<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Chris&#039; Blog &#187; howto</title>
	<atom:link href="http://www.cs278.org/blog/tag/howto/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.cs278.org/blog</link>
	<description>“A metal loving, web developing, open source contributor.”</description>
	<lastBuildDate>Sun, 03 Apr 2011 14:36:34 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Sharing photos from N900 to Gallery2</title>
		<link>http://www.cs278.org/blog/2010/02/01/sharing-photos-from-n900-to-gallery2/</link>
		<comments>http://www.cs278.org/blog/2010/02/01/sharing-photos-from-n900-to-gallery2/#comments</comments>
		<pubDate>Mon, 01 Feb 2010 21:49:51 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Maemo]]></category>
		<category><![CDATA[Mobile]]></category>
		<category><![CDATA[Tutorial]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[gallery2]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[n900]]></category>
		<category><![CDATA[sharing]]></category>

		<guid isPermaLink="false">http://www.cs278.org/blog/?p=522</guid>
		<description><![CDATA[I recently treated myself to a new mobile phonecomputer, so I bought a Nokia N900 which eXpansys eventually shipped to me. Now to the point, you can easily share content to Facebook, Ovi, and Flickr but I maintain my own &#8230; <a href="http://www.cs278.org/blog/2010/02/01/sharing-photos-from-n900-to-gallery2/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I recently treated myself to a new mobile <del>phone</del><ins>computer</ins>, so I bought a <a href="http://maemo.nokia.com/n900/" rel="external">Nokia N900</a> which <a href="http://www.expansys.com/" rel="external">eXpansys</a> eventually shipped to me. Now to the point, you can easily share content to <a href="http://www.facebook.com/" rel="external">Facebook</a>, <a href="http://share.ovi.com/" rel="external">Ovi</a>, and <a href="http://www.flickr.com/" rel="external">Flickr</a> but I maintain my own <a href="http://gallery.menalto.com/" rel="external">Gallery2</a> <a href="http://gallery.cs278.org/">installation</a> and I wanted to upload my photos there as well. Luckily the sharing infrastructure is pluggable, so all I needed was a plugin which I <a href="https://garage.maemo.org/projects/g2-sharing/" rel="external">found</a>. <img src='http://www.cs278.org/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Configuring it was a bit of a headache so here is how I did it. <span id="more-522"></span></p>
<p class="note">I assume you are familiar with installing packages and whatnot on the N900/Maemo OS.</p>
<ol>
<li>First off I grabbed the <a href="https://garage.maemo.org/projects/g2-sharing/" rel="external">plugin</a> from the <a href="https://garage.maemo.org/frs/?group_id=1114" rel="external">download page</a>.</li>
<li>I installed it from the terminal using <code>dpkg --install</code>.</li>
<li>Next I entered my Gallery2 Administration interface and added a new user, I called it <var>mobile</var>. I configured it with a random password, which I jotted down to enter into the N900.</li>
<li>After that I enabled the <em>Remote</em> plugin in the administration interface.</li>
<li>I created a <a href="http://gallery.cs278.org/v/photos/mobile/">new album</a>, with the <em>title</em> <var>Mobile</var> (<em>note case is important here</em>)</li>
<li>I adjusted the permissions on the album to permit the <var>mobile</var> user full access, I could probably lock this down a bit to only allow addition of new items but I&#8217;m not too worried.</li>
<li>Next I grabbed my N900 and went to configure the Gallery2 sharing service, this is where the fun began for me. I ended up using tcpdump over ssh to diagnose the problems!</li>
<li>I filled out the form with the following variables:
<dl>
<dt>User name</dt>
<dd><var>mobile</var></dd>
<dt>Passsword</dt>
<dd><var>Pa$Sw0rd</var></dd>
<dt>URL</dt>
<dd><var>gallery.cs278.org</var> (<em>leave off the scheme, https is not supported.</em>)</dd>
<dt>Album</dt>
<dd><var>Mobile</var> (<em>Case is important here, use the same as the album title you set.</em>)</dd>
</dl>
<p>If you get a network error, basically the plugin couldn&#8217;t authenticate to Gallery2 or you didn&#8217;t have the Remote interface enabled. Hopefully this helps somebody and saves you heading for tcpdump and some head scratching.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cs278.org/blog/2010/02/01/sharing-photos-from-n900-to-gallery2/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Punching holes in Firewalls</title>
		<link>http://www.cs278.org/blog/2008/11/16/punching-holes-in-firewalls/</link>
		<comments>http://www.cs278.org/blog/2008/11/16/punching-holes-in-firewalls/#comments</comments>
		<pubDate>Sun, 16 Nov 2008 16:37:09 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://www.cs278.org/blog/?p=402</guid>
		<description><![CDATA[It is a lot easier than you think. OpenSSH, which can only be described as the best utility of all time, is quite a versatile tool one feature people use frequently is port forwarding. This allows you to open a &#8230; <a href="http://www.cs278.org/blog/2008/11/16/punching-holes-in-firewalls/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>It is a lot easier than you think.</p>
<p><a href="http://www.openssh.com/" rel="external">OpenSSH</a>, which can only be described as the best utility of all time, is quite a versatile tool one feature people use frequently is port forwarding. This allows you to open a port on your computer that forwards the data over the SSH connection to the destination you specify, very useful when needing access to the an intranet web server when you don&#8217;t have a proper VPN set up for example. However, SSH can also do this in reverse! It opens a listening port up on the remote machine which then relays data to the destination you specify. For example you can SSH into a remote host and get SSH to open a port on that host which relays data back to the SSH port on the machine you are connection from, thereby allowing SSH access to a machine where it would normally be impossible.</p>
<p>A practical example:</p>
<pre class="terminal">chris@ktulu:~$ ssh sandman.cs278.org -R 2222:localhost:22</pre>
<p>This connects to the server <var>sandman.cs278.org</var> and opens port 2222 which forwards traffic to <var>localhost:22</var> (localhost is the machine I am connecting from). Once logged into the server I can do this:</p>
<pre class="terminal">chris@sandman:~$ ssh localhost -p 2222</pre>
<p>Which opens a connection back to the remote machine.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cs278.org/blog/2008/11/16/punching-holes-in-firewalls/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Blocking SSH Brute Force attempts using iptables</title>
		<link>http://www.cs278.org/blog/2008/01/12/blocking-ssh-brute-force-attempts-using-iptables/</link>
		<comments>http://www.cs278.org/blog/2008/01/12/blocking-ssh-brute-force-attempts-using-iptables/#comments</comments>
		<pubDate>Sat, 12 Jan 2008 15:53:33 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Debian]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://www.cs278.org/blog/2008/01/12/blocking-ssh-brute-force-attempts-using-iptables/</guid>
		<description><![CDATA[After my recent break in I have looked into ways of protecting SSH and my server resources. I employ fail2ban on my main server, it has the resources to run such a programme &#8211; my Linksys NSLU2&#8242;s however do not. &#8230; <a href="http://www.cs278.org/blog/2008/01/12/blocking-ssh-brute-force-attempts-using-iptables/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>After my recent <a href="http://www.cs278.org/blog/2008/01/10/confession/">break in</a> I have looked into ways of protecting SSH and my server resources. I employ <a href="http://www.fail2ban.org/" rel="external">fail2ban</a> on my main server, it has the resources to run such a programme &#8211; my Linksys NSLU2&#8242;s however do not. The solution is to use iptables to limit the number of connections any host can make in a given time frame. I wrote up a quick <a href="http://noc.cs278.org/wiki/HowTo:Kernel/Block_SSH_Scans">how to</a> on this over at my wiki. Enjoy.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cs278.org/blog/2008/01/12/blocking-ssh-brute-force-attempts-using-iptables/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

