Posts filed under Internet

Private IP Addresses Showing In Public Webserver Logging

Today I was spelunking through some logging on the Squarespace backend, and found something peculiar.

The IP address marked by the red frame is a so-called private IP address.

In the Internet addressing architecture, a private network is a network that uses private IP address space, following the standards set by RFC 1918 and RFC 4193. These addresses are commonly used for home, office, and enterprise local area networks (LANs), when globally routable addresses are not mandatory, or are not available for the intended network applications.

These shouldn't show up in the logging of a webserver which is connected to the Internet. Further investigation revealed several other IP addresses;

07/29 at 10:29:20 AM 10.16.121.170
07/27 at 03:46:44 PM 10.31.238.253
07/27 at 08:27:18 AM 10.197.128.25
07/27 at 06:47:17 PM 10.31.245.14
07/25 at 02:08:42 PM 10.86.114.66
07/24 at 12:15:31 PM 10.71.209.105
07/28 at 02:27:47 AM 192.168.100.2
07/27 at 11:11:14 PM 192.168.14.63
07/27 at 03:28:20 PM 192.168.1.24
07/27 at 03:14:36 PM 192.168.7.17
07/27 at 08:25:04 AM 192.168.26.218
07/25 at 05:07:24 PM 192.168.10.2

I opened a support ticket @Squarespace to check if these might be internal addresses. If so, they are using a lot of internal networks.

Posted on July 29, 2012 and filed under Internet, Website.

Hostname and (Apple) Mail Server Dependencies

My Mac Mini with OSX Server had this thing that the hostname (as displayed in the Terminal app) would change after a reboot. Something that annoyed me tremendously. Thankfully there are several (Terminal) commands to change the hostname (back) to its 'original name'.

Since I wanted to change my hostname PERMANENTLY, I used the following command:

sudo scutil –set HostName new_hostname

This worked perfectly. Or so I thought.

Posted on June 29, 2011 and filed under Apple, Internet, Tips'n Tricks.

Microsoft Internet Explorer and IP Addresses in Certificate SAN

A fairy long title, but it describes exactly what this post is about. Once again a post about a Microsoft product and the way it works (or rather doesn't work) with your average Internet standard.

This week I was busy with RADIUS, 802.1x, PKI and the protection of websites with SSL encryption. For the implementation of 802.1x, I needed a PKI environment, so I used the Microsoft Certificate Services for that purpose. Along the way, I needed an SSL certificate for an internal website, but this particular website needed to work properly based on different FQDN's and or IP addresses without throwing warining or errors regarding the SSL connection.

The way to do this is to add Subject Alternative Names (SAN) to the certificate. This enables you to access the website in different ways, e.g.;

  • Access a webmail host from the internet based on its official FQDN (https://webmail.somedomain.com)
  • Access the same webmail host from the inside of the corporate lan based on its internal name (https://webmail.acme.local)
  • And access the host from legacy DNS-unaware software on its IP address (https://192.168.1.254)

Torrents and Usenet Downloading with an iPhone

No idea if this is a new feature introduced with a newer version of Dropbox, but it is possible to download nzb and torrent files through the Mobile Safari app.

What you need is the following (for a complete downloading system):

  • A Dropbox account (the 2GB version is free!!!!)
  • A torrent application with the possibility of using a so-called watch-folder (e.g. Vuze)
  • An usenet application with a watch-folder capability (e.g. SabNZBd+)
  • An iPhone with the Dropbox app.

First you need to setup Dropbox. This is the easiest part. Just create two folders called 'NZB' and 'Torrent'. These folders will contain the downloaded torrent and nzb files.

After that you need to configure the Vuze and/or NZB download application to use a watch-folder.
I use these apps on my Mac Mini server. So it's operational 24/7.

Posted on May 19, 2011 and filed under Apple, Internet, Software, Tips'n Tricks, iPhone.

Google Apps Harassment / Spam

My mailbox receives e-mails from Google on a daily basis. All these e-mails are regarding the 'upgrade' of MY Google Apps account. The problem is, I don't have a Google Apps account. I have a Google Analytics account for some of my websites (this being one of them).

At first they say you have an account.

Google Apps Spam

And when you try to login to that account, they say that I don't have an account.

So explain this; why do I get upgrade e-mails for something I don't have?

A typical example of using existing database information for luring people into getting other services.

Posted on April 22, 2011 and filed under Annoying, Internet, Personal.

AVN Fritzbox and the 'Exposed Host' Setting

The Fritzbox 7340 is the only real available VDSL modem/router in the Netherlands. Too bad, since it has some bugs (but what piece of software hasn't???). Fortunately, the router works well, just as long as you use it as the only networking device in your (small) network.

In the last couple of days I've been busy to add the Juniper SRX100 branch firewall to my local home network. The idea was the following:

  • The Fritzbox (FB) will remain the Internet router
  • My web/mail/ssh server is placed behind the SRX100
  • All the individual portforward rules in the Fritzbox are directed to the SRX100 by selecting the 'Exposed Host' in the FB.
Posted on March 11, 2011 and filed under Annoying, Hardware, Internet, Security, Tips'n Tricks.

iPhone 3GS, iOS4 and MMS not working

I ran into a problem with MMS after I upgraded to iOS4 on my iPhone 3GS. Somehow, it was impossible to send MMS messages on the KPN cellular network. Searching the Internet revealed that I wasn't the only one.

The general consensus to solve this issue was a restore of the iPhone and not to restore old settings, but start from scratch.

After doing this, MMS still couldn't be sent from the iPhone, so time to do some more research. It turned out that KPN must have change the MMS settings, since my old MMS settings weren't correct anymore. So try these settings BEFORE you restore your iPhone. It might save you a lot of work and time.

Note: the following settings are for the Dutch KPN Network, and probably won't work on other networks / carriers.

Old Settings

APN: portalmmm.nl
Username:
Password:
MMSC: http://mp.mobiel.kpn/mmsc
MMS Proxy: 10.10.100.50:5080
MMS Max Message Size: 300000

New Settings

APN: portalmmm.nl
Username: kpn
Password: kpn
MMSC: http://mp.mobiel.kpn/mmsc
MMS Proxy: 10.10.100.20:5080
MMS Max Message Size: <leave empty>

Notice the differences? Anyway, with these new settings, MMS worked again.

KPN does have a page dedicated to the iPhone (in Dutch), regarding the Internet, and MMS settings. Just check those pages for the lastest settings.

I've updated the original page on my blog with the new settings.

Posted on July 23, 2010 and filed under Apple, Internet, Tips'n Tricks, iPhone.

Backupify Cloud Backup

There's a new service around called Backupify. It's an online backup system for your online identities/services (free usage till January 31, 2010). It provides automated online backup for the following online services:

  • Gmail
  • Twitter
  • Google Docs
  • Flickr
  • Facebook
  • Basecamp
  • Wordpress
  • Delicious
  • Photobucket
  • Blogger
  • FriendFeed
  • More coming soon...

On itself a nice service, since cloud services aren't invulnerable to customer data lose. This way you have a online backup in case Flickr or Twitter 'decides' to purge your data.

There are some 'drawbacks' though (in my opinion).....

Posted on January 5, 2010 and filed under Internet, Software.

Star Trek 2009 - Most Pirated Movie in 2009

According to the TorrentFreak website, the latest Star Trek movie is the most downloaded movie in 2009.

I must admit that I participated in getting this movie on number 1 on this chart.... BUT, I also saw this movie in the opening weekend in the theater, and I own the movie on a Blu-Ray disc.

Since I don't have the capabilities to rip the movie myself, I downloaded the ripped version. No nag screens and other crap on the downloaded version, so I prefer to watch the ripped/downloaded version over the original Blu-Ray disc (also see this posting) on my Popcorn Hour media player.

So being the most downloaded movie doesn't necessarily mean most pirated (in my opinion).

Sure, there still are lots of people who'll pirate anything they get their hands on, but that doesn't mean that they would even think about going to the cinema or buy the disc. The studios wouldn't make money of them anyway.

But hé, that's just my humble opinion........

Posted on December 28, 2009 and filed under Copyrights, Internet, Movies, Personal.