Journal

Blog - Page 67

Thoughts on photography, technology, music, and creative work.

Secure Cacti with Net-SNMP and SSH Tunnels

So I finally got around to setting up cacti/snmp on my servers. Here is what I did:

  1. Installed cacti on the main monitoring server which we'll call slappy. I used the FreeBSD port of cacti. Slappy already had php/mysql/apache installed.
  2. Added a user snmp to slappy and then I generated keys using ssh-keygen for each of the servers that slappy would be monitoring.
  3. On each of the servers that slappy would be monitoring I installed net-snmp from the ports tree and configured it to run over tcp on 127.0.0.1 and then I added a user snmp with a nologin shell and without password authentication as I will just be using snmp to create a tunnel to the snmpd process that will be running on localhost.
  4. Back on slappy I su'ed to the snmp user and created a shell script that would set up the tunnels to each of the servers using a command like this: ssh -i ~/.ssh/keys/hostname -f -N -L 16101:127.0.0.1:161 hostname and then added the script as a cronjob.
  5. Finally I added all the servers to cacti using the basic built-in net-snmp support as well as a couple of qmail and mysql scripts.

So I now have a nice collection of graphs for traffic / disk space / processor, memory and mysql load.

November 26, 2005 Read more

Quake Prediction?

On Thanksgiving I was listening to As It Happens on the CBC via KPCC and I heard a report about the nasty benzene spill in China. The reporter who was an English teacher living in China said that there was some panic about the water supply being turned off due to the spill and also that there was an earthquake predicted [real audio stream @ 11:25 and 12:14] "The government gave a warning that an earthquake would occur" and "People were sleeping in tents outside". The I just read today that there was a big quake in China. I found it very interesting that the Chinese government predicts earthquakes and tells the people about it, and that is turns out to be true. Very interesting.

November 26, 2005 Read more

Racquetball

Yesterday Penelope and I went to the gym and instead of using one of the various machines to get our cardio workout, we decided to try Racquetball. We borrowed some racquets and a couple of balls and hit the court. When we were locked into the court we realized that we had no idea how to play the game we had decided to play, so we just hit the ball against the walls and tried to rally as much as we could. It turned out to be great fun and we decided to get ourselves some racquets and figure out the rules. When I got home I found a page with the basic rules of the game which made sense once I read them a few times. The next step was to look on craigslist for some racquets, of which I found 2 for $20 and I just got back from picking them up. They are in great condition, are nice racquets and I am looking forward to playing a game with Penelope tomorrow.

November 26, 2005 Read more

Frying Fish Bloken Conveyler

Penelope and I went to Frying Fish today to have some rotating mechanized sushi, but the conveyor was broken, oh my! No big deal though, the sushi was still great although we did have to order it all from the chef instead of just picking various items off of the conveyor.

November 26, 2005 Read more

PC-BSD on my Sharp Mebius

A few years back I visited japan, where I picked up a ultra light and thin sharp mebius laptop with a 30gb hd, 512mb ram and a 750mhz piii. It has been sitting in a bag since then as I am mostly a mac / unix user and I have only used it a couple of times to do some random PC stuff. The other day I noticed that PC-BSD had reached its 1.0 mark and today I decided to download it and check it out. The first run through of the install didn't work, but I tweaked some BIOS settings and it booted right up. PCBSD is really easy to install and has a nice GUI installer that anybody can use. Everything works great and I now have FreeBSD running on my Mebius laptop! I threw in a wireless card and everything worked as it should and I now have a nice little portable computer for tasks around the house when I don't want to sit in front of my desk. I set up OpenVPN and got that working in the simple mode after a little bit of toying around. Cool deal.

November 22, 2005 Read more

Speakeasy DSL

So I finally got myself some DSL... it has been a few years. Recently I have used a "borrowed" wireless connection, Verizon EVDO, and a cable modem and now I am back on with the nice low-latency DSL. I have a 6mb/768k connection from Speakeasy and so far it rocks, although due to some line noise I don't get the full 6, more like 4.8 or so. Last night I set up the server that is supposed to be my mythTV system as a firewall because for some reason the other 2 systems I had wouldn't POST, I think it has something to do with the power outages we had a few months ago, but they were old systems anyhow, and I have bid on a couple old cheap systems on ebay that will work just fine for the job. I set up the firewall using pf on FreeBSD, with a separate interface for the wireless bridge (which is a bridge to nowhere if you don't connect to the VPN). Everything is working great and I finally have my Vonage box active again, yay.

November 22, 2005 Read more

<del>Backpack</del>Lounging in Catalina

Penelope and I had planned on going backpacking this weekend on Catalina Island this weekend, but when we got there the town of Avalon was so beautiful we just decided to get a hotel room and hang out. The other problem was that the route I had planned ended up being on a paved road and our campground was a bit further then we wanted to hike in one day with heavy packs, plus I was midway through a cold, which I have just now kicked.

We checked in to the Hotel Villa Portofino, a hotel right across the main drag from the water, dropped off out bags and hit the bar. We had a few drinks and then we decided to rent a golf cart and take it around Avalon, which despite sounding cheesy was actually quite fun. After the golf cart ride we bought some tickets to see Harry Potter in the Casino which isn't actually a gambling hall, the italian word casino actually meant a place of entertainment, back when the building was built by Mr Wrigley.

The Casino is amazingly beautiful and before the movie we were treated to 45 minutes of organ music on a really grand organ, a type of which only 3 exist in the world today. The bass and acoustics of the theatre are really amazing and we really enjoyed both the organ show and the movie.

The next day we hiked over to the botanical gardens and the Wrigley monument and then we headed back in to town to take part in tour of the casino which was really interesting. I took a whole bunch of photos of the whole trip and I will be uploading them soon once I am a bit less busy.

November 22, 2005 Read more

Many Gigabytes of Photos

Over the past couple of months I have posted only a very small handful of photos on my website. There are a couple of reason for this. First of all I had some disk problems with my server and lost a whole bunch of photos from the site... I didn't really lose the actual photos, I will just have to upload them again. The next problem is that I have had somewhat spotty connectivity at my loft, but this will be remedied on the 16th when Speakeasy installs my 6M/786k DSL, Yay! And finally I have been completely rewriting the code the runs my site, to make it better, faster and easier to use. I am very close to being done with the rewrite and once I am I will start the transition from the current slacker based system to the new dynamony system. Once I upgrade I have something like 10 gigs of photos to sort through and upload.

November 14, 2005 Read more