Linux Routing Memos

These are just small hints and memos what to do on a Debian Linux setup. This is not a complete guide on doing a secured routing environment with Linux. /etc/sysctl.conf: net.ipv4.ip_forward=1 Configure /etc/network/interfaces iptables -t nat -A POSTROUTING -o <upstream_interface> -j MASQUERADE apt-get install iptables-persistent apt-get install iftop apt-get install conntrack conntrack -L -s 10.11.1.10 […]

Identifying Raspberry Pi

How to identify your Raspberry Pi, maybe built in a nice and sealed box? Here is how: $ cat /sys/firmware/devicetree/base/model;echo Raspberry Pi Model B Rev 2 $ $ cat /sys/firmware/devicetree/base/model;echo Raspberry Pi 3 Model B Rev 1.2 $ $ cat /sys/firmware/devicetree/base/model;echo Raspberry Pi 3 Model B Plus Rev 1.3 $ $ cat /sys/firmware/devicetree/base/model;echo Raspberry Pi […]

NetBox Install on Debian 9

When installing NetBox on Debian 9 and Apache, the instructions in http://netbox.readthedocs.io/en/latest/ are fine, just some small additional operations are needed. The libapache2-mod-wsgi-py3 package needs to be installed as well, otherwise you will get errors about the “WSGIPassAuthorization on” command when starting Apache [this has later been addressed in commit b917e8d] Disable the “000-default” site […]

TLS Certificates in Debian and Apache

Adding TLS configurations in Apache: cat > /etc/ssl/private/myserver.key chmod 0640 /etc/ssl/private/myserver.key chgrp ssl-cert /etc/ssl/private/myserver.key cat > /etc/ssl/certs/myserver.crt cd /etc/apache2/sites-available cp default-ssl.conf myserver-ssl.conf vi myserver-ssl.conf – add ServerName if needed – RedirectMatch ^/$ https://myserver.mydomain.com/appname (if needed) – edit SSLCertificateFile and SSLCertificateKeyFile a2ensite myserver-ssl a2enmod ssl vi 000-default.conf – add ServerName if needed – Redirect / https://myserver.mydomain.com/ […]

Visual Studio Code Customizations

My customizations in Visual Studio Code: Cygwin in Integrated Terminal { // start bash, not the mintty, or you’ll get a new window “terminal.integrated.shell.windows”: “C:\\cygwin64\\bin\\bash.exe”, // Use this to keep bash from doing a ‘cd ${HOME}’ “terminal.integrated.env.windows”: { “CHERE_INVOKING”: “1” }, // Make it a login shell “terminal.integrated.shellArgs.windows”: [ “-l” ] } (source: https://stackoverflow.com/questions/46061894/vs-code-cygwin-as-integrated-terminal) Quick […]

Zabbix Components and Ports

Zabbix monitoring system consists of components that communicate with each other. Here is a summary of the TCP ports and some configuration characteristics of various connections. Active agent: The Zabbix agent periodically asks the Zabbix proxy (or Zabbix server, if configured to use the server directly) for the list of items that should be collected, […]