Aleš Zemene's Blog

OpenWrt MAC filter

Ales Zemene — Tue, 27 Mar 2012 23:35:24 GMT

I needed to filter out MAC's that are not members, so i run this script in cron periodicaly, to check for new entries in dhcp.leases, compare them against list of members, and let iptables to drop their connections.
Since sh is not exactly bash, and i did not found better solution on web, i had to sort out this problem by this dirty but simple hack:

i have file called members which looks like this:

xx:xx:xx:xx:xx:xx # username1 user1@somemail.com, phone: xxxxxxxxxx,
xx:xx:xx:xx:xx:xx # username2 user2@somemail.com, phone: xxxxxxxxxx,
xx:xx:xx:xx:xx:xx # username2 user3@somemail.com, phone: xxxxxxxxxx,
... etc

and script that uses iptables, awk, grep, cat, sort, uniq ... i could find even more tools to make it even more complicated, but it is late.
Directory must be writeable.

#!/bin/sh
echo restarting firewal ...
/etc/init.d/firewall restart
echo cleaning clean ...
rm clean

for MEMBER in $(cat members | awk '{print $1}' | sort | uniq)
do
echo ${MEMBER} >> clean
iptables -I INPUT -m mac --mac-source ${MEMBER} -j ACCEPT
done

for LEASE in $(cat /tmp/dhcp.leases | awk '{print $2}' | sort | uniq)
do
if [[ `cat clean | grep -i ${LEASE}` ]]
then
echo MATCH lease ${LEASE} already in members OK
else
echo not member mac: ${LEASE}, filtering out !!!
#iptables -I INPUT -m mac --mac-source ${LEASE} -j DROP
iptables -t nat -A PREROUTING -m mac --mac-source ${LEASE} -j DNAT --to-destination 192.168.1.1
fi
done

echo `date` > /tmp/mac_filter.log

to run it periodicaly as cron job every minute:
*/1 * * * * /root/mac_filter.sh > /dev/null

do not forget to do:
/etc/init.d/cron enable
/etc/init.d/cron start (or restart)

also cron is probably not started automatically after reboot, you have to create init script if you want it.

This is not the best solution - to reload firewall every minute, but this keeps it bit more difficult for unregistered connections with new MAC addresses.
Remember that this is just very weak protection, spoofing MAC numbers is ultra easy. Purpose of this filter for me was mainln to find out who is in my network, and make them register. Most of the time i remove this filter anyway.

pulse audio

Ales Zemene — Wed, 12 Oct 2011 08:15:06 GMT

#!/bin/bash

killall pulseaudio ; sleep 1 ; pulseaudio -n -F ~/.pulse/pulsejack.pa -D; pactl load-module module-jack-sink ; pactl load-module module-jack-source

# load-module module-jack-sink channels=2 channel_map=left,right
# load-module module-jack-source channels=2 channel_map=left,right

Timemachine

Ales Zemene — Tue, 08 Mar 2011 00:36:07 GMT

#!/bin/bash

killall pulseaudio &
killall mplayer &
killall vlc &
killall jackd &
killall qjackctl &
killall hdspmixer &
killall timemachine &

hdsploader &
sleep 3
jackd -d alsa &
sleep 1
hdspmixer &
sleep 1
qjackctl &
sleep 2

timemachine -c 2 -t 300 -p mix -f wav &
sleep 3
jack_connect system:capture_1 TimeMachine:in_1
jack_connect system:capture_2 TimeMachine:in_2
jack_connect system:capture_7 TimeMachine:in_1
jack_connect system:capture_8 TimeMachine:in_2

routing pulse audio to jack audio, enabling sound for flash in mozilla:

Ales Zemene — Tue, 08 Mar 2011 00:06:42 GMT

This is quick reminder what i need to get working sound applications which are using normally pulse audio, routing it all to jack audio connection kit, and also to get sound in flash movies in firefox working.

you need libflassupport:
git clone http://git.0pointer.de/repos/libflashsupport.git/
cd libflashsupport
./bootstrap.sh
make
sudo make install
more instruction to get libflashsupport :
http://www.pulseaudio.org/wiki/FlashPlayer9Solution

sudo apt-get install pulseaudio-module-jack
echo "autospawn = no" > ~/.pulse/client.conf

put in your startup script:

killall pulseaudio; sleep 1; pulseaudio -n -F ~/.pulseaudio/pulsejack.pa -D; pactl load-module module-jack-sink; pactl load-module module-jack-source

pavucontrol

more detailed info can be found all over the internet

Whitelabel.name production

Ales Zemene — Thu, 24 Feb 2011 13:05:15 GMT

Whitelabel.name production

New web interface for this project, created in Drupal.

memories of Kusaj

Ales Zemene — Sun, 24 Oct 2010 15:17:29 GMT

Today kocour(tomcat) Kusaj who lived with me more than two years died under the wheels of car. Not that i would expect him to be here infinitely, but it is sad.
He was excellent cat DJ, and very good companion with fighting, bitting and scratching. Coolest cat i've ever met.

ata bus errors {DRDY} with rt kernel 2.6.29

Ales Zemene — Tue, 02 Jun 2009 10:06:59 GMT

http://marc.info/?l=linux-kernel&m= ... 94&w=2

http://ata.wiki.kernel.org/index.php/Li ... r_messages

mutt

Ales Zemene — Wed, 11 Mar 2009 16:21:19 GMT

In the case that the pass phrase was mistyped when it was asked for, Mutt seems to be "hung", but that's not true, it is waiting for it to be retyped. To do this, push the key and delete the pass phrase from memory with F. Next we repeat the message sending with ("y") and retype the pass phrase.

grep

Ales Zemene — Sat, 07 Feb 2009 20:36:33 GMT

export GREP_COLOR=31
alias grep='grep --color=auto'

RME Hammerfall Multiface on Debian

Ales Zemene — Thu, 14 Aug 2008 14:43:46 GMT

FIRST : we need a real time kernel

wget http://www.eu.kernel.org/pub/linux/kern ... 26.tar.bz2
wget http://www.kernel.org/pub/linux/kernel/ ... 26-rt1.bz2
tar xjvf linux-2.6.26.tar.bz2
cd linux-2.6.26
bzcat ../patch-2.6.26-rt1.bz2|patch -p1
make menuconfig

### Processor type and features> Preemption Mode (Complete Preemption (Real-Time))
### Processor type and features>Timer frequency (1000 HZ)

make-kpkg clean
make-kpkg --revision "01.rt" --initrd kernel_image
cd ../
dpkg -i linux-image.....blah.blah.deb

reboot and hope ...

Troubles configuring RME Hammerfall multiface (II) ?
Tired of the
"Unable to open file '/usr/share/alsa/firmware/hdsploader/multiface_firmware_rev11.bin'
for reading"
message ?

then those are your friends :

mkdir -p /usr/share/alsa/firmware/hdsploader
cd /usr/share/alsa/firmware/hdsploader
wget http://www.linuxproaudio.org/downloads/ ... _rev11.bin

and further friends of the friends :

alsaconf
hdsploader
hdspmixer

there is even more friends on alsa-user@lists.sourceforge.net

************************************

added to /etc/security/limits.conf :

@audio - rtprio 99
@audio - nice -10
@audio - memlock 500000

adduser XXXX audio

qjackctl :

x realtime

priority : default
frames/period : 1024
sample rate : 44100

config : .screenrc

Ales Zemene — Thu, 13 Mar 2008 09:03:18 GMT

autodetach on # default: on
crlf off # default: off
deflogin off # default: on
# defsilence off # default: off
hardcopy_append on # default: off
# nethack on # default: off
startup_message off # default: on
vbell on # default: ???
termcapinfo xterm ti@:te@
termcapinfo linux "ve=\E[?25h\E[?17;0;64c"
termcapinfo rxvt-cygwin-native ti@:te@
defscrollback 1000 # default: 100
# msgminwait 3 # default: 1
silencewait 15 # default: 30
#caption always "%>%{yr}%?%-Lw%?%{yk}%n*%f %t%?(%u)%?%{yr}%?%+Lw%?"
caption always "%>%{WB}%?%-Lw%?%{Wk}%n*%f %t%?(%u)%?%{WB}%?%+Lw%? %77=%{rB} %H %D %M %d %94=%{WB}%c%="
#hardstatus alwayslastline "%{yk}SCREEN SESSION <========================> %50=%{ry} hostname : %H %85=%{ry}%M%d %92=%{yr}%c%="
sorendition rw # red on white
# sorendition kG # black on bold green
activity "%C -> %n%f %t activity!"
bell "%C -> %n%f %t bell!~"
pow_detach_msg "screen session power detached "
vbell_msg " *beepnulo_to* "
bind .
# bind ^\ quit # default
bind ^\
# bind \\ quit # default
bind \\
# bind h hardcopy # default
# bind h
# bind ^h ??? # default
# bind ^h
# bind } history # default
# bind }
bind L screen -t LINKS.ice links http://ice.mur.at
bind M monitor # default!
bind P paste .
bind X lockscreen
bind Z screen -t MAIL 1 ssh hornet.mur.at
msgwait 3
version
msgwait 2
screen -t r00t 0 su
screen -t ENCODE 1 bash
screen -t PYTHON 2 bash

Nvidia Debian

Ales Zemene — Wed, 05 Mar 2008 15:19:13 GMT

##########################################################################
Tue May 27 2008 :
apt-cache show nvidia-kernel-common
should be the one from sid :
vim /etc/apt/sources.list :
deb http://ftp.zcu.cz/mirrors/debian/ sid main non-free
deb http://ftp.zcu.cz/mirrors/debian/ sid contrib
deb-src http://ftp.zcu.cz/mirrors/debian/ sid main non-free
apt-get update
apt-get install nvidia-kernel-common
update-pciids && apt-get install module-assistant nvidia-kernel-source && m-a prepare && m-a a-i nvidia && apt-get install nvidia-glx && depmod -a && modprobe nvidia && dpkg-reconfigure xserver-xorg

irc.freenode.org #debian
/m dpkg why is nvidia-glx not in testing

##########################################################################
since info on http://wiki.debian.org is mostly outdated about this topic ...

better to ask dpkg bot on #debian irc.freenode.org :
/m dpkg nvidia_post_etch

04:15PM !tell ales about nvidia_post_etch
04:15PM [dpkg(n=dpkg@unaffiliated/dpkg)] wols wants you to know: nvidia_post_etch is probably update-pciids && apt-get install module-assistant nvidia-kernel-source && m-a prepare && m-a a-i nvidia && apt-get install nvidia-glx && depmod -a && modprobe nvidia && dpkg-reconfigure xserver-xorg

With damn nvidia installer i had problems on testing, tried on unstable, still had no driver module after reboot, installing it after each reboot is not what i want.
nvidia-installer --uninstall
aptitude remove $(apt-cache search nvidia | grep nvidia | cut -d' ' -f 1)

other interesting info from dpkg :
/msg dpkg nvidia one-liner
04:32PM [dpkg(n=dpkg@unaffiliated/dpkg)] [nvidia one-liner] apt-get install nvidia-kernel-2.6-`uname -r | sed 's,.*-,,g'` nvidia-settings nvidia-glx && dpkg-reconfigure xserver-xorg

(if you're on amd64, also install nvidia-glx-ia32. Using sarge? Ask me about . Homegrown or kernel from testing/sid: . If you're using a Geforce2 or older: .

MPLAYER

Ales Zemene — Fri, 10 Aug 2007 15:50:17 GMT

mplayer -vo fbdev ~/path/to/your_video.avi

-vf scale=1280:1024

sudo mplayer -vo svga -vf scale=1024:768 video/killer.avi
MPlayer 1.0rc1-4.1.3 (C) 2000-2006 MPlayer Team
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (Family: 15, Model: 4, Stepping: 1)
CPUflags: MMX: 1 MMX2: 1 3DNow: 0 3DNow2: 0 SSE: 1 SSE2: 1
Compiled for x86 CPU with extensions: MMX MMX2 SSE SSE2

Playing video/killer.avi.
AVI file format detected.
VIDEO: [FMP4] 320x240 24bpp 30.000 fps 1263.2 kbps (154.2 kbyte/s)
Clip info:
Software: Lavf51.12.1
svgalib: Cannot get I/O permissions.

FFMPEG

Ales Zemene — Fri, 20 Jul 2007 12:43:50 GMT

svn checkout svn://svn.mplayerhq.hu/ffmpeg/trunk ffmpeg

cd ffmpeg

debian with libmp3lame, libamrnb and libamrwb installed in /usr/local/lib/,
i had to copy them in /usr/lib/ and use --libdir=/usr/lib

#### this might be not needed : #######################
wget http://ales.mur.at/ffmpeg/amr-fixed.patch.bz2
bzcat amr-fixed.patch.bz2|patch -p1
#######################################################
./configure --enable-amr_nb-fixed --enable-amr_wb
./configure --enable-shared --prefix=/usr --libdir=/usr/lib --mandir=/usr/share/man --enable-gpl --enable-libmp3lame --enable-libamr-nb --enable-libamr-wb

make
make install (as root)

ffmpeg -i videoin.avi -s qcif -r 12 -ac 1 -ar 8000 -b 30 -ab 12 videoout.3gp

chat - irc.freenode.org #ffmpeg
mailing list - http://lists.mplayerhq.hu/mailman/listinfo/ffmpeg-user