndis.pci</code>, I rebuilt <code>b57.cab</code> with <a href="http://www.larshederer.homepage.t-online.de/cabpack.htm">CabPack</a> (any cab building software would suffice).<br /><br />To get the new cab into your boot disk, you need to do the following:<br /><ol><li>Put the cab in the folder <code>bart\bcd\cabs\drivers\ndis</code></li><li>cd to the folder <code>bart\bcd</code></li><li>build the boot sector: bcd -bab</li><li>create the ISO file: bcd -b corpmb</li><li>burn the ISO file to CD using Nero or other burning software</li></ol>After building a new boot disk I tried it. This time, the card was automatically detected and the system tried to load the DOS network driver in <code>b57.cab</code>. Unfortunately, I got "Error 7306: The driver failed to initialize."<br /><br />What else could be wrong? Perhaps I had an old version of the DOS driver? Sure enough, I found a newer version of the NetXtreme 57xx DOS NDIS2 <a href="http://www.broadcom.com/support/ethernet_nic/netxtreme_desktop.php">drivers</a> on Broadcom's website. The version number was 10.4.6 (I think the lastest version on Bart's site was 7.03).<br /><br />To upgrade the driver, I simply replaced the <code>B57.dos</code> in <code>b57.cab</code> with the <code>B57.dos</code> included in the download from Broadcom. Then I followed the previously mentioned steps to rebuild the boot disk. This time, auto-detection worked AND the driver loaded correctly! Woot!<br /><br />Using these steps, anyone should be able to quickly build a custom <code>b57.cab</code>. However, if you're technically challenged (or just plain lazy), you can try sending me a polite email request for the cab. If I'm in a good mood, I might just respond to your request.<br /><br />Note that you could also use these steps to upgrade the cab files for other network drivers. Just keep these tips in mind:<br /><ol><li>If auto-detection fails, you first must find the cab file that contains an <code>ndis.pci</code> with your card's vendor id. If you find the vendor id, you will need to add a device id to <code>ndis.pci</code>. If you don't find the vendor id in any of the cabs, you'll need to make a brand new cab file. I don't have any specific instructions on that but you should be able to figure it out from my notes above.</li><li>If you get "Error 7321: Network-card drivers failed to load", you probably have the wrong DOS driver for your card. For example, you tried to use a Broadcom driver for an Intel card. Try a different driver.</li><li>If you get "Error 7306: The driver failed to initialize", you probably have the right driver but it's too old. Try a newer version of that driver.</li></ol><b>If this tip helped you, please leave me a comment!</b><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-2419959708480489691?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com9tag:blogger.com,1999:blog-21102333.post-72121871697849688502008-02-08T13:20:00.001-08:002009-12-04T13:26:44.026-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/02/08/book-review-head-first-html-with-css-xhtml/">location</a>.<br /><!--<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://headfirstlabs.com/Images/hfhtml_cover.gif"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://headfirstlabs.com/Images/hfhtml_cover.gif" alt="" border="0" /></a><br /><br />First and foremost, I am a persistence layer software developer. I don't do much UI work and what little UI work I do usually involves rich client UIs. I rarely do any web UI work.<br /><br />Having said that, I think it's important to know at least a little bit about web UI technologies, even if you are a back-end developer. Why? Well, at the very least, you will be able to understand the vocabulary of the UI guys you work with. Furthermore, you never know when you might have to look for a new job and there's a good chance they'll want you to know about some of that web UI stuff.<br /><br />With that in mind, I recently picked up a copy of <a href="http://headfirstlabs.com/books/hfhtml/index.php">Head First HTML with CSS &amp; XHTML</a> to see if I could learn a thing or two. I just finished the book and I wanted to share my thoughts on it. Please read on.<br /><br />There are a lot of HTML books out there so you might be wondering why I got this particular HTML book . One reason is that it got a rating of 4.7 out of 5 stars from 193 reviewers on <a href="http://www.amazon.com/Head-First-HTML-CSS-XHTML/dp/059610197X">Amazon.com</a>. That's a pretty good score! Another reason is because I've skimmed some of the other books in the <a href="http://headfirstlabs.com/books.php">Head First series</a> and I think they are pretty darn fun to read.<br /><br />So what do I think of this book? It's fantastic! It's fun to read, engaging, informative and full of humor. It has numerous interesting activities and exercises to reinforce learning. It has lots of diagrams, photos and colors. I has plenty of jokes. And, on top of all that, the authors seem to really know their stuff. <br /><br />If you read this book, you <i>will</i> learn the fundamentals of HTML, XHTML and CSS. You will learn it quickly and you won't feel like you're being tortured. Most importantly, you will have fun.<br /><br />No book is perfect however. My biggest quibble is the horrible index. I had a hard time finding anything and I had to keep on adding my own items to the index with a pencil. You CANNOT expect to use this book as a reference. It should be viewed strictly as a tutorial.<br /><br />Also, by no means is this book a comprehensive resource on CSS. For example, it didn't even talk about the <code>min-width</code> property for setting the minimum width of your page. Lots of sites use this feature. I can't believe the authors didn't mention it in their chapter on layouts.<br /><br />The authors also spend quite a bit of time modularizing headers, footers and sidebars but they neglect to mention that it won't help you that much if you are have a purely static HTML website, where you would have to go through much pain to make any changes to them (how much fun would it be to make the same change in 100 pages?). I feel the authors should have at mentioned this problem and recommended that you investigate server-side-includes, PHP, JSP or ASP as a solution to this problem.<br /><br />Contrary to what the book's cover says, I don't think you'll "launch your web career in one chapter". However, this book is definitely an excellent starting point for anyone who is new to these technologies.<br /><br /><b>Pros:</b> Extremely fun to read. Teaches most of the fundamentals. Teaches standards compliance.<br /><b>Cons:</b> Horrible index.<br /><b>Rating:</b> 4.5/5<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-7212187169784968850?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-25725262983415260732008-02-07T16:20:00.001-08:002009-12-04T13:24:00.493-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2008/02/07/how-to-copy-a-file-and-get-a-progress-bar-in-linux/">location</a>.<br /><!--<br />Today I had to copy a really big file (in this case, a Ghost image) from a Linux box to a Windows box, using Samba. My first instinct was to use the cp command. The problem with cp is that it does not show you any sort of progress (I couldn't find any relevant option in the <a href="http://www.linuxcommand.org/man_pages/cp1.html">cp man page</a>). What I wanted was a progress bar display like the one <a href="http://www.gnu.org/software/wget/">wget</a> displays.<br /><br />I did some googling and found a few decent candidates:<br /><ul><li><a href="http://chris-lamb.co.uk/2008/01/24/can-you-get-cp-to-give-a-progress-bar-like-wget/">Lamby's "can you get cp to give a progress bar like wget?" bash script (cp_p)</a></li><li><a href="http://packages.debian.org/stable/utils/mc">Midnight Commander (mc)</a></li><li><a href="http://packages.debian.org/stable/utils/lfm">Last File Manager (lfm)</a></li><li><a href="http://ubuntuforums.org/showthread.php?t=316707">Pabix's "cp with progress bar" bash script (gcp)</a></li><li><a href="http://www.ivarch.com/programs/pv.shtml">Pipe Viewer (pv)</a></li></ul>While all of them might work, the only one I tried was pv and I loved it. It did exactly what I wanted. The result was sort of like "cp with a progress bar".<br /><br />Under Debian Linux (sarge version) pv was easy enough to install: apt-get install pv.<br /><br />After reading the <a href="http://www.ivarch.com/programs/quickref/pv.shtml">pv man page</a>, I was still a little unclear on exactly how to use it to copy files (yes, I guess I'm dumb). However, after a little bit of experimentation, I figured it out:<br /><br /><pre class="code-hs">me@mycomputer:/home/ghost$ pv bigfile &gt; /mnt/ghost_on_windows_box/bigfile</pre><br /><br />The source file is bigfile, in the current directory. The target file is bigfile, on a share called /mnt/ghost_on_windows_box. Obviously, the share is a SMB share on a Windows box. On the Linux box, I mounted that share with the CIFS file system (via an entry in /etc/fstab).<br /><br />Here is what the output looked like, at three different stages:<br /><br /><pre class="code-hs">205MB 0:00:17 [8.03MB/s] [=======&gt; ] 25% ETA 0:00:49<br />436MB 0:00:31 [40.7MB/s] [=================&gt; ] 54% ETA 0:00:25<br />801MB 0:00:44 [ 18MB/s] [=================================&gt;] 100% ETA 0:00:00</pre><br /><br />Just confirm that the copy worked, I ran md5sum on both the source file and the target file. It indeed worked.<br /><br />One minor problem I noticed, however, is that it took several seconds to get my command prompt back after pv showed the copy was 100% complete. After some investigation, it seems that it wasn't pv's fault. Rather, it had something to do with Samba. I'm not even sure if it was the Linux Samba client's fault or the Windows SMB server's fault.<br /><br />I confirmed that it was not a pv problem by copying the file to a local folder on the Linux box. In that case, pv returned control to the shell immediately after the progress bar went to 100%.<br /><br />As a workaround for this Samba copying problem, I added an extra command to the original command:<br /><br /><pre class="code-hs">me@mycomputer:/home/ghost$ pv bigfile &gt; /mnt/ghost_on_windows_box/bigfile; echo ***DONE***</pre><br /><br />Now, several seconds (or even a minute or so) after the progress bar reaches 100%, I get the message ***DONE*** in the console. Then I know it is really done.<br /><br />For my needs, pv works great.<br /><br /><b>If this tip helped you, please leave me a comment!</b><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-2572526298341526073?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com3tag:blogger.com,1999:blog-21102333.post-73023039589891640792007-06-08T13:50:00.001-07:002009-12-03T13:56:43.055-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/06/08/state-pattern-persistence-with-hibernate/">location</a>.<br /><!--<br />In my software development job, I do a lot of persistence layer implementation, especially using the <a href="http://www.hibernate.org/">Hibernate</a> O/R mapper. I work closely with a clever domain layer programmer who tends to use a lot of design patterns, perhaps because he likes the woman of the cover of <a href="http://www.oreilly.com/catalog/hfdesignpat/">Head First Design Patterns</a>.<br /><br />Sometimes, these design patterns create a bit of a challenge for me in the persistence layer, especially since I always tell my domain layer programmer that I can persist things transparently, without having to muck up his code with persistence layer artifacts.<br /><br />A case in point is the <a href="http://en.wikipedia.org/wiki/State_pattern">State pattern</a>. I have now persisted 5 different sets of states so it's no longer a challenge. However, it took me a little while to figure how to do it. Naturally, I started by checking out <a href="http://forum.hibernate.org/">Hibernate's forums</a> but much to my chagrin, I found several people asking the same question but no one offering an answer. Therefore, I will provide an answer in this blog post. Read on!<br /><br />Imagine you have a Customer class, which is playing the "context" role in the design pattern. The customer has a simple state machine with two states: active and inactive. I've implemented State pattern persistence in two ways: without an enumeration and with an enumeration. First, here is a sample implementation of the pattern in the domain layer, without using an enumeration:<br /><br /><pre class="code-hs">public interface CustomerState<br />{<br /> /**<br /> * Checks whether the CustomerState is 'Active'.<br /> * @return true if the CustomerState is 'Active'.<br /> */<br /> boolean isActive();<br /><br /> /**<br /> * Checks whether the CustomerState is 'Inactive'.<br /> * @return true if the CustomerState is 'Inactive'.<br /> */<br /> boolean isInactive();<br /><br /> /**<br /> * Activates the specified Customer.<br /> * @param customer the Customer being activated.<br /> */<br /> void activate(Customer customer);<br /><br /> /**<br /> * Deactivates the specified Customer.<br /> * @param customer the Customer being deactivated.<br /> */<br /> void deactivate(Customer customer);<br />}</pre><br /><pre class="code-hs">/**<br />* All concrete subclasses of this class are stateless (they have no instance<br />* variables). Therefore, we have overridden equals and hashCode (see below)<br />* because any instance of a particular subclass should be considered equal to<br />* any other instance of that sublcass.<br />*/<br />public abstract class AbstractCustomerState implements CustomerState<br />{<br /> public static final CustomerState ACTIVE = new CustomerStateActive();<br /> public static final CustomerState INACTIVE = new CustomerStateInactive();<br /><br /> public boolean isActive()<br /> {<br /> return false;<br /> }<br /><br /> public boolean isInactive()<br /> {<br /> return false;<br /> }<br /><br /> public void activate(Customer customer)<br /> {<br /> throw new UnsupportedOperationException();<br /> }<br /><br /> public void deactivate(Customer customer)<br /> {<br /> throw new UnsupportedOperationException();<br /> }<br /><br /> /**<br /> * Returns true if the Object's class name matches this Object's class name.<br /> */<br /> public final boolean equals(Object obj)<br /> {<br /> if (this == obj)<br /> {<br /> return true;<br /> }<br /> if (obj == null)<br /> {<br /> return false;<br /> }<br /> return getClass().getName().equals(obj.getClass().getName());<br /> }<br /><br /> /**<br /> * Returns the hashCode of the Object's Class name because all instances of<br /> * this Class are equal.<br /> */<br /> public final int hashCode()<br /> {<br /> return getClass().getName().hashCode();<br /> } <br />}</pre><br /><pre class="code-hs">public class CustomerStateActive extends AbstractCustomerState<br />{<br /> public boolean isActive()<br /> {<br /> return true;<br /> }<br /><br /> public void deactivate(Customer customer)<br /> {<br /> // do some checks to make sure it's okay to deactivate this customer<br /> // ...<br /><br /> // set the state<br /> ((AbstractCustomer) customer).setState(AbstractCustomerState.INACTIVE);<br /> }<br />}</pre><br /><pre class="code-hs">public class CustomerStateInactive extends AbstractCustomerState<br />{<br /> public boolean isInactive()<br /> {<br /> return true;<br /> }<br /><br /> public void activate(Customer customer)<br /> {<br /> // do some checks to make sure it's okay to activate this customer<br /> // ...<br /><br /> // set the state<br /> ((AbstractCustomer) customer).setState(AbstractCustomerState.ACTIVE);<br /> }<br />}</pre><br />Notice in my example that I have made the states stateless. Yes, I realized that a <i>stateless</i> state seems like an oxymoron but it's true; the above state classes do not have any instance variables. Since they are stateless, any instance of a state is equal to any other instance of that same state. That's why I overrode the equals() and hashCode() methods. Since the states are stateless, I also created constants for each state (ACTIVE and INACTIVE) in the abstract base class so that we don't have to keep on instantiating them all over the place.<br /><br />Anyway, the code above is what the domain layer developer would hand over to me. Then it would be my job to persist it. The first task is to make a Hibernate UserType implementation:<br /><pre class="code-hs">public class CustomerStateUserType implements UserType<br />{<br /> public static final int ACTIVE_STATE_DB_VALUE = 1;<br /> public static final int INACTIVE_STATE_DB_VALUE = 2;<br /><br /> public int[] sqlTypes()<br /> {<br /> return new int[] {Types.INTEGER};<br /> }<br /><br /> public Class returnedClass()<br /> {<br /> return CustomerState.class;<br /> }<br /><br /> public boolean isMutable()<br /> {<br /> // CustomerStates are stateless, therefore they are clearly immutable<br /> return false;<br /> }<br /><br /> public Object deepCopy(Object value) throws HibernateException<br /> {<br /> // CustomerStates are immutable<br /> return value;<br /> }<br /><br /> public Serializable disassemble(Object value) throws HibernateException<br /> {<br /> // CustomerStates are immutable<br /> return (Serializable) value;<br /> }<br /><br /> public Object assemble(Serializable cached, Object owner)<br /> throws HibernateException<br /> {<br /> // CustomerStates are immutable<br /> return cached;<br /> }<br /><br /> public Object replace(Object original, Object target, Object owner)<br /> throws HibernateException<br /> {<br /> // CustomerStates are immutable<br /> return original;<br /> }<br /><br /> public boolean equals(Object x, Object y)<br /> throws HibernateException<br /> {<br /> if (x == y)<br /> {<br /> return true;<br /> }<br /> if (x == null || y == null)<br /> {<br /> return false;<br /> }<br /> return x.equals(y);<br /> }<br /><br /> public int hashCode(Object x) throws HibernateException<br /> {<br /> return x.hashCode();<br /> }<br /><br /> public Object nullSafeGet(ResultSet rs, String[] names, Object owner)<br /> throws HibernateException, SQLException<br /> {<br /> final int stateValue = rs.getInt(names[0]);<br /> if (rs.wasNull())<br /> {<br /> return null;<br /> }<br /><br /> CustomerState state = null;<br /> switch (stateValue)<br /> {<br /> case ACTIVE_STATE_DB_VALUE:<br /> state = AbstractCustomerState.ACTIVE;<br /> break;<br /> case INACTIVE_STATE_DB_VALUE:<br /> state = AbstractCustomerState.INACTIVE;<br /> break;<br /> default:<br /> throw new RuntimeException("Unknown CustomerState value ["<br /> + stateValue + "]");<br /> }<br /> return state;<br /> }<br /><br /> public void nullSafeSet(PreparedStatement st, Object value, int index)<br /> throws HibernateException, SQLException<br /> {<br /> if (value == null)<br /> {<br /> st.setNull(index, Types.INTEGER);<br /> }<br /> else<br /> {<br /> if (value.equals(AbstractCustomerState.ACTIVE))<br /> {<br /> st.setInt(index, ACTIVE_STATE_DB_VALUE);<br /> }<br /> else if (value.equals(AbstractCustomerState.INACTIVE))<br /> {<br /> st.setInt(index, INACTIVE_STATE_DB_VALUE);<br /> }<br /> else<br /> {<br /> throw new RuntimeException("Unknown CustomerState [" + value + "]");<br /> }<br /> }<br /> }<br />}</pre><br />As you can see, most of the interesting code is in nullSafeGet() and nullSafeSet(), which map the states to an integer column in the database. Next, you need to map it:<br /><pre class="code-hs">&lt;hibernate-mapping&gt;<br />&lt;class name="Customer" table="customer"&gt;<br /> &lt;property name="state" column="state" type="CustomerStateUserType"<br /> access="field"/&gt;<br /> &lt;!- ...other properties -&gt;<br />&lt;/class&gt;<br />&lt;/hibernate-mapping&gt;</pre><br /><br />Pretty easy, huh? The only problem with this implementation is that if the domain layer developer subsequently adds another state, I have to modify my UserType to account for the new state. If the domain layer developer forgets to tell me about the new state, it could be awhile before the error is discovered. Of course, one way around this is to make nullSafeGet and nullSafeSet map each state to the state's class name. For example:<br /><pre class="code-hs">public class CustomerStateUserType implements UserType<br />{<br /><br /> public int[] sqlTypes()<br /> {<br /> return new int[] {Types.VARCHAR};<br /> }<br /><br /> //...other methods<br /><br /> public Object nullSafeGet(ResultSet rs, String[] names, Object owner)<br /> throws HibernateException, SQLException<br /> {<br /> final String stateValue = rs.getString(names[0]);<br /> if (rs.wasNull())<br /> {<br /> return null;<br /> }<br /><br /> CustomerState state = null;<br /><br /> try<br /> {<br /> state = (CustomerState) Class.forName(stateValue).newInstance();<br /> }<br /> catch (Exception e)<br /> {<br /> throw new RuntimeException("Can't instantiate instance of ["<br /> + stateValue + "]", e);<br /> }<br /><br /> if (!(state instanceof CustomerState))<br /> {<br /> throw new RuntimeException("Unknown CustomerState value ["<br /> + stateValue + "]");<br /> }<br /><br /> return state;<br /> }<br /><br /> public void nullSafeSet(PreparedStatement st, Object value, int index)<br /> throws HibernateException, SQLException<br /> {<br /> if (value == null)<br /> {<br /> st.setNull(index, Types.VARCHAR);<br /> }<br /> else<br /> {<br /> if (value instanceof AbstractCustomerState)<br /> {<br /> st.setString(index, value.getClass().getName());<br /> }<br /> else<br /> {<br /> throw new RuntimeException("Unknown CustomerState ["<br /> + value + "]");<br /> }<br /> }<br /> }<br />}</pre><br />Of course, the problem with storing the class name in the database column is that it takes up more space than an integer; consider the relative cost of storing a million records with an integer state value versus a value like "com.mycompany.someapp.domain.customer.CustomerStateActive".<br /><br />The second style of implementing this pattern involves using an enumeration, specifically Apache's Jakarta-commons Enum class (of course, you could probably use Java 1.5's new enum feature too). Here are the relevant domain layer classes:<br /><pre class="code-hs">import org.apache.commons.lang.enums.Enum;<br /><br />public abstract class AbstractCustomerState extends Enum implements CustomerState<br />{<br /> public static final CustomerState ACTIVE = new CustomerStateActive();<br /> public static final CustomerState INACTIVE = new CustomerStateInactive();<br /><br /> protected AbstractCustomerState(String name)<br /> {<br /> super(name);<br /> }<br /><br /> /**<br /> * Overrides superclass method to allow enums to be subclasses, yet still be<br /> * part of the same enumeration. This is what allows an enum to play the role<br /> * of a State in the State design pattern. The Javadoc comments for Enum call<br /> * this type of Enum a "Functional Enum".<br /> * @see org.apache.commons.lang.enums.Enum#getEnumClass()<br /> * @see org.apache.commons.lang.enums.Enum<br /> */<br /> public final Class getEnumClass()<br /> {<br /> return AbstractCustomerState.class;<br /> }<br /><br /> public static AbstractCustomerState getEnum(String name)<br /> {<br /> return (AbstractCustomerState) getEnum(<br /> AbstractCustomerState.class, name);<br /> }<br /><br /> public static Map getEnumMap()<br /> {<br /> return getEnumMap(AbstractCustomerState.class);<br /> }<br /><br /> public static List getEnumList()<br /> {<br /> return getEnumList(AbstractCustomerState.class);<br /> }<br /><br /> public static Iterator iterator()<br /> {<br /> return iterator(AbstractCustomerState.class);<br /> }<br /><br /> //*start of CustomerState methods*<br /> public boolean isActive()<br /> {<br /> return false;<br /> }<br /><br /> public boolean isInactive()<br /> {<br /> return false;<br /> }<br /><br /> public void activate(Customer customer)<br /> {<br /> throw new UnsupportedOperationException();<br /> }<br /><br /> public void deactivate(Customer customer)<br /> {<br /> throw new UnsupportedOperationException();<br /> }<br />}</pre><br /><pre class="code-hs">public class CustomerStateActive extends AbstractCustomerState<br />{<br /> CustomerStateActive()<br /> {<br /> super("ACTIVE");<br /> }<br /><br /> public boolean isActive()<br /> {<br /> return true;<br /> }<br /><br /> public void deactivate(Customer customer)<br /> {<br /> // do some checks to make sure it's okay to deactivate this customer<br /> // ...<br /><br /> // set the state<br /> ((AbstractCustomer) customer).setState(AbstractCustomerState.INACTIVE);<br /> }<br />}</pre><br /><pre class="code-hs">public class CustomerStateInactive extends AbstractCustomerState<br />{<br /> CustomerStateInactive()<br /> {<br /> super("INACTIVE");<br /> }<br /><br /> public boolean isInactive()<br /> {<br /> return true;<br /> }<br /><br /> public void activate(Customer customer)<br /> {<br /> // do some checks to make sure it's okay to activate this customer<br /> // ...<br /><br /> // set the state<br /> ((AbstractCustomer) customer).setState(AbstractCustomerState.ACTIVE);<br /> }<br />}</pre><br />There is a tradeoff with this implementation. Notice the extra code at the top of AbstractCustomerState? I must override several methods of the Enum class, as per the "Functional Enums" section of Enum's JavaDocs. For the UserType, I started by making an abstract base class for all enumerations:<br /><pre class="code-hs">/**<br />* Maps a org.apache.commons.lang.enums.Enum to a Hibernate type. This<br />* allows you to persist Enum instances. This class was adapted from an<br />* example posted in <a href="http://www.hibernate.org/172.html">this forum<br />* thread </a> and an example on page 210 of "Hibernate in Action" (first<br />* edition).<br />*/<br />public abstract class EnumUserType implements UserType<br />{<br /> private Class enumClass;<br /><br /> public EnumUserType(Class enumClass)<br /> {<br /> this.enumClass = enumClass;<br /> }<br /><br /> public int[] sqlTypes()<br /> {<br /> return new int[] {<br /> Types.VARCHAR<br /> };<br /> }<br /><br /> public Class returnedClass()<br /> {<br /> return enumClass;<br /> }<br /><br /> public boolean equals(Object x, Object y) throws HibernateException<br /> {<br /> if (x == y)<br /> {<br /> return true;<br /> }<br /><br /> if (x == null || y == null)<br /> {<br /> return false;<br /> }<br /><br /> return Hibernate.STRING.isEqual(x, y);<br /> }<br /><br /> public Object nullSafeGet(ResultSet rs, String[] names, Object owner)<br /> throws HibernateException, SQLException<br /> {<br /> String value = rs.getString(names[0]);<br /> return rs.wasNull() ? null : EnumUtils.getEnum(enumClass, value);<br /> }<br /><br /> public void nullSafeSet(PreparedStatement st, Object value, int index)<br /> throws HibernateException, SQLException<br /> {<br /> // make sure the received value is of the right type<br /> if ((value != null) &&amp; !returnedClass().isAssignableFrom(value.getClass()))<br /> {<br /> throw new IllegalArgumentException("Received value is not a["<br /> + returnedClass().getName() + "] but [" + value.getClass() + "]");<br /> }<br /><br /> if (value != null)<br /> {<br /> Enum enum = (Enum) value;<br /> <br /> // convert the enum into its persistence format<br /> String enumName = enum.getName();<br /><br /> // set the value into the resultset<br /> st.setString(index, enumName);<br /> }<br /> else<br /> {<br /> st.setNull(index, Types.VARCHAR);<br /> }<br /> }<br /><br /> public Object deepCopy(Object value) throws HibernateException<br /> {<br /> // Enums are immutable - nothing to be done to deeply clone it<br /> return value;<br /> }<br /><br /> public boolean isMutable()<br /> {<br /> // Enums are immutable<br /> return false;<br /> }<br /><br /> public int hashCode(Object object) throws HibernateException<br /> {<br /> return object.hashCode();<br /> }<br /><br /> public Serializable disassemble(Object value)<br /> throws HibernateException<br /> {<br /> return (Serializable) value;<br /> }<br /><br /> public Object assemble(Serializable cached, Object owner)<br /> throws HibernateException<br /> {<br /> return cached;<br /> }<br /><br /> public Object replace(Object original, Object target, Object owner)<br /> throws HibernateException<br /> {<br /> return original;<br /> }<br />}</pre><br />Then, I extended that base class to create a CustomerStateUserType.<br /><pre class="code-hs">public class CustomerStateUserType extends EnumUserType<br />{<br /> public CustomerStateUserType()<br /> {<br /> super(AbstractCustomerState.class);<br /> }<br />}</pre><br />Notice that the derived UserType is a piece of cake to make.<br /><br /><b>If this tip helped you, please leave me a comment!</b><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-7302303958989164079?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com5tag:blogger.com,1999:blog-21102333.post-92052220150784320472007-06-04T06:53:00.001-07:002009-12-03T13:53:30.486-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/06/04/stupid-cron-tricks/">location</a>.<br /><!--<br />Have you ever wanted to make <span style="font-family:courier new;">cron</span> run a scheduled task on some weird interval like every 29 days? I was faced with that problem just the other day.<br /><br />I was starting to get annoyed with <a href="http://www.dyndns.com/">DynDNS</a>'s nag emails, asking me to either log in and "touch" my WRT54GL router's host record every 30 days or to upgrade to a paid service that does not require a periodic touch.<br /><br />Of course, you can create a <span style="font-family:courier new;">cron</span> job that calls programs like <span style="font-family:courier new;">ez-ipupdate</span> to automate this periodic touching. The problem is, even though <span style="font-family:courier new;">cron</span> is quite flexible, it does not support intervals of 29 days.<br /><br />Why 29 days? If you touch the record any earlier than 28 days since the previous touch, DynDNS may flag you for abuse and disable your host record (in practice, I have been able to touch the record a handful of times within 28 days without being flagged, but why take a chance?). On the other hand, if you don't touch the host record within 30 days, you get a nag email (and if you don't touch it within 35 days, the record is deleted by DynDNS altogether). So, I figured that 29 days would be a safe value to use.<br /><br />I thought I had solved the problem with the technique I described in <a href="http://joesbitbucket.blogspot.com/2007/01/how-to-force-ez-ipupdate-to-touch.html">this article</a>. It <span style="font-style: italic;">did</span> automatically touch the record during within the 28 to 35 day window but since it was based on a <span style="font-style: italic;">monthly</span> <span style="font-family:courier new;">cron</span> job, I still got nag emails during 31-day months because 31 is greater than the 30 day nag email threshold.<br /><br />So how did I solve the problem the second time around? I based my solution on Stephan Sokolow's <a href="http://leary.csoft.net/%7Essokolow/wordpress/archives/2007/03/04/crontab-timing-tricks/">Crontab Timing Tricks</a> article, but with a few minor changes. Here is the script that does most of the work:<br /><br /><pre class="code-hs">#!/bin/sh<br />#<br /># Runs ez-ipupdate periodically (every $INTERVAL days).<br /># To automate this, call this script from a daily cron job.<br /><br />let INTERVAL=29<br />let upSeconds=`cat /proc/uptime | cut -f1 -d.`<br />let days=$((${upSeconds}/86400))<br /><br />echo `date`<br />echo interval = ${INTERVAL}<br />echo uptime in days = ${days}<br /><br />if [ $days -lt $INTERVAL ]; then<br /> echo uptime less than interval, so no touch needed<br />elif [ $(( $days % $INTERVAL )) -ne 0 ]; then<br /> echo uptime is not a multiple of interval, so no touch needed<br />else<br /> echo uptime is a multiple of interval, a touch is needed<br /> echo doing touch<br /> rm -f /tmp/ez-ipupdate.cache<br /> /usr/sbin/ez-ipupdate -c /etc/ez-ipupdate.conf<br />fi</pre><br /><br />As you can see, <span style="font-family:courier new;">ez-ipupdate</span> is only called every 29 days, based on the system uptime.<br /><br />Next, I created a <span style="font-family:courier new;">cron</span> job to automatically call the script daily:<br /><pre class="code-hs">1 0 * * * /usr/sbin/periodic-ez-ipupdate &gt; /tmp/periodic-ez-ipupdate-cron.log 2&gt;&amp;1</pre><br /><br />Ya, It's pretty cheesy but it works.<br /><br />One caveat with my solution is that if the router is rebooted sooner than 29 days since the last reboot, my <span style="font-family:courier new;">periodic-ez-ipupdate</span> script will not be called. That's okay though because the stock configuration of <span style="font-family:courier new;">ez-ipupdate</span> in OpenWrt White Russian RC6 automatically calls <span style="font-family:courier new;">ez-ipupdate</span> upon reboot. Note, however, if you frequently reboot your router, you will be flagged for abuse for sending too many unnecessary updates to DynDNS. Fortunately, I go several months between reboots of my router.<br /><br />An obvious solution to the reboot problem would be to store the date of the last touch in a file and compare that to the current system date to see if 29 days had passed. The is a great solution if your router has a hard drive. However, the WRT54GL only has flash memory, which has a <a href="http://www.kingston.com/ukroot/flash/flashendurance.asp">finite number of write cycles</a>. Many manufacturers will tell you that you have at least 10,000 write cycles. But I have read that some chips can give you as little as 1,000 write cycles, so why take a chance? That's why I used the uptime-based solution.<br /><br /><b>If this tip helped you, please leave me a comment!</b><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-9205222015078432047?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com2tag:blogger.com,1999:blog-21102333.post-59352246457745065822007-03-08T10:31:00.001-08:002009-12-03T13:51:11.738-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/03/08/a-virtual-visit-from-paul-wouters/">location</a>.<br /><!--<br />Soon after posting yesterday's blog entry, <a href="http://joesbitbucket.blogspot.com/2007/03/how-to-vpn-between-rv082-or-rv042-and.html">How To: VPN Between RV082 (or RV042) and WRT54GL (or WRT54G)</a>, I received a comment from <a href="http://www.xtdnet.nl/paul/">Paul Wouters</a>:<br /><blockquote>Use dpdaction=restart<br /><br />btw yout ike/ipsec lifetimes are insanely short. you should not do that. leave them default, and the shortest one of the other device will be used.</blockquote>Paul, if you're reading this, thanks for the tips!<br /><br />I wasn't sure how I could have missed that useful <code>dpdaction=restart</code> setting so I went back and checked the <a href="http://www.die.net/doc/linux/man/man5/ipsec.conf.5.html">ipsec.conf man page</a> this morning. Sure enough, the <code>dpdaction=restart</code> setting was missing from the man page. That's why I missed it! See! I did RTFM!<br /><br />Anyway, I did <a href="http://www.google.ca/search?q=dpdaction+restart&hl=en&amp;start=0&sa=N">some googling</a> to find out more about <code>dpdaction=restart</code> and I came across this <a href="http://lists.openswan.org/pipermail/users/2005-November/007203.html">Openswan mailing list message</a>, authored by none other than Paul Wouters:<br /><br /><blockquote>On Thu, 10 Nov 2005, Duncan Reed wrote:<br /><br />> I was interested in seeing how the new(ish) dpdaction=restart option<br />> differed from clear and hold. Looking through the ipsec.conf man and<br />> other docs they don't appear to have been updated yet.<br />><br />> How does restart differ from hold? And in what situations would I use<br />> restart instead of the other options.<br /><br /><b>clear</b>: tear down the broken tunnel. Allow cleartext pckets to the destination<br /><b>hold</b>: tear down the broken tunnel. Disallow cleartext packets, wait for the remote to re-estbalished a new IPsec SA (responder)<br /><b>restart</b>: tear down the broken tunnel. Disallow cleartext packets, attempt to restart the IPsec tunnel (initiator)<br /><br />clear is mostly used for roadwarriors. You likely won't be talking to that remote IP again, as the roadwarrior might show up elsewhere.<br /><br />hold is for a connection, usually with a remote subnet defined, that vanished but is on dynamic IP. you cannot restart it, but you also want to prevent<br />sending cleartext packets for the defined remote subnet.<br /><br />restart is for a connection to a remote static ip, which you can initiate yourself.<br /><br />Compare it to rekey=no. If you have right=%any, you need to have rekey=no, and you cannot use dpdaction=restart. If this was a single roadwarrior, you clear, if it was for a subnet, you want to hold it.<br /><br />Paul</blockquote><br />I love finding out about undocumented settings! Hehe!<br /><br />Now, as for my "insanely short" values for <code>keylife</code> and <code>ikelifetime</code>, where did I come up with those? Well, when I was trying to connect the RV082 to the WRT54G, I figured that if I had any problems with bad settings, the RV082 side would be the pickiest. So, I tried to stick mostly to the RV082's default values. RV082's default value for <code>Phase1 SA Life Time</code> is 28800 seconds (8 hours) and the default value for <code>Phase2 SA Life Time</code> is 3600 seconds (1 hour).<br /><br />My mistake was in my mapping of the RV082's settings names to the OpenSwan settings names. I <i>incorrectly</i> mapped <code>Phase1 SA Life Time</code> to <code>keylife</code> and <code>Phase2 SA Life Time</code> to <code>ikelifetime</code>. The correct mapping is <code>Phase1 SA Life Time</code> to <code>ikelifetime</code> and <code>Phase2 SA Life Time</code> to <code>keylife</code>. How did I found that out? From another Paul Wouters <a href="http://lists.openswan.org/pipermail/users/2005-September/006657.html">mailing list message</a>, of course:<br /><br /><blockquote>On Tue, 27 Sep 2005, Agent Smith wrote:<br /><br />> ike_life is set by the keyword ikelifetime which is<br />> phase 1 timeout (maximum supported is 8 hr.)<br />><br />> ipsec_life is set by keylife keyword and that is phase<br />> 2 timeout.<br />><br />> phase 2 timeout is typically less then phase 1<br />> timeout.<br />><br />> correct?<br /><br />Yes<br /><br />Paul</blockquote>So what values should you use for <code>ikelifetime</code> (phase1) and <code>keylife</code> (phase2)? I emailed this question to Paul and here is his answer:<br /><blockquote>The RFC leaves it open. Some people prefer phase 2 to last longer then phase1, some vise versa. I believe <span style="font-style: italic;">using phase2 that is bigger then phase1 is good</span>, since a phase 1 rekey failure won't immediately blow your tunnel out of the water, since phase2 is still valid for a few more hours.</blockquote>Based on Paul's advice, I assume the Openswan default values are appropriate. That is, <code>ikelifetime=1</code> and <code>keylife=8</code>. Note that the default values on the RV082/RV042 appear to be the exact opposite of this, so you should probably reverse the values on the RV082/RV042.<br /><br />BTW, I found out that Paul has authored a book about Openswan called <a href="http://www.packtpub.com/openswan/book">Openswan: Building and Integrating Virtual Private Networks</a>. I recall seeing this book at the bookstore when I was attempting to create my VPN. At the time I thought "Great book. I should get it". However, I didn't get it because I didn't feel like begging my boss to buy me yet another book. I probably should have got it...<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-5935224645774506582?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com2tag:blogger.com,1999:blog-21102333.post-50049584742612549412007-03-07T09:35:00.001-08:002009-12-03T13:48:41.943-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/03/07/how-to-vpn-between-rv082-or-rv042-and-wrt54gl-or-wrt54g/">location</a>.<br /><!--<br /><span style="font-size:130%;"><span style="font-weight: bold;">Introduction</span></span><br /><br />Using the <a href="http://beast:8080/JSPWiki/Wiki.jsp?page=OpenWrt">OpenWrt</a> Linux distribution, you can configure a LinkSys WRT54G (also WRT54GS and WRT54GL) router as an IPSec VPN endpoint. This IPSec VPN functionality is provided by an <a href="http://www.openswan.org/">Openswan</a> package that was built specifically for OpenWrt.<br /><br />In this How To, I will show you how to create a VPN between a LinkSys WRT54GL and a LinkSys RV082 (RV042 could be used also).<br /><br /><span style="font-style: italic;">As usual, if the post helps you, please have the common courtesy to leave me a thank you comment!</span><br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Openswan vs Freeswan - What's the difference?</span></span><br /><br />Openswan is a <a href="http://wiki.openswan.org/index.php/Openswan/FreeSWAN">fork</a> of the Freeswan project. Apparently, <a href="http://www.openswan.org/docs/feature_comparison.php">Openswan has more features that Freeswan</a>. Anyway, it's moot because only Openswan has been ported to OpenWrt. Note that much of the Freeswan documentation, tips and how-tos also apply to Openswan.<br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Software and Hardware Versions</span></span><br /><br />I used the following hardware and software versions for the OpenWrt end of the VPN tunnel: <ul><li>LinkSys WRT54GL v1.1 (serial number starts with CL7B). </li><li>OpenWrt firmware version: White Russian RC6 </li><li>Openswan 2.4.4-1 </li></ul> <p> On the other end of the VPN tunnel, I used: </p><ul><li>LinkSys RV082 </li><li>Stock firmware version: 1.3.3.5 </li><li>From skimming the GPL source code for that firmware version, it appears that it uses Freeswan (perhaps version 1.99) for its VPN server. </li></ul><br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Network Diagram</span></span><br /><br />This how-to was created in a "lab" environment. To simulate the internet we used private IP addresses. Here is the network diagram:<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp3.blogger.com/__68CJkmINgk/Re753D43hcI/AAAAAAAAAAM/ZSBWHmXHTw0/s1600-h/Openswan_VPN_in_lab.JPG"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp3.blogger.com/__68CJkmINgk/Re753D43hcI/AAAAAAAAAAM/ZSBWHmXHTw0/s400/Openswan_VPN_in_lab.JPG" alt="" id="BLOGGER_PHOTO_ID_5039239757406111170" border="0" /></a><br /><br /><p> <i>From the point of view of the WRT54G</i>, the WRT54G side of the tunnel is called the <b>local side</b> or the <b>left side</b> and the RV082 side of the tunnel is called the <b>remote side</b> or the <b>right side</b>. </p><p> Here are the relevant IP addresses, as shown in the above network diagram:<br /></p><ul><li>Left WAN interface ("left") = 192.168.3.2<br /></li><li>Left LAN subnet ("leftsubnet") = 192.168.2.0/24<br /></li><li>Left LAN interface ("leftsourceip") = 192.168.2.1<br /></li><li>Right WAN interface ("right") = 192.168.3.1<br /></li><li>Right LAN subnet ("rightsubnet") = 192.168.1.0/24<br /></li><li>Right LAN interface ("rightsourceip") = 192.168.1.1<br /></li></ul><br /><br /><span style="font-weight: bold;">Step 1: Configure the RV082 Side of the VPN</span><br /><br /><ul><li>Login to the RV082 Web Admin Site </li><li>Browse the VPN page. </li><li>Click the <code>Add New Tunnel</code> button. The following "Mode Choose" screen will appear. Click the <code>Add Now</code> near the top (i.e. in the Gateway to Gateway section). </li></ul><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp2.blogger.com/__68CJkmINgk/Re77Nz43hdI/AAAAAAAAAAU/ydyU8lph9wQ/s1600-h/ModeChoose.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp2.blogger.com/__68CJkmINgk/Re77Nz43hdI/AAAAAAAAAAU/ydyU8lph9wQ/s400/ModeChoose.jpg" alt="" id="BLOGGER_PHOTO_ID_5039241247759762898" border="0" /></a><br /><br /><ul><li>Enter the settings as shown on the following two screenshots, then press <code>Save Settings</code>: </li></ul><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp2.blogger.com/__68CJkmINgk/Re78Cz43heI/AAAAAAAAAAc/SP-ZbvVRuzo/s1600-h/RV082_VPN_Settings1.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp2.blogger.com/__68CJkmINgk/Re78Cz43heI/AAAAAAAAAAc/SP-ZbvVRuzo/s400/RV082_VPN_Settings1.jpg" alt="" id="BLOGGER_PHOTO_ID_5039242158292829666" border="0" /></a><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp3.blogger.com/__68CJkmINgk/Re7_QD43hfI/AAAAAAAAAAk/cBsV5uW6UdQ/s1600-h/RV082_VPN_Settings2.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp3.blogger.com/__68CJkmINgk/Re7_QD43hfI/AAAAAAAAAAk/cBsV5uW6UdQ/s400/RV082_VPN_Settings2.jpg" alt="" id="BLOGGER_PHOTO_ID_5039245684460979698" border="0" /></a><br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Step 2: Configure the WRT54G Side of the VPN</span></span><br /><br /><ul><li>Install OpenWrt White Russian RC6, if you haven't done so already. </li><li>If necessary, update OpenWrt's package list: <tt>ipkg update </tt></li><li>Install the openswan package: <code>ipkg install openswan</code>. ipkg should automatically detect and install openswan dependencies like kmod-openswan.</li><li>Create the file <code>/etc/ipsec.secrets</code>, which will hold your preshared key. Here are the contents of my file (note that you can configure keys for specific tunnels or all tunnels):<br /></li></ul><pre class="code-hs"># PSK for tunnel from specific ip to specific ip<br />#192.168.3.2 192.168.3.1: PSK "abc123"<br /><br /># PSK for tunnel from any ip to any ip<br />: PSK "abc123"</pre><br /><ul><li>Edit the file <code>/etc/ipsec.conf</code>. Here are the contents of my file:</li></ul><br /><pre class="code-hs">version 2.0 # conforms to second version of ipsec.conf specification<br /><br /># basic configuration<br />config setup<br /> plutodebug="none"<br /> klipsdebug="none"<br /> nat_traversal=no<br /> interfaces=%defaultroute<br /><br /># Add connections here<br />conn TestVPN<br /> authby=secret<br /> keyexchange=ike<br /> ikelifetime=480m<br /> keylife=60m<br /> pfs=yes<br /> left=192.168.3.2<br /> leftsubnet=192.168.2.0/24<br /> leftnexthop=%defaultroute<br /> right=192.168.3.1<br /> rightsubnet=192.168.1.0/24<br /> auto=start<br /> leftsourceip=192.168.2.1<br /><br />#Disable Opportunistic Encryption<br />include /etc/ipsec.d/examples/no_oe.conf</pre><br /><ul><li>Edit <code>/etc/firewall.user</code>. Here is what I <i>appended</i> to the end of the file:</li></ul><br /><pre class="code-hs">### IPSec VPN<br /># allow IPSEC<br />iptables -A input_rule -p esp -s 192.168.3.1 -j ACCEPT<br /># allow ISAKMP<br />iptables -A input_rule -p udp -s 192.168.3.1 -dport 500 -j ACCEPT<br /># allow NAT-T<br />iptables -A input_rule -p udp -s 192.168.3.1 -dport 4500 -j ACCEPT<br /># disable NAT for communications with remote LAN<br />iptables -t nat -A postrouting_rule -d 192.168.1.0/24 -j ACCEPT<br /># Allow any traffic between tunnel LANs<br />iptables -A forwarding_rule -i $LAN -o ipsec0 -j ACCEPT<br />iptables -A forwarding_rule -i ipsec0 -o $LAN -j ACCEPT</pre><br /><br /><span style="font-weight: bold;font-size:130%;" >Step 3: Start up the Tunnel</span><br /><br /><ul><li>If you are starting the tunnel for the first time, you can start it by either rebooting the WRT54G, or by executing: <code>/etc/init.d/S60ipsec -start</code></li></ul><br /><span style="font-size:130%;"><span style="font-weight: bold;">Step 4: Verify the Tunnel is Up</span></span><br /><br /><p>There are numerous ways to verify that the tunnel is up and working:</p><ul><li>RV082 System Log - You should see a message like this: <code>Tunnel Negotiation Info - Quick Mode Phase 2 SA Established, IPSec Tunnel Connected</code></li><li>RV082 VPN connection status (in the web admin tool) - The button in the "tunnel test" column should have the caption "Disconnect" and the "status" column should say "connected". For example:</li></ul><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp1.blogger.com/__68CJkmINgk/Re8FNT43hgI/AAAAAAAAAAs/LuH68q5swJA/s1600-h/VpnConnectionStatus.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp1.blogger.com/__68CJkmINgk/Re8FNT43hgI/AAAAAAAAAAs/LuH68q5swJA/s400/VpnConnectionStatus.jpg" alt="" id="BLOGGER_PHOTO_ID_5039252234286106114" border="0" /></a><br /><br /><ul><li>ssh to the WRT54G and run the command <code>ipsec auto -status</code>. The output should look something like this:</li></ul><br /><pre class="code-hs">000 #2: "TestVPN":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 2514s; newest IPSEC; eroute owner<br />000 #2: "TestVPN" esp.82fdd248@192.168.3.1 esp.96ea10e4@192.168.3.2 tun.1002@192.168.3.1 tun.1001@192.168.3.2<br />000 #1: "TestVPN":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 27519s; newest ISAKMP; lastdpd=0s(seq in:0 out:0)<br /></pre><br />What you want to see are the phrases are "ISAKMP SA established" and "IPSec SA established", with the relevant connection name (in this case, "TestVPN"). Note that <code>ipsec auto -status</code> will tell you only what states have been achieved, rather than the current state. Since determining the current state is rather more difficult to do, current state information is not available from Linux FreeS/WAN. If you are actively bringing a connection up, the status report's last states for that connection likely reflect its current state. Beware, though, of the case where a connection was correctly brought up but is now downed: Linux FreeS/WAN will not notice this until it attempts to rekey. Meanwhile, the last known state indicates that the connection has been established.<br /><br /><ul><li>ssh to the WRT54G and run the command <code>logread</code>. The output should look something like this:</li></ul><br /><pre class="code-hs">Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: initiating Main Mode<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: received Vendor ID<br />payload [Dead Peer Detection]<br />Jan 1 00:05:13 (none) daemon.err ipsec__plutorun: 104 "TestVPN" #1:<br />STATE_MAIN_I1: initiate<br />Jan 1 00:05:13 (none) daemon.err ipsec__plutorun: ...could not start conn<br />"TestVPN"<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: transition from<br />state STATE_MAIN_I1 to state STATE_MAIN_I2<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: STATE_MAIN_I2: sent<br />MI2, expecting MR2<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: I did not send a<br />certificate because I do not have one.<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: transition from<br />state STATE_MAIN_I2 to state STATE_MAIN_I3<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: STATE_MAIN_I3: sent<br />MI3, expecting MR3<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: Main mode peer ID is<br />ID_IPV4_ADDR: '192.168.3.1'<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: transition from<br />state STATE_MAIN_I3 to state STATE_MAIN_I4<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: STATE_MAIN_I4:<br />ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192<br />prf=oakley_md5 group=modp1024}<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #1: Dead Peer Detection<br />(RFC 3706): enabled<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #2: initiating Quick<br />Mode PSK+ENCRYPT+TUNNEL+PFS+UP {using isakmp#1}<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #2: Dead Peer Detection<br />(RFC 3706): enabled<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #2: transition from<br />state STATE_QUICK_I1 to state STATE_QUICK_I2<br />Jan 1 00:05:13 (none) kern.warn pluto[1646]: "TestVPN" #2: STATE_QUICK_I2: sent<br />QI2, IPsec SA established {ESP=>0x82fdd26a <0x454556ce xfrm="3DES_0-HMAC_MD5" natd="none" dpd=""></pre><br />Again, what you want to see are the phrases are "ISAKMP SA established" and "IPSec SA established".<br /><br /><ul><li>Ping the RV082's LAN address from the WRT54G.</li><li>Ping the WRT54G's LAN address from the RV082.</li></ul><br /><span style="font-size:130%;"><span style="font-weight: bold;">Troubleshooting</span></span><br /><br />If the connection does not come up:<br /><ul><li>Check the VPN Log on the RV082. There might be some useful error messages.</li><li>Check the dmesg log on the WRT54G (ssh to the WRT54G and run the command <code>dmesg</code>). For more verbose messages, try changing the plutodebug and klipsdebug settings in /etc/ipsec.conf from "none" to "all" or another supported log level. <b>HOWEVER</b>, please make sure to change both settings back to "none" when you have finished debugging otherwise the VPN performance will suffer a lot! You have been warned!</li></ul><br /><span style="font-size:130%;"><span style="font-weight: bold;">How to Get the VPN to Reconnect Automatically</span></span><br /><br />If the WAN link between the two VPN endpoints goes down, the VPN link will go down too. To get the VPN to reconnect when the WAN link comes up again, you have two options:<br /><br /><ul><li>Enable the "Keep-Alive" setting on the "advanced" section of the VPN tunnel configuration on the RV082:</li></ul><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp3.blogger.com/__68CJkmINgk/Re8Hfz43hhI/AAAAAAAAAA0/9g9R3vhosy0/s1600-h/RV082-Keepalive.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://bp3.blogger.com/__68CJkmINgk/Re8Hfz43hhI/AAAAAAAAAA0/9g9R3vhosy0/s400/RV082-Keepalive.jpg" alt="" id="BLOGGER_PHOTO_ID_5039254751136941586" border="0" /></a><br /><br />Note that this keep-alive setting does not seem to work if the WAN link is down for more than about 4 minutes. After that, you will probably have to manually reconnect the tunnel.<ul><li>Enable the "dead peer detection" settings on the WRT54G in the file <code>/etc/ipsec.conf</code>. The relevant settings are <code>dpddelay</code>, <code>dpdtimeout</code> and <code>dpdaction</code>. Please see the <a href="http://www.die.net/doc/linux/man/man5/ipsec.conf.5.html">Openswan ipsec.conf man page</a> for a description of each setting. According to the man page, those settings should have default values, however, they didn't seem to work so I added them manually to <code>ipsec.conf</code>. Here are the settings I used:</li></ul><br /><pre class="code-hs">dpddelay=10<br />dpdtimeout=30<br />dpdaction=hold</pre><br />Note that the RV082 also has dead peer detection (DPD) but it does not seem to work like <a href="http://www.openswan.org/docs/local/README.DPD">DPD on the WRT54G</a>. Here is a description of the RV082's DPD feature:<br /><p></p><blockquote>Dead Peer Detection (DPD): When DPD is enabled, the RV082 will send the periodic HELLO/ACK messages to prove the tunnel liveliness when both peers of VPN tunnel provide DPD mechanism. Once a dead peer detected, the RV082 will disconnect the tunnel so the connection can be re-established. The Interval is the number of seconds between DPD messages. The default is DPD enabled, and default Interval is 10 seconds.</blockquote><p></p><br /><p>As you can see, RV082 DPD only seems to remove the dead connection. It does not seem to try to reconnect. That's what the RV082's keep-alive feature is for, as described here:</p><br /><p></p><blockquote>Keep-Alive: This mechanism helps to keep up the connection of IPSec tunnels. Whenever a connection is dropped and detected, it will be re-established immediately.</blockquote><p></p><br />The WRT54G's DPD feature seems to do both jobs: disconnect the dead connect and reconnect.<br /><br /><p>I have found that a combination of the above strategies works well for keeping connections up. That is:</p><br /><ul><li>Enable DPD on RV082</li><li>Enable keep-alive on RV082</li><li>Enable DPD on WRT54G</li></ul><br />If those strategies don't work, you can also try pinging each VPN endpoint periodically. This is a "roll your own" keep-alive solution.<br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">How to Manually Reconnect the Tunnel</span></span><br /><br /><p>If the tunnel does not automatically reconnect after a WAN link goes down and comes back up, you can manually reconnect it from either side of the tunnel:</p><br /><ul><li>To reconnect from the WRT54G side, ssh to the WRT54G and run <code>/etc/init.d/S60ipsec restart</code>. (Alternatively, you can reboot the WRT54G but this will bring down <i>all</i> WAN connectivity for a few seconds.)</li><li>To reconnect from the RV082 side, press the tunnel's Connect button on the VPN Summary page in the web admin tool. (Alternatively, you can reboot the RV082 but this will bring down <i>all</i> WAN connectivity for a few seconds.)</li></ul><br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Split DNS on WRT Side of the Tunnel</span></span><br /><br /><p>Let's say you have an internal DNS server on the RV side of the tunnel and you want all DNS lookups for the internal domain to be delegated to that DNS server but still have the WRT handle other (i.e. internet host) DNS lookups. The solution for this problem is to use a feature called <i>split dns</i>. Split DNS allows a DNS server to delegate lookups to another DNS server for certain domains.</p><br /><p>To enable this feature, you need to add a "server" setting to the file <code>/etc/dnsmasq.conf</code> on the WRT (and, of course, you would need to restart dnsmasq). For example:</p><br /><pre class="code-hs">server=/internal.mydomain.com/192.168.1.145</pre><br /><code>internal.mydomain.com</code> is the domain that you want to split requests for to the internal DNS server across the VPN. 192.168.1.145 is the address of that DNS server.<br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Joining a Domain on WRT Side of the Tunnel</span></span><br /><br /><p>Let's say you have an active directory domain controller on the RV side of the tunnel and you have a computer on the WRT side that you want to join to the domain.</p><br /><p>To join a domain across the VPN, you need to add a "srv-host" setting to the file /etc/dnsmasq.conf (and, of course, you would need to restart dnsmasq). For example:</p><br /><pre class="code-hs">srv-host=_ldap._tcp.dc._msdcs.internal.mydomain.com<br />,mydomaincontroller.internal.mydomain.com,389,0,100<br /></pre><br /><span style="font-family:monospace;"></span>In this example, <code>mydomaincontroller.internal.mydomain.com</code> is the name of the domain controller and <code>internal.mydomain.com</code> is the domain. I'm not sure if this only works with active directory or if it also works with NT4 domains. I leave that as an exercise to the reader.<br /><br /><span style="font-size:130%;"><span style="font-weight: bold;">Links</span></span><br /><br />Following are some useful how-to and informational links about installing and running Openswan on a WRT54G. Note that <i>none</i> of these links provide a <i>comprehensive</i> how-to. I had to piece together information from all of these links to create this page.<p></p><br /><ul><br /><li><a href="http://www.openswan.org/">Openswan</a></li><br /><li><a href="http://www.mikemcarthur.net/article.php?story=20050408164917958">The VPN Follies (Part 1) - Terminating VPN Connections with Linux and other Stuff - Introduction</a></li><br /><li><a href="http://www.mikemcarthur.net/article.php?story=20050620172738374">VPN Follies Part 2 - Linux 2.4, OpenSWAN, and WRT54G</a></li><br /><li><a href="http://wiki.openwrt.org/IPSec?highlight=%28openswan%29#head-f82d76b0ef953ec148ffb5fc252f8551105601bb">IPSec on OpenWrt</a> - from the <a href="http://wiki.openwrt.org/">OpenWrt Wiki</a></li><br /><li><a href="http://www.die.net/doc/linux/man/man5/ipsec.conf.5.html">Openswan <span class="searchword">ipsec.conf</span> man page</a></li><br /><li><a href="http://www.die.net/doc/linux/man/man5/ipsec.secrets.5.html">Openswan ipsec.secrets man page</a></li><br /><li><a href="http://www.die.net/doc/linux/man/man5/resolv.conf.5.html">resolv.conf man page</a></li><br /><li><a href="http://thekelleys.org.uk/dnsmasq/docs/setup.html">dnsmasq setup</a></li><br /><li><a href="http://wiki.openswan.org/">Openswan wiki</a></li><br /><li><a href="http://wiki.openswan.org/index.php/Openswan/FAQ#a54">Can I use Network Neighborhood (Samba, NetBIOS) over IPsec?</a></li><br /><li><a href="http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch35_:_Configuring_Linux_VPNs">Configuring Linux VPNs</a></li><br /></ul><br /><span style="font-weight: bold;font-size:130%;" >Addendum</span><br /><br />For some corrections and further information about this how-to, please see the following:<br /><ul><br /><li><a href="http://joesbitbucket.blogspot.com/2007/03/virtual-visit-from-paul-wouters.html">A Virtual Visit from Paul Wouters</a></li><br /></ul><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-5004958474261254941?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com3tag:blogger.com,1999:blog-21102333.post-696936863433404722007-01-10T13:17:00.001-08:002009-12-03T13:44:59.878-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/01/10/how-to-hide-the-outlook-envelope-icon-when-you-get-spam/">location</a>.<br /><!--<br />In Outlook 2003, I have enabled the setting "show an envelope icon in the notification area". With this setting enabled, whenever I get a new email, an envelope is displayed in the Windows system tray. I like this feature because it is less obtrusive and distracting than the methods of new email notification (e.g. Desktop Alerts, playing a sound, etc).<br /><br />The only problem with this setting is that, by default, the envelope icon gets displayed even when the new email is spam (i.e junk email). This is a big problem for me because probably 90% of my email is spam and I actually lose a few minutes every day by switching to Outlook whenever the envelope icon appears, only to discover that the new mail is spam. It is so annoying!<br /><br />With prior versions of Outlook, this was a tricky problem to solve. My solution back then was to hack out a VBA script and hook it into Outlook with a rule. My code was based off this <a href="http://www.outlookcode.com/d/code/clearenvicon.htm">example</a>. It was a pain in the butt to create and install and sometimes it failed with non-descriptive error messages that said something like "rule failed".<br /><br />When I installed Outlook 2003 the other day, I noticed an email folder called "Junk E-Mail". When I saw that, it gave me hope for a better solution. So, I started reading about this new folder in Outlook 2003's help file. I read and I read and I read. To my chagrin, I found no relationship between the Junk E-Mail folder and the envelope icon in the help file.<br /><br />Undaunted, I thought I would try an experiment anyway because I thought there might be something magical about this new folder. After all, it can't be deleted like user-created folders.<br /><br />Before I tell you about my experiment, I'll give you some background information. At our office, we run Exchange 2003. However, we front this with a Spam Assassin server running on a Linux box. All incoming mail first goes through the Spam Assassin server, which detects spam and marks it by appending a special string (e.g. **THIS IS FRIGGING SPAM**) to the subject line before forwarding it on to Exchange.<br /><br />For my experiment, I created the following Outlook rule, using the rules wizard thingy:<br /><blockquote>Apply this rule after the message arrives<br />with **THIS IS FRIGGING SPAM** in the subject<br />move it to the SPAM folder<br />except if from {anyone in my office}<br />or except if from {my wife}<br />or except if from {etc, etc, etc}<br />stop processing more rules</blockquote><br />The SPAM folder shown in the above rule is a folder I had created. When spam arrived, it was correctly moved to the SPAM folder but the envelope icon still appeared, which is NOT what I wanted.<br /><br />Next, I edited the rule, changing the SPAM folder to the magical "Junk E-mail" folder. Voila! It worked! The next time I got a new spam message, the envelope icon did NOT appear.<br /><br /><b>If this tip helped you, please leave me a comment!</b><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-69693686343340472?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com8tag:blogger.com,1999:blog-21102333.post-60216458524485159532007-01-08T12:12:00.002-08:002009-12-03T13:43:11.149-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2007/01/08/how-to-force-ez-ipupdate-to-touch-dyndns-record-every-month/">location</a>.<br /><!--<br />Like most home internet users, I have a dynamic IP address and I use <a href="https://www.dyndns.com/">Dyndns</a> to map it to a static host name so that I can remotely access my router (and computers behind it) without having to know its current IP address.<br /><br />My router is a LinkSys WRT54G, which is running the <a href="http://openwrt.org/">OpenWrt</a> custom firmware. OpenWrt comes with a package called <a href="http://ez-ipupdate.com/">ez-ipupdate</a>, which can be configured to automatically update your Dyndns host record whenever the router's address changes. For detailed instructions, see the <a href="http://wiki.openwrt.org/DDNSHowTo">DDNSHowTo</a> page in the OpenWrt wiki.<br /><br />The instructions in OpenWrt's wiki are pretty good but they don't deal with the situation where the time between address changes is greater than 30 days. This is a problem if you are using Dyndns's <span style="font-style: italic;">free</span> <a href="http://www.dyndns.com/services/dns/dyndns/">Dynamic DNS service</a>. The <a href="http://www.dyndns.com/services/dns/dyndns/faq.html#q15">Dynamic DNS service FAQ</a> states the you must periodically "touch" the host record, even if the address hasn't changed, or your host record will be deleted. Here is the policy as at the time of writing this blog post:<br /><br /><blockquote>A Dynamic DNS hostname only needs to be updated when your IP address has changed. Any updates more frequently than this - from the same IP address - will be considered abusive by the update system and may result in your hostname becoming blocked. Any script which runs periodically should check to make sure that the IP has actually changed before making an update, or the host will become blocked. An exception to this is for users with mostly static IP addresses; you may update 24-35 days after your previous update with the same IP address to "touch" the record and prevent it from expiring. Users will receive an e-mail notification if a host has been unchanged for 30 days, hosts are deleted after 35 days without being updated unless you've purchased upgrade credit(s).</blockquote><br />Here is an example of the e-mail notification (i.e. "nag" email) that you get when you haven't touched the host record in 30 days:<br /><blockquote><br />A hostname you have registered with Dynamic Network Services at DynDNS, SomeDynamicHostName.dyndns.org, with current IP address 192.168.1.1, will expire in the next 5 days. This expiration is due to an automatic timeout; your host has not been updated for 30 days, and hosts are removed after not being updated for 35 days. This is our policy to prevent a stagnant DNS system.<br />Users with static IP addresses can use the Static DNS system, which does not have this timeout.<br /><br />You can "touch" your hostname and prevent it from being deleted simply by performing a manual, or forced, update. The system will not consider this<br />single update abusive. If you wish to allow your hostname to expire,<br />simply do nothing. You will receive a notification when this occurs.<br /><br />You can also purchase an account upgrade credit at https://www.dyndns.com/+upgrades/add.html - users with any credits on their account are exempt from this expiration policy.<br /><br />https://www.dyndns.com/+dyndns/SomeDynamicHostName.dyndns.org is a direct URL to a page where you can manually update your hostname. Simply submit the form (by clicking the "Modify Host" button), and your hostname will not expire unless it is left without updates for another 35 days.<br /><br />Please DO NOT contact the support department and ask to have your host updated. Following the instructions above is the ONLY way to keep your host from being removed by our automated system.<br /><br />If you do not use your account any longer, please delete it using the tools at <https:>. We regret seeing you go.<br /><br />Replies to this e-mail address will be discarded. Please contact the support department at support@dyndns.com if you have questions, queries, or comments.<br /><br />Sincerely,<br />The DynDNS Team</https:></blockquote><br />To prevent the deletion of my host record, I created a cron job that touches the host record on the first day of each month. To create a cron job in OpenWrt, you must put a job definition in the file <span style="font-family:courier new;">/etc/crontabs/root</span>. Here is my job definition (must be all on one line):<br /><pre style="font-family: courier new;"><blockquote>1 0 1 * * rm -f /tmp/ez-ipupdate.cache<br />; /usr/sbin/ez-ipupdate -c /etc/ez-ipupdate.conf<br />> /tmp/ez-ipupdate-cron.log 2>&1</blockquote></pre>Note that without the first command, <span style="font-family:courier new;">rm -f /tmp/ez-ipupdate.cache</span>, ez-ipupdate will not touch the record at dyndns.org and will instead show the message "no update needed at this time". So, the first command it critical to force a "touch" of the record. Without the first command, the log file /tmp/ez-ipupdate-cron.log would show the following, which is NOT what we want:<br /><blockquote>ez-ipupdate Version 3.0.11b8<br />Copyright (C) 1998-2001 Angus Mackay<br />no update needed at this time</blockquote>With the first command, you should see this in the log file, which IS what we want:<br /><blockquote>ez-ipupdate Version 3.0.11b8<br />Copyright (C) 1998-2001 Angus Mackay<br />connected to members.dyndns.org (63.208.196.95) on port 80<br />members.dyndns.org says that your IP address has not changed since the last update</blockquote>Even though it says "your IP address has not changed" it has still "touched" the record, which is what we want.<br /><br /><span style="font-weight: bold;">If this tip helped you, please leave me a comment!</span><br /><br /><span style="font-weight: bold;">Update</span>: Here is <a href="http://joesbitbucket.blogspot.com/2007/06/stupid-cron-tricks.html">a better solution</a>.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-6021645852448515953?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com3tag:blogger.com,1999:blog-21102333.post-91543684640089458742006-12-20T06:56:00.001-08:002009-12-02T14:47:38.455-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/12/20/just-the-file-size-please/">location</a>.<br /><!--<br />Yesterday I wrote a custom log file rotator script in bash for one of my embedded Linux boxes (yes, I know about logrotate but this was a special situation that required a custom script).<br /><br />One of the building blocks I needed for this script was a function that could return the size of a file. The <span style="font-family:courier new;">wc</span> command seemed appropriate for this:<br /><br /><hr /><span style="font-family:courier new;">me@mycomputer:~$ wc -help</span><br /><span style="font-family:courier new;">Usage: wc [OPTION]... [FILE]...</span><br /><span style="font-family:courier new;">Print newline, word, and byte counts for each FILE, and a total line if</span><br /><span style="font-family:courier new;">more than one FILE is specified. With no FILE, or when FILE is -,</span><br /><span style="font-family:courier new;">read standard input.</span><br /><span style="font-family:courier new;"> -c, -bytes print the byte counts</span><br /><span style="font-family:courier new;"> -m, -chars print the character counts</span><br /><span style="font-family:courier new;"> -l, -lines print the newline counts</span><br /><span style="font-family:courier new;"> -L, -max-line-length print the length of the longest line</span><br /><span style="font-family:courier new;"> -w, -words print the word counts</span><br /><span style="font-family:courier new;"> -help display this help and exit</span><br /><span style="font-family:courier new;"> -version output version information and exit</span><br /><hr /><br />Yep, the <span style="font-family:courier new;">-c</span> option was the one that I wanted. Here is an example of retrieving the size of the file called <span style="font-family:courier new;">foo</span>:<br /><br /><hr /><span style="font-family:courier new;">me@mycomputer:~$ wc -c foo</span><br /><span style="font-family:courier new;">1071 foo</span><br /><hr /><br />The size of the file is 1071 bytes. But what's with the extra "foo" string? I didn't want that. I justed wanted the 1071. What's a boy to do? <a href="http://en.wikipedia.org/wiki/Awk#AWK_versions_and_implementations">awk</a> to the rescue. Awk is a general purpose programming language that is designed for processing text files and streams. For example, you can use it to parse data fields from text that is piped in from another command. Here is how I used <span style="font-family:courier new;">awk</span> to parse just the file size from the output of <span style="font-family:courier new;">wc</span>:<br /><br /><hr /><span style="font-family:courier new;">me@mycomputer:~$ wc -c foo | awk '{print $1}'</span><br /><span style="font-family:courier new;">1071</span><br /><hr /><br />I hope this helps someone else. If you have a better way of getting just the file size, please leave a comment.<br /><br /><span style="font-size:130%;"><b>UPDATE</b></span><br /><br />Here is an easier (and better performing?) way of getting just the file size:<br /><br /><span style="font-family: courier new;">stat -c%s filename</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-9154368464008945874?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com4tag:blogger.com,1999:blog-21102333.post-84131753793876594972006-12-19T06:32:00.001-08:002009-12-02T14:44:50.406-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/12/19/accessing-windows-shares-across-a-vpn/">location</a>.<br /><!--<br />Just for laughs, I recently created a point-to-point VPN (a.k.a. gateway-to-gateway VPN) between my home and the office. At the office, the VPN endpoint is a LinkSys RV042, which, as far as I can tell, runs Freeswan VPN software. At home, the VPN endpoint is a LinkSys WRT54GL, which I hacked to run the OpenWrt linux distribution and OpenSwan VPN software. A future post will detail exactly how I did this but the purpose of this post is to discuss how I got my Windows file shares to work across the VPN.<br /><br />When I first setup the VPN, I initially joined my home Windows XP Pro computer to the Active Directory domain at the office. That made it easy to share files back and forth. However, I didn't like that other domain admins could have full access to my home computer. Therefore, I unjoined my home computer and reverted it back to workgroup mode.<br /><br />After reverting back to workgroup mode, I could still access shares on office computers. Upon accessing a share on my office computer, I would be prompted to enter a username and password. I this case, I entered my domain username and password. I can't remember if I put in the short username (e.g. myusername) or the fully qualified username (e.g. mydomainname\myusername) but the point is that it worked.<br /><br />On the other hand, I couldn't access any home shares from the office. Upon attempting access, I would either get an "access denied" error or a "credentials supplied conflict with an existing set of credentials" error.<br /><br />The problem is, when you access a workgroup share from a domain computer, Windows assumes you want to login with your domain username and password and it doesn't prompt you to enter your workgroup username and password. Since my domain username and password are different from my workgroup username and password, I couldn't be authenticated and access was denied.<br /><br />The solution was to set up a username and password on my home computer that was identical to my domain username and password. This solution works fine but the only problem is that the new user appears on the Windows XP Welcome Screen. Thankfully, there is a way to hide users from the Welcome Screen:<br /><ol><li>Open the Registry Editor (i.e. run regedit).</li><li>Navigate to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList</li><li>Create a DWORD value where the name is the username of the user you want to hide from the Welcome Screen. For example, "myusername".</li><li>Set the value of the new registry entry to 0 (it should default to this value automatically).</li><li>Close the Registry Editor.</li><li>You might have to reboot but I didn't have to.</li></ol>You might be wondering how I accessed computers at the remote end of the VPN using Windows Explorer. Well, there are a few options. One way is to enable NetBios over TCP. If you do that, you should be able to automically see the computer names in "My Network Places". I didn't use that method but if you want to try it, see <a href="http://wiki.openswan.org/index.php/Openswan/FAQ#a54">Can I use Network Neighborhood (Samba, NetBIOS) over IPsec?</a> in the <a href="http://wiki.openswan.org/index.php/Openswan/FAQ">Openswan FAQ</a>.<br /><br />Another method is to register computers at both ends of the VPN with a DNS server at the office. If you do that, you should be able to enter "\\somecomputer" into Windows Explorer's location bar to see a list of shares on a remote computer. I tried that and it worked great. In my case, I found dnsmasq's "split DNS" feature to be particularly useful. For now, I'll leave it as an exercise to the reader to find out more about this feature but for a hint, read about the "server" setting for the file "dnsmasq.conf" in the <a href="http://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html">dnsmasq manpage</a>.<br /><br />Finally, you can also access the remote computers by IP address. In this case, enter "\\<span style="font-style: italic;">someaddress</span>" (e.g. \\192.168.1.10) into Windows Explorer's location bar.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-8413175379387659497?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com5tag:blogger.com,1999:blog-21102333.post-33926949474718462252006-12-15T14:30:00.001-08:002009-12-02T14:42:32.037-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/12/15/arp-tip/">location</a>.<br /><!--<br />I finally used Windows' <span style="font-family:courier new;">arp</span> command for something useful.<br /><br />Last week I was configuring numerous brand new LinkSys routers for various branch offices. After successfully configuring the first one, I plugged in the second and tried to connect to it's web admin page. Unfortunately, my connection attempt kept on timing out. After a couple of minutes of pulling my hair out, I remembered something I had learned about in school a few years ago: <a href="http://en.wikipedia.org/wiki/Address_Resolution_Protocol">Address Resolution Protocol</a> or ARP for short.<br /><br />ARP is a protocol for determining a host's hardware address given its network address. In the common case of TCP/IP-over-ethernet networks, the hardware address is known as the <a href="http://en.wikipedia.org/wiki/MAC_address">MAC address</a> and the network address is known as the <a href="http://en.wikipedia.org/wiki/Ip_address">IP address</a>. This protocol is important because a host's hardware address must be known before you can communicate with it over a network.<br /><br />If you're familiar with LinkSys routers, you'll know that they all have the default IP address of 192.168.1.1. On the other hand, every networked device (including LinkSys routers) has (or should have) a unique MAC address. For example, I had two routers with MAC addresses of 00-00-24-c5-94-f4 and 00-00-24-c6-66-84 respectively.<br /><br />When I plugged the first one in and tried to connect to http://192.168.1.1, Windows silently used ARP to translate the IP address 192.168.1.1 into the MAC address 00-00-24-c5-94-f4. This worked without a hitch and I was able to configure the router.<br /><br />The problem arose when I plugged in the second router. Apparently, Windows (and perhaps other operating systems) caches the IP-address-to-MAC-address for a period of time. When I tried to connect to http://192.168.1.1, Windows looked that IP address in its arp cache and found the MAC address of 00-00-24-c5-94-f4. However, the MAC address it really needed to use was 00-00-24-c6-66-84.<br /><br />How long does Windows cache these arp mappings and how do you delete the cache? The <a href="http://technet2.microsoft.com/WindowsServer/en/library/cae0e239-267b-45df-88a8-f6f1303830471033.mspx?mfr=true">answers</a> can be found on Microsoft's TechNet. According to TechNet:<br /><br /><blockquote>Dynamic ARP cache entries - These entries are added and deleted automatically during normal use of TCP/IP sessions with remote computers. Dynamic entries age and expire from the cache if not reused within 2 minutes. If a dynamic entry is reused within 2 minutes, it may remain in the cache and age up to a maximum cache life of 10 minutes before being removed or requiring cache renewal by using the ARP broadcast process.</blockquote>To view the current contents of the ARP cache, go to a command prompt and run <span style="font-family:courier new;">arp -a</span>. To delete the entire cache, run <span style="font-family:courier new;">arp -d</span>. To delete only a particular mapping, run <span style="font-family:courier new;">arp -d <ip></ip></span> (for example, <span style="font-family:courier new;">arp -d 192.168.1.1</span>).<br /><br />Here is an example session to show you what I'm talking about. Note that ping fails (i.e. times out) if you have an incorrect IP-address-to-MAC-address mapping:<br /><hr /><br /><span style="font-family: courier new;">C:\&gt; arp -a</span><br /><br /><span style="font-family: courier new;">Interface: 192.168.1.25 on Interface 0x9000006</span><br /><span style="font-family: courier new;">Internet Address Physical Address Type</span><br /><span style="font-family: courier new;">192.168.1.1 00-00-24-c5-94-f4 dynamic</span><br /><br /><span style="font-family: courier new;">C:\&gt; ping 192.168.1.1</span><br /><br /><span style="font-family: courier new;">Pinging 192.168.1.1 with 32 bytes of data:</span><br /><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><br /><span style="font-family: courier new;">Ping statistics for 192.168.1.1:</span><br /><span style="font-family: courier new;"> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),</span><br /><span style="font-family: courier new;">Approximate round trip times in milli-seconds:</span><br /><span style="font-family: courier new;"> Minimum = 0ms, Maximum = 0ms, Average = 0ms</span><br /><br /><span style="font-style: italic; font-family: courier new;">(AT THIS POINT, I PLUGGED IN THE OTHER ROUTER)</span><br /><br /><span style="font-family: courier new;">C:\&gt; ping 192.168.1.1</span><br /><br /><span style="font-family: courier new;">Pinging 192.168.1.1 with 32 bytes of data:</span><br /><br /><span style="font-family: courier new;">Request timed out.</span><br /><span style="font-family: courier new;">Request timed out.</span><br /><span style="font-family: courier new;">Request timed out.</span><br /><span style="font-family: courier new;">Request timed out.</span><br /><br /><span style="font-family: courier new;">Ping statistics for 192.168.1.1:</span><br /><span style="font-family: courier new;"> Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),</span><br /><span style="font-family: courier new;">Approximate round trip times in milli-seconds:</span><br /><span style="font-family: courier new;"> Minimum = 0ms, Maximum = 0ms, Average = 0ms</span><br /><br /><span style="font-family: courier new;">C:\&gt; arp -a</span><br /><br /><span style="font-family: courier new;">Interface: 192.168.1.25 on Interface 0x9000006</span><br /><span style="font-family: courier new;">Internet Address Physical Address Type</span><br /><span style="font-family: courier new;">192.168.1.1 00-00-24-c5-94-f4 dynamic</span><br /><br /><span style="font-family: courier new;">C:\&gt; arp -d 192.168.1.1</span><br /><br /><span style="font-family: courier new;">C:\&gt; ping 192.168.1.1</span><br /><br /><span style="font-family: courier new;">Pinging 192.168.1.1 with 32 bytes of data:</span><br /><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time=1ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><span style="font-family: courier new;">Reply from 192.168.1.1: bytes=32 time&lt; 10ms TTL=64</span><br /><br /><span style="font-family: courier new;">Ping statistics for 192.168.1.1:</span><br /><span style="font-family: courier new;"> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),</span><br /><span style="font-family: courier new;">Approximate round trip times in milli-seconds:</span><br /><span style="font-family: courier new;"> Minimum = 0ms, Maximum = 1ms, Average = 0ms</span><br /><br /><span style="font-family: courier new;">C:\&gt; arp -a</span><br /><br /><span style="font-family: courier new;">Interface: 192.168.1.25 on Interface 0x9000006</span><br /><span style="font-family: courier new;">Internet Address Physical Address Type</span><br /><span style="font-family: courier new;">192.168.1.1 00-00-24-c6-66-84 dynamic</span><br /><br /><span style="font-family: courier new;">C:\&gt;</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-3392694947471846225?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-48042963032047358172006-11-24T13:07:00.001-08:002009-12-02T14:39:34.032-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/11/24/how-to-clear-syslog-log-files-in-linux/">location</a>.<br /><!--<br />Many Linux distributions are preconfigured to automatically and periodically rotate <span style="font-family:courier new;">syslog</span> log files by means of <span style="font-family:courier new;">cron</span> jobs that call <span style="font-family:courier new;">logrotate</span> or a similar log rotation script. However, if you want to clear a log file manually, you can simply use the greater than sign followed by the log file name. For example, to manually clear the file <span style="font-family:courier new;">kern.log</span>, you can run this command:<br /><blockquote>me@mycomputer:> /var/log/kern.log</blockquote><br />The beauty of this is that the cleared out file still retains its original permissions and ownership.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-4804296303204735817?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com6tag:blogger.com,1999:blog-21102333.post-81292986306010329172006-11-17T06:09:00.000-08:002007-03-07T12:05:05.803-08:00Great news! I have managed to get a site-to-site (a.k.a. gateway-to-gateway) VPN working between a LinkSys RV082 and a LinkSys WRT54GL running OpenWrt! It should also be possible to use similar hardware like the RV042, RV016, WRT54G, WRT54GS, etc.<br /><br />The full how-to is <a href="http://joesbitbucket.blogspot.com/2007/03/how-to-vpn-between-rv082-or-rv042-and.html">here</a>.<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-8129298630601032917?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-29449640272311357562006-10-19T12:33:00.001-07:002009-12-02T14:37:30.851-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/19/displaying-masqueraded-connections/">location</a>.<br /><!--<br />I often use Linux's <span style="font-family:courier new;">netstat</span> command to do things like figuring out which ports are listening on a computer and what are the active connections on a computer. It's very handy for troubleshooting networking problems.<br /><br />Today I wanted to figure out what sites a certain user on my network was connecting to and how much traffic the user was using. I connected to the router with SSH and ran <span style="font-family:courier new;">netstat</span> with no options. I was surprised to see only my SSH connection. Then I remembered that the user in question gets onto the internet with a masqueraded address. Well, duh!<br /><br />I figured <span style="font-family:courier new;">netstat</span> was still the command that I needed to use but that I just needed to pass some option. So, I looked at the man page for <span style="font-family:courier new;">netstat</span> and sure enough I found the <span style="font-family:courier new;">-M</span> option, whose description is "Display a list of masqueraded connections."<br /><br />I tried <span style="font-family:courier new;">netstat -M</span> and got the following error message: "netstat: no support for `ip_masquerade' on this system."<br /><br />That sucks! After some googling, I found out that <span style="font-family:courier new;">netstat -M</span> only works on pre-2.4 kernels. On 2.4 and later kernels, you need to use this: <span style="font-family:courier new;"><br /><blockquote>cat /proc/net/ip_conntrack</blockquote></span>The format of ip_conntrack is kind of cryptic but if you look at it for a few moments, you can figure it out. You can also use <span style="font-family:courier new;">grep</span> to filter out the stuff you don't need. For example, to see only the connections involving a particular address, say 192.168.1.10, you can do this: <span style="font-family:courier new;"><br /><blockquote>cat /proc/net/ip_conntrack | grep 192.168.1.10</blockquote></span>Apparently, there is a command out there that can nicely format the contents of ip_conntrack. It's called <a href="http://cv.intellos.net/">conntrack viewer</a>. Unfortunately, I couldn't connect to that site today. Perhaps the link is dead.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-2944964027231135756?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-54409165166502415982006-10-11T13:23:00.001-07:002009-12-02T14:35:30.496-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/11/how-to-kill-outlook-before-backing-up-your-pst-file/">location</a>.<br /><!--<br />I use <a href="http://www.educ.umu.se/%7Ecobian/cobianbackup.htm">Cobian Backup</a> to automatically backup my Outlook mail file (i.e. PST file) as well as other types of files. There is a catch with backing up PST files with Cobian Backup: Outlook cannot be running. If Outlook is running, Cobian will not backup the PST file because it will be locked by Outlook.<br /><br />Luckily, Cobian has a feature called "events", which can be used to run arbitrary tasks before and/or after a backup job. I use this feature to kill Outlook before running my backup job, which removes the file lock and allows Cobian to backup the PST file.<br /><br />If you want to use this feature to kill Outlook, the first step is to create a batch file that can kill Outlook from the command line. I called my batch file "kill_outlook.bat". Here are the contents:<br /><blockquote>taskkill /f /im outlook.exe</blockquote>The <i>taskkill</i> command is available on Windows XP Pro and, I believe, also Windows XP Home and Windows Server 2003. On Windows 2000, instead of <i>taskkill</i>, you need to use <i>kill</i>, which is not included on the Windows 2000 install disk. To get <i>kill</i>, you must install the <a href="http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/supporttools.mspx">Windows 2000 Support Tools</a>.<br /><br />After you make the batch file and test it, you need to configure a "before backup" event in Cobian. Open your backup job configuration and go to the Events tab. Under the "Before Backup" box, press the "Add" button and click "Execute and wait" on the popup menu. In the file browser dialog that appears, browse to and select the batch file you just created. Then click OK. Finally, click OK on the job properties dialog and you are done!<br /><br />Good luck!<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-5440916516650241598?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com3tag:blogger.com,1999:blog-21102333.post-33093581209988425582006-10-11T06:11:00.001-07:002009-12-02T14:32:41.506-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/11/linux-traceroute-vs-windows-tracert/">location</a>.<br /><!--<br />Anyone who has used Linux <i>traceroute</i> and Windows <i>tracert</i> knows that the two programs have very different command line options. But did you know that there is a fundamental difference in the way that these two programs work?<br /><br />According to <a href="http://www.faqs.org/rfcs/rfc1393.html">RFC1393</a>, traceroute implementations are supposed to use the ICMP protocol. Indeed, the windows implementation does use ICMP. However, by default, the Linux implementation uses UDP, unless you apply the "-I" option, in which case it will use ICMP.<br /><br />I googled to find out why Linux traceroute uses UDP by default but I couldn't find any definitive reasons. In practice, I've found that there is no real performance benefit; both the UDP flavour and the ICMP flavour seem to take about the same amount of time to do their work.<br /><br />I guess the real advantage of being able to choose between the UDP and ICMP flavours is that if a firewall along the route is configured to block ICMP, you can try UDP. Similarly, if a firewall blocks UDP you can try ICMP.<br /><br />If want to allow someone to traceroute <span style="font-style: italic;">your</span> internet host, you need to configure your firewall to allow it. For ICMP, you must accept (i.e. iptables -j ACCEPT) ICMP packets of type 0 (Echo Reply), 8 (Echo) and 30 (Traceroute).<br /><br />The UDP firewall configuration is slightly different. For UDP, you must <i>not</i> drop (i.e. iptables -j DROP) UDP packets in the destination port range of 33434 to 33600. Note that you do <i>not</i> have open these ports (i.e. iptables -j ACCEPT). It is sufficient to simply reject (i.e. iptables -j REJECT) on these ports. Just don't use "iptables -j DROP", which will cause the UDP flavour of traceroute to fail. Note that there is <i>no</i> traceroute service for these ports (i.e. you don't have to run any sort of traceroute server/daemon); indeed, for traceroute's "-p" option, the man page says:<br /><blockquote>Set the base UDP port number used in probes (default is 33434). Traceroute hopes that nothing is listening on UDP ports base to base + nhops - 1 at the destination host (so an ICMP PORT_UNREACHABLE message will be returned to terminate the route tracing). If something is listening on a port in the default range, this option can be used to pick an unused port range.</blockquote><br />Good luck and happy tracerouting!<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-3309358120998842558?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com14tag:blogger.com,1999:blog-21102333.post-11773904137367337062006-10-06T12:50:00.001-07:002009-12-02T14:30:48.510-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/06/how-to-sort-files-by-modification-time-in-ls/">location</a>.<br /><!--<br />To sort files by modification time when using <span style="font-family: courier new;">ls</span>, use the <span style="font-family: courier new;">-t</span> option. For example, to sort in descending order:<br /><span style="font-family: courier new;">[me@mycomputer usr]$ ls -lt</span><br /> <span style="font-family: courier new;">total 224</span><br /> <span style="font-family: courier new;">drwxr-xr-x 88 root root 65536 Sep 1 17:39 lib</span><br /> <span style="font-family: courier new;">drwxr-xr-x 14 root root 4096 Sep 1 16:00 local</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 12288 Jul 26 04:04 sbin</span><br /> <span style="font-family: courier new;">drwxr-xr-x 174 root root 4096 Jul 25 19:01 share</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 40960 Jan 25 2006 bin</span><br /> <span style="font-family: courier new;">drwxr-xr-x 7 root root 4096 Jan 16 2006 libexec</span><br /> <span style="font-family: courier new;">drwxr-xr-x 3 root root 4096 Oct 16 2005 java</span><br /> <span style="font-family: courier new;">drwxr-xr-x 61 root root 12288 Mar 13 2005 include</span><br /> <span style="font-family: courier new;">drwxr-xr-x 4 root root 4096 Mar 13 2005 src</span><br /> <span style="font-family: courier new;">lrwxrwxrwx 1 root root 10 Mar 13 2005 tmp -> ../var/tmp</span><br /> <span style="font-family: courier new;">drwxr-xr-x 6 root root 4096 Feb 27 2005 kerberos</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 4096 Feb 22 2005 etc</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 4096 Feb 22 2005 games</span><br /> <span style="font-family: courier new;">drwxr-xr-x 7 root root 4096 Feb 21 2005 X11R6</span><br /><br />To sort in descending order, add the <span style="font-family: courier new;">-r</span> option:<br /><span style="font-family: courier new;">[me@mycomputer usr]$ ls -ltr</span><br /> <span style="font-family: courier new;">total 224</span><br /> <span style="font-family: courier new;">drwxr-xr-x 7 root root 4096 Feb 21 2005 X11R6</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 4096 Feb 22 2005 games</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 4096 Feb 22 2005 etc</span><br /> <span style="font-family: courier new;">drwxr-xr-x 6 root root 4096 Feb 27 2005 kerberos</span><br /> <span style="font-family: courier new;">lrwxrwxrwx 1 root root 10 Mar 13 2005 tmp -> ../var/tmp</span><br /> <span style="font-family: courier new;">drwxr-xr-x 4 root root 4096 Mar 13 2005 src</span><br /> <span style="font-family: courier new;">drwxr-xr-x 61 root root 12288 Mar 13 2005 include</span><br /> <span style="font-family: courier new;">drwxr-xr-x 3 root root 4096 Oct 16 2005 java</span><br /> <span style="font-family: courier new;">drwxr-xr-x 7 root root 4096 Jan 16 2006 libexec</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 40960 Jan 25 2006 bin</span><br /> <span style="font-family: courier new;">drwxr-xr-x 174 root root 4096 Jul 25 19:01 share</span><br /> <span style="font-family: courier new;">drwxr-xr-x 2 root root 12288 Jul 26 04:04 sbin</span><br /> <span style="font-family: courier new;">drwxr-xr-x 14 root root 4096 Sep 1 16:00 local</span><br /> <span style="font-family: courier new;">drwxr-xr-x 88 root root 65536 Sep 1 17:39 lib</span><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-1177390413736733706?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-60127480584577239902006-10-06T12:36:00.001-07:002009-12-02T14:28:34.548-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/06/how-to-add-a-user-to-a-group-in-linux/">location</a>.<br /><!--<br />Today I had to add an existing user to an existing group in Linux. It's been so long since the last time I did it that I had actually forgotten how to do it. Well, good ol' man pages to the rescue. Here's how to do it:<br /><blockquote>adduser <span style="font-style: italic;">user</span> <span style="font-style: italic;">group</span></blockquote>If you want to verify that it worked, use grep:<br /><blockquote>grep <span style="font-style: italic;">group</span> /etc/group</blockquote>In grep's output, you should see the user's name. For example:<br /><span style="font-style: italic;"></span><blockquote><span style="font-style: italic;">group</span>:!:50:tom,dick,harry,<span style="font-style: italic;">user</span></blockquote><span style="font-style: italic;"></span>Enjoy!<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-6012748058457723990?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1159904426746629582006-10-03T11:54:00.001-07:002009-12-02T14:25:54.959-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/03/disabling-password-authentication-on-dropbear-ssh-server-in-openwrt-running-on-wrt54g/">location</a>.<br /><!--<br />I have a LinkSys WRT54G router which runs <a href="http://openwrt.org/">OpenWrt</a> (version White Russian RC5). For console access to the router, I have enabled the Dropbear SSH server, which works well.<br /><br />Recently, I opened up the SSH port to allow remote access to the console. To secure this as best I could, I disabled password authentication and enabled public key authentication, by following the instructions in the <a href="http://wiki.openwrt.org/DropbearPublicKeyAuthenticationHowto">Dropbear Public Key Authentication Howto</a>.<br /><br />After doing disabling password authentication, I thought to myself "What if I lose my private key?" The answer is "I'm probably screwed", because there is no serial port on the WRT54G for local access. (Actually, there are some <a href="http://wiki.openwrt.org/OpenWrtDocs/Customizing/Hardware/Serial_Console">hardware mods</a> you can do to add a serial port but I'm not that handy or brave).<br /><br />So I thought to myself "Would't it be great if you could configure Dropbear to disallow password authentication for remote connections but allow it for local connections?"<br /><br />I thought, perhaps, that Dropbear might have an option for this. Here are the command-line options for Dropbear 0.48:<br /><ul><li><span style="font-family:courier new;">-b bannerfile</span> = Display the contents of bannerfile before user login (default: none)</li><li><span style="font-family:courier new;">-d dsskeyfile</span> = Use dsskeyfile for the dss host key (default: /etc/dropbear/dropbear_dss_host_key)</li><li><span style="font-family:courier new;">-r rsakeyfile</span> = Use rsakeyfile for the rsa host key (default: /etc/dropbear/dropbear_rsa_host_key)</li><li><span style="font-family:courier new;">-F</span> = Don't fork into background</li><li><span style="font-family:courier new;">-E</span> = Log to stderr rather than syslog</li><li><span style="font-family:courier new;">-m</span> = Don't display the motd on login</li><li><span style="font-family:courier new;">-w</span> = Disallow root logins</li><li><span style="font-family:courier new;">-s</span> = Disable password logins</li><li><span style="font-family:courier new;">-g</span> = Disable password logins for root</li><li><span style="font-family:courier new;">-j</span> = Disable local port forwarding</li><li><span style="font-family:courier new;">-k</span> = Disable remote port forwarding</li><li><span style="font-family:courier new;">-a</span> = Allow connections to forwarded ports from any host</li><li><span style="font-family:courier new;">-p port</span> = Listen on specified tcp port, up to 10 can be specified (default 22 if none specified)</li><li><span style="font-family:courier new;">-i</span> = Start for inetd</li></ul>As shown above, the <i>-s</i> option can be used to disallow password authentication (thereby forcing public key authentication). However, I can't see an option that would do <i>exactly</i> what I wanted (i.e. disable password authentication for remote connections but still allow password authentication for local connections).<br /><br />After thinking about the problem for a few minutes, I realized that I could solve the problem by starting <i>two</i> instances of the Dropbear daemon. The only thing you have to do is make a small change to /etc/init.d/S50dropbear.<br /><br />Here is the last line from the stock version of that file in White Russian RC5:<br /><pre>/usr/sbin/dropbear<br /></pre>What we want to do is change that file so that we start a second instance of dropbear that disallows password authentication. Here is the last line, plus a new line that starts the second instance:<br /><pre># failsafe for local access - port 22, pw auth allowed<br />/usr/sbin/dropbear<br /><br /># secure for remote access - port 50022, pw auth not allowed<br />/usr/sbin/dropbear -s -p 50022<br /></pre>The line new line <i>/usr/sbin/dropbear -s -p 50022</i> starts a second instance of dropbear that disallows password authentication. Note that it starts the second instance on port 50022 instead of the default port 22; you can use another unused port number instead, if you so desire.<br /><br />After making those changes you will have to reboot the router.<br /><br />Next, you have to allow remote access to port 50022 and disallow remote access to port 22. If you are running the WRT54G on a LAN, behind an internet-facing router, just port forward from some port on the internet-facing router to port 50022 on the WRT54G. Do NOT port forward to port 22.<br /><br />If you are running WRT54G as your internet-facing router, open port 50022 on the firewall on the WAN side. Do NOT open port 22 on the WAN side (by default, it should already be open on the LAN side).<br /><br />The only downside I can see with my "second instance strategy" is slightly higher memory usage. Hopefully, in later releases of OpenWrt, you'll be able to use the web admin interface (webif) to disable/enable password authentication so that you can run just one instance of Dropbear.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115990442674662958?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com1tag:blogger.com,1999:blog-21102333.post-1159736618523970642006-10-01T13:52:00.001-07:002009-12-02T14:23:05.636-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/10/01/quickbooks-help-page-cannot-be-displayed/">location</a>.<br /><!--<br />I installed QuickBooks Pro 2006 yesterday. When I tried to access the help files, I got the error: "Page Cannot Be Displayed".<br /><br />I found lots of suggested solutions in Google. I tried many of them one-by-one and they did not work. Then I started trying them in combination. Finally, it worked. However, I'm not sure <span style="font-style: italic;">which</span> combination did the trick. If you are having the same problem, please try the various tips on the page <a href="http://www.nik.com.au/archives/2005/04/06/chm-help-files-error-the-page-cannot-be-displayed/">CHM help files error: The page cannot be displayed.</a><br /><br />I think this tip is important:<br /><blockquote>regsvr32 hhctrl.ocx</blockquote>But you <span style="font-style: italic;">might </span>have to create the MaxAllowedZone registry key first (see above link).<br /><br />Again, I'm not sure exactly which combination did the trick. Just keep trying all of the suggestions on that page (perhaps in various orders) until it is fixed. Then post a comment back here, describing what worked for you.<br /><br />BTW, Intuit's knowledge base sucks shit! It should have the solution for this problem, which seems to be a common one, judging from the number of posts about it in the QuickBooks forums.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115973661852397064?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1159661725641579662006-09-30T17:03:00.002-07:002009-12-02T14:20:39.568-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/09/30/quickbooks-pro-2006-shitty-out-of-box-experience/">location</a>.<br /><!--<br />I just installed QuickBooks Pro 2006. The installation went okay but when I tried to start QuickBooks for the first time, I ran into problems. The splash screen came on for about a half a second and then the program closed. I tried it again and then same thing happened.<br /><br />I figured if Intuit was a typical software company, they would have put some error message into a log file. Sure enough, I found a log file at "C:\Program Files\Intuit\QuickBooks Pro\QBWIN.log". Inside the log I found several "missing module" messages:<br /><br /><blockquote> =================== COMRegAll ===================<br />Sat Sep 30 16:42:37 2006<br /><br /><br />Missing module: 'C:\WINDOWS\system32\mfco42d.dll'<br />Missing module: 'C:\WINDOWS\system32\msvcirtd.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\addinmgr2.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qfill.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbwps.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\COMObjectFactory.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\GraphSeriesCol.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\cominifile.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\ViewSrcColumns.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrCustHighlights.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrUnpaidBills.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrVendPayHist.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbcscbvw.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\CtrViewGraph.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\ctrviewtable.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctripmds.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\ctrviewhtml.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\customercontact.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\openbalbycustjob.dll'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\excelpayrolldatasource.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctraddin.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctrcustinvsummary.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctrcustpaysummary.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctropenpobycust.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctropenpovendor.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctrprofitloss.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctrqview.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrTenLstProfCust.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrTenMostProfCust.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrUnbillTimeCost.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\storageclasses.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\TenLeastProfitJob.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\TenMostProfitJob.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\vendorcontact.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbctrcashpos.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\ComEvtBroadcaster.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\Qbctrspacer.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\Qbctrtitle.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBInstanceFinder.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\viewsource.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrItemProfit.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrTenMostProfSvcs.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrTenLstProfSvcs.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\OverdueBalance.dll'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\CookieMonster.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\AXLBridge.exe'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\QBXLAdin.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\CtrViewToolTip.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\tcmaddin.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBCtrTRDS.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\CoLocator2.DLL'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\ECredit.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\bbfdepcalc.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBDTView.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBDTRatios.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBXMLRP2.DLL'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\sdksubscription.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\qbsdkcomutil.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\sdkparse.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBUServiceMgr.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBUpdate.exe'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBMsgMgr.exe'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBMsgRequestMgr.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBOneStepUpdate.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\QBUpdate\QBUpdateCtrl.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\AnswerWorks 4.0\AWAPI4.DLL'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\components\HR\bin\HROrganizer.dll'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\components\HR\bin\wrapper.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\QuickBooks\ctGrid.ocx'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\CashFlow\1.0\CashFlowProjector.dll'<br />Missing module: 'C:\Program Files\Common Files\Intuit\QuickBooks\\Intuit\LoanManager\1.0\LoanManager.dll'<br />Missing module: 'C:\Program Files\Intuit\QuickBooks Pro\dbctrs8.dll'<br />=================================================<br /></blockquote>Looking at the messages, I noticed an obvious error with a part of the path that was duplicated: "Intuit\QuickBooks\\Intuit\QuickBooks". I googled for a solution and didn't find one. Then I checked Intuit's so-called "knowledge base" and still did not find a solution.<br /><br />That's when I noticed the batch file "C:\Program Files\Intuit\QuickBooks Pro\reboot.bat". I opened the file and noticed the comment "Post-reboot registration commands, for QuickBooks 2003" at the top of the file. Then I noticed a whole bunch of calls to "regsvr32". For example:<br /><blockquote>C:\WINDOWS\system32\regsvr32 /s "C:\Program Files\Common Files\Intuit\QuickBooks\addinmgr2.dll"</blockquote>Obviously, that batch file was supposed to run automatically the first time I rebooted after installing QuickBooks. Now I know what you're thinking but let me assure you that I DID reboot after installation. QuickBooks just effed up and didn't run the batch file.<br /><br />Anyway, I manually ran the batch file and it fixed the problem. I was able to run QuickBooks.<br /><br />If you have the same problem and this blog post helps you, please leave a comment.<br /><br />Cheers!<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115966172564157966?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com16tag:blogger.com,1999:blog-21102333.post-1159375131841579912006-09-27T09:30:00.002-07:002009-12-02T14:17:34.246-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/09/27/norton-goback-to-the-stone-age/">location</a>.<br /><!--<br />My boss came to me yesterday with her notebook and said "My notebook has been <i>really</i> slow for the last week or so. Can you please fix it?"<br /><br />Of course I can! I started by turning on her notebook and noticed that it started up very slowly. Then, after logging in, I noticed that there was constant hard drive activity, even when the notebook was left idle for 30 minutes.<br /><br />I ran msconfig and noticed that there were several <span style="font-style: italic;">stupid</span> and <span style="font-style: italic;">unnecessary </span>"services" configured to startup automatically at boot time. For example:<br /><ul> <li>iPodService and iTunesHelper - Apparently, these just make iTunes easier to launch and/or make iTunes launch faster. Whoop-de-doo...</li> <li>vzfw - A Sony Vaio program which takes up about 35-40 MB of memory and which apparently <a href="http://forum.notebookreview.com/showthread.php?t=40682">searches your hard drive for multimedia files</a> to serve up to other users on the LAN - as useless a "service" as I have ever seen.</li> <li>the winzip "quick launch" thingy</li> <li>the quicktime "quick launch" thingy</li> <li>ati2evxx - The ATI External Event Utility, which apparently just provides hot keys for changing video setting. Who needs that shit? Is it really that hard to right-click on the desktop, click properties and then click settings?</li> </ul> I set all of the above "services" (and a few other stupid ones) to start up manually, or not at all. As a result, the computer booted much faster and used much less memory. However, I still noticed constant HD drive activity. That's when I noticed that <a href="http://www.symantec.com/home_homeoffice/products/overview.jsp?pcid=sp&amp;pvid=ngb40">Norton GoBack 4.0</a> was recently installed on the computer.<br /><br />Here is what GoBack is supposed to do:<br /><ul> <li>Reverses system crashes, failed software installations, user errors, and more</li> <li>Rolls PCs back minutes, hours, or even days before onset of a problem</li> <li>Lets you try software safely, with a fast uninstall if you don’t like it</li> <li>Recovers accidentally deleted or modified files</li> <li>Prevents unauthorized users from rolling back a hard drive</li> <li>Automatically schedules hard drive restorations to a set configuration</li> </ul> In other words, GoBack is for idiots who are too lazy to perform regular backups. It's not that hard to do, People, really.<br /><br />When I googled <i>"norton GoBack" "constant hard drive"</i>, I found someone with <a href="http://bluezhift.proliphus.com/2006/01/29/fear-norton-goback/">a similar story</a>. After he removed GoBack, the constant hard drive activity went away.<br /><br />So, I removed GoBack too. And guess what? That fixed the problem.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115937513184157991?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1157736689805420722006-09-08T10:31:00.001-07:002009-12-01T14:11:23.355-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/09/08/network-statistics-in-linux/">location</a>.<br /><!--<br /><ul> <li>To display statistics for each networking protocol, on systems using a full shell: <tt>netstat -s</tt> </li><li>To display statistics for each networking protocol, on systems using the stripped down "Busybox" shell (e.g. OpenWrt): <tt>more /proc/net/snmp</tt> </li> </ul><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115773668980542072?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1156519076815064522006-08-25T06:15:00.002-07:002009-12-01T14:07:12.073-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/08/25/windows-automatic-updates-stop-nagging-me-biatch/">location</a>.<br /><!--<br />Don't you hate it when you install a security patch with Windows Automatic Updates and afterwards Windows keeps nagging you to restart? Here's what the nag dialog box says:<br /><blockquote>Updating your computer is almost complete. You must restart your computer for the updates to take effect. Do you want to restart your computer now?<br /></blockquote>Your choices are: Restart Now and Restart Later. Unfortunately, by default, "later" means only 10 minutes later, which can be annoying when you're trying to get some work done, especially since the dialog box steals input focus from whatever window you were working with.<br /><br />If you run Windows XP Pro, you can <a href="http://www.codinghorror.com/blog/archives/000294.html">use the Group Policy Editor to stop the nagging</a>. If you run Windows 2000, like me, you can do a registry hack to reduce the frequency of the nagging or to stop it altogether. Here are the registry settings:<br /><blockquote>[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]<br />"RebootRelaunchTimeout"=dword:0000003c<br />"RebootRelaunchTimeoutEnabled"=dword:00000001</blockquote>RebootRelaunchTimeout is the number of minutes between nags. I entered 3c (hexadecimal), which is 60 minutes (decimal). If you set RebootRelaunchTimeoutEnabled to 0, can you disable the nags altogether, which I do NOT recommend; eventually (sooner rather than later), you should restart your machine so that the security updates can take effect.<br /><br />One important point: these registry settings don't take effect until you either restart your computer or restart the Automatic Update service (Control Panel...Administrative Tools...Services...Automatic Updates...click the service restart button).<br /><br />For a full explanation of these two registration settings and some related ones, refer to <a href="http://technet2.microsoft.com/WindowsServer/en/library/75ee9da8-0ffd-400c-b722-aeafdb68ceb31033.mspx?mfr=true">this article</a>.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115651907681506452?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com2tag:blogger.com,1999:blog-21102333.post-1156280355000537612006-08-22T13:35:00.001-07:002009-12-01T13:56:48.343-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/08/22/how-to-inject-dependencies-into-domain-objects-when-using-the-spring-framework-1-x-and-hibernate/">location</a>.<br /><!--<br />Yesterday I read <a href="http://chris-richardson.blog-city.com/migrating_to_spring_2_part_3__injecting_dependencies_into_en.htm">an interesting post</a> on <a href="http://chris-richardson.blog-city.com/">Chris Richardson's blog</a> about how to inject dependencies into domain objects when using the Spring Framework and Hibernate. This is a great feature because it allows you the option to create richer domain models and avoid the <a href="http://www.martinfowler.com/bliki/AnemicDomainModel.html">anemic domain model</a> anti-pattern, which was coined by Martin Fowler and discussed at great lengths in Eric Evans' book <a href="http://domaindrivendesign.org/books/index.html">Domain Driven Design</a>.<br /><br />Unfortunately, this AspectJ-based solution discussed by Chris Richardson will not be officially supported until Spring Framework 2 is released (which should be soon). There are some other solutions (e.g. DependencyInjectionInterceptorFactoryBean, ServiceLocator lookups, passing dependencies as as parameters to service methods, etc) but, as Chris points out, these all have some undesirable drawbacks.<br /><br />Today I thought of a another solution, which might be sufficient (if a bit kludgy) until Spring Framework 2 is released. The genesis for this solution was my realization that the service dependencies for a given domain object class could probably use the same reference for <i>all instances</i> of that class. In other words, it seemed to me that it might make sense to store the dependency in a static variable of the class instead of an instance variable. If I use a static variable, I can set the dependency before Hibernate starts instantiating any instances of the domain object class.<br /><br />Fortunately, Spring provides the MethodInvokingFactoryBean, which can be used to call any arbitrary static method upon starting up the application context. Using this mechanism, I can configure the service in the application context and transparently set the dependency for this in the domain object class. Furthermore, if I type the static variable with the service's interface instead of the implementation, I can easily replace the implementation with a stub or mock during unit testing.<br /><br />Using Chris Richardson's "PendingOrder" example, here is how my cheesy solution might work. First the code:<br /><pre class="code-hs">public interface RestaurantRepository <br />{<br /> //...<br />}<br /><br />public class RestaurantRepositoryImpl implements RestaurantRepository <br />{<br /> //...<br />}<br /><br />public class PendingOrder <br />{<br /> private static RestaurantRepository restaurantRepository;<br /><br /> public static void setRestaurantRepository(RestaurantRepository rr) <br /> {<br /> restaurantRepository = rr;<br /> }<br /><br /> public int updateDeliveryInfo (<br /> Address deliveryAddress,<br /> Date deliveryTime,<br /> boolean force) <br /> {<br /> // the RestaurantRepository dependency is used here<br /> }<br />...<br />}<br /></pre>Now, the configuration:<br /><pre class="code-hs">&lt;bean id="restaurantRepository" class="somepackage.RestaurantRepositoryImpl"&gt;<br />...<br />&lt;/bean&gt;<br /><br />&lt;bean id="pendingOrderRestaurantRepositoryInjector"<br /> class="org.springframework.beans.factory.config.MethodInvokingFactoryBean"&gt;<br /> &lt;property name="staticMethod"&gt;<br /> &lt;value&gt;somepackage.PendingOrder.setRestaurantRepository&lt;/value&gt;<br /> &lt;/property&gt;<br /> &lt;property name="arguments"&gt;<br /> &lt;list&gt;<br /> &lt;ref bean="restaurantRepository"/&gt;<br /> &lt;/list&gt;<br /> &lt;/property&gt;<br />&lt;/bean&gt;</pre>Yes, it's cheesy but I think it will work fine until I switch to using the AspectJ-based solution when Spring Framework 2 is released.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115628035500053761?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com4tag:blogger.com,1999:blog-21102333.post-1153866311507963382006-07-25T06:21:00.001-07:002009-12-01T13:51:31.168-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/07/25/tinyproxy-on-wrt54gs/">location</a>.<br /><br /><!--<br />I installed <a href="http://tinyproxy.sourceforge.net/">Tinyproxy</a> 1.6.3 on my LinkSys WRT54GS router today. Following are some installation notes and comments about Tinyproxy.<br /><br />My router currently runs the White Russian RC5 release of the <a href="http://openwrt.org/">OpenWrt</a> Linux distribution. Tinyproxy is not yet an officially supported <a href="http://wiki.openwrt.org/OpenWrtDocs/Packages">OpenWrt package</a>. Rather, it is part of the "backports" package repository. To install Tinyproxy, I first had to add the backports repository to my repository list by adding the following line to my <span style="font-family:courier new;">/etc/ipkg.conf</span> file:<br /><span style="font-family:courier new;"><blockquote>src backports http://downloads.openwrt.org/backports/rc5</blockquote></span>After adding that line, I ran <span style="font-family:courier new;">ipkg update</span> to add the backport packages to my list of packages. To confirm that Tinyproxy was in the list, I ran <span style="font-family:courier new;">ipkg list</span> and looked for tinyproxy in the output. Finally, to install Tinyproxy, I ran <span style="font-family:courier new;">ipkg install tinyproxy</span>.<br /><br />The installer put a tinyproxy init script in <span style="font-family:courier new;">/etc/init.d</span>. You can either run Tinyproxy manually with <span style="font-family:courier new;">/etc/init.d/tinyproxy start</span> or you can run it automatically by renaming it something like <span style="font-family:courier new;">S50tinyproxy</span> and rebooting.<br /><br />Once I got Tinyproxy running, I pointed my browser at it and started surfing. One thing I noticed right away is that Tinyproxy was SLOW for sites with lots of graphics. For example, on average it took about 30 seconds to load http://tsn.ca.<br /><br />Of course, the question was "Is Tinyproxy slow because of the hardware (WRT54GS) or the software (Tinyproxy)?"<br /><br />To answer this question, I ran both <a href="http://www.squid-cache.org/">Squid</a> and Tinyproxy on a P3-350 with 256 MB of RAM, running CentOS 4. On average, Squid took about 9 seconds to load http://tsn.ca and Tinyproxy took about 10 seconds. Therefore, I concluded that Tinyproxy's slow performance on the WRT54GS was due to the hardware.<br /><br />For websites with mostly text, Tinyproxy's performance on the WRT54GS was certainly acceptable. For example, search results from Google appeared almost instantly.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115386631150796338?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com6tag:blogger.com,1999:blog-21102333.post-1153784451046981992006-07-24T06:56:00.001-07:002009-12-01T13:41:52.095-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/07/24/toshiba-a100-sk4-first-impressions/">location</a>.<br /><br /><!--<br />After months of begging, I finally bought my wife a notebook computer. It's a Toshiba A100-SK4 (manufacturer's part number: PSAA8C-SK400E). Here are the specs:<br /><ul> <li>Processor: Intel Centrino Solo T1350</li><li>Processor Speed: 1.86GHz</li><li>Screen Size: 15.4" (wide screen)</li><li>Screen Type: WXGA TFT With TruBrite</li><li>RAM: 1GB DDR</li><li>Hard Drive: 80GB</li><li>Optical Drive: DVD Super-Multi Drive</li><li>Graphics: 128MB (Shared) Intel GMA 950</li><li>Average Battery Life: Up to 3.5 Hours</li><li>Battery Type: 6-Cell Lithium-Ion</li><li>Cache: 32KB L1, 2MB L2</li><li>Fax/Modem: 56K V.92</li><li>I/O Ports: 4 x USB 2.0, 1 x S-Video Out, 1 x RGB</li><li>Network Cards: 10/100 Ethernet LAN, Wireless 802.11bg</li><li>PC Card Slots: 1 Type II, CardBus, Express Card</li><li>Pointing Device: Touchpad</li><li>Preloaded Operating System: Microsoft Windows XP Home (yuck)</li><li>Product Weight: 2.8 kg</li><li>Product Dimensions: 36.00(W) x 3.68(H) x 26.70(D) cm</li><li>Speakers: Built-In Stereo Speakers</li><li>System Bus: 533MHz</li> </ul> So far, I like this notebook. Granted, I haven't used it for more than checking my email, surfing the web and watching a DVD movie.<br /><br />Here are some good things I have noticed:<br /><ul> <li>It boots very quickly. I haven't timed the boot yet but I can assure you that you won't be disappointed. If I'm feeling bored this week, maybe I'll time the boot.</li> <li>The wireless reception is excellent. I get a strong signal all over our two-storey house and also outside on the sundeck.</li> <li>The screen is bright and supports a pretty wide range of viewing angles in both the x-axis and the y-axis.</li> <li>The speakers sound pretty good with the "surround sound" feature activated. I turned this feature on while watching the movie Sea Biscuit and I was quite impressed.</li> </ul> Something I don't like about this notebook is its <span style="font-style: italic;">extremely</span> loud DVD drive. The first time I watched a DVD on it, I was distracted by the noise. It sounded like a jet engine!<br /><br />I did some research and found out that the notebook comes with a small utility called the Acoustic Silencer, which is supposed to mitigate this noise. When activated, the Acoustic Silencer limits the spin rate of the DVD drive to reduce vibratiion, which is supposed to reduce the noise. Toshiba recommends that you activate the Acoustic Silencer before running a movie DVD or a music CD. I tried it a couple of nights ago and it worked! It noticeably reduced the drive noise and as a result, I wasn't distracted by it when I watched a movie. Of course, I think the Acoustic Silencer is a probably kludge to cover up a shitty-ass drive but if it works, I guess we can't complain, can we?<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-115378445104698199?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com4tag:blogger.com,1999:blog-21102333.post-1138992949138727562006-02-03T10:46:00.001-08:002009-11-30T13:51:56.386-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/02/03/soekris-net4801-pictures/">location</a>.<br /><br /><!--<br />Alright, here are some pictures of my new Soekris net4801.<br /><br />Here's the adapter. As you can see, it's the kind that doesn't take up 50 slots on your power bar.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/net4801_4.jpg"><img style="cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/320/net4801_4.jpg" alt="" border="0" /></a><br /><br />Here's the back of the unit, showing the various connectors. Note that this unit has a USB port.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/net4801_2.jpg"><img style="cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/320/net4801_2.jpg" alt="" border="0" /></a><br /><br />Here's the front of the unit, showing the status lights. By the way, I read somewhere that you can use the error light for your own purposes. Pretty cool.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/net4801_3.jpg"><img style="cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/320/net4801_3.jpg" alt="" border="0" /></a><br /><br />Here's a good view of the board.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/net4801_1.jpg"><img style="cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/320/net4801_1.jpg" alt="" border="0" /></a><br /><br />Finally, here's the 2.5" hard drive mounting bracket.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/net4801_5.jpg"><img style="cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/320/net4801_5.jpg" alt="" border="0" /></a><br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-113899294913872756?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com10tag:blogger.com,1999:blog-21102333.post-1138811639192495582006-02-01T08:31:00.001-08:002009-11-18T14:38:34.011-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/02/01/soekris-net4801/">location</a>.<br /><br /><!--<br />Oh yeah, baby! I just got a <a href="http://www.soekris.com/net4801.htm">Soekris net4801</a> and I'm going to turn it into a multi-WAN router. I'm currently installing and configuring <a href="http://voyage.hk/software/voyage.html">Voyage Linux</a> on it. I'll post some photos and details soon.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-113881163919249558?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1137716448109237842006-01-19T16:01:00.001-08:002009-11-18T14:35:25.151-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/01/19/multi-wan-router-firewall-soekris-vs-wrap/">location</a>.<br /><br /><!--<br />After much investigation, it looks like building my own firmware for the LinkSys RV082 will take too long. I will pursue it at a later date but for now I will build my own.<br /><br />The requirements are:<br /><ul> <li>Low cost</li> <li>Small form factor</li> <li>Quiet</li> <li>Low heat</li> <li>A minimum of three ethernet ports</li> <li>Serial port console access</li> <li>Powerful enough to be able to route and filter at least 10 Mbps of traffic.</li> <li>Linux, FreeBSD and/or OpenBSD compatible</li> <li>Loading operating system from Compact Flash</li> </ul><br />Nice to haves:<br /><ul> <li>PXE boot</li> <li>USB port</li> <li>IDE port</li> </ul> So far, the contenders are:<br /><ol> <li><a href="http://www.soekris.com/net4801.htm">Soekris Engineering net4801</a></li> <li><a href="http://www.pcengines.ch/wrap.htm"><span style=";font-family:Trebuchet MS,Arial,Sans Serif;font-size:100%;" >WRAP.1E-2</span></a></li> </ol> <span style="font-weight: bold;"></span>Both are powered by the same CPU (<span style=";font-family:Trebuchet MS,Arial,Sans Serif;font-size:100%;" >Geode SC1100</span>), have three ethernet ports and 128 MB RAM. Both can run Linux, FreeBSD and OpenBSD.<br /><br />Both options require separate purchase of a compact flash card. The recommended size is 256 MB, which costs CA$28. For CA$87, we could get a 1 GB card, which would leave room for lots of extra apps and online documentation - extremely nice but not required.<br /><br />The Soekris would cost about US$255 for the board, case and power supply. The WRAP would cost about $175 for the board, case and power supply.<br /><br />The Soekris has extra features that the WRAP does not have; the Soekris has an IDE connector for an optional 2.5" hard drive as well a USB port. These are not required but they are very nice to have.<br /><br />The user manuals for both devices are pretty sparse (about 12 pages each). On the internet, I have found detailed operating system installation HOW-TOs for both computers; however, there are more HOW-TOs for the Soekris and they are better written.<br /><br />Either option would work but the Soekris is more flexible because of the option to add a 2.5" hard drive and a USB device. Also, I think the documentation for the Soekris is slightly better.<br /><br />For now, I am leaning towards the Soekris.<br />--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-113771644810923784?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com0tag:blogger.com,1999:blog-21102333.post-1137518961939234812006-01-17T08:59:00.002-08:002009-11-18T14:31:55.997-08:00This story has moved to <a href="http://nerdboys.com/">NerdBoys.com</a>. Please read this story at its new <a href="http://nerdboys.com/2006/01/17/under-the-hood-of-the-linksys-rv082-vpn-router/">location</a>.<br /><br /><!--I have just acquired a LinkSys RV082 VPN router and I want to put custom firmware on it. I love the custom firmwares for the LinkSys WRT54G (e.g. OpenWrt, DD-WRT) but they don't run on the RV082. After much searching on the internet, I found a project which might eventually lead to custom firmware. The project is <a href="http://openixp.phj.hu/" target="_blank" class="postlink">OpenIXP</a>. Currently, it's targetted at the LinkSys WRV54G but the goal stated on the homepage is "to produce an Linux based open environment for the Intel IXP4xx processors". The project leader also has some <a href="http://www.phj.hu/wrv54g/" target="_blank" class="postlink">great background information on his other site</a>.<br /><br />Anyway, I was talking to the project leader and he said that in order to port OpenIXP to the RV082 (and possibly RV042?) the first step is to open up the box and figure out what hardware it has. So, I did that. Below is a summary of how I opened the box and what I found inside.<br /><br />To open the box, start by using a small knife or similar device to gently pry back the back panel (the dark grey plastic panel that has the power plug). Next, you have to remove the top part of the metal case. It has four L-shaped clips on both sides which hook into the bottom part of the metal case. Starting from the back, use a knife to gently pry out each clip. Once you have pried out all eight clips, you should be able to remove the top part of the case by flipping it upwards from the back (like opening a door, where the front plastic panel is like the door hinge).<br /><br />Once I got inside, here are the main chips I found:<br /><ol><li>Intel FWIXP425BD - The CPU. Intel describes it as "IXP425 network processor, 533 MHz". Another marking on the chip is "L4450377".</li><li>Infineon ADM6999 - Infineon describes this as "a high performance, low cost, highly integrated (Controller, PHY and Memory) 9-port 10/100 Mbps TX/FX switch with 8-ports supporting 10/100Mbps TX/FX + 1 MII/GPSI/7 wire Ethernet switch controller port." My guess is that this switch manages the 8 LAN ports. <a href="http://www.infineon.com/cgi-bin/ifx/portal/ep/channelView.do?channelId=-65140&channelPage=/ep/channel/productOverview.jsp&amp;pageTypeId=17099" target="_blank" class="postlink">More info</a>.</li><li>Infineon ADM6996L - Infineon describes this as "a high performance, low cost, highly integrated (Controller, PHY and Memory) six-port 10/100 Mbps TX/FX switch with 5-ports supporting 10/100Mbps TX/FX + 1 10/100 MAC port Ethernet switch controller". My guess is that this switch manages the 2 WAN ports. <a href="http://www.infineon.com/cgi-bin/ifx/portal/ep/channelView.do?channelId=-65139&channelPage=/ep/channel/productOverview.jsp&amp;pageTypeId=17099" target="_blank" class="postlink">More info</a>.</li><li>2 x Mira P2V28S40BTP - I'm pretty sure this is the RAM. Interestingly, it appears that there are two spots on the board to solder on two more RAM chips!</li><li>Intel TE28F128 - I believe this is a 16 MB flash chip.</li></ol><br />Here are the unused interface connectors I found:<br /><ol><li>JP2 - 2 rows of 5 pins - 10 pins total. The pins do not have solder pads, rather, they are holes. Only pins 4, 6, 8 and 10 appear to be "connected" to the board (I can see traces coming from these pins). My guess is that this might be a serial port or a USB port.</li><li>JP4 - identical to JP2 except that none of the pins appear to be connected to the board.</li><li>JP5 - 2 rows of 20 pins - 40 pins total, with solder pads. No idea what this is for. For looking at the tracing coming out of it I think this is some sort of "multi" interface. I see several 4 pins groupings, a 7 pin grouping and a 2 pin grouping. Perhaps the serial port is over here and not at JP2 after all?</li><li>JP3 - 2 rows of 10 pins - 20 pins total, with solder pads. My guess is this is a JTAG interface.</li></ol><br />The LED assemblies are cool. The LED's are mounted in a plastic grid that has cells where the LED's are plugged in. There are many empty cells so I wonder if you could plug in more LED's? That would be cool.<br /><br />Anyway, below are some photos of the RV082 (thanks to my photo-taking homeboy, JNG). Click on the photo to zoom in.<br /><br />The first photo shows an exploded view of the back panel, the front panel and the top of the case<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/IMG_0438.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/400/IMG_0438.jpg" alt="" border="0" /></a>The next photo shows the L-shaped teeth on the top of the case. These teeth connect the top and bottom of the case.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/IMG_0441.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/400/IMG_0441.jpg" alt="" border="0" /></a><br />The next photo shows the board and all the chips on it. A <a href="http://members.shaw.ca/cyboc/IMG_0445.JPG">higher resolution version of this photo</a> is available too (please do not link to it because it's on my home ISP account and they may get pissed off if it generates too much traffic).<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/IMG_0445.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/400/IMG_0445.jpg" alt="" border="0" /></a>The next photo shows the LEDs and ethernet ports that live behind the front panel. Notice the empty slots in the LED grid? I wonder if I could plug in more LED's into that grid?<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://photos1.blogger.com/blogger/5060/1277/1600/IMG_0450.jpg"><img style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" src="http://photos1.blogger.com/blogger/5060/1277/400/IMG_0450.jpg" alt="" border="0" /></a><br />Anyway, I'm a long way from having custom firmware for this baby. Any help would be appreciated.--><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/21102333-113751896193923481?l=joesbitbucket.blogspot.com' alt='' /></div>Joehttp://www.blogger.com/profile/03602182138078986641noreply@blogger.com6