The FreeBSD Diary

Welcome to the wonderful world of USA air travel. I had been warned. I knew what I was getting into. But I was naive. Or perhaps just stupid. But I'm wiser now. I rarely make the same mistakes twice. Well, there was that little problem back in '95 with US Customs, but that was an honest mistake and I'm sure they've forgotten all about that by now. Besides, they can't prove anything. They might suspect me, but they sure as hell can't prove anything. Note to self: keep in touch with those lawyer friends, just in case you need them.

Today's journey may have begun before dawn, but the educational experience started last when when I was booking this morning's trip. Victoria, my travel agent, was very helpful on the phone and gave me many options. Even after my initial plans to fly down on Saturday for a weekend in San Jose with friends fell through, she still had option for me. Before my plans changed, the flying charges were going to be $700 (all monetary values in this article are Canadian unless otherwise specified; your milage may vary; do not try this at home; do no operate heavy equipment). But as I wasn't staying over for a weekend and it was a short notice booking (i.e. < 7 days), things were going to change. One of Victoria's options was flying with Air Canada, but their fare structure dictated a charge of $2700

Or, I could fly with NorthWest and it would be only CAD$700. Sure, it meant a 5:50 AM flight from Ottawa. And a trip to Detroit. On a turbroprop, operated by Mesaba Aviation. As this was my first trip paid for by my new employers, I selected the less expensive option.

When I told my boss, Ron, about the booking. He laughed and told me that NorthWest was the airline he'd stopped using because of delays and reroutings. He only used Air Canada now. I listened but took no action. Now I wish I had done something.

I awoke at 3:55 AM today. Five minutes before my alarm was to go off. I now regret missing that five minutes of sleep. Sure it was dark. But the birds were busy with their pre-dawn chorus. I struggled out of bed, deactivated the alarm lest it awaken others in the household, had a shower, and ate something to get me going. At 4:30 AM I wandered outside to find my cab waiting. 20 minutes later, after an $18 trip to the airport, through deserted streets that occasionally showed signs of life, I arrived at a bright but very quiet airport.

The first hint of trouble arrived when I didn't know where to check in. This was my first international departure from Ottawa. But I was directed to the second floor where I found my airline. As with most incidents in life, I didn't recognize the first signs of trouble. But it was there. If only in hindsight.

The next lovely interlude was a pen that didn't work. Mine. So much for filling in the US Customs form whilst waiting in the queue. I borrowed a pen at the desk. The check-in person did manage to find me a window seat. Bravo!

The next interesting situation was the differing opening times of the various airports sections. Although we could walk into the airport and check in, we couldn't go through the security section or into Customs until 5 AM. So we stood there waiting. Patiently.

I arrived in the departure lounge and started up my laptop so that I could catch up on my USENET reading (specifically, comp.risks). After ten minutes of reading, my laptop started beeping. Rather loudly. The poor thing was screaming out in pain as the battery died. Embarrased and eager to silence this rather loud monster before the other passengers started to throw heavy items in my direction, I hastily typed "shutdown -h now" and waited for another 4 or 5 rather loud beeps before it died. I was most impressed with my hasty yet correct typing and I thanked my high school typing teacher as I fished another battery from my bag and again started reading.

Then, at about 5:30 AM, we were told that the pilot had requested that the boarding process be delayed because of a mechanical problem. They were working on it and we would be informed ASAP. By now, alarm bells should have been ringing in my head.

During my comp.risks browsing, I came across an interesting article regarding anomolies in the Wyoming license regulations with respect to federal law and Social Security Numbers. It was rather amusing to read about the ways in which Federal and State law sometimes contradict or conflict with each other. It was then with delight that it found it was written by Brett Glass.

At 5:55 AM, it was announced that the flight had been cancelled and would everyone please report to the desk to be rebooked. Having seated myself rather close to the desk, I wound up third in line. I'm going to be booked onto a 9 AM flight to Chicago, then to San Jose. I'll arrive at 2 PM instead of my expected 11 AM. I'll miss my lunch with my co-worker Richard and the first hour of the conference. Lovely.

It's now 7:50 AM and I need to make some phone calls. I have no email access here, so I'll call Eric and ask him to email Richard to let him know I'm going to be late. I would phone Richard, but it's 4:50 AM there, and I'm sure he'd rather not know just now.

I have been rebooked onto an American Airlines flight to Chicago. I don't even have Patti's email address or phone number. I haven't seen her since July 1995 at the start of my big road trip south to New Orleans and then north to Vancouver. That was a wonderful summer. I'll email her when I return and let her know I was in town....

The good news is that I will get to San Jose. Only at 2:06 PM instead of 11 AM. This is annoying on two counts. First, I'm going to be late to the conference. Second, I'm going to miss out on the lunch with Richard, during which we would have been able to discuss the conference and what approach we could take in order to get the most out of the event. Third, and much more important than the other two items combined, I could have stayed in bed for three hours.

Actually, my watch says it's 8:37, but I've already changed that to Chicago time. My body says it's very early still. Now that I'm on the plane and somewhere between Chicago and Toronto, I'm beginning to get sleepy. I can sleep on planes, buses, trains, and cars (although not often while driving). My body seems to take the constant noise and sense of motion as a signal that I'm back in the womb and the best thing I can do is sleep. I think I'll do just that. Now.

I'm in the air again. It seems like whenever the airlines find three big guys on the same flight, they seat them all in the same road. Right beside each other. And by big, I don't mean obese. I mean 6ft+, 220lbs big. Here we are, the three of us, stuck in the back row of an American Airlines Boein 737 bound for San Jose. Compare that with the Fokker I fly in from Ottawa to Chicago. I was in seat 12E, but when I got there, I spotted an empty exit row just a few seats back. That's where I sat. And who should be on either sit of my original but now empty seat? Two attractive women. Good planning Dan. Avoid the women, sit by yourself. Then get a seat between two guys. Talk about a fun trip.

There could be worse things I suposed. At least the flight isn't rough so far. And I had a killer feed of McD's outside gate L1 at O'Hare. I knew you could upsize your meals, but this place, as do others I'm sure, had two levels of upsizing. You could get Large and EXTRA LARGE. This was the biggst order of fries, I've ever seen. And the Coke must have been 750ml. Umm for those of you not yet metric, which should be only Americans, that's about three quarters of a quart. I shall not be eating the in-flight meal.

It appear as if the new FreshPorts box is coming along nicely. I left it running some disk benchmarks (see benchmarks/bonnie++). That isn't because I want to know how fast the disk it. It's because I want to exercise the disk. I failed to purchase the recently released disk walking kit, complete with leash, watering bowl, and feed dish. So I figured the next best thing was to provide it with some in-place exercises. Much like those electronic exercise machines which jolt and contract your muscles via an electric pulse. If a disk is going to fail, it will often fail early on. In the first few hours. Otherwise, it will probably live to a ripe old age, then die on you after you've become backup-complacent and when you least expect it.

Of course, I'll be checking back in on that box from time to time, just to see how it's doing. The basement has become quite hot lately with the added heat of the NT box, the W2000 box from work, the gateway, the new FreshPorts box, and the laptop. Combined, they are putting out quite a few extra watts. And you can tell that just from walking into the basement.

Speaking of watts, I am most impressed with this new power supply I bought. I can't recall the name, but remind me and I'll add it later. This ATX PSU has an extra long power cable leading from the box to the motherboard. It must be at least three feet long. There are also at least four power cables for those disks, fans, and DVDs devices of yours. The PSU itself has two fans. One is the fan which is present in most PSUs. That's the one you cans see when you look at the back of your computer. It pulls air out of the case. The other fan faces downwards into the body of the case. This fan pulls the air out of the case and into the PSU, thereby allowing the first fan to expel it out of the case. These two fans are both ball bearing fans. They should last forever (touch wood). An added bonus is that both fans are quiet. Very quiet. I think they are thermal driven. I think the two CPU fans are louder. I know the box is quieter than any of my other boxes, with, perhaps, the exception of the Toshiba desktop provided by my employer.

I like this PSU so much, if I ever build a box from scratch, I'll be sure to use this one!

I did manage to speak to Richard while I was in Chicago. Barring any last minute interruptions he will be attending the first couple of hours of the conference. That's good, because I'll be missing them. The next time I attend a conference, I'll do what I've always done in the past: show up the day before. It'll cost an extra night, but it will be worth it not to miss anything. Richard will be wearing his Ponte t-shirt. That's the only way I'll recognize him.

I don't think I mentioned that the new FreshPorts box was given to me by Jake Burkholder, one of the FreeBSD committers. He had no further use for it. It had been given to him by David O'Brien, another committer. Remind me to ask David where he got this dual P220. Regardless of the source, I'd like to have the proper attribution on the contributions page.

I am sure that this topic alone is worth a separate article. The security precautions one takes with a laptop is probably not the same that you would take with a desktop box. As Mark Murray put it at FreeBSD Con 1999, security involves a combinatio nof securing both the network and the machines on it. While I was waiting in the Ottawa lounge (for 4 hours), one of the tasks I undertook was to compile a new kernel. I added the following options to my kernel configuration file.:

options 	IPFILTER		#ipfilter support
options 	IPFILTER_LOG		#ipfilter logging
options		IPFILTER_DEFAULT_BLOCK	#block all packets by default

ipfilter_enable="YES"   # Set to YES to enable ipfilter functionality
ipmon_enable="YES"      # Set to YES for ipmon; needs ipfilter, too!

pass in proto tcp/udp from any to any
pass out from any to any

BUT DON'T DO THAT! Those rules are useless. Ensure you use a proper set of rules. Have a look at the at my ipfilter page for the link to the How-To page. When I get to the convention, one of the first things I'll do after I get logged into one of their access points will be to ssh to home and grab my rules from there. In the meantime, I've gone into /etc/inetd.conf and deactivated everything. And I mean everythihg. I'm sure there's still a few things running which I should be worried about, but I'm willing to take the risk for now.

The other main changes I made were to /etc/pccard.conf and /etc/rc.conf files.

# Lucent WaveLAN/IEEE
card "Lucent Technologies" "WaveLAN/IEEE"
config 0x1 "wi" ?
# config auto "wi" ?
insert /etc/pccard_ether $device start
remove /etc/pccard_ether $device stop

# insert wicontrol -i $device -p 3
insert wicontrol -i $device -p 1
insert wicontrol -i $device -n "DMTF"

The main change is to use the access control point (1=BBS mode) instead of going into peer-to-peer mode (3=ad-hod\c mode). The other change was to use the service set "DMTF".

The changes I made to /etc/rc.conf were similar. I specified that wi0 should be configured via DHCP. Now that I think of it, perhaps that step is unnecessary. Remind me to check that. Here are the changed lines:

#pccard_ifconfig="inet 10.0.0.10  netmask 255.255.255.0"
pccard_ifconfig="DHCP"

Of course, none of these changes have been put to the test. Yet. That, according to my last known schedule, which is at the whim of the airlines, is subject to change, but should happen sometime in the next 5 hours.

As I've said before, watch this space.

With a laptop, I think it might be a good idea to remove the ability to boot into single user mode. If someone can gain physical access to your box they can easily boot the box, drop into single user mode and have complete access to everything on your box.

You might also want to consider using this strategy for boxes which are outside your security sphere. For example, boxes housed at your ISP, or anywhere else where you cannot control physical access to the box. I think, and haven't checked, that if you remove the two following options from your kernel configuration, you will also remove the ability to the ability to enter single user mode during the boot phase.

options 	USERCONFIG		#boot -c editor
options 	VISUAL_USERCONFIG	#visual boot -c editor

Don't go overboard. Being paranoid and security conscious is a good idea. But I certinaly I don't think it's appropriate to remove these features from each and every one of your boxes. Remember, these features are only available from the console. And if you can't control console access, you have bigger problems than worrying about booting into single user mode. Of course, not everything shares my viewpoint. I don't care. That's what freedom of choice is all about. If it come right down to it, I think you're better off concentrating on your firewall rules first. Then, perhaps, if you have nothimg else do to, and all your books have been dusted, your bills alphabetised, and your flea collectio arranged, then, and only then, can you be truely ready to worry about such things.

I'm here. I made it. The DoubleTree shuttle arrived at the airport shuttle stop just minutes after I walked outside. And it's only a 5-10 minute ride to the hotel. Very convenient. I arrived at about 2:30. I checked in, had a quick shower, and reported to the conference. It was almost break time, so I decided to wait until after the break before seeing a position inside the hall. As luck would have it, I found untaken seats in the front row, on the right. with a power point so I could plug in the laptop.

Based on what I saw during the second half of the talk, I'm not sorry I missed the first half. It was faily dry material with some insights, but not enough pratical examples. It's a bit like teaching someone C by describing the syntax but never showing them any code. Sure, you're teaching them something. But they aren't learning much. I learn well by example. I'm sure that the workshops on Tuesday and Wednesday will be more practical.

I so much wanted to go for a run tonight and clear my head after today. But by the time I had a beer, I was too beat to bother.

OH! The DHCP worked first time. Wooo!