<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.3.2" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments for pembo.co.uk</title>
	<link>http://www.dpembo.ukfsn.org</link>
	<description>pembo's home on the internet</description>
	<pubDate>Thu, 28 Aug 2008 09:43:31 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.2</generator>
		<item>
		<title>Comment on IPKG Web by KenPem</title>
		<link>http://www.dpembo.ukfsn.org/2008/08/21/ipkg-web/#comment-31</link>
		<dc:creator>KenPem</dc:creator>
		<pubDate>Thu, 21 Aug 2008 23:56:41 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/08/21/ipkg-web/#comment-31</guid>
		<description>This is awesome. It never occurred to me that something like this would be useful, but now that you show it to me it makes so much sense. I'm not scared of the command-line (I'd be a poor NSLU2 user!), but this just makes life that little bit easier. And I'm all for easy.</description>
		<content:encoded><![CDATA[<p>This is awesome. It never occurred to me that something like this would be useful, but now that you show it to me it makes so much sense. I&#8217;m not scared of the command-line (I&#8217;d be a poor NSLU2 user!), but this just makes life that little bit easier. And I&#8217;m all for easy.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 Ftp Client - Yet Another FTP Client (YAFC) by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/07/27/nslu2-ftp-client-yet-another-ftp-client-yafc/#comment-29</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Sat, 02 Aug 2008 09:07:39 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/07/27/nslu2-ftp-client-yet-another-ftp-client-yafc/#comment-29</guid>
		<description>YAFC is available as an installable package via IPKG, so you don't even have to compile it yourself!</description>
		<content:encoded><![CDATA[<p>YAFC is available as an installable package via IPKG, so you don&#8217;t even have to compile it yourself!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Firefox 3 by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/06/25/firefox-3/#comment-28</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Sun, 27 Jul 2008 10:20:57 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/06/25/firefox-3/#comment-28</guid>
		<description>So - I found an issue with firefox3 - the div for the categories was covering the top post on the page so you couldn't click any links to go anywhere - I believe I've resolved this and it still appears to work fine in IE7 and Firefox 3.</description>
		<content:encoded><![CDATA[<p>So - I found an issue with firefox3 - the div for the categories was covering the top post on the page so you couldn&#8217;t click any links to go anywhere - I believe I&#8217;ve resolved this and it still appears to work fine in IE7 and Firefox 3.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 Open SSH Server by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-27</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Wed, 04 Jun 2008 19:15:02 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-27</guid>
		<description>Many thanks for the comments.  If you haven't already done so, I'd recommend setting up the public/private key login to guarantee nobody can get in without the right private key.

I've managed to lock myself out of my slug before using denyhosts a couple of times!  Remember if you do, you can always enable the telnet connection to get back in, and remove yourself from the hosts.deny file (found in /opt/etc/hosts.deny)</description>
		<content:encoded><![CDATA[<p>Many thanks for the comments.  If you haven&#8217;t already done so, I&#8217;d recommend setting up the public/private key login to guarantee nobody can get in without the right private key.</p>
<p>I&#8217;ve managed to lock myself out of my slug before using denyhosts a couple of times!  Remember if you do, you can always enable the telnet connection to get back in, and remove yourself from the hosts.deny file (found in /opt/etc/hosts.deny)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 Open SSH Server by Martin</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-26</link>
		<dc:creator>Martin</dc:creator>
		<pubDate>Wed, 04 Jun 2008 09:59:42 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-26</guid>
		<description>Hi.  I turned on the ssh connection on my slug to the outside world before i went to work today.  *gulp*  Thanks to your blog i'm feeling a bit less scared about it! wasn't sure where the security logs where - I now know.  And i've just installed denyhosts.  Thanks.</description>
		<content:encoded><![CDATA[<p>Hi.  I turned on the ssh connection on my slug to the outside world before i went to work today.  *gulp*  Thanks to your blog i&#8217;m feeling a bit less scared about it! wasn&#8217;t sure where the security logs where - I now know.  And i&#8217;ve just installed denyhosts.  Thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU Printer Server by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/03/17/nslu-printer-server/#comment-25</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Thu, 22 May 2008 17:40:26 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/03/17/nslu-printer-server/#comment-25</guid>
		<description>The other thing to remember... if you reboot, start your printer back up from the CUPS admin interface - this had me stumped for a while!</description>
		<content:encoded><![CDATA[<p>The other thing to remember&#8230; if you reboot, start your printer back up from the CUPS admin interface - this had me stumped for a while!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 Open SSH Server by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-24</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Sat, 17 May 2008 23:06:45 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-24</guid>
		<description>Actually, you might want to recheck your facts before you make any accusations.
My IP is not 76.76.15.121.  

The aforementioned IP address is an American based IP address much like your own, and I am from the UK.  As you'll see from my post, they have also tried to access my server.  A traceroute request helps to identify the server:
&lt;code&gt;
Tracing route to unknown.carohosting.net [76.76.15.121]
over a maximum of 30 hops:

 12   183 ms   204 ms   204 ms  te-4-2.car2.NewYork1.Level3.net [4.68.110.81]
 13   226 ms   204 ms   204 ms  vlan69.csw1.NewYork1.Level3.net [4.68.16.62]
 14   225 ms   204 ms   204 ms  ae-63-63.ebr3.NewYork1.Level3.net [4.69.134.97]

 15   182 ms   204 ms   204 ms  ae-3.ebr3.Washington1.Level3.net [4.69.132.89]
 16   226 ms   204 ms   204 ms  ae-83-83.csw3.Washington1.Level3.net [4.69.134.1
70]
 17   182 ms   204 ms   204 ms  ae-81-81.ebr1.Washington1.Level3.net [4.69.134.1
37]
 18   228 ms   202 ms     *     ae-2.ebr3.Atlanta2.Level3.net [4.69.132.85]
 19   204 ms   204 ms   206 ms  ae-61-60.ebr1.Atlanta2.Level3.net [4.69.138.2]
 20   228 ms   204 ms   204 ms  ae-4-4.car1.Charlotte1.Level3.net [4.69.132.161]

 21   183 ms   204 ms   204 ms  ae-11-11.car2.Charlotte1.Level3.net [4.69.132.16
6]
 22   226 ms   204 ms   149 ms  CAROLINA-IN.car2.Charlotte1.Level3.net [4.71.126
.6]
 23   170 ms   204 ms   204 ms  swag1-colo1.caro.net [64.128.66.35]
 24   225 ms   206 ms   202 ms  ve9.cr01.clt.carohosting.com [64.132.41.210]
 25   223 ms   204 ms   204 ms  ve2.ds02.clt.carohosting.com [76.76.1.26]
 26   226 ms   204 ms   204 ms  76.76.30.50
 27   183 ms   204 ms   204 ms  unknown.carohosting.net [76.76.15.121]&lt;/code&gt;and a whois request reports the following:

&lt;code&gt;whois 76.76.15.121
Carolina Internet CARO-NET-ARIN-2 (NET-76-76-0-0-1)
                                  76.76.0.0 - 76.76.31.255
CaroNet Managed Hosting CI-76-76-12-0-23 (NET-76-76-14-0-1)
                                  76.76.14.0 - 76.76.15.255&lt;/code&gt;

I hope that clears up your confusion.</description>
		<content:encoded><![CDATA[<p>Actually, you might want to recheck your facts before you make any accusations.<br />
My IP is not 76.76.15.121.  </p>
<p>The aforementioned IP address is an American based IP address much like your own, and I am from the UK.  As you&#8217;ll see from my post, they have also tried to access my server.  A traceroute request helps to identify the server:<br />
<pre><code>
Tracing route to unknown.carohosting.net [76.76.15.121]
over a maximum of 30 hops:

 12   183 ms   204 ms   204 ms  te-4-2.car2.NewYork1.Level3.net [4.68.110.81]
 13   226 ms   204 ms   204 ms  vlan69.csw1.NewYork1.Level3.net [4.68.16.62]
 14   225 ms   204 ms   204 ms  ae-63-63.ebr3.NewYork1.Level3.net [4.69.134.97]

 15   182 ms   204 ms   204 ms  ae-3.ebr3.Washington1.Level3.net [4.69.132.89]
 16   226 ms   204 ms   204 ms  ae-83-83.csw3.Washington1.Level3.net [4.69.134.1
70]
 17   182 ms   204 ms   204 ms  ae-81-81.ebr1.Washington1.Level3.net [4.69.134.1
37]
 18   228 ms   202 ms     *     ae-2.ebr3.Atlanta2.Level3.net [4.69.132.85]
 19   204 ms   204 ms   206 ms  ae-61-60.ebr1.Atlanta2.Level3.net [4.69.138.2]
 20   228 ms   204 ms   204 ms  ae-4-4.car1.Charlotte1.Level3.net [4.69.132.161]

 21   183 ms   204 ms   204 ms  ae-11-11.car2.Charlotte1.Level3.net [4.69.132.16
6]
 22   226 ms   204 ms   149 ms  CAROLINA-IN.car2.Charlotte1.Level3.net [4.71.126
.6]
 23   170 ms   204 ms   204 ms  swag1-colo1.caro.net [64.128.66.35]
 24   225 ms   206 ms   202 ms  ve9.cr01.cmµçBæ6&amp;ö†÷7F–æræ6öÒ³cBã3"ãCã#ÐÐ¢#R##2×2#B×2#B×2fS"æG3"æ6Û^t.carohosting.com [76.76.1.26]
 26   226 ms   204 ms   204 ms  76.76.30.50
 27   183 ms   204 ms   204 ms  unknown.carohosting.net [76.76.15.121]</code></pre>and a whois request reports the following:</p>
<p><pre><code>whois 76.76.15.121
Carolina Internet CARO-NET-ARIN-2 (NET-76-76-0-0-1)
                                  76.76.0.0 - 76.76.31.255
CaroNet Managed Hosting CI-76-76-12-0-23 (NET-76-76-14-0-1)
                                  76.76.14.0 - 76.76.15.255</code></pre></p>
<p>I hope that clears up your confusion.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 Open SSH Server by fester</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-23</link>
		<dc:creator>fester</dc:creator>
		<pubDate>Thu, 15 May 2008 17:42:29 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/10/nslu2-ssh-server/#comment-23</guid>
		<description>please explain ...
i believe this is coming from your ip

(event log from my system follows)

May 14 20:18:46 c-76-17-147-69 sshd[25520]: Invalid user scanner from 76.76.15.121

May 15 01:18:46 c-76-17-147-69 sshd[25521]: input_userauth_request: invalid user scanner

May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_unix(sshd:auth): check pass; user unknown

May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.76.15.121 

May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_succeed_if(sshd:auth): error retrieving information about user scanner

May 14 20:18:48 c-76-17-147-69 sshd[25520]: Failed password for invalid user scanner from 76.76.15.121 port 42391 ssh2

May 15 01:18:48 c-76-17-147-69 sshd[25521]: Received disconnect from 76.76.15.121: 11: Bye Bye

May 14 20:18:48 c-76-17-147-69 sshd[25522]: Address 76.76.15.121 maps to unknown.carohosting.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!


ta !</description>
		<content:encoded><![CDATA[<p>please explain &#8230;<br />
i believe this is coming from your ip</p>
<p>(event log from my system follows)</p>
<p>May 14 20:18:46 c-76-17-147-69 sshd[25520]: Invalid user scanner from 76.76.15.121</p>
<p>May 15 01:18:46 c-76-17-147-69 sshd[25521]: input_userauth_request: invalid user scanner</p>
<p>May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_unix(sshd:auth): check pass; user unknown</p>
<p>May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.76.15.121 </p>
<p>May 14 20:18:46 c-76-17-147-69 sshd[25520]: pam_succeed_if(sshd:auth): error retrieving information about user scanner</p>
<p>May 14 20:18:48 c-76-17-147-69 sshd[25520]: Failed password for invalid user scanner from 76.76.15.121 port 42391 ssh2</p>
<p>May 15 01:18:48 c-76-17-147-69 sshd[25521]: Received disconnect from 76.76.15.121: 11: Bye Bye</p>
<p>May 14 20:18:48 c-76-17-147-69 sshd[25522]: Address 76.76.15.121 maps to unknown.carohosting.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!</p>
<p>ta !</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 USB Hub by pembo</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/07/nslu2-usb-hub/#comment-22</link>
		<dc:creator>pembo</dc:creator>
		<pubDate>Sat, 19 Apr 2008 19:24:21 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/07/nslu2-usb-hub/#comment-22</guid>
		<description>The printer works fine through the hub.  I'd recommend buying a powered hub over a non powered one, as when I plugged too many devices into the non-powered hub, it crashed the NSLU2.  

Currently I have a second hard disk and my printer connected into my HUB, and all have been working fine for the best part of 3 weeks without issue.</description>
		<content:encoded><![CDATA[<p>The printer works fine through the hub.  I&#8217;d recommend buying a powered hub over a non powered one, as when I plugged too many devices into the non-powered hub, it crashed the NSLU2.  </p>
<p>Currently I have a second hard disk and my printer connected into my HUB, and all have been working fine for the best part of 3 weeks without issue.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on NSLU2 USB Hub by Tom</title>
		<link>http://www.dpembo.ukfsn.org/2008/04/07/nslu2-usb-hub/#comment-21</link>
		<dc:creator>Tom</dc:creator>
		<pubDate>Sat, 19 Apr 2008 17:35:26 +0000</pubDate>
		<guid>http://www.dpembo.ukfsn.org/2008/04/07/nslu2-usb-hub/#comment-21</guid>
		<description>Hey, any more luck with your hub? I'd love to know if you get the printer working through it.</description>
		<content:encoded><![CDATA[<p>Hey, any more luck with your hub? I&#8217;d love to know if you get the printer working through it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
