WongTek Blog

Category: How Tos

How To Articles

  • Making ReadyNAS more secure

    By default Readynas uses a weak SSH key and apache configurations.

    Regenerate SSH keys by running the follow:

    [code]
    # ssh-keygen -t rsa1 -f "/etc/ssh/ssh_host_key" -N ”
    # ssh-keygen -t rsa -f "/etc/ssh/ssh_host_rsa_key" -N ”
    # ssh-keygen -t dsa -f "/etc/ssh/ssh_host_dsa_key" -N ”
    [/code]

    Securing apache running the follow:

    [code]
    vi /etc/frontview/apache/httpd.conf
    [/code]

    Add the following

    [code]
    SSLProtocol all -SSLv2
    SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
    TraceEnable off
    [/code]

    run the follow to restart the apache server

    [code]
    # killall apache-ssl
    # /usr/sbin/apache-ssl -f /etc/frontview/apache/httpd.conf
    [/code]

  • Windows 7 Reset IPv6 State

    run this in a command line as an administrator to reset the default IPv6 state on your local computer after playing around with it.

    netsh interface ipv6 reset

    Here’s some other useful infomation: msdn link

  • Windows 7 IPv6 Auto Config by MAC address

    1. Open up a Command Prompt in Administrator mode

    2. Run the following commands.  Each one should respond “Ok”.

    [code]
    netsh interface ipv6 set privacy state=disabled store=active
    netsh interface ipv6 set privacy state=disabled store=persistent
    netsh interface ipv6 set global randomizeidentifiers=disabled store=active
    netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent
    [/code]

    3. Reboot the computer.

    When your computer has rebooted, it should auto-configure itself using EUI-64 (based on the MAC address of the interface) within the subnet given in the router advertisement.

  • Static IPv6 address on Windows7

    To configure IPv6 for static addressing

    1. Click Use the following IPv6 address, and then do one of the following:
      • For a local area connection, in IPv6 address, Subnet prefix length, and Default gateway, type the IP address, subnet prefix length, and default gateway address.
      • For all other connections, in IPv6 address, type the IP address.
    2. Click Use the following DNS server addresses.
    3. In Preferred DNS server and Alternate DNS server, type the primary and secondary DNS server addresses.

    Then run the following in a command line as an administrator:

    1. This will show the interface ID number
      1. netsh interface ipv6 show interfaces
    2. Set the network interface to Stateful which will remove to automacally generated IPv6 address
      1. netsh interface ipv6 set interface <interface_name> advertise=enable managed=enable

  • Wireless Router TomatoUSB Firmware

    Tomato firmware is great compared to DD-WRT, it has loopback and is compatible with playing Netflix on the iphone.

    Also it store the Bandwidth stats on RAM and saves it to Samba share or usb flash drive. Where as DD-WRT writes this to the NVRAM which will wear out the NVRAM chip.

    Also setting up IPv6 is also easier and it will update your ip address with Hurricane Electric Free IPv6 Tunnel Broker which is a plus when you have a dynamic ip address with your ISP.

    Here’s another plus for laptop users, you can assign an ip address to two mac addresses for your wireless card and ethernet card so that you will have the same ip address for both interfaces. This allows you to transfer files off of your NAS wireless and then connect your ethernet cable to continue the file transfer at a faster speed and back again without dropping your connections to your network.

    http://www.myopenrouter.com/download/list?cat=50

    Or http://tomatousb.org

    Tomato 1.28 includes the following:

    All the current “Teddy Bear” features are included, notably:
    – USB Support, Samba, FTP, Media Servers
    – Web Monitor
    – Per-connection transfer rates
    – Byte counter added to QOS/Details
    – QOS rule ID added to QOS/Details
    – Additional ipv6 support in GUI, QOS, Conntrack

    “Toastman” Features:
    – 250 entry Static DHCP | 500 entry Access Restrictions
    – QOS class labels | Toastman QOS rules
    – Fast conntrack timeout | Fast auto refresh
    – Tools/System refresh timer
    – Safe CPU frequency selector
    – Loads upnpconfig.custom from JFFS, for VPN UPnP support

  • Restoring DD-WRT NAT Loopback

    Run within Administration > Commands > save as a firewall script

    [code]
    iptables -t nat -I POSTROUTING -o br0 -s 10.0.0.0/24 -d 10.0.0.0/24 -j MASQUERADE
    [/code]

  • Dropbox

    Dropbox is great!
    I have been using it for over a year now and it is fast and reliable for syncing my files across my machines and sharing files with coworkers, friends and family.

    They use SSL encryption so your files are safe. You can also use TrueCrypt on top of Dropbox for your top secret files or very personal files.

    Plus you get 2GB free to start with.
    Try Dropbox for free.

  • Linux System Disk Quota

    Setting up quota on a Linux system for the main partition
    1–touch /aquota.user; chmod 600 /aquota.user
    2– edit the /etc/fstab `/dev/sda1 / ext4 defaults,usrquota 1 1`
    3– Reboot Or `mount -o remount /`
    4– `quotacheck -vuma`
    5– `quotaon -avu`
    6– `edquota `

  • Reset maintenance required light on a 2010 Scion Xb

    1: Turn the key to the ‘on’ position. Using the trip button, toggle the mode until ‘Trip A’ is displayed on the LCD screen.

    2: Turn the key to the off position. Now, push and hold the trip button while holding the trip button, turn the key to ‘on’ position.

    3: While you continue to hold the trip button, you will see on the LCD display five small dashes (—–) and they will start to count down within a few seconds

    5: 00000 will be displayed and then it will go back to mileage. Release the trip button. Your maintenance required light has been reset.

    Oh yeah, make sure you change your oil and not just reset the reminder or it could void your warranty.

    It uses a Fram PH4386 or TG4386 or XG4386 oil filter.

    This should apply to Scion xB 2007, 2008, 2009, 2010, 2011, and maybe 2012.