Nokia Beta Labs stickers

August 25th, 2008

Three days ago Nokia Beta Labs announced they were giving stickers for free (20 stickers for the 50 first ones). Today, three days after, I got my 20 stickers!

Nokia Beta Labs stickers

Maybe they should have send 10 stickers to the 100 first ones, I'll have a hard time looking where to put so many stickers!

Anyway, thanks Nokia :P

I’m 25

August 3rd, 2008

Just for you to know, I'm now 25 years old!

Moved to Google Apps

July 29th, 2008

I started to get tired of managing my own exim+spamassassin+clamav+dovecot only to serve my domain, so I dediced to give Google Apps a try.

The move was fairly easy, simply register and change MX records ;) (and use imapsync to copy mail). I guess I didn't loose anything but If you sent me a mail in the last two weeks and I haven't answered, please resend.

The only downside, I hoped google would have some "easy" way to move my google account from *@gmail.com to my Google Apps domain.

IP Tunnel over SSH (with tun)

July 24th, 2008

Today I had some connection problems in one of our offices, so I needed to connect in some alternative way. A good moment for experimenting... The alternative connection was my laptop acting as a router connected with my mobile phone via bluetooth.

The problem's come with the VPN connections, IPSec is nice, but you can hate it on lots of things... i.e. all tunnels are setup using static ip addresses so in order to use the alternate connection (dynamic IP) I need to change the ipsec config of the other offices.

So today I wanted to try something new, tunneling ip traffic from one network to another over an ssh connection. And it works, Gentoo's wiki has some information on the subject: here

In brief, you need to, on the server:

  • Add "PermitTunnel yes" to /etc/ssh/sshd_config

Now, on the client it's as easy as to run ssh with some parameters, my script for launching it is:

#!/bin/sh
HOST=REMOTE_PARTY_ADDRESS
HOST_PORT=22
TUN_LOCAL=0   # tun device number here.
TUN_REMOTE=0  # tun device number there
IP_LOCAL=192.168.111.2 # IP Address for tun here
IP_REMOTE=192.168.111.1 # IP Address for tun there.
IP_MASK=30 # Mask of the ips above.
NET_REMOTE=192.168.0.0/16 # Network on the other side of the tunnel
NET_LOCAL=192.168.8.0/24  # Network on this side of the tunnel
 
echo "Starting VPN tunnel ..."
modprobe tun
ssh -w ${TUN_LOCAL}:${TUN_REMOTE} -f ${HOST} -p ${HOST_PORT} "\
	ip addr add ${IP_REMOTE}/${IP_MASK} dev tun${TUN_REMOTE} \
	&& ip link set tun${TUN_REMOTE} up \
	&& ip route add ${NET_LOCAL} via ${IP_LOCAL} \
	&& true"
sleep 3
ip addr add ${IP_LOCAL}/${IP_MASK} dev tun${TUN_LOCAL}
ip link set tun${TUN_LOCAL} up
ip route add ${NET_REMOTE} via ${IP_REMOTE}
echo "... done."

You'll maybe want to run this as root, because of the "ip" commands, and so ;)

It's still far from perfect (i.e: the tunnel dies too often for some reason... although keep alive is set). But at least people around can print again! Luckily VoIP is handled out of the VPN.

Hobbes in the river

July 20th, 2008

Hobbes in the river

Cargado originalmente por teleniek0

This Saturday there was the "Fast Painting" course on Gualba (a town in El Montseny), as you may guess from the photo, Me and Hobbes didn't spend any time painting.

He spent the whole day running on the river with the tennis ball, And I threw the ball and took photos :)

Wordpress in the meantime

July 20th, 2008

Ok, as you may have noticed I'm running Wordpress.

Although I'm a big fan of Django and I really enjoy developing sites with it, I just realised I do not have time to "build" my own website, neither to write up a blog app (I know, there are many out there). So I decided I'd try to live with Wordpress for some time, ...

That just has a few problems... My server (marcfargas.com) has no PHP, and no MySQL! So I have to run the blog on a subdomain which is hosted in Dreamhost (I have an account here for other stuff).

So, Djangonauts, forgive me for using Wordpress ;)

NOTE to RSS Subscribers: I plan to write in either Spanish, Catalan or English. Posts in either language will be categorized so you can subscribe only to the language you want. See links at the right.

MS Excel Help little gem

February 14th, 2008

We know Microsoft likes to be ambiguous, I just got this on MS Excel Help (In Spanish):

Si a1 es VERDADERO o se omite, ref se interpreta como una referencia estilo A1.
Si a1 es FALSO o se omite, ref se interpreta como una referencia estilo L1C1.

This can be translated to:

 If a1 is TRUE or omitted, ref is interpreted as a reference of style A1.
 If a1 is FALSE or omitted, ref is interpreted as a reference of style L1C1.

Now, the big question is, if a1 is omited how will ref be interpreted?

The Online Help (English version) is correct, somebody wanted to confuse Spanish users! ;)

(Online version of Office Help available here)

Outgoing connections from Linux not working

January 13th, 2008

A friend of mine has a nice MythTV box on his bedroom. Suddently the box decided to not open outgoing connections anymore... I say outgoing because I could still connect to it from my home.

I could not find out what was last changed, maybe an aptitude upgrade or did he change ISP?

After some time looking around the only thing I could find out was a small difference between a SYN packet send from a remote place and the SYN packets send by the broken system:

22:56:47.855219 IP Banner.local.33509 > google.es.www: S 206185417:206185417(0)
    win 5840 <mss 1460,sackOK,timestamp 218414628 0,nop,wscale 5>

23:24:16.072713 IP golfos.net.42742 > Banner.local.ssh: S 1705835822:1705835822(0)
    win 5840 <mss 1460,sackOK,timestamp 5636642 0,nop,wscale 4>

You see, his box was sending wscale 5 and remote sites sent wscale 4, google, google, more google until I read this:

I think OpenBSD's claim (they did have the bug and probably still do for all that I know) was that they wanted to make their firewalling "stateless".

from: http://kerneltrap.org/node/6723

Maybe the router does not know what wscale means? I disabled the router's firewall completelly (I was sure I already did this...) and suddently everything worked fine...

Sure, I have to read more about windows scaling and try to understand what is wrong with the router's firewall but for now: things work.

First Post

January 1st, 2008

This is my first Blog Post, just to make sure everything went ok.