Restarting dhcpd on Ubuntu 11.04

  

Restarting dhcpd on Ubuntu 11.04 (and later I presume) is easy, it's just that the Ubuntu Gods have decided to rename it. Since I was running a quite old server I had to learn about the service command as well... Fixing a shortage of free leases took way too long ;-)

service isc-dhcp-server restart
Comments

Bliksem!

  

20110910-_MG_4084.jpg

20110910-_MG_4226.jpg

20110910-_MG_4243.jpg

20110910-_MG_4221.jpg

20110910-_MG_4211.jpg

20110910-_MG_4218.jpg

20110910-_MG_4256.jpg

20110910-_MG_4244.jpg

Comments

Noordwijk

  

Samen met mijn zus en onze ouders naar Noordwijk geweest. Eigenlijk alleen wat leuke foto's geschoten bij nacht:

20110902-_MG_3962.jpg

20110902-_MG_3964.jpg

20110902-_MG_3988.jpg

20110902-_MG_4011.jpg

20110902-_MG_4023.jpg

20110902-_MG_3989.jpg

20110902-_MG_4005.jpg

20110902-_MG_3974.jpg

Comments

Vakantie 2011

  

Al weer bijna een week terug van vakantie is het hoogste tijd voor de foto's, de video komt later wel, daar zit nog veel meer tijd in ;-)

Goed, dit jaar dus van Maastricht naar Basel en toen van Basel naar Nice gefietst. Mooie route, mooie landschappen. Helaas door omstandigheden (weer, tijd van de dag, dag van de week) de Simplon pas niet durven/kunnen fietsen.

Mooie campings gehad, aftandse campings gehad en, zoals ik eerder tweette:

Ik vraag me af hoeveel post ik deze kerst ga krijgen nav mijn verblijf op "hollandse" vakantiefabrieken (eh campings) in .lu en .ch

Van die campings met te veel medelanders in de vreemde. Dat blijft me toch tegenstaan, campings met > 80% landgenoten. Overigens op een camping met een heel raar soort sanitair wel verschrikkelijk goed gegeten, het water loopt me nog in de mond bij de gedachte aan die Penne. Omnomnomnom.

20110719-_MG_3786.jpg

20110719-_MG_3789.jpg

20110721-_MG_3796.jpg

20110721-_MG_3797.jpg

20110722-_MG_3798.jpg

20110722-_MG_3804.jpg

20110722-_MG_3808.jpg

20110722-_MG_3810.jpg

20110722-_MG_3812.jpg

20110722-_MG_3821.jpg

20110723-_MG_3830.jpg

20110723-_MG_3833.jpg

20110723-_MG_3834.jpg

20110723-_MG_3836.jpg

20110723-_MG_3843.jpg

20110726-_MG_3851.jpg

20110726-_MG_3858.jpg

20110727-_MG_3859.jpg

20110727-_MG_3861.jpg

20110727-_MG_3863.jpg

20110727-_MG_3864.jpg

20110727-_MG_3865.jpg

20110728-_MG_3870.jpg

20110728-_MG_3873.jpg

20110728-_MG_3877.jpg

20110728-_MG_3879.jpg

20110729-_MG_3882.jpg

20110729-_MG_3886.jpg

20110729-_MG_3889.jpg

20110729-_MG_3891.jpg

20110731-_MG_3899.jpg

20110731-_MG_3900.jpg

20110731-_MG_3903.jpg

20110801-_MG_3904.jpg

20110801-_MG_3908.jpg

20110801-_MG_3910.jpg

20110801-_MG_3916.jpg

20110801-_MG_3917.jpg

20110801-_MG_3919.jpg

20110802-_MG_3924.jpg

20110802-_MG_3926.jpg

20110802-_MG_3928.jpg

20110802-_MG_3935.jpg

20110802-_MG_3937.jpg

20110802-_MG_3938.jpg

20110802-_MG_3941.jpg

Comments

Wakeboarden Appeltern

  

Paar weken geleden met wat vrienden en aanhang te wakeboarden geweest in Appeltern. Erg leuk om te doen. Natuurlijk foto's gemaakt.

_MG_2906.jpg

_MG_2910.jpg

_MG_2936.jpg

_MG_2941.jpg

_MG_2945.jpg

_MG_2968.jpg

_MG_2984.jpg

_MG_2986.jpg

_MG_3015.jpg

_MG_3017.jpg

_MG_3028.jpg

_MG_3087.jpg

_MG_3091.jpg

_MG_3116.jpg

Comments

#detwitterrit

  

#detwitterrit from Andreas Sikkema on Vimeo.

Comments

Maan

  

_MG_2617

_MG_2630

Comments

Looong time coming, the LEJOG map

  

A couple of weeks ago I received a Tweet asking what route we used when we did LEJOG (Land's End to JohnO'Groats). I had already done the boring bit, that is to say drawing the maps in Google Earth, but never got around to share most of them. I finally, after almost three years, cleaned them up and added all the single files to one big KML for you to enjoy.

Comments

Cisco SIP fraud protection in IOS 15.1T

  

A couple of weeks ago a colleague thought it'd be nice to try and run a completely new version of IOS on our test AS5350XM "voice" gateway. It ran without any issues but since the ISDN30 connected to it is hardly used we never really tried to put any calls through it. That is until I had to test some ISDN30 equipment and lacking a PBX the 5350 was the next best thing to test it with.

So I tried to build a SIP > ISDN > SIP path with two ISDN30 gateways back to back. Calling out from the 5350 worked like a charm, but I couldn't get incoming calls towards the gateway to work. I completely redid all the dial peers, number translations, the works. I was completely lost, even turning on debug didn't appear to show any useful info. It matched the correct dial peers but still the calls coming in on the SIP interface were not routed to the ISDN30 interface.

I started spelling every single line of debugging I could enable and got nowhere until I found something like the following:

000184: *Apr 30 14:38:57.251: //3/F146D6B0800C/CCAPI/cc_process_call_setup_ind: CCAPI handed cid 3 with tag 1002 to app "_ManagedAppProcess_TOLLFRAUD_APP"

I knew I hadn't installed this application on the gateway, so where did it come from? I googled for it and found a nice article at the Cisco website called Toll-Fraud Prevention Feature in IOS Release 15.1(2)T. This article describes how IOS 15.1 will now by default reject all incoming SIP calls until the IP address sending the initial INVITE has been explicitly added as something I'd call a "trusted peer".

One nice piece of wishful thinking from Cisco is this:

When booting a version of IOS with the toll-fraud prevention application, this is printed to the device's console during the boot sequence:

    Following voice command is enabled:                     
       voice service voip                                    
        ip address trusted authenticate                      

     The command enables the ip address authentication       
     on incoming H.323 or SIP trunk calls for toll fraud     
     prevention supports.                                    

     Please use "show ip address trusted list" command       
     to display a list of valid ip addresses for incoming    
     H.323 or SIP trunk calls.                               

     Additional valid ip addresses can be added via the      
     following command line:                                 
       voice service voip                                    
        ip address trusted list                              
         ipv4 <ipv4-address> [</ipv4><ipv4 network-mask>] </ipv4>

As if these things all have serial consoles attached to them.

Anyway what's the easiest way to recognize calls being rejected like this?

Logging as mentioned above on the 5350 (or one of its sisters, the 5400, 5800 or any other Cisco "voice" capable hardware

INVITE messages being replied to with a 403 Forbidden with a Reason header containing a "Q.850 disconnect cause value of 21, which represents 'Call Rejected'"

Comments

Amsterdam DSLR Meetup foto's

  

Comments

Prettige Kerstdagen en een Gelukkig 2011

  

Prettige Kerstdagen en een Gelukkig 2011

Update: Deze foto is nu ook onderdeel van een set met al mijn "electrische kerstkaarten" tot nu toe

Comments

Amsterdam DSLR Meetup: Different point of view

  

Afgelopen zaterdag was de eerste (continentale) Europese DSLR meetup. Een grote groep "filmmakers" kwam samen om van elkaar te leren en met elkaar te praten over DSLR en video maken. Met mijn Gopro HD Hero was ik ook welkom en heb onderstaande impressie kunnen maken:

Amsterdam DSLR Meetup: Different point of view from Andreas Sikkema on Vimeo.

De Vimeo groep bevat nog veel meer (en veel en veel betere) video's van de dag.

Comments

Lage Vuursche in de zon

  

Het lijkt al weer tijden geleden, maar ik had nog wat video geschoten van de MTB route Lage Vuursche toen de zon nog scheen en je in korte mouwen kon fietsen....

Muziek is van Moby en geheel legaal \o/

Comments