<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" version="2.0">

<channel>
	<title>Digital Cardboard</title>
	
	<link>http://digitalcardboard.com/blog</link>
	<description />
	<lastBuildDate>Thu, 20 Dec 2012 19:21:10 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/digitalcardboard" /><feedburner:info uri="digitalcardboard" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><item>
		<title>Static Devices on Remote Side of a SonicWALL Site-to-Site VPN? Remember to Renegotiate!</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/27X_Tq9E6BI/</link>
		<comments>http://digitalcardboard.com/blog/2012/12/10/static-devices-on-remote-side-of-a-sonicwall-site-to-site-vpn-remember-to-renegotiate/#comments</comments>
		<pubDate>Mon, 10 Dec 2012 21:22:49 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[dhcp]]></category>
		<category><![CDATA[remote]]></category>
		<category><![CDATA[router]]></category>
		<category><![CDATA[sonicwall]]></category>
		<category><![CDATA[static]]></category>
		<category><![CDATA[troubleshooting]]></category>
		<category><![CDATA[vpn]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=351</guid>
		<description><![CDATA[tl;dr If you are having trouble with devices that have static IPs on the remote side of your Sonicwall Site-to-Site VPN, go to VPN and click Renegotiate under the Currently Active VPN Tunnels. We’ve got another warehouse with a site-to-site VPN setup using SonicWALL devices. It works decently enough for what we need. While most [...]]]></description>
				<content:encoded><![CDATA[<p><strong>tl;dr</strong> If you are having trouble with devices that have static IPs on the remote side of your Sonicwall Site-to-Site VPN, go to VPN and click <strong>Renegotiate</strong> under the <em>Currently Active VPN Tunnels</em>.</p>
<p>We’ve got another warehouse with a site-to-site VPN setup using SonicWALL devices. It works decently enough for what we need.</p>
<p>While most of the workstations at the remote site get an IP from the DHCP server at the central site, some of the devices at the other warehouse have static IPs (printers, wireless APs, etc).</p>
<p>Defining these static IPs in the SonicWALL is pretty easy. On the remote gateway side, go to <strong>VPN –&gt; DHCP over VPN –&gt; Configure –&gt; Devices Tab</strong> and enter the IP and MAC address of your static devices under <em>Static Devices on LAN</em>.</p>
<p>However, occasionally when adding another static IP, or when updating the firmware, or when it just feels like it, the routers will have trouble passing traffic from the central side to the remote side for just the static IPs. I’m using Nagios to report on the status of most of these devices, so it starts complaining fairly quickly that it can’t access them. Usually the remote side can still see those static devices, but for printers that connect back over the VPN to a printer server, this becomes a problem.</p>
<p>I used to think that just deleting all the static devices listed and re-adding them would work, but I had major problems with this today.</p>
<p>The workaround that seems to work for me now is simply <strong>going to the VPN settings page</strong> and clicking <strong>Renegotiate</strong> under the <em>Currently Active VPN Tunnels</em> section.</p>
<p>I don’t see anything like this written up on any of the SonicWALL support pages, so if anyone else runs into this weird situation, it’s worth a shot.</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/27X_Tq9E6BI" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/12/10/static-devices-on-remote-side-of-a-sonicwall-site-to-site-vpn-remember-to-renegotiate/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/12/10/static-devices-on-remote-side-of-a-sonicwall-site-to-site-vpn-remember-to-renegotiate/</feedburner:origLink></item>
		<item>
		<title>Extend Toner Life on Your Brother HL-2270DW By Enabling Toner Continue Mode</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/kdNpwUcEuys/</link>
		<comments>http://digitalcardboard.com/blog/2012/12/07/extend-toner-brother-hl-2270dw-enable-toner-continue-mode/#comments</comments>
		<pubDate>Fri, 07 Dec 2012 22:48:24 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Computer Fixin']]></category>
		<category><![CDATA[Lifehacks]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[brother]]></category>
		<category><![CDATA[hl-2270dw]]></category>
		<category><![CDATA[laser]]></category>
		<category><![CDATA[printer]]></category>
		<category><![CDATA[printing]]></category>
		<category><![CDATA[toner]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=343</guid>
		<description><![CDATA[I&#8217;ve got a number of Brother HL-2270DW laser printers around the office, and they&#8217;re wonderful. I even have one at home. Wireless-capable with built in duplexing, and on sale the unit is under $100. What&#8217;s not to like? Toner is fairly inexpensive too, but I like to squeeze as much of the life out of [...]]]></description>
				<content:encoded><![CDATA[<p>I&#8217;ve got a number of Brother HL-2270DW laser printers around the office, and they&#8217;re wonderful. I even have one at home. Wireless-capable with built in duplexing, and on sale the unit is under $100. What&#8217;s not to like?</p>
<p>Toner is fairly inexpensive too, but I like to squeeze as much of the life out of them as I can. By default, the toner life is strictly regulated by the page counter, and once the limit is reached, the printer stops until you replace the toner.</p>
<p>Enter the all important <strong>Toner Continue Mode</strong>. If the printer is networked, you can simply bring up the control panel by browsing to your printer&#8217;s IP in your browser. Click on <em>Printer Settings</em> (log in with username <em>&#8216;admin&#8217;</em> and password <em>&#8216;access&#8217;</em> if you haven&#8217;t changed the defaults) then make sure you set <strong>Replace Toner</strong> to <em>Continue</em>. Hit <strong>Submit</strong> at the bottom to save, and you&#8217;re set! You&#8217;ll be able to take the cartridge and shake it until you can&#8217;t shake it any more, just like the good ol&#8217; days.</p>
<p><a href="http://digitalcardboard.com/blog/2012/12/07/extend-toner-brother-hl-2270dw-enable-toner-continue-mode/brother-hl-2270dw-series_2012-12-20_11-15-21/" rel="attachment wp-att-359"><img class="aligncenter size-full wp-image-359" alt="Brother HL-2270DW - Replace Toner" src="http://digitalcardboard.com/blog/wp-content/uploads/2012/12/Brother-HL-2270DW-series_2012-12-20_11-15-21.png" width="293" height="128" /></a></p>
<blockquote><p><strong>Important Note (12/20/2012):</strong> I just caught my error and updated the screenshot and post, but there&#8217;s a difference between the <strong>Continue Mode</strong> on the settings screen and the <strong>Replace Toner</strong> option. I think the Continue Mode will toggle the printer for recovering from a printer error, for example, after you unjam the printer. <strong>Replace Toner</strong> is the option you want to set, and isn&#8217;t available on all Brother printers. It&#8217;s super confusing because they call them the same thing&#8230;</p></blockquote>
<p>I&#8217;ve found that after changing toner cartridges, this mode will often be reset, so you&#8217;ll need to remember to change it back when swapping cartridges.</p>
<p>The other method to set this is useful if your printer is in USB mode, directly connected to a computer. I just found out about this today. To quote <a href="http://welcome.solutions.brother.com/BSC/public/us/us/en/faq/faq/000000/002800/000028/faq002828_001.html?reg=us&amp;c=us&amp;lang=en&amp;prod=hl2270dw_all" target="_blank">Brother&#8217;s FAQ</a>:</p>
<blockquote><p><strong>To enable Continue Mode</strong>, please follow the steps below:</p>
<p>Press the <strong>GO</strong> button 7 times (quickly). All of the LEDs should flash twice, and the Ready LED should turn on. Continue mode is now enabled.</p>
<p><strong>To disable Continue Mode</strong>, please follow the steps below:</p>
<p>Press the <strong>GO</strong> button 7 times (quickly). All of the LEDs should flash once. Continue mode is now disabled.</p></blockquote>
<p>I would assume this would also work for a networked printer, but it&#8217;s nice to know that this can also be set for a standalone one. There&#8217;s no setting in the driver to adjust this option, so here&#8217;s how to do it.</p>
<h3>For more information:</h3>
<ul>
<li><a href="http://welcome.solutions.brother.com/BSC/public/us/us/en/faq/faq/000000/002800/000028/faq002828_001.html?reg=us&amp;c=us&amp;lang=en&amp;prod=hl2270dw_all" target="_blank">Brother Solution Center - What is Toner Continue Mode?</a></li>
</ul>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/kdNpwUcEuys" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/12/07/extend-toner-brother-hl-2270dw-enable-toner-continue-mode/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/12/07/extend-toner-brother-hl-2270dw-enable-toner-continue-mode/</feedburner:origLink></item>
		<item>
		<title>The Journey From MyFax to MetroFax</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/FWEo3MTHNjY/</link>
		<comments>http://digitalcardboard.com/blog/2012/09/14/the-journey-from-myfax-to-metrofax/#comments</comments>
		<pubDate>Fri, 14 Sep 2012 17:45:24 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[fax]]></category>
		<category><![CDATA[metrofax]]></category>
		<category><![CDATA[myfax]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=332</guid>
		<description><![CDATA[(edited 2012/09/20 to add some important caveats) I’ve already established that MyFax is slowly going down the tubes. The following chronicles my experience switching to a new service. After some research, I settled on MetroFax as my new internet faxing provider. They’re based just a few hours away from me in the beautiful Pacific Northwest, [...]]]></description>
				<content:encoded><![CDATA[<p><em>(edited 2012/09/20 to add some important caveats)</em></p>
<p>I’ve already established that <a href="http://digitalcardboard.com/blog/2011/08/22/j2-global-protus-myfax-support-you-suck/" target="_blank">MyFax is slowly going down the tubes</a>. The following chronicles my experience switching to a new service.</p>
<p>After some research, I settled on <a href="http://www.metrofax.com" target="_blank"><strong>MetroFax</strong></a> as my new internet faxing provider. They’re based just a few hours away from me in the beautiful Pacific Northwest, and don’t appear to be attached to any large corporate conglomerate of faxing companies. They’re a little cheaper too, which I can’t complain about.</p>
<p>Now, here’s the important thing to note: <strong>MetroFax doesn’t allow porting from MyFax numbers, because I believe they’ve historically had problems with MyFax releasing numbers.</strong> Go figure. They must’ve been burned pretty hard to not even bother trying anymore.</p>
<p>So how do you get to MetroFax without losing your number? The answer is <a href="http://www.numbergarage.com/" target="_blank"><strong>NumberGarage</strong></a>.</p>
<h3>An Important Caveat</h3>
<p>As <a href="http://digitalcardboard.com/blog/2012/09/14/the-journey-from-myfax-to-metrofax/#comment-57429">mentioned in the comments</a>, <strong>you can only port a number out of MyFax that you originally ported in</strong>. <a href="http://www.myfax.com/legal/terms.aspx#19" target="_blank">Section 19 of the MyFax terms</a> goes into the particulars on this, but essentially when signing up for their service they do not provide you with permanent access to the phone number if they assign it to you, and retain the right to take that number back and charge you money if you try to port it away.</p>
<p><a href="http://www.metrofax.com/terms-of-service" target="_blank">MetroFax has a similar stipulation</a> (see <em>Limited License To Use; Limitation of Transfer Rights</em>), so as much as I&#8217;ve been pleased with their service, this is something to keep in mind.</p>
<p>FaxLogic <strong>will</strong> actually allow you to port a number out that they&#8217;ve assigned to you, so if you don&#8217;t already have a faxing service and are thinking about starting out, this is a good option to consider.</p>
<p><em>(So no warranties here. Consider this an educational example of a possible process. I&#8217;m not liable if your experience is different that what&#8217;s documented here.)</em></p>
<h3>Porting from MyFax to NumberGarage</h3>
<p>Signup is painfully simple. Your account number is your fax number, after which you provide some contact information and carrier transfer info. There’s a $29.95 charge for the initial port, but for me that was better than losing the number or staying with MyFax.</p>
<p>You’ll also setup whether you want to park or forward your number. If you want interrupted faxing service, start up a trial account with MetroFax, and then set up forwarding in NumberGarage to forward to the number they assign you during the trial.</p>
<p>Providing a bill is the last step, and it’s a little tricky, as MyFax doesn’t provide you with a bill that shows your phone number. I ended up printing the bill, then taking a few screenshots highlighting my account number and phone number for verification, then zipping it all together and sending it as proof.</p>
<p><a href="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/MyFaxCentral-User-Administration-Main-Page-Google-Chrome_2012-08-21_13-49-51-obfuscated.png"><img style="background-image: none; margin: 0px 0px 18px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="MyFaxCentral-User Administration Main Page - Google Chrome_2012-08-21_13-49-51-obfuscated" src="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/MyFaxCentral-User-Administration-Main-Page-Google-Chrome_2012-08-21_13-49-51-obfuscated_thumb.png" alt="MyFaxCentral-User Administration Main Page - Google Chrome_2012-08-21_13-49-51-obfuscated" width="644" height="466" border="0" /></a><a href="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/MyFaxCentral-User-Profile-Administration-Google-Chrome_2012-08-21_13-50-37-obfuscated.png"><img style="background-image: none; margin: 0px 0px 18px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="MyFaxCentral-User Profile Administration - Google Chrome_2012-08-21_13-50-37-obfuscated" src="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/MyFaxCentral-User-Profile-Administration-Google-Chrome_2012-08-21_13-50-37-obfuscated_thumb.png" alt="MyFaxCentral-User Profile Administration - Google Chrome_2012-08-21_13-50-37-obfuscated" width="613" height="484" border="0" /></a></p>
<p>You’ll receive an email after they confirm the port request, followed by a estimated porting date.</p>
<p><a href="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/NumberGarage_before.png"><img style="background-image: none; margin: 0px 0px 18px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="NumberGarage_before" src="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/NumberGarage_before_thumb.png" alt="NumberGarage_before" width="644" height="376" border="0" /></a></p>
<p>Then you wait. And a few days later, success!</p>
<p><a href="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/NumberGarage_after.png"><img style="background-image: none; margin: 0px 0px 18px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border-width: 0px;" title="NumberGarage_after" src="http://digitalcardboard.com/blog/wp-content/uploads/2012/09/NumberGarage_after_thumb.png" alt="NumberGarage_after" width="1028" height="331" border="0" /></a></p>
<h3>Porting from NumberGarage to MetroFax</h3>
<p>The process here is about as easy as the first port. Make sure you’ve converted from the trial to a full plan, then <a href="http://www.metrofax.com/small-business/porting" target="_blank">contact MetroFax’s porting department</a>, and they’ll send you over a Letter of Agency/Authorization (LOA) document to fill out. NumberGarage gives you a PDF bill the instant you sign up for their service, so attach that to the email with the signed LOA, and that’s all you need! Note that there’s another porting fee here, but it’s the price of doing business, I guess.</p>
<p>MetroFax will confirm with you that you want to replace your temporary number with the ported one, and then you wait.</p>
<p>A few short days later, you’ll be greeted with a welcome email with your ported number, and you’re done!</p>
<h3>Cleanup and Final Thoughts</h3>
<p>Be sure to cancel your MyFax and NumberGarage services at this point, or they will both probably gladly keep charging your card for services you no longer need. You could probably cancel MyFax immediately after porting out to NumberGarage, but I figure waiting until the whole process is completed is a little safer.</p>
<p>Prior to finding out about NumberGarage, I did another port from MyFax to MetroFax through a VOIP provider, and while it worked just fine, the process was much more convoluted than using NumberGarage. I also considered having our phone provider handle the port. NumberGarage just worked, and was easy to use.</p>
<p>Let met know in the comments if you find another service that works for you, or if MetroFax is ever able to start porting directly from MyFax.</p>
<p>Good luck porting!</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/FWEo3MTHNjY" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/09/14/the-journey-from-myfax-to-metrofax/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/09/14/the-journey-from-myfax-to-metrofax/</feedburner:origLink></item>
		<item>
		<title>Gmvault: gmail backup (Ubuntu install and setup)</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/o5AxJ8Izi8c/</link>
		<comments>http://digitalcardboard.com/blog/2012/05/25/gmvault-gmail-backup-ubuntu-install-and-setup/#comments</comments>
		<pubDate>Fri, 25 May 2012 22:00:44 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[Gmail]]></category>
		<category><![CDATA[gmvault]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[sync]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=305</guid>
		<description><![CDATA[(edit 8/20/2012: Originally written for v1.5, this has been tested and works fine as of Gmvault v1.7-beta, so just change things accordingly and install away! I&#8217;ve updated the links below.) I’ve been using getmail for over a year to backup my Gmail account. As far as I know, it’s been working, but it just grabs email [...]]]></description>
				<content:encoded><![CDATA[<p><em>(edit 8/20/2012: Originally written for v1.5, this has been tested and works fine as of <strong>Gmvault v1.7-beta</strong>, so just change things accordingly and install away! I&#8217;ve updated the links below.)</em></p>
<p>I’ve been using <a href="http://pyropus.ca/software/getmail/" target="_blank"><strong>getmail</strong></a> for over a year to backup my Gmail account. As far as I know, it’s been working, but it just grabs email over POP, dumps them into an mbox file, and that’s that. It’s a fairly basic procedure, but since it just blindly downloads emails, getmail doesn’t account for ones I’ve deleted, and I don’t know if it keeps any label information.</p>
<p>So along comes <a href="http://gmvault.org" target="_blank"><strong>Gmvault</strong></a>, the new kid on the block with fancy restore features and multiple OS capability. Let’s give it a shot.</p>
<p>Python should be installed on a default Ubuntu machine, but let’s install a few other pre-requisites as well. I&#8217;m using Ubuntu 12.04 LTS (Precise Pangolin).</p>
<p><code>sudo apt-get install python python-setuptools<br />
sudo easy_install -U distribute</code></p>
<p>Then download the source package for Gmvault:</p>
<p><code>wget <a href="https://github.com/downloads/gaubert/gmvault/gmvault-v1.7-beta-src.tar.gz" target="_blank">https://github.com/downloads/gaubert/gmvault/gmvault-v1.7-beta-src.tar.gz</a></code></p>
<p>Unpack it:</p>
<p><code>tar xvzf gmvault-1.7-beta-src.tar.gz</code></p>
<p>Then install!</p>
<p><code>cd gmvault-1.7-beta/<br />
sudo python setup.py install</code></p>
<p>The basic setup is about as simple as it comes:</p>
<p><code>gmvault sync your_email@gmail.com</code></p>
<p>The setup process will take you through an authentication process with your email account.</p>
<p>Since I ran the install on an Ubuntu headless server, it loaded the text-based w3m browser, which I was able to login to my account, but then was unable to approve Gmvault to access my email. Pressing <em>‘q’</em> quits the browser and you’ll be presented with with an OAuth link you can copy into a normal browser and authorize Gmvault that way. (Note: you can <a href="https://accounts.google.com/b/0/IssuedAuthSubTokens?hl=en_US" target="_blank">manage what apps can access your Google Account at any time</a>)</p>
<p>Once Gmvault is given the okay, it’ll start churning away downloading emails. Give it a few minutes (or hours) to finish, and feel better knowing that your hoard of oh-so-important emails are now tucked away in yet another location.</p>
<p>There’s a few other parameters you can pass to the program, which will allow you to change the vault database location, provide a user/pass rather than the OAuth token, and to run custom synchronization of certain emails. Take a look at the <a href="http://gmvault.org/in_depth.html" target="_blank">in-depth documentation on Gmvault</a>.</p>
<p>After running the initial sync, you can run the following command to run a quick sync (only the last 2 months are scanned):</p>
<pre>gmvault sync --type quick your_email@gmail.com</pre>
<p>Restoration of emails appears to be straightforward (although I haven&#8217;t tried it) and emails are stored in month folders as individual <em>.eml.gz</em> and <em>.meta</em> files. The gzipping appears to be fairly efficient, as the Gmvault database reports to be about 2/3rds the reported size of my Gmail inbox. Not bad at all!</p>
<p>Also&#8211;for the sake of completeness, a few days after I wrote this I found out about <strong><a href="http://bagoma.sourceforge.net/" target="_blank">BaGoMa</a></strong>, which is another Python-based utility to backup your Gmail. Seems to follow a similar path as Gmvault, but I like Gmvault&#8217;s ability to use OAuth rather than have to provide my password each time.</p>
<p>So far, <strong><a href="http://gmvault.org/" target="_blank">Gmvault</a></strong> appears to have a simple and easy to use product that fits my needs. Good work!</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/o5AxJ8Izi8c" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/05/25/gmvault-gmail-backup-ubuntu-install-and-setup/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/05/25/gmvault-gmail-backup-ubuntu-install-and-setup/</feedburner:origLink></item>
		<item>
		<title>Ubuntu 12.04 + rkhunter 1.3.8 = false positives!</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/fHzbjnP8pwM/</link>
		<comments>http://digitalcardboard.com/blog/2012/05/24/ubuntu-12-04-rkhunter-1-3-8-false-positives/#comments</comments>
		<pubDate>Thu, 24 May 2012 16:56:28 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[System Administration]]></category>
		<category><![CDATA[fixes]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[patches]]></category>
		<category><![CDATA[rkhunter]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=296</guid>
		<description><![CDATA[rkhunter (Rootkit Hunter) is a wonderful tool to assist in securing your system, but it becomes much less helpful if it constantly reports false positives. After updating your rkhunter.conf file appropriately, you may still be left with the following error: Warning: Hidden file found: /dev/.initramfs: symbolic link to `/run/initramfs&#8217; This file can’t be whitelisted because [...]]]></description>
				<content:encoded><![CDATA[<p><a href="http://rkhunter.sourceforge.net/" target="_blank">rkhunter (Rootkit Hunter)</a> is a wonderful tool to assist in securing your system, but it becomes much less helpful if it constantly reports false positives.</p>
<p>After updating your rkhunter.conf file appropriately, you may still be left with the following error:</p>
<blockquote><p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"><strong>Warning: Hidden file found: /dev/.initramfs: symbolic link to `/run/initramfs&#8217;</strong></span></p></blockquote>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">This file can’t be whitelisted because it’s a symlink, and rkhunter 1.3.8 doesn’t check for this condition. The 1.4.0 release fixes this bug, but it’s not available from the Ubuntu repos. So you’ve got a few options.</span></p>
<ul>
<li><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Install rkhunter 1.4.0 manually.</span></li>
<li><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Download the rkhunter 1.4.0 tarball and extract the executable and conf file yourself</span></li>
<li><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Patch the rkhunter executable</span></li>
</ul>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">I opted to patch the rkhunter executable, which really amounted to adding a few lines (one actual test case line + a few comments). Follow along!</span></p>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Open up <strong>/usr/bin/rkhunter</strong> and move down to line 834. You should see the following:</span></p>
<script src="https://gist.github.com/2782605.js?file=rkhunter-before.sh"></script><noscript><pre><code class="language-shell shell">            #
            # Now test for the different file types.
            #

            if [ -f &quot;${FNAME}&quot; ]; then
                case &quot;${OPT_NAME}&quot; in
                ALLOWHIDDENDIR|TMPDIR|DBDIR|BINDIR|SCRIPTDIR|ROOTDIR|SSH_CONFIG_DIR|SUSPSCAN_DIRS|SUSPSCAN_TEMP)
                    ERRCODE=1
                    test $CONFIG_CHECK -eq 1 &amp;&amp; RET_CODE=1
                    echo &quot;Invalid ${OPT_NAME} configuration option: Not a directory: ${FNAME}&quot;
                    ;;
                esac
            elif [ -d &quot;${FNAME}&quot; ]; then
                case &quot;${OPT_NAME}&quot; in
                                                                                                                                                                                     WRITEWHITELIST|IMMUTWHITELIST|SCRIPTWHITELIST|ALLOWHIDDENFILE|LOGFILE|SYSLOG_CONFIG_FILE|INETD_CONF_PATH|XINETD_CONF_PATH|PASSWORD_FILE|RTKT_FILE_WHITELIST|OS_VERSION_FILE|IGNORE_PRELINK_DEP_ERR|WEBCMD|*_CMD)
                    ERRCODE=1
                    test $CONFIG_CHECK -eq 1 &amp;&amp; RET_CODE=1
                    echo &quot;Invalid ${OPT_NAME} configuration option: Not a file: ${FNAME}&quot;
                    ;;
                esac</code></pre></noscript>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Now, after line 846, you’ll want to add the following lines:</span></p>
<script src="https://gist.github.com/2782605.js?file=rkhunter-changes.sh"></script><noscript><pre><code class="language-shell shell">                #
                # For the ALLOWHIDDENFILE option we need to allow
                # a hidden symbolic link to a directory.
                #
                test &quot;${OPT_NAME}&quot; = &quot;ALLOWHIDDENFILE&quot; -a -h &quot;${FNAME}&quot; &amp;&amp; continue
</code></pre></noscript>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">So it looks like this:</span></p>
<script src="https://gist.github.com/2782605.js?file=rkhunter-after.sh"></script><noscript><pre><code class="language-shell shell">            #
            # Now test for the different file types.
            #

            if [ -f &quot;${FNAME}&quot; ]; then
                case &quot;${OPT_NAME}&quot; in
                ALLOWHIDDENDIR|TMPDIR|DBDIR|BINDIR|SCRIPTDIR|ROOTDIR|SSH_CONFIG_DIR|SUSPSCAN_DIRS|SUSPSCAN_TEMP)
                    ERRCODE=1
                    test $CONFIG_CHECK -eq 1 &amp;&amp; RET_CODE=1
                    echo &quot;Invalid ${OPT_NAME} configuration option: Not a directory: ${FNAME}&quot;
                    ;;
                esac
            elif [ -d &quot;${FNAME}&quot; ]; then
                #
                # For the ALLOWHIDDENFILE option we need to allow
                # a hidden symbolic link to a directory.
                #
                test &quot;${OPT_NAME}&quot; = &quot;ALLOWHIDDENFILE&quot; -a -h &quot;${FNAME}&quot; &amp;&amp; continue


                case &quot;${OPT_NAME}&quot; in
                                                                                                                                                                                     WRITEWHITELIST|IMMUTWHITELIST|SCRIPTWHITELIST|ALLOWHIDDENFILE|LOGFILE|SYSLOG_CONFIG_FILE|INETD_CONF_PATH|XINETD_CONF_PATH|PASSWORD_FILE|RTKT_FILE_WHITELIST|OS_VERSION_FILE|IGNORE_PRELINK_DEP_ERR|WEBCMD|*_CMD)
                    ERRCODE=1
                    test $CONFIG_CHECK -eq 1 &amp;&amp; RET_CODE=1
                    echo &quot;Invalid ${OPT_NAME} configuration option: Not a file: ${FNAME}&quot;
                    ;;
                esac</code></pre></noscript>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Save the file and then open up <strong>/etc/rkhunter.conf</strong> and add the following line:</span></p>
<p><code>ALLOWHIDDENFILE="/dev/.initramfs"</code></p>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Save, and finally, update the rkhunter properties:</span></p>
<p><code>sudo rkhunter –-propupd</code></p>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">There you go! There are a few other items that need to be whitelisted in the conf, but they should all work with the rkhunter 1.3.8, so it&#8217;s just a matter of updating the file accordingly.</span></p>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Thanks to <a href="https://launchpad.net/~reinhold" target="_blank">reinhold</a> and <a href="https://launchpad.net/~timmillerdyck" target="_blank">Tim Miller Dyck</a> for the patch implementation information and <a href="http://sourceforge.net/users/unspawn" target="_blank">unSpawn</a> for the actual patch. Here’s hoping to see an actual backport fix into the Ubuntu repos.</span></p>
<h3>More information:</h3>
<ul>
<li><a href="https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/883324" target="_blank">False positive: Hidden file (symbolic link to directory) cannot be white-listed</a></li>
<li><a href="http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/rkhunter?r1=1.405&amp;r2=1.406&amp;sortby=date&amp;diff_format=h" target="_blank">SCM Repositories &#8211; rkhunter &#8211; revision 1.406 diff</a></li>
</ul>
<p><span style="widows: 2; text-transform: none; text-indent: 0px; letter-spacing: normal; display: inline !important; font: 13px arial, sans-serif; white-space: normal; orphans: 2; float: none; color: #222222; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"> </span></p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/fHzbjnP8pwM" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/05/24/ubuntu-12-04-rkhunter-1-3-8-false-positives/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/05/24/ubuntu-12-04-rkhunter-1-3-8-false-positives/</feedburner:origLink></item>
		<item>
		<title>Synergy and Text Expansion Programs on Windows 7? Don’t run as admin.</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/99Dz9gLo_2g/</link>
		<comments>http://digitalcardboard.com/blog/2012/05/18/synergy-and-text-expansion-programs-on-windows-7-dont-run-as-admin/#comments</comments>
		<pubDate>Fri, 18 May 2012 17:59:46 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Lifehacks]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[autohotkey]]></category>
		<category><![CDATA[phraseexpress]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[synergy]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=288</guid>
		<description><![CDATA[Synergy is great. And text expansion/replacement tools are great (ie, PhraseExpress or AutoHotKey). And Windows 7…well I guess it’s alright as well. Synergy lets me share my mouse and keyboard between my Windows desktop, my Macbook, and even a linux machine (if I still ran one at work). It even synchronizes the clipboard betweeen screens. [...]]]></description>
				<content:encoded><![CDATA[<p><a href="http://synergy-foss.org/" target="_blank">Synergy</a> is great. And text expansion/replacement tools are great (ie, <a href="http://www.phraseexpress.com/" target="_blank">PhraseExpress</a> or <a href="http://www.autohotkey.com/" target="_blank">AutoHotKey</a>). And Windows 7…well I guess it’s alright as well.</p>
<blockquote><p><strong>Synergy</strong> lets me share my mouse and keyboard between my Windows desktop, my Macbook, and even a linux machine (if I still ran one at work). It even synchronizes the clipboard betweeen screens. Great stuff.</p>
<p><strong>PhraseExpress</strong> is my current favorite text expansion tool. I use it to insert my signature into emails and other places where I might repeatedly type something. And it’s free for personal use. I’d use TextExpander on my Mac, but I’m cheap.</p></blockquote>
<p>Now here’s the problem: <strong>if you run Synergy (either 1.3.8 stable or 1.4.8 beta at the time of this writing) and install it to autostart on login, your text expansion tool will problem not work.  </strong>So just run it manually after you login, and you&#8217;ll be okay. The autostart process for Synergy requires administrative rights, and seems to interfere with the hooks that the text expansion tools need to work.</p>
<p>After switching to a new workstation, I installed my necessary programs including the ones listed above, and noticed that PhraseExpress didn’t work. I thought it was a problem with that specific program. I tried uninstalling and reinstalling and updating, and even tried AutoHotKey for a bit (which is great, but it’s</p>
<p>Until I come up with something smarter, I’ll just start Synergy manually when I restart my computer. That’s not the end of the world, and at least PhraseExpress will work.</p>
<p>So beware. Two great programs, but don’t run them as admin.</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/99Dz9gLo_2g" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/05/18/synergy-and-text-expansion-programs-on-windows-7-dont-run-as-admin/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/05/18/synergy-and-text-expansion-programs-on-windows-7-dont-run-as-admin/</feedburner:origLink></item>
		<item>
		<title>Upgrading to NConf 1.3.0 on Ubuntu 11.10 Oneiric Ocelot</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/phvN6jI66IA/</link>
		<comments>http://digitalcardboard.com/blog/2012/01/29/upgrading-to-nconf-1-3-0-on-ubuntu-11-10-oneiric-ocelot/#comments</comments>
		<pubDate>Sun, 29 Jan 2012 22:36:34 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[Nagios]]></category>
		<category><![CDATA[NConf]]></category>
		<category><![CDATA[sysadmins]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[upgrade]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=265</guid>
		<description><![CDATA[Congrats to the NConf crew for reaching the 1.3.0 milestone! Two years in the making, but I&#8217;m excited to see the project continuing to move forward. It&#8217;s been over a year since I originally installed and configured Nagios and NConf 1.2.6 on my Lucid Lynx server. In the meantime, I&#8217;ve upgraded the hardware and moved [...]]]></description>
				<content:encoded><![CDATA[<p>Congrats to the NConf crew for reaching the 1.3.0 milestone! Two years in the making, but I&#8217;m excited to see the project continuing to move forward.</p>
<p>It&#8217;s been over a year since I originally <a title="Nagios and NConf on Ubuntu 10.04 Lucid Lynx" href="http://digitalcardboard.com/blog/2010/08/24/nagios-and-nconf-on-ubuntu-10-04-lucid-lynx/" target="_blank">installed and configured Nagios and NConf 1.2.6 on my Lucid Lynx server</a>. In the meantime, I&#8217;ve upgraded the hardware and moved to Ubuntu 11.10 Oneiric Ocelot, mostly to keep up with the current releases. Not a whole lot has changed for what I use this server for, but keeping up with the Nagios releases in the repos has been convenient.</p>
<p>If you&#8217;re following along with this guide but starting fresh with Nagios and Nconf, you&#8217;ll probably want to <a title="Nagios and NConf on Ubuntu 10.04 Lucid Lynx" href="http://digitalcardboard.com/blog/2010/08/24/nagios-and-nconf-on-ubuntu-10-04-lucid-lynx/" target="_blank">take a look at my previous guide</a> and the <a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:help:documentation:start:installation" target="_blank">NConf installation documentation</a> to get some background information. I&#8217;ll try to provide some notes for those of you doing a fresh install, but since I&#8217;m just upgrading, I can&#8217;t make any promises.</p>
<h2>Backups!</h2>
<p>Log into your server and make them backups!</p>
<pre>sudo cp -rp /var/www/nconf /var/www/nconf.bak
mysqldump -u root -p nconf &gt; ~/nconf_sql.bak</pre>
<p>I also backed up my Nagios configs</p>
<pre>sudo cp -rp /etc/nagios3 /etc/nagios3.bak</pre>
<h2>Download and Unpack</h2>
<p>Wget or otherwise <a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:download:main" target="_blank">download the latest version on Nconf</a>. Wget has that issue with following SourceForge links so you may need to rename the file.</p>
<p>Unpack the files and then copy them to where you installed NConf before, or do it all in one step:</p>
<pre>sudo tar xzvf nconf-1.3.0-0.tgz -C /var/www</pre>
<p>Then fix the permissions for the NConf folder, setting them back to your apache user:</p>
<pre>sudo chown -R www-data:www-data /var/www/nconf</pre>
<h2>Upgrade</h2>
<p>Browse to <em>http://&lt;yourserver&gt;/nconf/UPDATE.php</em></p>
<p>Follow the prompts to proceed with the interactive update. <a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:help:documentation:start:update#begin_interactive_update" target="_blank">NConf&#8217;s documentation on the update process</a> has screenshots that I won&#8217;t repost here.</p>
<p>After the upgrade, you&#8217;ll need to remove some files and folders. Browse to your NConf folder and nuke them. I also had to remove the <em>call_ajax.php</em> file, which wasn&#8217;t in the original documentation.</p>
<pre>cd /var/www/nconf
sudo rm -rf INSTALL/ UPDATE/ INSTALL.php UPDATE.php call_ajax.php</pre>
<p>There&#8217;s been a few changes/additions to the NConf conf file, so open up <em>config/nconf.php</em> and add the following lines:</p>
<pre>define('CHECK_UPDATE', 1);
define("DEBUG_GENERATE", 3); # [1=ERROR|2=WARN|3=INFO|4=DEBUG|5=TRACE]
define('CHECK_STATIC_SYNTAX', 1);</pre>
<p>Also, set the <em>ALLOW_DEPLOYMENT</em> variable to 1 to enable deploying configs directly from NConf and comment out the other <em>CONF_DEPLOY_</em> variables, as they aren&#8217;t used anymore.</p>
<pre>define('ALLOW_DEPLOYMENT', 1);
#define('CONF_DEPLOY_URL', "https://webserver.mydomain.com/incoming_config.php");
#define('CONF_DEPLOY_USER', "deployUser");
#define('CONF_DEPLOY_PWD', "deployPass");</pre>
<p>At this point, you should be able to log into NConf 1.3.0 and look around.</p>
<h2>Migrating Deployment</h2>
<p>With NConf 1.2.6, I used the <em>ADD-ONS/deploy_local.sh</em> script and a cron job to deploy configuration changes to Nagios. In 1.3.0, they&#8217;ve integrated this a little better into the core of the application, but it required some adjustment in my setup.</p>
<p>Start off by coping the deployment.ini sample configuration file to the config folder:</p>
<pre>sudo cp /var/www/nconf/config.orig/deployment.ini /var/www/nconf/config/deployment.ini</pre>
<p>Open up the <em>config/deployment.ini</em> file, uncomment the <em>LOCAL deployment</em> section <strong>except</strong> for the <em>[copy nagios.cfg]</em> section and change the <em>target_file</em> variables to reference the <em>nagios3</em> folder where Ubuntu places the config files.</p>
<p>Also, add the reload command <em>(sudo /etc/init.d/nagios3 reload)</em> at the bottom of the <em>[copy global config]</em> section. When you&#8217;re done the file will look similar to the following:</p>
<pre>;; LOCAL deployment ;;

[extract config]
type = local
source_file = "/var/www/nconf/output/NagiosConfig.tgz"
target_file = "/tmp/"
action = extract

[copy collector config]
type = local
source_file = "/tmp/Default_collector/"
;target_file = "/etc/nagios/Default_collector/"
target_file = "/etc/nagios3/Default_collector/"
action = copy

[copy global config]
type = local
source_file = "/tmp/global/"
;target_file = "/etc/nagios/global/"
target_file = "/etc/nagios3/global/"
action = copy
; *** add the line below
reload_command = "sudo /etc/init.d/nagios3 reload"</pre>
<pre>; *** keep this section and the rest of the file commented out
;[copy nagios.cfg]
;type = local
;source_file = "/tmp/static_cfg/nagios.cfg"
;target_file = "/etc/nagios/nagios.cfg"
;action = copy
;reload_command = "sudo /etc/rc.d/init.d/nagios reload"</pre>
<p>This process replaces the deploy_local.sh script, but we&#8217;ll need to allow the web user to issue the Nagios reload. To do that, we need to modify the <em>sudoers</em> file:</p>
<pre>sudo visudo</pre>
<p>Then add the following lines:</p>
<pre># Allow www-data (apache) user to reload nagios
www-data ALL=NOPASSWD: /etc/init.d/nagios3 reload</pre>
<p>Save and quit.</p>
<p>Finally, remove the entry in the root crontab entry that launched the old deploy script:</p>
<pre>sudo crontab -e</pre>
<p>And remove the line reading:</p>
<pre>* * * * * /var/www/nconf/ADD-ONS/deploy_local.sh</pre>
<h2>Deployment Testing and Cleanup</h2>
<p>Let&#8217;s make sure the new deployment procedure works. Back in the NConf GUI, click <em>Generate Nagios config</em>. You should hopefully see something like:</p>
<pre>[INFO]  Starting generate_config script
[INFO]  Generating global config files
[INFO]  Generating config for Nagios-collector 'Default Nagios'
[INFO]  Ended generate_config script</pre>
<p>If the config files generate successfully, you&#8217;ll see a button aptly labeled <em>&#8216;Deploy&#8217;</em>.</p>
<p>Click <em>Deploy, </em>and with any luck you&#8217;ll be presented with three OK messages in NConf  and your Nagios Event Log should show a SIGHUP message.</p>
<p>Relax, and enjoy some JQuerified NConf 1.3.0 goodness! Gold star!</p>
<p>I did notice that the original deployment method left a bunch of old config tgz bundles, so if you&#8217;re feeling like cleaning those up, just remove the whole lot:</p>
<pre>sudo rm /var/www/nconf/output/NagiosConfig.tgz.*</pre>
<p><strong>Update (6/25/12):</strong> You&#8217;ll want to remove the <strong>extended_host_info.cfg</strong> and <strong>extended_service_info.cfg</strong> files from your target config directory <em>(/etc/nagios3/Default_collector/)</em>, or you might get weird problems trying to deploy later on. I just found this out six months later.</p>
<h2>Troubleshooting Notes</h2>
<ul>
<li>The biggest problems I had were just remembering to reference <em>nagios3</em> rather than <em>nagios</em> for paths and commands.  Make sure you reference the correct locations. This caused me all sorts of weird grief with the <em>sudoers</em> file, and I didn&#8217;t catch it until later.</li>
<li>While NConf will run without the additional variables in <em>config/nconf.php</em>, it&#8217;ll log warnings until you add them.</li>
<li>I had to remove an extra file <em>(call_ajax.php)</em> before NConf would run. The file has been replaced with <em>call_file.php</em> which apparently fixes a security issue. At the time of this writing, removing this file wasn&#8217;t in the docs, but it complains until you nuke it.</li>
</ul>
<h2>Fresh Install of Nagios and NConf</h2>
<p>From what I can tell, you can follow all the steps in my <a title="Nagios and NConf on Ubuntu 10.04 Lucid Lynx" href="http://digitalcardboard.com/blog/2010/08/24/nagios-and-nconf-on-ubuntu-10-04-lucid-lynx/" target="_blank">old guide</a> for installing 1.3.0 up until you get to<em> Configuring NConf to Deploy Nagios Configurations Automatically</em>. At that point, follow the <em>Migrating Deployment</em> instructions from this guide.</p>
<p>Please leave a comment and let me know if you do a fresh install. I&#8217;d be curious to know how it works for you.</p>
<h2>More Information</h2>
<ul>
<li><a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:help:documentation:start:installation" target="_blank">Installation Guide</a></li>
<li><a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:help:documentation:start:update" target="_blank">Upgrade Guide</a></li>
<li><a href="http://www.nconf.org/dokuwiki/doku.php?id=nconf:help:documentation:modules:deployment:main" target="_blank">Deployment</a></li>
</ul>
<p><em> (edit 6/25/12 to add additional file cleanup instructions)</em></p>
<p>&nbsp;</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/phvN6jI66IA" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2012/01/29/upgrading-to-nconf-1-3-0-on-ubuntu-11-10-oneiric-ocelot/feed/</wfw:commentRss>
		<slash:comments>13</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2012/01/29/upgrading-to-nconf-1-3-0-on-ubuntu-11-10-oneiric-ocelot/</feedburner:origLink></item>
		<item>
		<title>Rain-X Makes Ice and Snow Scraping Easier!</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/AShtGHA2tU8/</link>
		<comments>http://digitalcardboard.com/blog/2011/12/01/rain-x-makes-ice-and-snow-scraping-easier/#comments</comments>
		<pubDate>Fri, 02 Dec 2011 05:59:20 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Lifehacks]]></category>
		<category><![CDATA[automobile]]></category>
		<category><![CDATA[car]]></category>
		<category><![CDATA[frost]]></category>
		<category><![CDATA[lifehacks]]></category>
		<category><![CDATA[rain-x]]></category>
		<category><![CDATA[winter]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=259</guid>
		<description><![CDATA[So this was a pleasantly random but surprising find: Applying Rain-X to your windshield during the fall and winter months will make scraping snow and ice much easier! Rain-X, for the uninformed, is the mystery window treatment that makes water bead up on the windshield, and will virtually slide up and off the windshield when [...]]]></description>
				<content:encoded><![CDATA[<p>So this was a pleasantly random but surprising find:</p>
<p><strong>Applying Rain-X to your windshield during the fall and winter months will make scraping snow and ice much easier!</strong></p>
<p>Rain-X, for the uninformed, is the mystery window treatment that makes water bead up on the windshield, and will virtually slide up and off the windshield when driving 35+ mph. Apply it during the afternoon during a dry fall or winter day, preferably after cleaning the windshield. Be sure to treat the rear window, your side windows (at least the front ones) and don&#8217;t forget the side mirrors.</p>
<p>If you&#8217;d like to really see what a difference it makes, don&#8217;t treat the back side windows. Then just wait for a frosty morning.</p>
<p>On a related note, buy yourself a <a href="http://www.amazon.com/CJ-Industries-F101-Fantastic-Scraper/dp/B000FW4LT4" target="_blank">Fantastic Ice Scraper</a>. $2 for a great scraper with a brass blade. If you want more info, see the <a href="http://www.kk.org/cooltools/archives/004830.php" target="_blank">Cool Tools review</a>. Buy them as stocking stuffers for your family!</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/AShtGHA2tU8" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2011/12/01/rain-x-makes-ice-and-snow-scraping-easier/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2011/12/01/rain-x-makes-ice-and-snow-scraping-easier/</feedburner:origLink></item>
		<item>
		<title>vBulletin 4.1.7 Mobile Style Giving You Grief?</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/B-0PfRKH3v4/</link>
		<comments>http://digitalcardboard.com/blog/2011/10/07/vbulletin-4-1-7-mobile-style-giving-you-grief/#comments</comments>
		<pubDate>Fri, 07 Oct 2011 16:22:09 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[System Administration]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[forum]]></category>
		<category><![CDATA[mobile]]></category>
		<category><![CDATA[theme]]></category>
		<category><![CDATA[upgrade]]></category>
		<category><![CDATA[vbulletin]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=253</guid>
		<description><![CDATA[I upgraded a forum to vBulletin 4.1.7 last night. Pretty straightforward stuff, only the mobile style that they half-introduced back in 4.1.2 or somewhere along the lines has been a little glitchy.  4.1.6  reintroduced the mobile style, but I blinked and 4.1.7 was released. I ended up deleting the mobile style and reimporting it from [...]]]></description>
				<content:encoded><![CDATA[<p>I upgraded a forum to vBulletin 4.1.7 last night. Pretty straightforward stuff, only the mobile style that they half-introduced back in 4.1.2 or somewhere along the lines has been a little glitchy.  4.1.6  reintroduced the mobile style, but I blinked and 4.1.7 was released.</p>
<p>I ended up deleting the mobile style and reimporting it from scratch (see <a href="https://www.vbulletin.com/docs/html/styles_mobile_install" target="_blank">Installing the vBulletin Mobile Style</a> from their manual) but the grid menu button didn&#8217;t seem to work. The grid menu is where they&#8217;ve put notifications, messages, what&#8217;s new, etc. in the mobile style. In particular, I had some users ask where the <em>What&#8217;s New</em> feature was in the mobile style, and that&#8217;s finally been added, so it was important to get the grid menu working.</p>
<p>Here&#8217;s what I found.</p>
<div id="attachment_254" class="wp-caption aligncenter" style="width: 310px"><a href="http://digitalcardboard.com/blog/wp-content/uploads/2011/10/vbulletin_mobile_grid_menu_fix.png"><img class="size-medium wp-image-254 " title="vbulletin_mobile_grid_menu_fix" src="http://digitalcardboard.com/blog/wp-content/uploads/2011/10/vbulletin_mobile_grid_menu_fix-300x182.png" alt="vBulletin Mobile Style Grid Menu Fix" width="300" height="182" /></a><p class="wp-caption-text">Set the Default Mobile Style for Modern Browsers to your Mobile style</p></div>
<p>Under <strong>Settings -&gt; Options -&gt; Style &amp; Language Settings</strong>, make sure to set the <em>Default Mobile Style for Modern Browsers</em> to your <em>Mobile</em> style. I went ahead and set as the default for Old Mobile Browsers as well, since I don&#8217;t know what the difference is.</p>
<p>And voila!</p>
<p>That is all.</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/B-0PfRKH3v4" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2011/10/07/vbulletin-4-1-7-mobile-style-giving-you-grief/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2011/10/07/vbulletin-4-1-7-mobile-style-giving-you-grief/</feedburner:origLink></item>
		<item>
		<title>MyFax Support, You Suck</title>
		<link>http://feedproxy.google.com/~r/digitalcardboard/~3/SCN5T_PkRsk/</link>
		<comments>http://digitalcardboard.com/blog/2011/08/22/j2-global-protus-myfax-support-you-suck/#comments</comments>
		<pubDate>Mon, 22 Aug 2011 18:40:26 +0000</pubDate>
		<dc:creator>Jason Navarrete</dc:creator>
				<category><![CDATA[Software]]></category>
		<category><![CDATA[customer support]]></category>
		<category><![CDATA[Fail]]></category>
		<category><![CDATA[fax]]></category>
		<category><![CDATA[j2 global communications]]></category>
		<category><![CDATA[myfax]]></category>
		<category><![CDATA[protus]]></category>
		<category><![CDATA[support]]></category>

		<guid isPermaLink="false">http://digitalcardboard.com/blog/?p=221</guid>
		<description><![CDATA[tl;dr MyFax Support sucks. Getting &#8216;Mydll_NT: Error in function: dAddPortMonitor, Error code: 126.&#8217; installing the Print-to-Fax Assistant? Run msiexec /i myfaxassistantsetup.msi /q and install in silent mode. Dear j2 Global Communications/Protus/MyFax: Please remind your company to care about their software and the people that use it. In particular, you need to provide support for the [...]]]></description>
				<content:encoded><![CDATA[<p><strong>tl;dr</strong> MyFax Support sucks. Getting <em>&#8216;Mydll_NT: Error in function: dAddPortMonitor, Error code: 126.&#8217;</em> installing the Print-to-Fax Assistant? Run <code>msiexec /i myfaxassistantsetup.msi /q</code> and install in silent mode.</p>
<p><em>Dear j2 Global Communications/Protus/MyFax:</em></p>
<p><strong>Please remind your company to care about their software and the people that use it. In particular, you need to provide support for the <em>installation</em> of your products. Telling someone you won&#8217;t support your own product until it&#8217;s installed is ridiculous and asinine.</strong></p>
<h2>What Went Wrong: Installing Print-to-Fax Assistant</h2>
<p>A few days I attempted to install the MyFax Print-to-Fax Assistant on a fresh-out-of-the-box Dell workstation running Windows 7  Professional 32-bit SP1. Nothing out of the ordinary installed on this system. It&#8217;s joined to a domain and I&#8217;m running the install as myself, a user with administrative rights on the local machine.</p>
<p>I accept the EULA and all the defaults to get the install on its merry way, and I receive the following error:</p>
<div id="attachment_222" class="wp-caption aligncenter" style="width: 310px"><a href="http://digitalcardboard.com/blog/wp-content/uploads/2011/07/myfax_error.png"><img class="size-medium wp-image-222" title="MyFax Print-To-Fax Assistant Installation Error" src="http://digitalcardboard.com/blog/wp-content/uploads/2011/07/myfax_error-300x245.png" alt="MyFax Print-To-Fax Assistant Installation Error" width="300" height="245" /></a><p class="wp-caption-text">Mydll_NT: Error in function: dAddPortMonitor, Error code: 126.</p></div>
<p>After that, the install failed and the MSI rolled back.</p>
<p>I tried a reboot and a few other normal troubleshooting tactics, and it all ended with the same error. I&#8217;ve got the Print-to-Fax driver installed on a Win 7 64-bit and another Win 7 32-bit install, as well as an XP box, so I know the thing works. Even tried downloading the installer again and comparison the checksum. Everything checked out, but it wouldn&#8217;t install. It&#8217;s not a particularly helpful error message, and there&#8217;s no information on any sort of manual installation process.</p>
<p><strong>To the Googles!</strong> Less than 150 results come back on a search for this particular error. Mostly from Black Ice Online Support, which leads me to suspect that they provided the lower level drivers that MyFax uses. Searching for this particular error specific to MyFax returns nothing.</p>
<h2>How Not To Help: MyFax Support</h2>
<h3><strong>MyFax Knowledgebase</strong></h3>
<p><strong></strong>Nothing there of any relevance. In fact, it looks like the latest I can find on any subject was last modified almost a year ago in June of 2010. <em>(Update: by the time I got around to finishing this article, I now see one new knowledgebase post from July 2011.)</em></p>
<h3>Online Chat Support</h3>
<p>So, it&#8217;s time to contact support. First, I try the online chat. Here&#8217;s where it gets interesting.</p>
<p>I&#8217;m told that:</p>
<ul>
<li>The Print-to-Fax driver is not compatible with Windows 7 (contrary to information on the MyFax site even showing 64-bit Win 7 compatibility)</li>
<li>The Print-to-Fax driver is one of the oldest plug-ins they have</li>
<li>That Blackberry, iPhone, and Android apps are out or in the making</li>
</ul>
<p><strong>None of which helps in the slightest to resolve my situation.</strong></p>
<p>It&#8217;s also suggested that I turn off my firewall (which it is), and then I&#8217;m given a couple of Google hits on the error, neither of which reference MyFax in any way.</p>
<p>Finally, I&#8217;m told that it&#8217;s not a MyFax error, and it&#8217;s the computer that&#8217;s giving me this error. <em>Oh really?</em> So the fact that I get this error when installing the MyFax product means nothing? How about uninstalling it and then reinstalling (except I NEVER GOT IT TO INSTALL IN THE FIRST PLACE!!!!!)? Blerg. Kthxbye.</p>
<h3>Phone Support</h3>
<p>Let&#8217;s see if a phone call nets anything more helpful. What follows is a highly paraphrased conversation.</p>
<p>I&#8217;m told by the Tier 1 tech that it&#8217;s a driver issue, and that I need to install the driver so that the Print-to-Fax assistant will work. And to try Google. Can I speak to a supervisor? Sure, he says, and puts me on hold.</p>
<blockquote><p>Me: &#8220;Hello Mr. Supervisor? I can&#8217;t install your program!&#8221;</p>
<p>Supervisor: &#8220;Well, Mr. Customer, the &#8216;dAddPortMonitor&#8217; error is a very common error. You need to install the Mydll_NT.dll in order to get our program to work.&#8221;</p>
<p><em>(Common? &#8216;dAddPortMonitor&#8217; returns less than 300 hits on a search engine. &#8216;Mydll_NT.dll&#8217; returns about 600)</em><br />
Me: &#8220;I can&#8217;t download Mydll_NT.dll, because it came with your software. I can&#8217;t install your software.&#8221;</p>
<p>Supervisor: &#8220;Oh, you can just go to Microsoft.com or Google and search for it and download it.&#8221;</p>
<p>Me: &#8220;Yeah, no, I can&#8217;t.&#8221;</p>
<p>Supervisor: &#8220;Well we cannot support the Print-to-Fax assistant until it&#8217;s installed at which point we can check settings remotely from our systems?&#8221;</p>
<p>Me: &#8220;So you&#8217;re telling me you sell a product that you don&#8217;t support? If I can&#8217;t get your product <em>installed</em>, I can&#8217;t use your product. What about those Blackberry, iPhone, and Android apps? You&#8217;re telling me if I can&#8217;t get them installed, that&#8217;s my own problem?&#8221;</p>
<p>Supervisor: &#8220;Basically, yes.&#8221;</p>
<p>Me: &#8220;Okay, we&#8217;re getting nowhere. If you have any play at all with anyone in management, customer support, marketing, or product development, tell them that SOMETHING IS MAJORLY WRONG HERE. *click*&#8221;</p></blockquote>
<h2>Finally, a Workaround</h2>
<p>I really shouldn&#8217;t have to do this, and MyFax support has given me nothing to go on, but I keep troubleshooting the issue. Running <em>msiexec.exe</em> with verbose logging options enabled, I discover that the TARGETDIR variable is ignoring the default path and is dumping all the files in the root folder. Changing the path doesn&#8217;t help, creating the path ahead of time doesn&#8217;t help, nor does copying the extracted files to the path in the middle of the install. Same error.</p>
<p>For kicks, I try a silent install:</p>
<pre>msiexec /i myfaxassistantsetup.msi /q</pre>
<p><strong>It works.</strong> Why? No idea. Do I really care at this point? Not really. I run a test fax through, and it works. Reboot, and it still works.</p>
<h2>What&#8217;s Still Wrong</h2>
<p>So I got the Print-to-Fax Assistant to install. Yay. However, I don&#8217;t think I&#8217;d be writing all this if the <strong>whole support experience wasn&#8217;t so terribly, utterly, horribly, bad.</strong></p>
<p>On one hand, MyFax and the whole internet faxing universe is really just an attempt to hold onto an antiquated technology that really should have been replaced by something better years ago, but amazingly, faxing still exists and Osama Bin Laden doesn&#8217;t. But that&#8217;s beside the point.</p>
<p>Here&#8217;s the thing: <strong>I pay for your software. </strong>Other people pay for your software too.</p>
<p>Granted, it&#8217;s not a lot of money every month, but it&#8217;s not like I&#8217;m mooching off free software. You&#8217;ve got a support page with numerous ways to contact you. But to tell me you won&#8217;t support me until I get the program installed&#8230;<strong>that&#8217;s just wrong. </strong>That&#8217;s like Dell telling me they can&#8217;t help me troubleshoot a brand new system that won&#8217;t boot up until I can get it turned on.</p>
<p><strong>The installation process is a critical part of the distribution of software.</strong> If your program can&#8217;t be installed, then people can&#8217;t use it, and then it&#8217;s worthless. Zero stars rating. Refund.</p>
<p>The least you could have done was taken a note of the issue, given me a ticket number, and then ignore me. At least then I would&#8217;ve thought (initially) that somebody cared.</p>
<h2>What Can Be Done</h2>
<p><strong>Start by fixing your Print-to-Fax Assistant installer.</strong></p>
<p>Windows 7 has been out for two years. Make your software compatible. Simple as that. I downloaded the 64-bit version the other day, and got the same error message on my own desktop, and fixed it by running it through a silent install as above. But that&#8217;s a poor workaround. I&#8217;ve now had this error on at least four separate machines, so it can&#8217;t be just a fluke.</p>
<p><strong>Next, figure yourself out as a company.</strong></p>
<p>With all your buyouts, I count at least five distinct faxing services you offer. I&#8217;m not going to bother to list them here, and frankly I don&#8217;t care about your other products, because I don&#8217;t use them. If you want, consolidate all these similar products into one and then <strong>focus on making that product better</strong>.</p>
<p><strong>Finally, beef up your support.</strong></p>
<p>Support is your first line when customers are having problems. If they can&#8217;t resolve simple issues because they&#8217;re uninformed of the solutions, then provide training. Make it better.</p>
<h2>Maybe you don&#8217;t care</h2>
<p>j2 Global Communications, it&#8217;s entirely possible that <strong>MyFax</strong> doesn&#8217;t matter to you. Somehow your stocks are still are still up and you&#8217;ve apparently got money in your pockets with reported growth over a number of years, but the product I care about seems to be dying a slow and painful death. Since buying Protus in December 2010, <a href="http://www.obj.ca/Technology/2011-03-22/article-2353255/Protus%26rsquo%3Bs-Ottawa-staff-levelled-in-wake-of-j2-takeover/1" target="_blank">you cut 100 employees from the Ottowa office</a> and presumably dumped that workload on other locations. On on the MyFax and related websites, I see the following:</p>
<ul>
<li>1 new knowledgebase article in the last year</li>
<li>The last post on the MyFax Blog is from 7 months ago (January 2011) and as far as I can tell, all the actual content contributors on the blog are no longer with Protus or j2</li>
<li>A black hole of tweets between Dec 2010 and June 2011</li>
<li>Twittermonials on the main page of MyFax.com shows the last favorited tweet to be 200+ days old</li>
<li>Last released dates for the iPhone and Blackberry apps are both over a year old, and both with less than 50% ratings. There&#8217;s no Android app at all, and no acknowledgement publicly that they&#8217;re even working on an app for this platform.</li>
<li>The MyFax <em>What&#8217;s New</em> page shows a Fall 2010 Update, and nothing newer.</li>
</ul>
<p>I could be wrong. Maybe you do want to make MyFax better. Maybe you do want to provide customers with a good experience in the bizarre world that merges the <em>zombie-that-will-not-die</em> that is faxing with this internet world that has Google+ and TouchPad fire sales.</p>
<p>People liked MyFax. Unsurprisingly to me, <a href="http://lifehacker.com/5638049/best-fax-service-myfax" target="_blank">people liked MyFax better than eFax</a>. This should mean something to you when deciding where to devote your time and attention.</p>
<p><strong>If you do care, then show it.</strong></p>
<p>Sincerely,</p>
<p>Jason Navarrete</p>
<img src="http://feeds.feedburner.com/~r/digitalcardboard/~4/SCN5T_PkRsk" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://digitalcardboard.com/blog/2011/08/22/j2-global-protus-myfax-support-you-suck/feed/</wfw:commentRss>
		<slash:comments>13</slash:comments>
		<feedburner:origLink>http://digitalcardboard.com/blog/2011/08/22/j2-global-protus-myfax-support-you-suck/</feedburner:origLink></item>
	</channel>
</rss><!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->
