Oxidized - silly attempt at (Really Awesome New Cisco confIg Differ)

Since ages I wanted have replaced this freaking backup solution of our Network Equipment based on some hacky shell scripts and expect [https://en.wikipedia.org/wiki/Expect] uploading the configs on a TFTP [https://en.wikipedia.org/wiki/Trivial_File_Transfer_Protocol] server. Years ago I stumbled upon RANCID…

Wordpress dictionary attack

Today early in the morning my monitoring system notified me about unusual high outgoing traffic on my hosting platform. I traced the problem down the webserver which is also hosting this abandoned website. Looking into this with iptraf [http://iptraf.seul.org/] revealed that this traffic is coming only from…

Frag is bigger than frame.

Since 2 weeks I'm faced with some problems at a Xen [http://en.wikipedia.org/wiki/Xen] hosting environment based on Debian [http://www.debian.org] wheezy [http://www.debian.org/releases/wheezy/]. The issue is, that one specific domU is regularly failing network. The investigations showed, that…

OpenWRT WDS works like charm

A try with OpenWRT [http://openwrt.org] 8.09 in April to setup a WDS [http://en.wikipedia.org/wiki/Wireless_Distribution_System] with additional AP functionality and encryption, like described in the documentation [http://downloads.openwrt.org/kamikaze/docs/openwrt.html#x1-210001.2.2], failed [https://dev.openwrt.org/…

Kabel Deutschland breaks DNS System for it's customers

Last week I noticed, that Kabel Deutschland [http://www.kabeldeutschland.de/], a cable provider in Germany, returns for any non existing hosts "204.9.89.60". It seems, thats it is rolled out since last fall. Even for DNSSEC [http://en.wikipedia.org/wiki/DNSSEC] enabled infrastructure it…

(old) L-root DNS Server "stolen" (for a short time)

After shutdown of the old L.ROOT-SERVERS.NET the IP address formerly associated with it, the IP continued to answer requests. More informations can be found at the ICANN Blog [http://blog.icann.org/?p=309] UPDATE: Before bothering around, if you read the ICANN Blog [http://blog.icann.org/…

Routing Suite in an ISP environment?

Searching for an alternative for our old Cisco Border Router we are evaluating some software routing suites on "normal" server hardware. First we tried Vyatta [http://www.vyatta.com/products/index.php], but the routing software frequently crashed completely. Maybe this is fixed with VC4 Alpha 1, but…