Archive for novembre, 2009

Overload [fr]

lundi, novembre 23rd, 2009

Some stupid guy thought it might be a good idea to hammer my poor little server.

The guy at requested a lot of pages at random and at very high speed. Looking at the website did not give more informations: just the words « coding.. » and an e-mail address. Googling for that domain name revealed a lot of web server statistics pages on random websites, but there was one entry that caught my eye: the blog of Mark Turner with a very interesting post about what could be going on.

My answer for the moment:

iptables -A INPUT -s -j LOGDROP
iptables -A OUTPUT -d -j LOGDROP


Turns out he has another IP address: it will be blacklisted as well:

iptables -A INPUT -s -j LOGDROP
iptables -A OUTPUT -d -j LOGDROP

Soekris Net4801 review [fr]

dimanche, novembre 8th, 2009

I have been using the Soekris Net4801 for a few years and here are my impressions

Soekris_net4801_boardThe good

  • This computer is small, power efficient, reliable and hacker-friendly.
  • It just has the needed hardware to make a decent router out-of-the-box and a little bit more.
  • It comes with a serial console to make configuration easy.
  • The BIOS can be set up, upgraded and flashed from the serial port.
  • It has GPIOs if you want to add custom hardware.
  • Bootable compact flash slot: enable you to build a router with no moving parts.
  • If the compact flash do not meet your needs, there is an optional bracket and cable to plug an IDE laptop harddisk.
  • One PCI slot and one mini-PCI slot for extensions like a WiFi card

The bad

  • This machine is underpowered: if you ask a little bit more than routing to the machine (file serving, playing MP3’s, imap server,…), performances are going straight to the toilet and you end up waiting… waiting… waiting…
  • Lack of USB ports: There is only one USB 1.0 port on the machine, limiting its potential.
  • The CF card slot is on the same IDE bus than the harddisk: if you want to use both, make sure the harddisk is configured as a slave device. You might want to test several compact flash cards for compatibility: many CF cards have a buggy IDE/ATA interface that will cause you headaches.

This machine should not be used as a file server due to the poor disk I/O performances, even with DMA on. I would like to see a similar setup with an Intel Atom CPU, a decent chipset and 4 USB 2.0 ports, then we would have a killer home server appliance.

Where to buy (europe)

I bought my board via Wim Vandeputte. This guy is reliable and is present at every event related to the free software movement.