plnx.nl - User contributions [en]

Rescan scsi

2025-05-22T07:21:41Z

Pverha10:

To rescan your scsi disks (to look if a disk has been added) you can reread your scsi device by giving the following command:

<pre>
echo "- - -" >/sys/class/scsi_host/host0/scan
</pre>

It's very handy if you added a disk in VMware, don't want to reboot and have no flashy thingy disk-tools.

If you added space to your first disk you need to rescan your disk with:

<pre>
echo 1 > /sys/block/sda/device/rescan
</pre>

If you're running a multipath device you can check the multipath device size with
<pre>
multipath -l
</pre>
To resize the multipath device also run (e.g. multipath device dm-1)
<pre>
multipathd resize map dm-1
</pre>

If you resized your disk with fdisk for example, but the disk was still busy for some reason and the partition table could not be rescanned you can use partprobe, but the following command also works to update your partitions:
<pre>
hdparm -z /dev/sdX
</pre>
If this gives you a "BLKRRPART failed: Device or resource busy" because some partitions on the drive are currently mounted, if you really don't want to reboot, you can try:
<pre>
partx -a /dev/sdX
</pre>
This will force partitions to be added and such.

Main Page

2025-05-17T07:47:03Z

Pverha10:

'''Welcome to the wiki of plnx.nl'''

Consult the [//meta.wikimedia.org/wiki/Help:Contents User's Guide] for information on using the wiki software.

==recent things==
* [[SIP records]]
* [[Cisco core upgrade]]
* [[c2960x commands]]
* [[Sip configuration plnx.nl]]
* [[Rescan scsi]]
* [[DNS-DHCP configuration]]
* [[NT6.1 Firewall Stealth Mode]]
* [[TRIM Support]]
* [[Sendmail Config]]
* [[VLC Streaming]]
* [[BIND IPv6 $GENERATE]]
* [[7zip tricks]]
* [[Windows XP Fixed IPv6]]
* [[Bonding]]
* [[SSL]]
* [[One liners]]
* [[Firefox over X11 with Xming]]
 
* [//www.mediawiki.org/wiki/Manual:FAQ Mediawiki FAQ]

Firefox over X11 with Xming

2025-05-17T07:45:14Z

Pverha10: Created page with "I use the xlaunch files like this: <pre> <?xml version="1.0"?> <XLaunch xmlns="http://www.straightrunning.com/XmingNotes" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.straightrunning.com/XmingNotes XLaunch.xsd" WindowMode="MultiWindow" ClientMode="StartProgram" Program="firefox" ClientStart="PuTTY" PW="password" PathToProtocol="C:\\WINDOWS\\" RemoteHost="host" RemoteUser="username" ExtraSSH="-X" Display="0" Clipboard="true"/> </..."

I use the xlaunch files like this:
<pre>
<?xml version="1.0"?>
<XLaunch xmlns="http://www.straightrunning.com/XmingNotes" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.straightrunning.com/XmingNotes XLaunch.xsd" WindowMode="MultiWindow"
ClientMode="StartProgram" Program="firefox" ClientStart="PuTTY" PW="password" PathToProtocol="C:\\WINDOWS\\"
RemoteHost="host" RemoteUser="username" ExtraSSH="-X" Display="0" Clipboard="true"/>
</pre>
 
For a faster experience I use blowfish instead of aes.
Also, rendering done at the remote site is done at a frame rate using the layout.frame_rate in about:config. I set this value to 5 instead of -1.

One liners

2025-05-17T07:44:37Z

Pverha10: Created page with "== sed == Replace all enters with spaces with sed. <pre> sed ':a;N;$!ba;s/\n/ /g' </pre> Replace all uppercase letters with lowercase with sed. <pre> sed -e 's/$.*$/\L\1/' </pre> The same with tr <pre> tr '[:upper:]' '[:lower:]' </pre> Get only the dashed mac addresses from a file <pre> grep -o '..-..-..-..-..-..' file </pre> == Powershell == One liner powershell command to uninstall the application 'Linphone'. <pre> C:\windows\system32\WindowsPowerShell\v1.0..."

== sed ==

Replace all enters with spaces with sed.
<pre>
sed ':a;N;$!ba;s/\n/ /g'
</pre>
 
Replace all uppercase letters with lowercase with sed.
<pre>
sed -e 's/$.*$/\L\1/'
</pre>

The same with tr
<pre>
tr '[:upper:]' '[:lower:]'
</pre>

Get only the dashed mac addresses from a file
<pre>
grep -o '..-..-..-..-..-..' file
</pre>

== Powershell ==

One liner powershell command to uninstall the application 'Linphone'.
<pre>
C:\windows\system32\WindowsPowerShell\v1.0\powershell.exe -command "& {$app = Get-WmiObject -Class Win32_Product -Filter \"Name = 'Linphone'\"; $app.Uninstall() }"
</pre>

Actually a two liner, but this is to put your computer to sleep after 60 seconds from the commandline. Note: hibernate should be turned off for this.
<pre>
timeout 60
rundll32.exe powrprof.dll,SetSuspendState 0,1,0
</pre>

Remove all files in the current directory older than 30 days.
<pre>
forfiles /D -30 /C "cmd /C attrib -s @file & echo @file & del @file"
</pre>

Clear all Windows Event Viewer logs.
<pre>
wevtutil el | Foreach-Object {wevtutil cl “$_”}
</pre>

SSL

2025-05-17T07:44:18Z

Pverha10: Created page with "=Self Signed Certificate= Easiest way to create a self-signed certificate for domain.com: <pre> openssl req -subj "/CN=domain.com" -new -newkey rsa:4096 -days 3650 -nodes -x509 -sha512 -keyout private.key -out public.key </pre> If you want to add more domain names, just add more /CN=example.com between the double quotes. The last common name will be the main common name. Remember: keep your private.key private. Change rights to the file accordingly so that only th..."

=Self Signed Certificate=
Easiest way to create a self-signed certificate for domain.com:

<pre>
openssl req -subj "/CN=domain.com" -new -newkey rsa:4096 -days 3650 -nodes -x509 -sha512 -keyout private.key -out public.key
</pre>

If you want to add more domain names, just add more /CN=example.com between the double quotes. The last common name will be the main common name. 
Remember: keep your private.key private. Change rights to the file accordingly so that only the application you need it in can read it.

Bonding

2025-05-17T07:44:01Z

Pverha10: Created page with "=linux network interface bonding= I wanted to make the following configuration: <table border=1> <tr><td colspan=4>bond2 (active-backup mode)</td></tr> <tr><td colspan=2>bond0 (802.3ad mode)</td><td colspan=2>bond1 (802.3ad mode)</td></tr> <tr><td>eth0 (in switch 1)</td><td>eth1 (in switch 1)</td><td>eth2 (in switch 2)</td><td>eth3 (in switch 2)</td></tr> </table> So I made the following: <pre> #!/bin/sh # load 3 bonds (in 802.3ad mode) /sbin/modprobe bonding mode=4..."

=linux network interface bonding=

I wanted to make the following configuration:

<table border=1>
<tr><td colspan=4>bond2 (active-backup mode)</td></tr>
<tr><td colspan=2>bond0 (802.3ad mode)</td><td colspan=2>bond1 (802.3ad mode)</td></tr>
<tr><td>eth0 (in switch 1)</td><td>eth1 (in switch 1)</td><td>eth2 (in switch 2)</td><td>eth3 (in switch 2)</td></tr>
</table>

So I made the following:

<pre>
#!/bin/sh
# load 3 bonds (in 802.3ad mode)
/sbin/modprobe bonding mode=4 miimon=100 downdelay=100 updelay=100 max_bonds=3
# put the last bond into active-backup mode
echo 1 >/sys/class/net/bond2/bonding/mode
/sbin/ifconfig bond0 up
/sbin/ifconfig bond1 up
/sbin/ifconfig bond2 10.0.0.1 netmask 255.255.255.0
/sbin/ifenslave bond0 eth0
/sbin/ifenslave bond0 eth1
/sbin/ifenslave bond1 eth2
/sbin/ifenslave bond1 eth3
/sbin/ifenslave bond2 bond0
/sbin/ifenslave bond2 bond1
</pre>

So now bond2 is the active virtual network interface, 
bond0 and bond1 are enslaved to bond2, 
eth0 and eth1 are enslaved to bond0 and 
eth2 and eth3 are enslaved to bond1.

Windows XP Fixed IPv6

2025-05-17T07:43:44Z

Pverha10: Created page with "* I have prefix 2001:1af8:fe50::/48 * My router address is 2001:1af8:fe50::f000 From an administrator cmd.exe do: <pre> ipv6 install ipv6 if </pre> Look for your interface number. Let's pretend it's 3. <pre> ipv6 adu 3/2001:1af8:fe50::dead ipv6 rtu ::/0 3/2001:1af8:fe50::f000 </pre>"

* I have prefix 2001:1af8:fe50::/48
* My router address is 2001:1af8:fe50::f000

From an administrator cmd.exe do:
<pre>
ipv6 install
ipv6 if
</pre>
Look for your interface number. Let's pretend it's 3.
<pre>
ipv6 adu 3/2001:1af8:fe50::dead
ipv6 rtu ::/0 3/2001:1af8:fe50::f000
</pre>

7zip tricks

2025-05-17T07:43:16Z

Pverha10: Created page with "7zip tricks ==7zip from dosbox== To create seperate zip files from the commandline in dos with 7zip the following: <pre> forfiles /M data.* /C "cmd /c 7z a @file.zip @file" </pre> In the following directory: <pre> C:\TEMP>dir Volume Serial Number is 1337-1337 Directory of C:\TEMP 01-01-2001 00:00 <DIR> . 01-01-2001 00:00 <DIR> .. 01-01-2001 07:00 16.384 data.log 01-01-2001 08:00 16.384 data.dat 01-01-2001 09:00..."

7zip tricks

==7zip from dosbox==

To create seperate zip files from the commandline in dos with 7zip the following:

<pre>
forfiles /M data.* /C "cmd /c 7z a @file.zip @file"
</pre>
In the following directory:

<pre>
C:\TEMP>dir
Volume Serial Number is 1337-1337

Directory of C:\TEMP

01-01-2001 00:00 <DIR> .
01-01-2001 00:00 <DIR> ..
01-01-2001 07:00 16.384 data.log
01-01-2001 08:00 16.384 data.dat
01-01-2001 09:00 32.768 data2.log
3 File(s) 65.536 bytes
2 Dir(s) 33.554.432 bytes free
</pre>
will create data.log.zip and data.dat.zip with zip compression.

BIND IPv6 $GENERATE

2025-05-17T07:42:43Z

Pverha10: Created page with "There is no $GENERATE command available on IPv6, therefore you must specify every forward and reverse entry in bind manually. You could however use the $INCLUDE statement to include a range you have generated with a script. I will post a script here to generate IPv6 forward and reverse files you can include in bind. =generate-forward-ipv6.sh= <pre> #!/bin/sh # generate 250 of these lines: # ip20-042 IN AAAA 2001:dead:beef:14::2a # where 20(0x14) is the vlani..."

There is no $GENERATE command available on IPv6, therefore you must specify every forward and reverse entry in bind manually. You could however use the $INCLUDE statement to include a range you have generated with a script.
I will post a script here to generate IPv6 forward and reverse files you can include in bind.

=generate-forward-ipv6.sh=
<pre>
#!/bin/sh
# generate 250 of these lines:
# ip20-042 IN AAAA 2001:dead:beef:14::2a
# where 20(0x14) is the vlanid and 42(0x2a) is the host part
if [ -z $1 ]; then
echo "usage: $0 <vlanid>"
exit
fi
vlanid=$1
counter=1
while [ $counter -le 250 ]; do
printf "ip$vlanid-%03d\tIN\tAAAA\t2001:dead:beef:%x::%x\n" $counter $vlanid $counter;
counter=`expr $counter + 1`
done
</pre>

=generate-reverse-ipv6.sh=
<pre>
#!/bin/sh
# generate these lines:
# $ORIGIN 0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.1.0.0.f.e.e.b.d.a.e.d.1.0.0.2 PTR ipv6.example.com.
# 1.0 PTR ip20-042.example.com.
if [ -z $1 ]; then
echo "usage: $0 <vlanid>"
exit
fi
vlanid=$1
reversedottedhexvlan="`printf "%04x\n" $vlanid | rev | sed -e 's/^./&./' | sed -e 's/^.../&./' | sed -e 's/^...../&./'`"
echo "\$ORIGIN 0.0.0.0.0.0.0.0.0.0.0.0.0.0.$reversedottedhexvlan.f.e.e.b.d.a.e.d.1.0.0.2.ip6.arpa."

counter=1
while [ $counter -le 250 ]; do
reversedottedhostid="`printf "%02x\n" $counter | rev | sed -e 's/^./&./'`"
printf "$reversedottedhostid PTR ip$vlanid-%03d.example.com.\n" $counter;

counter=`expr $counter + 1`
done
</pre>

VLC Streaming

2025-05-17T07:42:18Z

Pverha10: Created page with "=Streaming with VLC from the command line= ==Logitech C910== I've tried the Logitech C910, but it won't focus to infinity without an extra lens. ==Logitech C920== The Logitech C920 still doesn't focus fully to infinity, but the picture is clear enough. I have streamed to a site-local multicast address with transcoding, because the C920 gives a standard image format of yuy2, which isn't stream-able in a transport stream. <pre> cvlc -vvvv --v4l2-width=1920 --v4l2-height..."

=Streaming with VLC from the command line=

==Logitech C910==
I've tried the Logitech C910, but it won't focus to infinity without an extra lens.

==Logitech C920==
The Logitech C920 still doesn't focus fully to infinity, but the picture is clear enough.

I have streamed to a site-local multicast address with transcoding, because the C920 gives a standard image format of yuy2, which isn't stream-able in a transport stream.
<pre>
cvlc -vvvv --v4l2-width=1920 --v4l2-height=1080 --v4l2-aspect-ratio=16\:9 --v4l2-fps=30 --v4l2-sharpness=255 \
--v4l2-power-line-frequency=1 --v4l2-set-ctrls={"009A090C=0"}--live-caching=150 v4l2:///dev/video0 --sout \
'#transcode{vcodec=mp4v,acodec=none,vb=12000,ab=0}:rtp{mux=ts,dst=239.255.255.45,port=5004,sdp=sap,name="localstream"}' \
--ttl 1
</pre>

There's also the possibility to stream without transcoding, but the following doesn't work well, because the webcam just isn't fast enough while building the mjpeg frames.
<pre>
cvlc -vv --v4l2-chroma=MJPG --v4l2-width=1920 --v4l2-height=1080 --v4l2-aspect-ratio=16\:9 --v4l2-fps=30 \
--live-caching=100 v4l2:///dev/video0 --sout '#rtp{mux=ts,dst=239.255.255.45,port=5004,sdp=sap,name="localstream"}' \
--ttl 1
</pre>

==BT878==
The following has worked for years with a BT878-based capture card:
<pre>
vlc -vvv v4l2:///dev/video0:input=1:width=720:height=576 --sout \
'#transcode{vcodec=mp4v,acodec=none,vb=2000,ab=0}:rtp{mux=ts,dst=239.255.255.45,port=1234,sdp=sap,name="test"}' \
--ttl 1
</pre>

==Edit Windows Default Playback Device with FFplay==
You can change the default playback channel (in Windows 10) by using the following environment variable.
The default setting is "Default playback device"
<pre>
set SDL_AUDIO_DEVICE_NAME=AirliteUSB5 (3- USB AUDIO CODEC)
FFplay
</pre>

Sendmail Config Authenticated SMTP

2025-05-17T07:41:52Z

Pverha10: Created page with "I made the following configuration: * Sendmail SMTP (listening on port 25 and SSL port 465) * Authentication through cyrus-sasl2 (listening on socket /var/state/saslauthd/mux) * Authentication through pam (with the pam_radius module) * Authentication with FreeRadius (for now in the users file) So for this configuration to work you need FreeRadius, pam_radius, Linux-PAM, cyrus-sasl2 and sendmail. N.B.: I did this in my favourite distro Slackware. (13.3..."

I made the following configuration:

* Sendmail SMTP (listening on port 25 and SSL port 465) 
* Authentication through cyrus-sasl2 (listening on socket /var/state/saslauthd/mux) 
* Authentication through pam (with the pam_radius module) 
* Authentication with FreeRadius (for now in the users file) 

So for this configuration to work you need FreeRadius, pam_radius, Linux-PAM, cyrus-sasl2 and sendmail.

N.B.: I did this in my favourite distro Slackware. (13.37)

=FreeRadius=

I used the slackbuild from http://slackbuilds.org/repository/13.37/network/freeradius-server/

No problems there.
And after installing added a testuser 'testuser' with password 'password' to /etc/raddb/users

Just to be sure it worked I started freeradius and tested the server by using
<pre>
radtest testuser password 127.0.0.1 1812 testing123
</pre>
You should get something like:
<pre>
rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=131, length=20
</pre>

=PAM-Linux=

Unfortunately http://slackbuilds.org/mirror/slackware/slackware-13.37/extra/source/pam/pam.SlackBuild didn't work for me, so I built it myself with:
<pre>
wget --no-check-certificate https://fedorahosted.org/releases/l/i/linux-pam/Linux-PAM-1.1.5.tar.bz2
tar -jxf Linux-PAM-1.1.5.tar.bz2
cd Linux-PAM-1.1.5
./configure --disable-nis --disable-selinux --disable-nls --prefix=/usr
make ; make install
</pre>

=pam_radius=
Download from: http://freeradius.org/pam_radius_auth/

Install:
<pre>
wget ftp://ftp.freeradius.org/pub/radius/pam_radius-1.3.17.tar.gz
tar -zxf pam_radius-1.3.17.tar.gz
cd pam_radius-1.3.17
make
cp -a pam_radius_auth.so /lib/security/
</pre>

File /etc/raddb/server contains:
<pre>
# pam_radius_auth configuration file. Copy to: /etc/raddb/server
#
# For proper security, this file SHOULD have permissions 0600,
# that is readable by root, and NO ONE else. If anyone other than
# root can read this file, then they can spoof responses from the server!
#
# There are 3 fields per line in this file. There may be multiple
# lines. Blank lines or lines beginning with '#' are treated as
# comments, and are ignored. The fields are:
#
# server[:port] secret [timeout]
#
# the port name or number is optional. The default port name is
# "radius", and is looked up from /etc/services The timeout field is
# optional. The default timeout is 3 seconds.
#
# If multiple RADIUS server lines exist, they are tried in order. The
# first server to return success or failure causes the module to return
# success or failure. Only if a server fails to response is it skipped,
# and the next server in turn is used.
#
# The timeout field controls how many seconds the module waits before
# deciding that the server has failed to respond.
#
# server[:port] shared_secret timeout (s)
127.0.0.1:1812 testing123 1
#other-server other-secret 3

#
# having localhost in your radius configuration is a Good Thing.
#
# See the INSTALL file for pam.conf hints.
</pre>

I also made a file called /etc/pam.d/other with the following content:
<pre>
auth sufficient /lib/security/pam_radius_auth.so
account sufficient /lib/security/pam_radius_auth.so
</pre>

=cyrus-sasl2=

Unfortunately pam support has been excluded from the default cyrus-sasl2 package from slackware 13.37, because the pam package isn't included in slackware.
That's why you need to rebuild it to include pam support. There's a slackbuild you can adapt at:
http://slackbuilds.org/mirror/slackware/slackware-13.37/source/n/cyrus-sasl/

Just include --with-pam \ in the configuration line.

After you start 'saslauthd -a pam', you can test the authentication with 'testsaslauthd -u user -p password -s Sendmail'.

=Sendmail=
Just adapt the sendmail-slackware-tls-sasl.mc a bit. It should contain at least something like:
<pre>
dnl# Allow SASL authentication/relaying:
define(`confAUTH_OPTIONS', `A p y')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
dnl# Daemon options after M= below that might need to be changed are:
dnl# s (allow SSL, not only TLS)
dnl# a (require authentication)
DAEMON_OPTIONS(`Port=smtps, Name=MSA-SSL, M=Esa')dnl
LOCAL_CONFIG
dnl# Do not allow the weak SSLv2:
O CipherList=ALL:!ADH:!NULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:+SSLv3:+TLSv1:-SSLv2:+EXP:+eNULL
</pre>

Create /etc/sasl2/Sendmail.conf with the following content:
<pre>
pwcheck_method:saslauthd
mech_list: PLAIN LOGIN
</pre>

Oh, and you can not use CRAM-MD5 and/or DIGEST-MD5, because you'd need to be able to read the password in plaintext somewhere: http://www.phwinfo.com/forum/comp-mail-sendmail/527486-sendmail-cyrus-sasl-authentication-mystery.html

Sendmail Config Antispam

2025-05-17T07:41:09Z

Pverha10: Created page with "=Don't allow domain hijack= The following configuration part is a replacement for the check_mail ruleSet. It can check whether the domains from LocalDomains within the from-addresses being offered to sendmail are coming from the IP-addresses/ranges that are defined in LocalIP. Please make sure the space in between the left-hand-side and the right-hand-side of the configuration are seperated by tabs. <pre> F{LocalDomains} /etc/mail/LocalDomains F{LocalIP} /etc/mail/Local..."

=Don't allow domain hijack=
The following configuration part is a replacement for the check_mail ruleSet. It can check whether the domains from LocalDomains within the from-addresses being offered to sendmail are coming from the IP-addresses/ranges that are defined in LocalIP. Please make sure the space in between the left-hand-side and the right-hand-side of the configuration are seperated by tabs.

<pre>
F{LocalDomains} /etc/mail/LocalDomains
F{LocalIP} /etc/mail/LocalIP

Scheck_mail
# ruleset 3 makes the input into a normal e-mail address (user<@blaat.nl.>)
R$* $: $>3 $1

# first: get client addr
R$+ $: $(dequote "" $&{client_addr} $) $| $1
# no client_addr, smmsp?
R0 $| $* $: $>"check_mail2" $1
# client_addr in /etc/mail/LocalIP? then go to SLocal_check_mail
R$={LocalIP}$* $| $* $: $1 $| $>"Local_check_mail" $1

# mail from user@domain, domain in /etc/mail/LocalDomains? Then reject, because it is not a local IP
R$*<@$={LocalDomains}.>$* $#error $@ 5.7.1 $: "550 We don't accept junk mail from our own domains"
R$*<@$={LocalDomains}>$* $#error $@ 5.7.1 $: "550 We don't accept junk mail from our own domains"

SLocal_check_mail
Scheck_mail2
R$* $: $1 $| $>"Local_check_mail" $1
R$* $| $#$* $#$2
R$* $| $* $@ $>"Basic_check_mail" $1
</pre>

LocalDomains:
<pre>
localhost
beeblebrox.example.com
foobar.example.com
</pre>

LocalIP:
<pre>
127.
192.168.1.2
10.12.
IPv6:::1
IPv6:2001:dead:beef:
</pre>

Sendmail Config

2025-05-17T07:40:49Z

Pverha10: Created page with "Sendmail Config Antispam Sendmail Config Authenticated SMTP"

[[Sendmail Config Antispam]] 
[[Sendmail Config Authenticated SMTP]]

TRIM Support

2025-05-17T07:40:33Z

Pverha10: Created page with "=ext4= TRIM support is available on ext4. It is activated by adding discard to the list of mount options. So in /etc/fstab it says something like: <pre> /dev/sdx1 /somewhere ext4 defaults,discard 1 1 </pre> You can also discard the unused blocks manually by using: <pre> fstrim -v /somewhere </pre> The resulting amount of space trimmed may not be the same as the actual space freed on the disk. It is safe to repeat this, for example in..."

=ext4=
TRIM support is available on ext4. It is activated by adding discard to the list of mount options. So in /etc/fstab it says something like:
<pre>
/dev/sdx1 /somewhere ext4 defaults,discard 1 1
</pre>
You can also discard the unused blocks manually by using:
<pre>
fstrim -v /somewhere
</pre>
The resulting amount of space trimmed may not be the same as the actual space freed on the disk. It is safe to repeat this, for example in a cronjob.
<pre>
/somewhere: 3 GiB (3267461120 bytes) trimmed
</pre>

=ntfs on windows=
TRIM support is available on ntfs and refs. You can check if it's active by using the following command:
<pre>
fsutil behavior query disabledeletenotify
</pre>
The response will be like this:
<pre>
NTFS DisableDeleteNotify = 0 (Disabled)
ReFS DisableDeleteNotify = 0 (Disabled)
</pre>
A value of 0 means that it's not disabled, so that TRIM support is active.

You can manually trim a drive from PowerShell with:
<pre>
Optimize-Volume -DriveLetter C -ReTrim -Verbose
</pre>

NT6.1 Firewall Stealth Mode

2025-05-17T07:40:20Z

Pverha10: Created page with "In Windows NT6.1 (Windows 7, Windows 2008 R2), the default setting for the Windows Firewall is to drop packets for ports no program is listening on. So for example if you would go to http://nt61machine.zaphod.example.com/ and nt61machine isn't listening on tcp/80 it would take the timeout of your tcp stack's timeout for the port to be found unreachable. To disable stealth mode create the following: <pre> DisableStealthMode = DWORD(0x1) </pre> in 1 or more of the followi..."

In Windows NT6.1 (Windows 7, Windows 2008 R2), the default setting for the Windows Firewall is to drop packets for ports no program is listening on. So for example if you would go to http://nt61machine.zaphod.example.com/ and nt61machine isn't listening on tcp/80 it would take the timeout of your tcp stack's timeout for the port to be found unreachable.

To disable stealth mode create the following:
<pre>
DisableStealthMode = DWORD(0x1)
</pre>
in 1 or more of the following profiles:
<pre>
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\StandardProfile
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
</pre>

DNS-DHCP configuration

2025-05-17T07:39:31Z

Pverha10: Created page with "=IPv4= Configuration file for "dhcpd -4 -cf dhcpd.conf.ipv4 eth0" ==dhcpd.conf.ipv4== <pre> # dhcpd.conf.ipv4 ############################## # default options: authoritative; log-facility local7; ddns-update-style interim; option domain-name "local.lan"; lease-file-name "/var/run/dhcpd/dhcpd.leases.ipv4"; default-lease-time 7200; max-lease-time 28800; update-conflict-detection false; ############################## # dynamic dns updates include "/etc/dhcp-dns.key";..."

=IPv4=
Configuration file for "dhcpd -4 -cf dhcpd.conf.ipv4 eth0"
==dhcpd.conf.ipv4==
<pre>
# dhcpd.conf.ipv4

##############################
# default options:
authoritative;
log-facility local7;

ddns-update-style interim;
option domain-name "local.lan";

lease-file-name "/var/run/dhcpd/dhcpd.leases.ipv4";
default-lease-time 7200;
max-lease-time 28800;

update-conflict-detection false;

##############################
# dynamic dns updates

include "/etc/dhcp-dns.key";

zone local.lan. {
primary 127.0.0.1;
key updatekey;
}

zone 0.0.10.in-addr.arpa. {
primary 127.0.0.1;
key updatekey;
}

##############################
# subnet and host definitions

subnet 10.0.0.0 netmask 255.255.255.0 {
range 10.0.0.128 10.0.0.191;
option routers 10.0.0.1;
option domain-name-servers 10.0.0.1;
option ntp-servers 10.0.0.1;
option broadcast-address 10.0.0.255;
}

group {
host printer {
hardware ethernet 00:de:ad:be:ef:01;
fixed-address 10.0.0.10;
}

host fridge {
hardware ethernet 00:de:ad:be:ef:02;
fixed-address 10.0.0.11;
}
update-static-leases on;
}
</pre>

==dhcp-dns.conf==
And the dhcp-dns.conf file is generated by the following command:
<pre>
dnssec-keygen -a HMAC-MD5 -b 128 -n USER DHCP_UPDATER
</pre>
It creates a file called Kdhcp_updater.+???+?????.key.
Get your hash from the key file and paste it in dhcp-dns-conf, which should look like this:
<pre>
key updatekey {
algorithm hmac-md5;
secret "abcdefghijklmnopqrstuv==";
};
</pre>

==named.conf==
Then all we need is named.conf:
<pre>
options {
pid-file "/var/run/named/named.pid";
directory "/var/named";
listen-on port 53 {127.0.0.1;10.0.0.1;};
allow-query {127.0.0.0/8;10.0.0.0/24;};
};

////////////////////////////////////////////
// include key to receive updates from dhcpd
include "/etc/dhcp-dns.key";

zone "." IN {
type hint;
file "named.root";
};

zone "local.lan" IN {
type master;
file "local.lan.zone";
allow-update { key updatekey; };
};

zone "0.0.10.in-addr.arpa" IN {
type master;
file "0.0.10.in-addr.arpa.rev";
allow-update { key updatekey; };
};
</pre>
=IPv6=
Configuration file for "dhcpd -6 -cf dhcpd.conf.ipv6 eth0"
==dhcpd.conf.ipv6==
<pre>
# dhcpd.conf.ipv6

##############################
# default options:
authoritative;
log-facility local7;

ddns-update-style interim;
#ddns-updates on;
ddns-domainname "local.lan";
option domain-name "local.lan";
option domain-search "local.lan";
option dhcp6.name-servers 2001:dead:beef::;
option dhcp6.sntp-servers 2001:dead:beef::;
dhcpv6-lease-file-name "/var/run/dhcpd/dhcpd.leases.ipv6";
default-lease-time 7200;
max-lease-time 28800;

update-conflict-detection false;

##############################
# dynamic dns updates

include "/etc/dhcp-dns.key";

zone local.lan. {
primary 127.0.0.1;
key updatekey;
}

zone f.e.e.b.d.a.e.d.1.0.0.2.ip6.arpa. {
primary 127.0.0.1;
key updatekey;
}

subnet6 2001:dead:beef::/64 {
range6 2001:dead:beef::80 2001:dead:beef::ff;
}
</pre>

==named.conf==
Stuff that needs to be added to named.conf for IPv6:
<pre>
options {
listen-on-v6 port 53 {2001:dead:beef::;::1;};
query-source-v6 *;
allow-query {2001:dead:beef::/48;::1;};
};

zone "f.e.e.b.d.a.e.d.1.0.0.2.ip6.arpa" in {
type master;
file "2001.dead.beef.ipv6.rev";
// notify yes;
allow-update { key updatekey; };
allow-transfer { none; };
};
</pre>

Rescan scsi

2025-05-17T07:38:53Z

Pverha10: Created page with "To rescan your scsi disks (to look if a disk has been added) you can reread your scsi device by giving the following command: <pre> echo "- - -" >/sys/class/scsi_host/host0/scan </pre> It's very handy if you added a disk in VMware, don't want to reboot and have no flashy thingy disk-tools. If you added space to your first disk you need to rescan your disk with: <pre> echo 1 > /sys/block/sda/device/rescan </pre> If you resized your disk with fdisk for example, but th..."

To rescan your scsi disks (to look if a disk has been added) you can reread your scsi device by giving the following command:

<pre>
echo "- - -" >/sys/class/scsi_host/host0/scan
</pre>

It's very handy if you added a disk in VMware, don't want to reboot and have no flashy thingy disk-tools.

If you added space to your first disk you need to rescan your disk with:

<pre>
echo 1 > /sys/block/sda/device/rescan
</pre>

If you resized your disk with fdisk for example, but the disk was still busy for some reason and the partition table could not be rescanned you can use partprobe, but the following command also works to update your partitions:
<pre>
hdparm -z /dev/sdX
</pre>
If this gives you a "BLKRRPART failed: Device or resource busy" because some partitions on the drive are currently mounted, if you really don't want to reboot, you can try:
<pre>
partx -a /dev/sdX
</pre>
This will force partitions to be added and such.

Sip configuration plnx.nl

2025-05-17T07:38:35Z

Pverha10: Created page with "in /etc/asterisk/ there are 4 files: codecs.conf, extensions.conf, modules.conf and sip.conf. ==codecs.conf== <pre> [speex] quality => 3 complexity => 2 enhancement => true vad => true vbr => true abr => 0 vbr_quality => 4 dtx => false preprocess => true pp_vad => true pp_agc => false pp_agc_level => 8000 pp_denoise => false pp_dereverb => false pp_dereverb_decay => 0.4 pp_dereverb_level => 0.3 [plc] genericplc => true </pre> ==extensions.conf== <pre> [general] [globals..."

in /etc/asterisk/ there are 4 files: codecs.conf, extensions.conf, modules.conf and sip.conf.

==codecs.conf==
<pre>
[speex]
quality => 3
complexity => 2
enhancement => true
vad => true
vbr => true
abr => 0
vbr_quality => 4
dtx => false
preprocess => true
pp_vad => true
pp_agc => false
pp_agc_level => 8000
pp_denoise => false
pp_dereverb => false
pp_dereverb_decay => 0.4
pp_dereverb_level => 0.3
[plc]
genericplc => true
</pre>
==extensions.conf==
<pre>
[general]
[globals]
[phones]
; internal phoneline extensions
exten => 100,1,Dial(SIP/100,120,tr)
exten => 101,1,Dial(SIP/101,120,tr)
exten => 102,1,Dial(SIP/102,120,tr)
exten => 103,1,Dial(SIP/103,120,tr)
exten => 123,1,Answer()
exten => 123,n,Background(demo-congrats)
exten => 123,n,WaitExten()
[default]
; external sip addresses (info@plnx.nl)
exten => info,1,Dial(SIP/103,120,tr)
</pre>
==modules.conf==
<pre>
[modules]
autoload=yes
noload => pbx_gtkconsole.so
noload => pbx_kdeconsole.so
noload => app_intercom.so
noload => chan_modem.so
noload => res_musiconhold.so
noload => chan_alsa.so
noload => chan_oss.so
noload => pbx_dundi.so
noload => pbx_realtime.so
noload => app_directory.so
noload => app_userevent.so
noload => app_voicemail.so
noload => app_voicemail_imap.so
noload => app_voicemail_odbc.so
noload => pbx_ael.so
noload => app_directory_odbc.so
noload => app_zapateller.so
noload => app_zapbarge.so
noload => app_zapras.so
noload => app_zapscan.so
noload => cdr_custom.so
noload => cdr_manager.so
noload => cdr_odbc.so
noload => cdr_pgsql.so
noload => cdr_radius.so
noload => cdr_sqlite.so
noload => chan_agent.so
noload => chan_alsa.so
noload => chan_gtalk.so
noload => chan_iax2.so
noload => chan_mgcp.so
noload => chan_oss.so
noload => chan_phone.so
noload => chan_vpb.so
noload => chan_zap.so
noload => codec_zap.so
noload => format_h264.so
noload => format_jpeg.so
noload => format_mp3.so
noload => format_ogg_vorbis.so
noload => pbx_ael.so
noload => pbx_dundi.so
noload => pbx_loopback.so
noload => pbx_realtime.so
noload => pbx_spool.so
noload => res_config_odbc.so
noload => res_config_pgsql.so
noload => res_jabber.so
noload => res_odbc.so
noload => res_smdi.so
noload => res_snmp.so
noload => res_speech.so
noload => res_watchdog.so
[global]
</pre>
==sip.conf==
* Note: with tlsenable=yes asterisk will automatically listen on tcp/5061

<pre>
[general]
context=default
allowoverlap=no
bindport=5060
bindaddr=::
srvlookup=yes
localnet=192.168.1.0/255.255.255.0
externhost=plnx.nl
language=en
recordhistory=yes
domain=plnx.nl
allowexternaldomains=yes
tlsenable=yes
tlscertfile=/etc/asterisk/cert/plnx.nl.cert.and.key.pem
tlscafile=/etc/asterisk/cert/intermediate.and.caroot.pem

[100]
type=friend
context=phones
secret=100password
host=dynamic
qualify=yes
nat=yes
[101]
type=friend
context=phones
secret=101password
host=dynamic
qualify=yes
nat=yes
[102]
type=friend
context=phones
secret=102password
host=dynamic
qualify=yes
nat=yes
[103]
type=friend
context=phones
secret=103password
host=dynamic
qualify=yes
nat=yes
</pre>

C2960x commands

2025-05-17T07:38:01Z

Pverha10: Created page with "I had to do some debugging work with c2960x stacks. It appeared the flexstack+ cable was broken. I found out with the following command: <pre>remote command all show controllers ethernet-controller stack</pre> And this showed me 'symbol error frames' and 'invalid frames, too large'."

I had to do some debugging work with c2960x stacks. 
It appeared the flexstack+ cable was broken. 
I found out with the following command: 
<pre>remote command all show controllers ethernet-controller stack</pre>

And this showed me 'symbol error frames' and 'invalid frames, too large'.

Cisco core upgrade

2025-05-17T07:37:48Z

Pverha10: Created page with "The manual on how to upgrade a Catalyst 6509e system with sup720-10G supervisor and Virtual switching system(VSS) is located at: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-2SY/config_guide/sup2T/15_2_sy_swcg_2T/enhanced_fast_software_upgrade_efsu.html For an issu on a stackwise-virtual set of Catalyst 9500 switches see: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-10/configuration_guide/ha/b_1610_ha_9500_..."

The manual on how to upgrade a Catalyst 6509e system with sup720-10G supervisor and Virtual switching system(VSS) is located at:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-2SY/config_guide/sup2T/15_2_sy_swcg_2T/enhanced_fast_software_upgrade_efsu.html

For an issu on a stackwise-virtual set of Catalyst 9500 switches see:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-10/configuration_guide/ha/b_1610_ha_9500_cg/configuring_nsf_with_sso.html

SIP records

2025-05-17T07:37:04Z

Pverha10: Created page with "The following SIP SRV DNS records have been added to plnx.nl: <pre> _sip._udp.plnx.nl. SRV 0 1 5060 plnx.nl _sips._tcp.plnx.nl. SRV 0 1 5061 plnx.nl </pre>"

The following SIP SRV DNS records have been added to plnx.nl:

<pre>
_sip._udp.plnx.nl. SRV 0 1 5060 plnx.nl
_sips._tcp.plnx.nl. SRV 0 1 5061 plnx.nl
</pre>

Main Page

2025-05-17T07:36:37Z

Pverha10: