PirateBox creation based on TP-Link MR3020

Some days ago I bought a TpLink MR3020 with the objective to create a pirate box and experience this kind of solution. I already tried to do a stuff like this some month ago based on a netgear wifi router having the capability of sharing usb storage. But the system was not easily portable and not extensible.

The proposed solution, based on this low cost router is an interesting opportunity to made the solution mobile.

Continue reading

UTF-8 email, body and title encoding

When sending an email with an application or sendmail, using an UTF-8 encoding, some attributes must be given if you expect the email to be displayed correctly by the reader.

To start, to get the right display in the body of the email, you need to specify the encoding in the header fields by adding :

Content-Type: text/plain; charset="UTF-8" 
Content-Transfer-Encoding: 8bit

The subject is not proceed using this attribute and it must be written in a different way to be interpreted correctly:

Subject: =?utf-8?Q?éssai=20de=20sujet?=

Here, the “?utf-8?Q?” indicates what encoding to be used in the tittle, then it is followed by the title itsleft “Q” indicates that the title is in plain text. The limit of this is that the title can’t contain space, tabs or ? without being escaped firstly. The Title is ended by termination sequence “?=

The other solution to manage title more easily is to use a base64 encoding with the “B” encoding type instead of “Q”

Subject: =?utf-8?B?base64EncodedTitle?=

This way is more easy to encode if your system handle a base64 encoding function.

FreeNas and OpenFiler experimentation

 

/!\ Article in progress, not yet finish /!\

As I needed to create a iSCSI share for some VM on a private subnetwork, instead of using a simple NFS server configuration, I was looking to test a NAS distribution. I saw on Internet two different distributions, one based on OpenBSD named FreeNas (here in version 8), the other based on Linux OpenFiler (here in version 2.99). I will test both for creating this share.

Continue reading

Oracle VM – experimentation

/!\ Article in progress, not yet finish /!\

I was looking  to test Oracle Linux since Open World, mostly because I’m curious about OVM and the nice integration with Enterprise manager 12c as a global system to manage hardware, operating system, hypervisor, virtual machine on demand and middle-ware + software.

Continue reading

Activate Masquerading (NAT) on Linux router

To activate NAT on a Linux Box used as a router, just use the following line :

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

eth0 is the network interface able to access Internet directly

Then you can list the NAT entry in iptables with the following command

# iptables -t nat -L

You can get more details with:

# iptables -t nat -L -v

The conntrack tool also help to see what happen in the NAT

# conntrack -L --src-nat / --dst-nat

Latency impact on NFS link

Interesting document about NFS and iSCSI performance over latency, even if it is new a new document, the study made is really complete and interesting. As I was mostly interested on the performance of NFS over a WAN access with a high latency, I would summarize it by concluding that the maximum performance of file transfer over NFS is not so far the following list:

Time to read 128MB / latency (read is the worst case)

  • 10 ms latency requires 200s, max bandwidth is about 640KB/s – 5.12Mbits/s
  • 20 ms latency requires 300s, max bandwidth is about 427KB/s – 3.41Mbits/s
  • 30 ms latency requires 500s, max bandwidth is about 256KB/s – 2.05Mbits/s
  • 50 ms latency requires 800s, max bandwisth is about 160KB/s – 1.28Mbits/s
  • 90 ms latency requires 1600s, max bandwidth is about 80KB/s – 640Kbits/s

For details and much more information, take a look to the source document : http://lass.cs.umass.edu/papers/pdf/FAST04.pdf

Paramètres clefs de configuration des LPAR AIX

Le partitioning logique AIX (LPAR) est défini par différents settings qu’il est intéressant de comprendre, entre autre par rapport au calcul des licences lorsque celles-ci sont basées sur le nombre de cores.

Continue reading

Faille WPS – nouvel outil : Reaver

Un nouvel outil permettant l’attaque de résaux wifi protégés par WPS est sorti. Son petit nom est reaver. Il permet de tester différentes clefs sous la forme d’une attaque de type brute force. La methode employé permet de résoudre cette attaque en un maximum de 11.000 tests, ce qui est très peu.

Continue reading