Brielle's Ramblings

NTP Not Working On Linux? Check your iptables/netfilter rules.

nospam@example.com (Brielle) — Sun, 25 Jan 2015 12:47:05 -0700

Time to time, it's easy to get a little overly aggressive with firewall rules and lock down a service that your system depends on to function. NTP is one of those services which can be a pain to get working right through an aggressive firewall.

There are a few options when it comes to allowing NTP traffic, depending on the type of setup you are running, and if you are using a stateful firewall (aka connection tracking).

If you are running the standard ntpd daemon or ntpdate and no connection tracking/stateful firewalling...

iptables -A INPUT -p udp --sport 123 --dport 123 <optional:  -s IP_Addr_Of_NTP_Server> -j ACCEPT
iptables -A OUTPUT -p udp --sport 123 --dport 123 <optional: -d IP_Addr_Of_NTP_Server> -j ACCEPT

(note that the above, without the -s flag on INPUT, will allow anyone to query your NTP server unless you specifically refused them in ntpd.conf)

If you are running the standard ntpd daemon or ntpdate with connection tracking/stateful firewalling...

iptables -A OUTPUT -p udp --dport 123 -m conntrack --ctstate NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p udp --sport 123 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

As you can see, when using conntrack, it is much easier to control access, as the firewall can keep track of packets in and out, and will allow the return packets as appropriate. If you want to allow incoming NTP connections from people, then add NEW to the ctstate.

Fixing Wifi Isses On Some Macs - 10.8.x (including 10.8.4)

nospam@example.com (Brielle) — Fri, 14 Jun 2013 11:33:39 -0600

Ever since 10.8.x came out, some people (including myself) have had major issues with Wifi on our Macs. The problem has existed since 10.8.0 and still exists in 10.8.4. Over time (sometimes within 10 mins), the Wifi transmission speed will gradually drop down to 2-4, and transfer speeds will drop accordingly, and not recover without a reboot.

The following conditions seem to cause this bug:

802.11n (either 2.4ghz or 5ghz) wifi connection (does not seem to affect 802.11a/b/g)

Large transfers such as Time Machine backups, AFP/SMB file sharing

Confirmed some models of MBP 2007 15" (MacBookPro3,1), and some late models of MBP Unibody 2011 15"

Happens on Apple Airport Extreme (any generation) or 3rd party APs

Rebooting fixes the problem for a while, until the large file transfer happens again.

From 10.8.0 till 10.8.3, the fix was to take 10.6.8 or 10.7.3 IO80211Family.kext files and swap it in. The connection issue would go away and performance would be snappy and quick like it was in 10.6 and 10.7.

In 10.8.4, Apple made some changes for various reasons, which ended up breaking Wifi pretty badly if you tried the kext swap.

I needed to fix the problem since I couldn't back out to 10.8.3. I spent a few hours rummaging around through OS X's guts, swapping out files, changing settings, messing with permissions. I discovered that the problem was related to changes with /usr/libexec/airportd. Swapping the 10.8.4 airportd back to the one included in 10.8.3 restored Wifi.

I did a posting here on Apple's support forums detailing my part of the fix that makes the kext swap work again. Unfortunately, took a little while for people to realize what I was talking about. But, once they did, and tried my fix, I was getting positive feedback.

I've made a zip file of everything users who are suffering from Wifi problems need in order to get back up and working. You can get it here. It includes the 10.6.8 and 10.7.3 IO80211Family.kext files, as well as the kext utility you need to install them, and the 10.8.3 airportd binary that you can use to replace the 10.8.4 one.

A Thought On Blaming Gun Violence On Video Games

nospam@example.com (Brielle) — Fri, 11 Jan 2013 11:22:46 -0700

So, if people are willing to blame video games for causing violence, I have a great idea as well!

If you are going to claim that impressionable minds are going to imitate video games and go out and kill people, why aren't we putting forth a proposal to ban and burn the bible?

Afterall, impressionable minds are going to read the bible and assume that it is acceptable to rape, murder, etc.

Got the Ubiquiti EdgeRouter Lite Yesterday

nospam@example.com (Brielle) — Thu, 27 Dec 2012 16:23:33 -0700

Been a while since I last posted, but figured I'd share that I got our EdgeRouter Lite yesterday. Some high res pics for your enjoyment.

Binders... Binders full of women everywhere.

nospam@example.com (Brielle) — Wed, 17 Oct 2012 11:47:06 -0600

How not to request a whitelisting in the AHBL, part 2

nospam@example.com (Brielle) — Fri, 18 Nov 2011 17:38:06 -0700

Apparently, me berating Orange.fr/Orange.com last year about bulk mailing DNSbl maintainers fell on deaf ears.

Hint: this is a good way to piss me off, and have the exact opposite effect than desired.

Delivery-date: Fri, 18 Nov 2011 08:06:27 -0700
From: <mathieu.girol@orange.com>
Date: Fri, 18 Nov 2011 16:05:56 +0100
Subject: New IP for SMTP transaction
Message-ID: 
<14231_1321628758_4EC67455_14231_3310_1_FFFC8BE2ADAABA48B51B0C1C6E11EBBC264DCA5093@PMEXCB1D.intranet-paris.francetelecom.fr>
To: undisclosed-recipients:;

Hello,

I am in charge of managing the France Telecom Email platform.
I would like to inform you that we have some new IPs opening SMTP transaction.

Here the list of the new IPs with there reverse DNS:

IP      Reverse
80.12.242.29    smtpout1.wanadoo.co.uk
80.12.242.42    smtpout2.wanadoo.co.uk
80.12.242.59    smtpout3.wanadoo.co.uk
80.12.242.68    smtpout4.wanadoo.co.uk
80.12.242.80    smtpout5.wanadoo.co.uk
80.12.242.81    smtpout6.wanadoo.co.uk
193.252.23.158  msa1.wanadoo.co.uk
193.252.23.159  msa2.wanadoo.co.uk
193.252.23.168  msa3.wanadoo.co.uk
193.252.23.169  msa4.wanadoo.co.uk
193.252.22.95   sout1.wanadoo.co.uk
193.252.22.102  sout2.wanadoo.co.uk
193.252.22.226  sout3.wanadoo.co.uk
193.252.22.253  sout4.wanadoo.co.uk
193.252.22.125  smtpout1.voila.fr
193.252.23.185  msa1.voila.fr
193.252.22.245  sout1.voila.fr
193.252.23.7    smtpout1.orange.ne
193.252.23.8    smtpout1.orange.co.ke
193.252.22.176  smtpout1.orange.jo
193.252.23.9    smtpout1.orangemail.cm
193.252.23.10   smtpout1.orangemail.co.bw
193.252.23.11   smtpout1.orangemail.ro
193.252.23.12   smtpout1.orange.ug
193.252.23.2    smtpout1.orangemail.ch
193.252.23.150  msa1.orange.ne
193.252.23.151  msa1.orange.co.ke
193.252.23.152  msa1.orange.jo
193.252.23.153  msa1.orangemail.cm
193.252.23.154  msa1.orangemail.co.bw
193.252.23.155  msa1.orangemail.ro
193.252.23.173  msa1.orange.ug
193.252.23.184  msa1.orangemail.ch
193.252.22.227  sout1.orange.ne
193.252.22.230  sout1.orange.co.ke
193.252.22.233  sout1.orange.jo
193.252.22.234  sout1.orangemail.cm
193.252.22.238  sout1.orangemail.co.bw
193.252.22.239  sout1.orangemail.ro
193.252.22.240  sout1.orange.ug
193.252.22.244  sout1.orangemail.ch

Thank you to take into account these new IPs.

Regards,

Mathieu Girol
Responsable s=E9curit=E9 de la messagerie =E9lectronique
FT/OLNC/DPS/MSE/MIQ
T=E9l : 01 57 36 09 94

Rest in peace, Steve Jobs

nospam@example.com (Brielle) — Thu, 06 Oct 2011 10:07:47 -0600

Oct. 5, 2011. May you rest in peace, Steve Jobs.

Normally, I don't get very emotional over the death of a CEO or other big wig at a company. But, then again, Jobs was never your average big wig. I feel deeply saddened over his passing. Maybe it has something to do with the fact I grew up with Apple products, or maybe because even today when I look at the Mac Plus sitting on my desk that I see more then just a machine...

Yes, Apple products can be overpriced and at times glitchy, but they've always inspired me. I've spent days soldering on motherboards and doing general fixes to bring back to life machines from the 80s and 90s, just to see them turn on and make the classic start up tone. I'd never waste that kind of time on a PC.

When growing up, it used to piss me off when people said I'd be the next Bill Gates, or asked me if I aspired to be like him. I wanted to be one of the Steve's at Apple. Two of the greatest pioneers in the computer world - one, his technical prowess the stuff of legends, the other perhaps the greatest salesman of the past 35 or so years.

Yes, he may have been a jerk at times, and his reality distortion field was something few others could muster, but he was Steve Jobs. Not many people in this world would or can come back to the company they created years later, and turn it from a neglected and nearly bankrupt wreck into one of the most valuable and unstoppable companies to ever exist.

Sometimes, its easy to forget...

nospam@example.com (Brielle) — Sat, 27 Aug 2011 16:04:08 -0600

Sometimes, its easy to forget just how large the blades on the wind turbines can be, until you right next to one on the highway, being transported by a semi with a custom 100+ foot trailer. Amazing piece of human engineering, and a thing of beauty to see it rotating in the distance.

Look what Rick Perry's prayer for rain got us - Hurricane Irene

nospam@example.com (Brielle) — Sat, 27 Aug 2011 14:51:27 -0600

Since the religious right seems to be so obsessed and absolutely sure that their magical sky being listens and does what they ask in prayer, then there's only one explanation for Hurricane Irene - Rick Perry and his prayer for rain.

So, to all the religious folk out there who prayed for rain, how does it feel to know you are responsible for the destruction and death that Hurricane Irene is bringing? Since this is a "god fearing country" and should follow "god's laws", even though this may not have been your intention to cause destruction, that doesn't excuse you from the repercussions of your actions.

I think criminal charges, including for murder, would be appropriate and following the law of the land. Who's with me? After all, they did pray for this to happen.

As if Sindy Clock didn't already let us know how she felt...

nospam@example.com (Brielle) — Sat, 06 Aug 2011 14:47:02 -0600

As if Sindy Clock of the "I hope you get raped" fame hadn't made her feelings well enough known, she has parting words for those of us who called her out.

Christian love at its finest!

Fox News comments of death and rape threats

nospam@example.com (Brielle) — Mon, 01 Aug 2011 10:23:47 -0600

Reddit has been following comments from Fox News viewers over the objection to the 9/11 cross at ground zero. These people are not exactly what you'd call the brightest people in the world - did they not realize these comments would be archived forever on the Internet?

Ahh well, archived (2) here for both google karma and making sure the next time someone does a job search on these people, they find these comments.

Patrick Alley
Tim Allison
Paul Altum
Hans Anderson
Natalie Faires Bell
Lisa Bucklaew
Roxanne Capansky
Sindy Clock (Cindy Silver)
Ted Copeland
Sue Dishongh
Chris Dunn
Ann Laneaux Escoyne
Darlene Green
Mike Holeschek
Raylene Ingmire (school teacher)
Christina Juul Johnston
Casey M Jones
Daniel Doreen Koepp
Marv Leis
Debbie Malta
Joe Martinez
Scott Miller
Shelia Belt Miniard
Linda J. Murno
Bob O'Connell
Laurie Parker-Pluth
Michael Perri
Tim Poitter
Jack Poore
Jamie Richards
John Rion Riley
Eileen Rourke
Laura Williams Sanders
Joseph Sneckenberg
John William Thompson
Dave Unvert
Michael Williams
Gary Wilson
Blake Kennedy-Zummo

More people covering it here: (1)(2)(3)(4)(5)(6)(7)(8 Even includes transcript of the thread)

Craigslist: Searching for spam help

nospam@example.com (Brielle) — Tue, 26 Jul 2011 20:00:38 -0600

Its obviously not the first time someone's done this, but another spam fighter found on Craigslist a posting by Sam Cooper of Global Media Capital Fund (globalmediacapitalfund.tv, perhaps he should have not used his real e-mail address, mmfund@aol.com in the posting):

He's requesting help with "HIGH Volume DIRECT Send eMailing Software" on 500 servers with 500 domains.

Geee, I wonder what he's planning on needing 500 severs with 500 domains for?

Avoiding issues with Thunderbird under MacOS 10.5/10.6

nospam@example.com (Brielle) — Wed, 22 Jun 2011 13:36:17 -0600

Today while diagnosing some issues with high memory usage and general slowness on my normally quite peppy Macbook Pro, I finally discovered what may not only be causing issues with performance, but why Thunderbird sometimes goes nuts and corrupts its mailbox files.

The issue seems to relate to Spotlight searching, the mdworker process, and large mailbox files in Thunderbird.

Using:

sudo fs_usage -w -f filesys mdworker

I was able to see that the mdworker process was spending alot of time trying to constantly update/access/index files in the Thunderbird folder under Library in my home directory.

Bingo!

So, I went into System Preferences, then Spotlight, clicked on the Privacy tab, then hit the plus sign, and using Command-G, manually added the following folder to the do not index list:

~/Library/Thunderbird

This will prevent Spotlight from spending time indexing the Thunderbird mail files, which not only speeds up indexing if you have large mailboxes like me, but also helps avoid issues where Thunderbird will suddenly be unable to access mail folders (and sometimes, corrupt the folders).

So far, so good, and no more mailbox access errors in Thunderbird!

Spamdrew Sock Puppets

nospam@example.com (Brielle) — Wed, 15 Jun 2011 10:15:48 -0600

After watching the hilarity ensue on NANAE when a wanna-be spam king had a psychological break down of epic proportions, I was thinking in my head just what bedtime is like in his house with dozens of socks:

"Trina Jeffries": Oh spam king, take me!

Andrew: Oh Trina! Your skin is such strong woven cotton with ribs! Let daddy....

Erm. Perhaps I won't continue this. My mind, it burns!

Are you ready for World IPv6 Day?

nospam@example.com (Brielle) — Sat, 04 Jun 2011 22:45:25 -0600

Are you prepared for World IPv6 Day?

IPv4 addresses have been depleted, and major websites are beginning to (finally) see the value in adding IPv6 addresses to their websites.

Test your IPv6 readiness here.