As expected, the battery of Yvonne'sToyota Yaris was charged this morning.
But the boot still wouldn't open. She was going into town, so I suggested she took
it to Sovereign City Auto to get
them to take a look.
That proved not to be necessary. She tried opening several times on the way, and finally it
opened by itself. I can only guess that it only works if the battery is fully
charged, not just charged enough to start the car. What a stupid design!
Now dereel.lemis.com is working as intended, almost. The web server does what it
should, but I'm getting lots of messages like:
Aug 7 08:04:51 dereel sshd-session[10042]: error: maximum authentication attempts exceeded for invalid user ubuntu from 125.140.145.62 port 56762 ssh2 [preauth]
Aug 7 08:04:59 dereel sshd-session[10046]: error: maximum authentication attempts exceeded for invalid user ubuntu from 125.140.145.62 port 56849 ssh2 [preauth]
Aug 7 09:25:22 dereel mountd[858]: mount request from 149.88.27.158 from unprivileged port
Aug 7 10:14:27 dereel inetd[12388]: cannot execute /usr/local/sbin/smbd: No such file or directory
Aug 7 11:46:28 dereel sshd-session[13972]: error: maximum authentication attempts exceeded for root from 65.49.139.223 port 57436 ssh2 [preauth]
Nothing serious, but it reminds me that I should be running a firewall. OK, I've had pain
with that in the past. Log in as toor with only local directories in the path. Run
from the console:
=== root@dereel (/dev/ttyv1) ~ 2 -> kldload ipfw && ipfw add 1 allow ip from any to any
Hang! Why? I suppose I should really run ktrace to find out what it's trying to
access, but for the time being this should help:
Ate more of Sunday'sChoucroute garnie this evening. No,
it's clear: even now, after reducing the meat:Sauerkraut ratio from 89% down to 40%, there's
too much meat. And also far too many potatoes. Reduce the meat ratio to about 36%, and the
potatoes by 40%.
I have a lot of cabbage and capsicum left over from previous meals. What can I do with it?
Ask Google Gemini, which came up with
this recipe. Once again I
had difficulty with these silly US units, but with a couple of iterations managed to create
this version.
It was relatively straightforward after that, though I noted that the gochujang stuck to the frying pan:
Yvonne didn't see anything, but it's clear that the top is
slightly underexposed. It's taken with the studio flashes pointed at the kitchen area, so
tried a couple of times to adjust them, with little effect. The only surprise was the view
looking down to the cooking area:
I don't see an easy way to get rid of those highlights. And yes, here again the top is
slightly underexposed. But there are many potential reasons for that, and in this case at
least one of them is that I took the photos at 1/320 s, when the flash sync speed is
1/250 s.
As planned, gave up on finding my firewall issues on dereel.lemis.com and used the
same workaround that I had used previously:
=== root@dereel (/dev/pts/1) /home/grog 2 -> kenv net.inet.ip.fw.default_to_accept=1 net.inet.ip.fw.default_to_accept="1"
=== root@dereel (/dev/pts/1) /home/grog 3 -> kldload ipfw === root@dereel (/dev/pts/1) /home/grog 4 -> ipfw show 65535 0 0 count ip from any to any not // orphaned dynamic states counter
65535 64 8352 allow ip from any to any
What's that first line? Is the // a comment or part of the syntax? In any case,
after that I was able to load my rules and make dereel one of the addresses
for www.lemis.com. And sure enough, in came the usual flood of requests. But what I
wasn't expecting was the load: the load average stayed below 2 (on a 4 CPU machine), round
80% idle—but the output traffic (“upload”) soared way beyond what the other servers
had. lax.lemis.com averaged round 300 kB/s, though it could hit 1
MB/s; fra.lemis.com was a little higher at round 400 kB/s. But dereel went
way over 1 MB/s, and my “5 Mb/s” uplink went as high as 12.9 Mb/s, clearly not very well
implemented throttling.
So: for the time being I removed dereel from the www list. I should try a
second network link with a higher upload limit and see where it settles. But it's
surprising that dereel should generate so much traffic at such a low load.
One thing that had puzzled me were the 301 error returns (“moved permanently”) from my web
servers. With dereel functional, but before opening it to the masses, I checked:
That simple! Give it a directory name without the trailing /. Presumably the
browser retries. But look at that time! It took 3 seconds to retry. Why?
This page contains (roughly) yesterday's and today's entries. I have
a horror of reverse chronological documents, so
all my diary entries are chronological. This page normally contains the last two days,
but if I fall behind it may contain more. You can find older entries in
the archive. Note that I often update a diary entry
a day or two after I write it.
Do you have a comment about something I have written? This is a diary, not a
“blog”, and there is
deliberately no provision for directly adding comments. It's also not a vehicle
for third-party content. But I welcome feedback and try to
reply to all messages I receive. See the diary overview for more details. If you do
send me a message relating to something I have written, please indicate
whether you'd prefer me not to mention your name. Otherwise
I'll assume that it's OK to do so.
