ipv4

http://sr-mediathek.sr-online.de/beitrag.php?id=1540

rtmp://gffstream.fcod.llnwd.net/a792/o16/MP4:sr/media/FS/SA/sportarena_20100523_M.mp4

./rtmpdump -r "rtmp://gffstream.fcod.llnwd.net:1935/a792/o16/sr/media/FS/SA/sportarena_20100523_M.mp4" -o sportarena_20100523_M.mp4

// posted by Jo-Chen @ Tuesday, May 25, 2010 0 comments

update-rc.d bridge defaults

#!/bin/sh
# Script to start|stop|restart bridging of two network devices
# Written by Jochen Miroll 05/28/05

ADDRESS="10.10.0.10/24"
GATEWAY="10.10.0.1"
DEV1=eth0
DEV2=eth1
#ONSTOP is the device that gets the IP address when bridging is stopped
ONSTOP=$DEV1
BR=bridge
SYSPATH=/sys/class/net
#userspace tools
BRCTL=/usr/sbin/brctl
IP=/bin/ip

#bail out if our userspace tools are not installed
test -f $BRTCL || exit 0
test -f $IP || exit 0

case "$1" in
        start)
                echo -n "Bridging $DEV1 and $DEV2: "

                if [ -d "$SYSPATH/$BR" ]; then
                        echo "$BR already exists."
                        exit 1
                fi
                if [ ! -d "$SYSPATH/$DEV1" ]; then
                        echo "$DEV1 does not exist."
                        exit 1
                fi
                if [ ! -d "$SYSPATH/$DEV2" ]; then
                        echo "$DEV2 does not exist."
                        exit 1
                fi

                $IP addr flush dev $DEV1
                $IP addr flush dev $DEV2
                $IP link set dev $DEV1 down
                $IP link set dev $DEV2 down
                sleep 1
                $BRCTL addbr $BR
                $BRCTL addif $BR $DEV1
                $BRCTL addif $BR $DEV2
                $IP addr add $ADDRESS brd + dev $BR
                $IP link set dev $DEV1 up
                $IP link set dev $DEV2 up
                $IP link set dev $BR up

                route add default gw $GATEWAY dev $BR
                echo "$BR is now $ADDRESS."
                ;;
        stop)
                echo -n "Stopping bridge: "
                if [ ! -d "$SYSPATH/$BR" ]; then
                        echo "$BR does not exist."
                        exit 0
                fi
                if [ ! -d "$SYSPATH/$ONSTOP" ]; then
                        echo "$ONSTOP does not exist."
                        exit 0
                fi

                $IP link set dev $DEV1 down
                $IP link set dev $DEV2 down
                $IP link set dev $BR down
                sleep 1
                $BRCTL delif $BR $DEV1
                $BRCTL delif $BR $DEV2
                $BRCTL delbr $BR
                $IP addr flush dev $ONSTOP
                $IP addr add $ADDRESS brd + dev $ONSTOP
                $IP link set dev $ONSTOP up

                echo "$ONSTOP is now $ADDRESS."
                ;;
        restart)
                $0 stop
                sleep 2
                $0 start
                if [ "$?" != "0" ]; then
                        exit 1
                fi
                /etc/init.d/dhcp3-server restart
                ;;
        *)
                echo "Usage: /etc/init.d/bridge {start|stop|restart}"
                exit 1
esac

exit 0

// posted by Jo-Chen @ Sunday, October 08, 2006 0 comments

• debian testing (sarge)
  
• apache2

specialuser

specialpassword

domain.com

company

<location>
AuthType Basic
order allow,deny
allow from all
AuthName "Example apache2 LDAP auth with Active Directory on domain.com"
AuthLDAPURL ldap://name_or_ip:389/OU=company,DC=domain,DC=com?sAMAccountName?sub?(objectClass=user)
AuthLDAPBindDN "specialuser@domain.com"
AuthLDAPBindPassword specialpassword
require valid-user
</location>

// posted by Jo-Chen @ Monday, December 12, 2005 0 comments

3.7 ip_conntrack: maximum limit of XXX entries exceeded

If you notice the following message in syslog, it looks like the conntrack database doesn't have enough entries for your environment. Connection tracking by default handles up to a certain number of simultaneous connections. This number is dependent on you system's maximum memory size (at 64MB: 4096, 128MB: 8192, ...).

You can easily increase the number of maximal tracked connections, but be aware that each tracked connection eats about 350 bytes of non-swappable kernel memory!

To increase this limit to e.g. 8192, type:

echo "8192" > /proc/sys/net/ipv4/ip_conntrack_max

To optimize performance, please also raise the number of hash buckets by using the hashsize module loadtime parameter of the ip_conntrack.o module. Please note that due to the nature of the current hashing algorithm, an even hash bucket count (and esp. values of the power of two) are a bad choice.

Example (with 1023 buckets):

modprobe ip_conntrack hashsize=1023

// posted by Jo-Chen @ Wednesday, August 24, 2005 0 comments

echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -p tcp --dport 22 -o ppp0 -j MASQUERADE

// posted by Jo-Chen @ Wednesday, August 24, 2005 0 comments

1. First thing to do is to enable IP-forwarding (obviously)
2. Then we change the DESTINATION of packets coming in on ppp0
3. Still the SOURCE of those packets points to some computer on the internet

#!/bin/sh
IF=ppp0
IPT=iptables
IPTNAT="$IPT -t nat -A"
PORT=63392
SERVER=insert_ip_here
GW=insert_ip_here

echo "Activating forwarding... beware!"
echo "1" > /proc/sys/net/ipv4/ip_forward

#$IPT --flush -t nat

# packets coming in from $IF are routed to $SERVER
$IPTNAT PREROUTING -p tcp --dport $PORT -i $IF -j DNAT --to $SERVER:$PORT
$IPTNAT PREROUTING -p udp --dport $PORT -i $IF -j DNAT --to $SERVER:$PORT

# before leaving those packets are modified to look as if they came
# from $GW, so the return packets from $SERVER find their way back to $GW
$IPTNAT POSTROUTING -p tcp --dport $PORT -d $SERVER -j SNAT --to $GW
$IPTNAT POSTROUTING -p udp --dport $PORT -d $SERVER -j SNAT --to $GW

$IPT -L -t nat -vn

// posted by Jo-Chen @ Wednesday, August 24, 2005 4 comments