<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>Simon Žekar - unix, communications, stupidities</title>
	<link>http://simon.zekar.com</link>
	<description>"Unix is simple, but it takes a genious to understand the simplicity" --Dennis Ritchie</description>
	<lastBuildDate>Sun, 23 Oct 2011 16:13:24 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress/3.2.1" -->

	<item>
		<title>syncing FreeBSD server with NTP is simpler than you may think</title>
		<description><![CDATA[After setting up a config file for the NTP on every server, i figured out that a stock settings just work. so adding: ntpd_enable="YES" ntpdate_enable="YES" to the /etc/rc.conf just does the trick (and starting services if not rebooting the server). After some moments of running the ntp client you can check it with: # ntpq [...]]]></description>
		<link>http://simon.zekar.com/2011/03/25/syncing-freebsd-server-with-the-ntp-clock/</link>
			</item>
	<item>
		<title>blocking certain MAC addresses from joining your Cisco AP</title>
		<description><![CDATA[In hope for an energy to revive this blog, a quick post. If you need to block an abuser flood-trying to connect to your AP, resulting in multiple radius connections and error messages, you can make ACL on AP like this: # access-list 760 deny 0002.725f.93c3 0000.0000.0000 # dot11 association mac-list 760 where 0002.725f.93c3 is [...]]]></description>
		<link>http://simon.zekar.com/2010/10/18/blocking-mac-addresses-cisco-ap/</link>
			</item>
	<item>
		<title>FreeBSD and shared iLo 2 port on HP servers</title>
		<description><![CDATA[In order for HP iLo 2 management interface to continue working on a shared ethernet port after FreeBSD kernel loads the bge drivers, you must add following line to /boot/loader.conf hw.bge.allow_asf="1" And reboot. Hope it will save you some minutes figuring it out&#8230; S.]]></description>
		<link>http://simon.zekar.com/2010/04/24/freebsd-and-shared-ilo-2-port-on-hp-servers/</link>
			</item>
	<item>
		<title>automatic login to Cisco routers / firewalls</title>
		<description><![CDATA[Since many of you are still connecting to your Cisco boxes with the plain ssh/telnet command (typing password every time) and since Cisco boxes don&#8217;t have SSH public key authentication, the tool to use comes from Rancid (Really Awesome New Cisco confIg Differ) package. It&#8217;s called &#8220;clogin&#8221; as Cisco login script. It requires all the [...]]]></description>
		<link>http://simon.zekar.com/2010/02/28/automatic-login-to-cisco-routers-firewalls/</link>
			</item>
	<item>
		<title>Mikrotik simple bandwidth control</title>
		<description><![CDATA[There&#8217;s a really easy way of controlling bandwidth of an interface (e.g. guest interface). It&#8217;s done via queues: /queue simple add interface=guest max-limit=2M/2M disabled=no Where &#8220;guest&#8221; is the interface name and 2M is the down/uplink speed in bps you want to shape it to. More about this on Mikrotik Wiki S.]]></description>
		<link>http://simon.zekar.com/2009/10/14/mikrotik-simple-bandwidth-control/</link>
			</item>
	<item>
		<title>HP-UX ssh X11 forwarding not working for certain applications</title>
		<description><![CDATA[I had a strange issue with hp-ux x11 forwarding over ssh. xclock, xterm ran fine but hpterm and some other x11 programs didn&#8217;t start, claiming error: X11 connection rejected because of wrong authentication. after some searching I found following fixed the issue: /opt/ssh/etc/sshd_config: X11UseLocalhost no (must be set to no, default is yes) S.]]></description>
		<link>http://simon.zekar.com/2009/10/08/hp-ux-ssh-x11-forwarding-not-working-for-certain-applications/</link>
			</item>
	<item>
		<title>Cisco ASA failover fail if IPv6 enabled</title>
		<description><![CDATA[I can&#8217;t believe it&#8230; Failover on Cisco ASA silently stops working after you enable ipv6 configuration. We&#8217;re used of stupid Cisco bugs, but this wins it all ! S.]]></description>
		<link>http://simon.zekar.com/2009/10/02/cisco-asa-failover-fail-if-ipv6-enabled/</link>
			</item>
	<item>
		<title>IPv6 over IPv4 tunnel with Mikrotik &amp; Cisco router</title>
		<description><![CDATA[Time when native IPv6 network will come right to your home is still far away. So tunneling IPv6 network over IPv4 to some IPv6 enabled site is a way to go. Configuration is easier than expected and it worked right away. In my case Cisco 7600 series is at the data center where native IPv6 [...]]]></description>
		<link>http://simon.zekar.com/2009/09/27/ipv6-over-ipv4-tunnel-with-mikrotik-cisco-router/</link>
			</item>
	<item>
		<title>FreeBSD massive port forwarding</title>
		<description><![CDATA[Portfwd was the choice of software when I ever needed to forward a port from the server to another server &#8211; multiple hops away (not NAT port mapping). It uses configuration like this (193.2.1.66 is the local ip, 193.2.1.80 is destination server IP): bind-address 193.2.1.66 tcp { 55443 { =&#62; 193.2.1.80:443 } } tcp { [...]]]></description>
		<link>http://simon.zekar.com/2009/02/07/freebsd-massive-port-forwarding/</link>
			</item>
	<item>
		<title>swatch &#8211; alerting you of certain log entries</title>
		<description><![CDATA[A few minutes before coding my own perl script, which would alert me on certain log entries, I&#8217;ve found a software which does it&#8217;s job very well. It&#8217;s called swatch &#8211; yes, really impressing web site and lack of documentation, examples is tipical for a geek&#8217;s tool. example config &#8211; very simple: watchfor /Security violation [...]]]></description>
		<link>http://simon.zekar.com/2009/02/04/swatch-log-monitor/</link>
			</item>
</channel>
</rss>

