Maybe they should have send 10 stickers to the 100 first ones, I'll have a hard time looking where to put so many stickers!

Anyway, thanks Nokia

The move was fairly easy, simply register and change MX records (and use imapsync to copy mail). I guess I didn't loose anything but If you sent me a mail in the last two weeks and I haven't answered, please resend.

The only downside, I hoped google would have some "easy" way to move my google account from *@gmail.com to my Google Apps domain.

The problem's come with the VPN connections, IPSec is nice, but you can hate it on lots of things... i.e. all tunnels are setup using static ip addresses so in order to use the alternate connection (dynamic IP) I need to change the ipsec config of the other offices.

So today I wanted to try something new, tunneling ip traffic from one network to another over an ssh connection. And it works, Gentoo's wiki has some information on the subject: here

In brief, you need to, on the server:

• Add "PermitTunnel yes" to /etc/ssh/sshd_config

Now, on the client it's as easy as to run ssh with some parameters, my script for launching it is:

#!/bin/sh
HOST=REMOTE_PARTY_ADDRESS
HOST_PORT=22
TUN_LOCAL=0   # tun device number here.
TUN_REMOTE=0  # tun device number there
IP_LOCAL=192.168.111.2 # IP Address for tun here
IP_REMOTE=192.168.111.1 # IP Address for tun there.
IP_MASK=30 # Mask of the ips above.
NET_REMOTE=192.168.0.0/16 # Network on the other side of the tunnel
NET_LOCAL=192.168.8.0/24  # Network on this side of the tunnel
 
echo "Starting VPN tunnel ..."
modprobe tun
ssh -w ${TUN_LOCAL}:${TUN_REMOTE} -f ${HOST} -p ${HOST_PORT} "\
	ip addr add ${IP_REMOTE}/${IP_MASK} dev tun${TUN_REMOTE} \
	&& ip link set tun${TUN_REMOTE} up \
	&& ip route add ${NET_LOCAL} via ${IP_LOCAL} \
	&& true"
sleep 3
ip addr add ${IP_LOCAL}/${IP_MASK} dev tun${TUN_LOCAL}
ip link set tun${TUN_LOCAL} up
ip route add ${NET_REMOTE} via ${IP_REMOTE}
echo "... done."

You'll maybe want to run this as root, because of the "ip" commands, and so

It's still far from perfect (i.e: the tunnel dies too often for some reason... although keep alive is set). But at least people around can print again! Luckily VoIP is handled out of the VPN.

Hobbes in the river

Cargado originalmente por teleniek0

This Saturday there was the "Fast Painting" course on Gualba (a town in El Montseny), as you may guess from the photo, Me and Hobbes didn't spend any time painting.

He spent the whole day running on the river with the tennis ball, And I threw the ball and took photos

Although I'm a big fan of Django and I really enjoy developing sites with it, I just realised I do not have time to "build" my own website, neither to write up a blog app (I know, there are many out there). So I decided I'd try to live with Wordpress for some time, ...

That just has a few problems... My server (marcfargas.com) has no PHP, and no MySQL! So I have to run the blog on a subdomain which is hosted in Dreamhost (I have an account here for other stuff).

So, Djangonauts, forgive me for using Wordpress

NOTE to RSS Subscribers: I plan to write in either Spanish, Catalan or English. Posts in either language will be categorized so you can subscribe only to the language you want. See links at the right.

Si a1 es VERDADERO o se omite, ref se interpreta como una referencia estilo A1.
Si a1 es FALSO o se omite, ref se interpreta como una referencia estilo L1C1.

This can be translated to:

 If a1 is TRUE or omitted, ref is interpreted as a reference of style A1.
 If a1 is FALSE or omitted, ref is interpreted as a reference of style L1C1.

Now, the big question is, if a1 is omited how will ref be interpreted?

The Online Help (English version) is correct, somebody wanted to confuse Spanish users!

(Online version of Office Help available here)

I could not find out what was last changed, maybe an aptitude upgrade or did he change ISP?

After some time looking around the only thing I could find out was a small difference between a SYN packet send from a remote place and the SYN packets send by the broken system:

22:56:47.855219 IP Banner.local.33509 > google.es.www: S 206185417:206185417(0)
    win 5840 <mss 1460,sackOK,timestamp 218414628 0,nop,wscale 5>

23:24:16.072713 IP golfos.net.42742 > Banner.local.ssh: S 1705835822:1705835822(0)
    win 5840 <mss 1460,sackOK,timestamp 5636642 0,nop,wscale 4>

You see, his box was sending wscale 5 and remote sites sent wscale 4, google, google, more google until I read this:

I think OpenBSD's claim (they did have the bug and probably still do for all that I know) was that they wanted to make their firewalling "stateless".

from: http://kerneltrap.org/node/6723

Maybe the router does not know what wscale means? I disabled the router's firewall completelly (I was sure I already did this...) and suddently everything worked fine...

Sure, I have to read more about windows scaling and try to understand what is wrong with the router's firewall but for now: things work.