Tuesday, July 25, 2006

Books to read from the FLOSS Weekly podcast:

High stakes no prisoners
Showstopper

Both out of print. Should be fun though. Stories about making new companies and getting products out the door. I should worry about myself that I think these things are interesting.
Dashcam tests uploaded to youtube

A series of dashcam tests driving around a Boston suburb. Camera in question is a USB PC Webcam - SWEEX(?) 6009CIF connected to a Sony Vaio, capturing into Ulead Video Studio 5.0, then rendered into WMV and MPG. Not good enough, but getting there. Need to control exposure better - need fixed exposure, not this camera-controlled, too-slow autoexposure.

Digital still camera mpg



High quality MPG2 - 77M

http://www.youtube.com/watch?v=Anlm_LDFLJc



High quality WMV - 4M

http://www.youtube.com/watch?v=R3gFcyvQf14



Low quality wmv - 2M

http://www.youtube.com/watch?v=N6MQVoeNh6c




Friday, July 21, 2006

First impression of OpenWRT on the WRT54GL

WRT54GL shows up (why did Fry's put REQUIRE SIGNATURE on that?), rip it open, fire it up, flash the OpenWRT firmware on there - took about 5 minutes. Had to reboot the device in order to get it to let me login and change my password. Bet some follks have wasted some time there.

I went this route not so much for the wireless - nice benefit - but for the ability to run a web-manageable iptables firewall instead of the playskool firewall on my BEFSR41. Well, I started hacking around in it and I have only one overpowering impression - disappointment. I know that the underlying iptables mechanism supports the way I want to use this, but the firewall user interface of the default install on OpenWRT is CLUNKY when it comes to defining firewall rules. The UI on my 6 year old sonicwall soho is miles and miles and miles beyond this.

Okay - now the power of open source needs to show itself. There must be another graphical iptables manager that I can throw on there to make my life a little less miserable.

No progress on the fortigate.

Thursday, July 20, 2006

Hedging Bets

Well, the device apparently isn't stolen, as the previous owner helped get the registration transferred at Fortinet. Still isn't working right, but progress of a kind.

Still, I need a better firewall between me and the rest of the internet now, so I hedged my bets and picked up a WRT54GL. Should be here tomorrow, I'll reflash the firmware with openwrt and have a useable firewall until the fortigate comes to life.

Latest project - dashboard-cam? Any suggestions? USB cam, plus laptop ...

Tuesday, July 11, 2006

More Buying Network Hardware on Ebay

When we last left our hero, he had a real ebay-bargain on his hands, if he could only get it to work. For those who were wondering - a Fortigate FGT300 - MSRP somewhere around $7,000. The kindly, no-bs (and thus nameless) support guy at Fortinet allowed me to dl a copy of the OS that I could load onto the device over tftp. Load it up, fire it up - no go. Still the same old issues - no serial number, no access to the web admin page.

A couple of new issues flare up - namely bad blocks on 2 partitions of the hard drive. Do a little poking around and discover that FortiOS is a linux variant. How do I find that out? - by googling FortiOS which immediately points me to an article about how Fortinet are active violators of the GPL. Sigh.

In any case, FortiOS Linux-ness means that I should be able to plug the HD into a linux box, fsck the affected partitions and get it back to health. Also means that I might be able to poke around the filesystem and find the magic incantation needed to "turn this thing on". Or even plug a new HD in and rebake the cake from scratch.

Oh well, every minute I spend on this thing reduces its bargain factor, but what the hell. That's what the tech life is - one long learning experience.

Monday, July 10, 2006

A short word about this blog: There's a lot I could say, and some of it would actually be interesting, but the vast majority falls under one of two categories - Can't or Shouldn't. What appears here falls under the "everything else" category.

Buying cheap network hardware on Ebay

Been looking for a new broadband firewall forever now to replace my Linksys BEFSR41. Since I had to become a pseudo-sysadmin in a previous life, a relatively high-end hardware box is what I had in mind. Could have gone linux box w/iptables, but I don't have a lifetime to devote to this. Executive decision - it has to be appliance.

Okay, so I watch ebay forever and eventually come across an enterprise class appliance at a good price. Google the device and it seems to be something around $1,000 msrp. The vendor is an ebay aggregator (nameless for now) with a %100 rating over 2000 transactions. Looks good. I snipe in and get it at a steal - a real steal.

Fast forward past the 8 days it takes Fedex to deliver the damn thing. The box is here. Crank it up, reset to factory defaults, plug in to the management console, login with the factory default admin pw, so far so good. Setup an IP address, plug in the laptop, go to the web admin screen - oh, so sad, the admin login doesn't get you in. Syslog output claims that I've logged in correctly, but trying to run the setup wizard claims that I don't have the right permissions.

Okay, fart around for a long while to no effect. Remembering that routers/firewalls are typically (especially cisco) are locked down at multiple levels I decide to believe the setup wizard - I don't have the right permissions. So I shoot off a note to tech support basically asking for help. They get right back to me with the backdoor login that allows me to reset the administrator password. This is a fixed username and a password that is a fixed string plus the device serial number.

Okay - fire away - I plop in the specified strings at the console login and, surpise-surprise, no login. I find this puzzling, since the backdoor instructions are definitive, and the serial number is also unequivocally printed on a label on the back of the device. Then I look at the device. For one thing, the model number on the serial label isn't quite right, there should be a "GT" on the end. Okay, possibly trouble. Then I look at the device and realize that the cover's been removed - more than once as some of the screws are almost stripped.

Still, the device does respond appropriately to all CLI instructions, changes IP address on all interfaces appropriately. So what's the deal? I can think of X possibilities:

The damn thing is broken.
The damn thing is stolen.
The damn thing works and I just have to figure out the serial number.

I still think the thing probably works, and just has a "checkered" past. So I google the thing again, and quickly discover that this is actually a $7,000 device that I picked up for a LOT less than that. Hmmm. "Stolen" just moved up a few notches on the list of possibilities.

Okay, so now to push the issue. I haven't done anything wrong, yet, and although I'll try to avoid it, I can afford to lose the entire purchase price if the thing turns out to be hot or broken. So off we go to Fortinet Tech Support to see if they'll help somebody who doesn't have a support contract and DIDN'T PAY RETAIL. Tune in later ...