Friday, December 14. 2007
MythTV Status in your MOTD (and ... Posted by Andrew Ruthven in catalyst at 08:19
I'm pleased to announce a new version of my little script - 0.6.1.
Update: I've disabled comments for now as I'm tired of all the spam.
Tuesday, December 4. 2007
Domain Name Registry System - ... Posted by Andrew Ruthven in catalyst at 14:15
Friday, November 23. 2007
MythTV Status in your MOTD (and ... Posted by Andrew Ruthven in catalyst at 08:28
I'm pleased to announce a new version of my little script -
Friday, November 16. 2007
MythTV Status in your MOTD Posted by Andrew Ruthven in catalyst at 09:24
The other day I was recompiling some kernels during the day on our MythTV backend, which at the time happened to be recording my wifes favourite program (Grey's Anatomy, we discovered it part way through the season, so the repeats are good). It turns out the compilation caused some issues with the recording (which reduced the WAF).
MythTV status for localhost =========================== Status: Mon Oct 15 2007, 8:41 AM Encoders: cerberus (9) - Idle cerberus (12) - Idle Scheduled Recordings: 2007-10-15 13:30:00 - Grey's Anatomy 2007-10-15 18:00:00 - 3 News 2007-10-15 20:30:00 - Mythbusters 2007-10-15 22:00:00 - Flight Of The Conchords 2007-10-16 13:30:00 - Grey's Anatomy 2007-10-16 18:00:00 - 3 NewsI run Debian, so there is a .deb. For those not running Debian there is a tarball (but the MOTD updating glue is Debian specific at the moment). For those interested in hacking there is a git repository.
Thursday, March 15. 2007
IPv6 Firewalling Posted by Andrew Ruthven in catalyst at 11:02
Firewalling IPv6 on Linux seems to be a vaguely documented topic, and most of that documentation seems to be out of date as it is a fast moving target. I've spent a bit of time over the last couple of days working on improving my firewalling situation and thought I should write up what I've found.
After a bit of digging I found that while IPv6 connection tracking was merged in 2.6.16, the configuration options are somewhat hidden. Up until yesterday I was running 2.6.19.x on my firewall and I discovered that while ip6tables allowed me to configure a stateful firewall, it wasn't actually doing anything!
I looked around for the required nf_conntrack_ipv6 module and couldn't find it. I looked in my running kernels config and couldn't find it. In fact I couldn't find any option for enabling IPv6 connection tracking at all. After some digging (grep'ing the Kconfig files helps) I found that I needed to change over to the new (experimental) Layer 3 Independent Connection tracking support.
The catch here is that if you have the old school Connection tracking (CONFIG_IP_NF_CONNTRACK) enabled you'll never see the new independent method (CONFIG_NF_CONNTRACK) in menuconfig. Which is why I'd never seen it before. So I disabled CONFIG_IP_NF_CONNTRACK (in IP: Netfilter Configuration), enabled (the now visible) CONFIG_NF_CONNTRACK (in Core Netfilter Configuration) went into both the IP and IPv6 Netfilter Configuration menus and selected support for the connection tracking option.
Compiled, installed and rebooted. Suddenly I had IPv6 connection tracking working. w00t! But no IPv4 NAT. Damn. It turns out that IPv4 NAT support was only ported to the new Layer 3 Independent Connection stuff in 2.6.20.
So I downloaded 184.108.40.206, jumped into the IP: Netfilter Configuration menu and found "Full NAT". That's what I want. Compiled, installed and rebooted.
Now I have my old IPv4 NAT working, and a full stateful IPv6 firewall (with no NAT!).
Oh, if you are using IPv6 stateful firewalling with Linux then you want to upgrade to 220.127.116.11, it fixes an issue with incorrectly classifying IPv6 fragments as ESTABLISHED and letting them through. Oops. Also, 2.6.20 moves the config options around again...
Monday, March 5. 2007
Pet Projects Posted by Andrew Ruthven in catalyst at 12:05
It's kinda funny, I keep on finding little itches that I want to scratch, but never have the time to scratch them all. Before Susanne became pregnant I didn't have much time to scratch them. Now I have less time, and once the baby is born, well, practically none I expect.
I thought I would write down what some of them are on the hope it might focus me so I'll work on them in what spare time I have. Just some of the coding related itches I have are (not in any particular order):
And then there is the ongoing tweaking of my MythTV setup, and all the other neat and nifty things I stumble upon and want to play with.
Wednesday, February 21. 2007
Leaving ICQ Posted by Andrew Ruthven at 13:10
Defined tags for this entry: software
Having just taken a closer look at the Acceptable Use Policy on ICQ as linked to from here I've decided to no longer use ICQ. When I first signed up with ICQ there weren't really many other options for IM. Actually, there probably weren't. Now other, better, options abound.
This decision probably won't affect too many people, I don't tend to use ICQ that much, but it affects a couple of folks I chat with.
Update: Add note about why I signed up with ICQ to start with.
Friday, December 8. 2006
Open source release of the Domain ... Posted by Andrew Ruthven in catalyst at 10:07
After almost 3 years we (along with NZRS) have made another open source release of the software which runs the .nz domain name system. Head over to DNRS on SourceForge to check it out.
There is a slew of improvements from the previous release (as to be expected), so we hope that people will pick it up and get involved with it. Interestingly enough there were 800 downloads of the previous version (only 500 odd downloads of all the required components though).
Sunday, September 3. 2006
Apple CalendarServer on Linux Posted by Andrew Ruthven in catalyst at 15:54
Well, a bunch of people were quite interested in the news that Apple have released a CalDAV server under an open source license, myself included. It is available from the CalendarServer project webpage.
They state that they've only tested it under MacOS X. Which as I 've tried to compile it under Linux certainly shows!
I've managed to fight through the various bits and pieces and managed to get it to run! <phew>
Here are a few notes regarding my experience, some steps and packages might be missing. These are directly related to Debian Unstable.
Required Debian packages:
You need to build the Python xattr package, by running (somewhere handy) the following. You may not need to actually checkout the code first. I had to do this as it wasn't automatically checked out for me. Of course, YMMV.
The Python module plistlib.py to read MacOS X PList files is required, it is available from SVN. I copied it into /usr/local/lib/python2.4/site-packages on my machine and it was picked up.
Some of the packages which are checked out from SVN require some patches applied to them. The patches are:
PyKerberos will need to be patched before it will compile, Twisted will compile but will do the wrong things with the extended attributes until is is patched. Then just re-running "run" from inside the CalendarServer directory should pick up the change.
I found the method that worked reasonably well was run "run -s" as provided by CalendarServer and whenever it broke (after checking out the required packages) apply the patch that I've provided, then run "run -s" again.
Update: Added details about plistlib.py and alternative to mounting the filesystem. Thanks Andrew M.
Update 2: Add fact that xattr wasn't automatically downloaded for me.
Update 3: The PyKerberos patch should now continue to work for MacOS X folks, and added details about the patches from Trac.
« previous page (Page 1 of 1, totaling 9 entries) next page »
Syndicate This Blog
Show tagged entries