<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>ZRMT</title>
	<atom:link href="http://zrmt.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://zrmt.com</link>
	<description>andylockran &#38; friends</description>
	<lastBuildDate>Sun, 05 Feb 2012 22:16:42 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Back up to Ubuntu server using Time Machine with OS X Lion 10.7</title>
		<link>http://zrmt.com/2012/02/05/back-up-to-ubuntu-server-using-time-machine-with-os-x-lion-10-7/</link>
		<comments>http://zrmt.com/2012/02/05/back-up-to-ubuntu-server-using-time-machine-with-os-x-lion-10-7/#comments</comments>
		<pubDate>Sun, 05 Feb 2012 22:16:42 +0000</pubDate>
		<dc:creator>James</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1638</guid>
		<description><![CDATA[I recently put my mind to tackling the problem that had been plaguing mine and my fiancés MacBook Pros: backups. We both have files held on our systems that we simply can&#8217;t afford to lose. We also work wirelessly. For those reasons Apple&#8217;s TimeMachine seemed like a really good option. However, at the £250GBP price [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://zrmt.com/wp-content/uploads/2012/02/TimeMachine.png"><img class="alignright  wp-image-1639" title="TimeMachine" src="http://zrmt.com/wp-content/uploads/2012/02/TimeMachine-300x300.png" alt="" width="189" height="189" /></a>I recently put my mind to tackling the problem that had been plaguing mine and my fiancés MacBook Pros: backups.</p>
<p>We both have files held on our systems that we simply can&#8217;t afford to lose. We also work wirelessly. For those reasons Apple&#8217;s TimeMachine seemed like a really good option. However, at the £250GBP price tag and already having a home server, a bespoke solution appealed to both the geek and cost-saver in me.</p>
<p>After collating information from several different sources, please find below the steps required to setup and configure an Ubuntu instance to take backups from your Mac via TimeMachine:</p>
<p><strong>Download netatalk 2.2 </strong>(The version held in Ubuntu repositories is 2.1 and Lion requires 2.2)</p>
<p>Natty i386: https://launchpad.net/~stefanor/+archive/ppa/+files/netatalk_2.2.0-0ppa2~natty1_i386.deb<br />
Natty amd64: https://launchpad.net/~stefanor/+archive/ppa/+files/netatalk_2.2.0-0ppa2~natty1_amd64.deb<br />
(Others here: https://launchpad.net/~stefanor/+archive/ppa/+packages)</p>
<p><strong>Install netatalk<br />
</strong>via dpkg -i &lt;netatalk package name&gt;</p>
<p><strong>Edit /etc/netatalk/afpd.conf<br />
</strong>The only line you want: &#8220;- -udp -noddp -uamlist uams_randnum.so,uams_dhx.so,uams_dhx2.so -nosavepassword&#8221;</p>
<p><strong>Edit /etc/netatalk/AppleVolumes.default<br />
</strong>Remove the default line for ~/ (if it exists) by commenting it out (a # should do). Add a new line: &#8220;~/.TimeMachine &#8220;$u Backup&#8221; allow:jamesanslow cnidscheme:dbd options:usedots,upriv,tm&#8221; &#8211; REPLACING &#8220;jamesanslow&#8221; with YOUR server username.</p>
<p><strong>Create your Timeachine directory<br />
</strong>mkdir ~/.TimeMachine should do it fine</p>
<p><strong>Edit /etc/netatalk/netatalk.conf<br />
</strong>Add/append/uncomment/leave the same the following important lines to:<br />
ATALK_NAME=`echo ${HOSTNAME}|cut -d. -f1`<br />
ATALK_UNIX_CHARSET=&#8217;LOCALE&#8217;<br />
ATALK_MAC_CHARSET=&#8217;MAC_ROMAN&#8217;<br />
export ATALK_UNIX_CHARSET<br />
export ATALK_MAC_CHARSET<br />
CNID_METAD_RUN=yes<br />
AFPD_RUN=yes<br />
AFPD_MAX_CLIENTS=20<br />
ATALKD_RUN=no<br />
PAPD_RUN=no<br />
TIMELORD_RUN=no<br />
A2BOOT_RUN=no</p>
<p><strong>Create a new file in /etc/avahi/services/afpd.service<br />
</strong>Copying in the following:<br />
&lt;?xml version=&#8221;1.0&#8243; standalone=&#8217;no&#8217;?&gt;&lt;!&#8211;*-nxml-*&#8211;&gt;<br />
&lt;!DOCTYPE service-group SYSTEM &#8220;avahi-service.dtd&#8221;&gt;<br />
&lt;service-group&gt;<br />
&lt;name replace-wildcards=&#8221;yes&#8221;&gt;%h&lt;/name&gt;<br />
&lt;service&gt;<br />
&lt;type&gt;_afpovertcp._tcp&lt;/type&gt;<br />
&lt;port&gt;548&lt;/port&gt;<br />
&lt;/service&gt;<br />
&lt;service&gt;<br />
&lt;type&gt;_device-info._tcp&lt;/type&gt;<br />
&lt;port&gt;0&lt;/port&gt;<br />
&lt;txt-record&gt;model=Xserve&lt;/txt-record&gt;<br />
&lt;/service&gt;<br />
&lt;/service-group&gt;</p>
<p><strong>Restart netatalk:<br />
</strong>sudo /etc/init.d/netatalk restart</p>
<p><strong>Connect to your server from your mac<br />
</strong>Go to Finder and your server should appear in the left hand side. If not, CMD+K to manual connect.</p>
<p><strong>Create your sparse backup file<br />
</strong>Open up a terminal on your Mac. Move (cd) to the folder where your server&#8217;s mounted. This should be /Volumes/&lt;username&gt; Backup. So for me that would be &#8220;/Volumes/jamesanslow Backup&#8221;. Then run this command to create your backup file (replacing 512g with the size you&#8217;d like your TimeMachine to be in Gigabytes):</p>
<p>hdiutil create -size 512g -fs HFS+J -volname &#8220;Time Machine&#8221; `grep -A1 LocalHostName /Library/Preferences/SystemConfiguration/preferences.plist | tail -n1 | awk &#8216;BEGIN { FS = &#8220;|&#8221; } ; { print $2 }&#8217;`_`ifconfig en0 | grep ether | awk &#8216;BEGIN { FS = &#8220;:&#8221; } ; {print $1$2$3$4$5$6}&#8217; | awk {&#8216;print $2&#8242;}`.sparsebundle</p>
<p><strong>Configure OS X to show all types of media for use in TimeMachine<br />
</strong>Set OS X to show all types of media, such as ours by running this command in the terminal:</p>
<p>defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1</p>
<p><strong>Go for it. Open up TimeMachine, select your network TimeMachine instance and get backing up!</strong></p>
 <p><a href="http://zrmt.com/?flattrss_redirect&amp;id=1638&amp;md5=a19c074619003bd838f061a8ed3eca7a" title="Flattr" target="_blank"><img src="http://zrmt.com/wp-content/plugins/flattr/img/flattr-badge-large.png" alt="flattr this!"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2012/02/05/back-up-to-ubuntu-server-using-time-machine-with-os-x-lion-10-7/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Amstrad Emailer</title>
		<link>http://zrmt.com/2011/11/11/amstrad-emailer/</link>
		<comments>http://zrmt.com/2011/11/11/amstrad-emailer/#comments</comments>
		<pubDate>Fri, 11 Nov 2011 15:16:37 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[ICT]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1625</guid>
		<description><![CDATA[I have recently spent time back on eBay after a few years&#8217; break due to an unfortunate incident which damaged my confidence in the eBay payment protection policy. It was a few years ago now and I&#8217;m very much impressed by the improvements made by eBay and Paypal. Though I&#8217;ve only been on it a [...]]]></description>
			<content:encoded><![CDATA[<p>I have recently spent time back on eBay after a few years&#8217; break due to an unfortunate incident which damaged my confidence in the eBay payment protection policy. It was a few years ago now and I&#8217;m very much impressed by the improvements made by eBay and Paypal. Though I&#8217;ve only been on it a few weeks, they have already successfully blocked someone attempting to defraud me, and though I had my suspicions, it was for low value goods, therefore a good opportunity to help test my confidence in the new systems.</p>
<p>One of my recent purchases has been the Amstrad Emailer Plus. It&#8217;s an interesting little device originally sold in 2002 by Amstrad for circa £200, dropping to £15 only two years later in Tesco, and finally discontinued on July 14th 2011.<a href="http://zrmt.com/wp-content/uploads/2011/11/amstrad-emailer-plus.jpg"><img class="alignright size-full wp-image-1629" title="amstrad-emailer-plus" src="http://zrmt.com/wp-content/uploads/2011/11/amstrad-emailer-plus.jpg" alt="" width="205" height="205" /></a>  As you can see, it is quite a chunky but pretty device &#8211; as well as providing convenient access to email &#8211; so why did it fail?</p>
<p>Though the market for email on a household phone is probaby quite a small one &#8211; the Emailer Plus definitely has the &#8216;geek&#8217; factor as well as being a little bit &#8216;retro.&#8217;  I bought one, not because it can give me access to emails, (I can do this well enough from my Samsung Galaxy S2 already,) but because it has got personalty.  The big blue display not only displays a nice clock in standby mode, but it also has the ability to play ZX Spectrum games, and other little tidbits that when integrated properly could make the big display quite useful.  The standard issue BT phone I have on my desk at work costs more than this, but offers much less in terms of functionality.</p>
<p>The failure in the Amstrad Emailer Plus is down to a naivety in understanding the direction that the internet and email was taking.  In the early days of modems and dial-up internet, it could cost 5p per minute to get online &#8211; webmail wasn&#8217;t taking off because staying online to write emails was costly &#8211; so it was better to have an offline client to do the writing.  The Amstrad Emailer required a &#8216;phone home&#8217; call at least once a day &#8211; with a cost of 14p per call.  It&#8217;s a bit of a premium price to pay for receiving a bulk email delivery &#8211; plus, unless you were sensible enough to group your outgoing emails up into a single batch &#8211; the outgoing cost was also 14p per connection.</p>
<p>It&#8217;s a real shame, as I think had Amstrad had the foresight to see that the screen was valuable real-estate, the Emailer could have been a market-changing device.  It has the ability to host &#8216;widgets&#8217; or &#8216;apps&#8217; as they are now commonly known.  Amstrad have learnt it all now, with their &#8216;Amscreen&#8217; &#8211; a backwards piece of technology consisting of essentially a flatscreen with a red LED ticket attached to the top in a bulky, ugly black case &#8211; being used to broadcast advertising.  The technology itself isn&#8217;t expensive or interesting &#8211; the real value is in where the screens are.  I recall a seminar at Warwick Business School a few years ago, with the General Manager of McDonalds in the UK.  When asked &#8216;What is McDonalds&#8217; core business?&#8217; most people responded with &#8216;selling burgers&#8217; &#8211; when he replied that it wasn&#8217;t, the majority looked fairly confused.  His answer was &#8216;acquiring prime real-estate, to prevent our competitors selling burgers.&#8217;</p>
<p>In the same way, strategy needs to look at pushing alternatives to the core market of a project.  Sure, there may be a specific target market to aim the product at &#8211; but individual markets are a finite resource.  Look at alternative uses for your product &#8211; can it be abstracted and re-marketed at a different sector?  Do you have to sell it for it to benefit you?  The end result for the Amstrad Emailer was for Amstrad to use it as a loss-leader for selling their Emailer service.  It&#8217;s a shame that the device couldn&#8217;t be rescued from obscurity by diversifying.  Hopefully I&#8217;ll be able to make some use of it and deny this technological marvel it&#8217;s resting place on some gadgetry wasteland for a few more years to come.</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/11/11/amstrad-emailer/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Active Traffic Management</title>
		<link>http://zrmt.com/2011/11/07/active-traffic-management-2/</link>
		<comments>http://zrmt.com/2011/11/07/active-traffic-management-2/#comments</comments>
		<pubDate>Mon, 07 Nov 2011 21:48:06 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Accidents]]></category>
		<category><![CDATA[active traffic management]]></category>
		<category><![CDATA[driving]]></category>
		<category><![CDATA[Motorways]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=3</guid>
		<description><![CDATA[This is a brief addendum to my previous post on the same topic. I was driving down the M6 the other night, past junction 8 where the M5 splits off &#8211; and the Active Traffic Management was turned on. At one point, we were all going along nicely at 40mph, as indicated by the overhead [...]]]></description>
			<content:encoded><![CDATA[<p>This is a brief addendum to my previous post on the same topic.</p>
<p>I was driving down the M6 the other night, past junction 8 where the M5 splits off &#8211; and the Active Traffic Management was turned on.</p>
<p>At one point, we were all going along nicely at 40mph, as indicated by the overhead signs. All lanes were open, and there were no workmen about on the roads.</p>
<p>At the penultimate gantry before the M5 lane forked off the main carriageway, the overhead signs had been set to 20mph. With the majority of traffic moving along nicely, 11pm and no obstructions in the road, the driver of the lorry must have not seen the drop by 20mph. Unfortunately, the car driver in front of him had &#8211; and with the threat of the speed camera sign, had slowed his vehicle fairly abruptly.</p>
<p>This sent the HGV swerving into the middle lane, causing me to pull out into the fast lane &#8211; luckily fully aware that there was nothing coming up on the outside.</p>
<p>It&#8217;s exactly stupid and irresponsible uses of technology like this that make me wonder why Active Traffic Management was put there in the first place.</p>
<p>With the sad events that have occurred on the roads over the past few days, I can only hope that someone has the good sense to review this technology before it too contributes to the rising death tolls on our motorways.</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/11/07/active-traffic-management-2/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>My thoughts on Unity.</title>
		<link>http://zrmt.com/2011/10/24/my-thoughts-on-unity/</link>
		<comments>http://zrmt.com/2011/10/24/my-thoughts-on-unity/#comments</comments>
		<pubDate>Mon, 24 Oct 2011 21:34:06 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[ICT]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[ui]]></category>
		<category><![CDATA[unity]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1618</guid>
		<description><![CDATA[I love ubuntu.  The Community, the Operating System, and especially the philosophy; &#8220;I am who I am because you are who you are.&#8221;  It can be applied to so many things in life, and is a great mantra for an Open Source Project. Unity. I have to be honest; when unity first appeared I though [...]]]></description>
			<content:encoded><![CDATA[<p>I love ubuntu.  The Community, the Operating System, and especially the philosophy; &#8220;I am who I am because you are who you are.&#8221;  It can be applied to so many things in life, and is a great mantra for an Open Source Project.</p>
<p>Unity.</p>
<p>I have to be honest; when unity first appeared I though it looked like a very interesting idea &#8211; and since studying UI design at University (even doing a project on UI design in Gnome2) &#8211; there were lots of opportunities to be taken up by differentiating Ubuntu through it&#8217;s clean, friendly, UI-driven linux desktop environment.  However, Unity seems to be on a pathway to division.</p>
<p>A key paradigm across all my software development has been &#8220;developers are not the users&#8221; &#8211; and &#8216;clever&#8217; design lies in simplicity, not complexity.  Users should be able to intuitively pick up and go without having to think about how the desktop works.  I personally believe this last bit to be especially true.  Many people are of the belief that using a computer and mouse is unnatural; that may well be so &#8211; but through consistency of action, and predictability of response &#8211; all systems can be easily learned.</p>
<p>The big issues that I have with Unity at the moment, are that simple things are no longer simple.  When left click used to mean &#8216;action something&#8217;, and right click brought up a menu &#8211; users were able to innovate and design and mess with their own desktop.  With the unity approach, even experienced computer users are having to open google to work out how to add an application to the sidebar.  I no longer know where to find things in the menu, and am finding myself having to rely on pressing a combination of keyboard buttons and mouse movements in order to do relatively simple things.  I can&#8217;t see an easy way of adding an application to the launcher, and there appears to be very few casual customisation options available to the end user.</p>
<p>Of course, the caveat to all this is that it&#8217;s still an unfinished product.  I see the non-LTS releases of Ubuntu as glorified BETAs &#8211; showing the developers and community the vision for what can be put into an LTS release.  I&#8217;m not sure where or how I&#8217;m going to cope with future upgrades, but for now a quick &#8216;aptitude install xbuntu-desktop&#8217; has put me straight back into my comfort zone.  I hope that&#8217;s not the same story with too many other people.</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/24/my-thoughts-on-unity/feed/</wfw:commentRss>
		<slash:comments>10</slash:comments>
		</item>
		<item>
		<title>Connecting to SMB shares from the command line in OS X</title>
		<link>http://zrmt.com/2011/10/19/connecting-to-smb-shares-from-the-command-line-in-os-x/</link>
		<comments>http://zrmt.com/2011/10/19/connecting-to-smb-shares-from-the-command-line-in-os-x/#comments</comments>
		<pubDate>Wed, 19 Oct 2011 21:25:34 +0000</pubDate>
		<dc:creator>James</dc:creator>
				<category><![CDATA[ICT]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[osx]]></category>
		<category><![CDATA[samba]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1604</guid>
		<description><![CDATA[&#160; I&#8217;ll keep this one short for brevity. It&#8217;s sweet and simple. If you&#8217;re anything like me you&#8217;re probably using at least 10 different operating systems at once. Well, that might be a slight over exaggeration, but I certainly use at least three in my home. Here&#8217;s the problem that I faced this evening and [...]]]></description>
			<content:encoded><![CDATA[<p><strong><a href="http://zrmt.com/wp-content/uploads/2011/10/lion.jpg"><img class="size-full wp-image-1605 alignright" title="lion" src="http://zrmt.com/wp-content/uploads/2011/10/lion.jpg" alt="" width="169" height="190" /></a></strong></p>
<p>&nbsp;</p>
<p>I&#8217;ll keep this one short for brevity. It&#8217;s sweet and simple. If you&#8217;re anything like me you&#8217;re probably using at least 10 different operating systems at once. Well, that might be a slight over exaggeration, but I certainly use at least three in my home. Here&#8217;s the problem that I faced this evening and how I overcame it.</p>
<p>I have a linux server which is sharing some data using a samba share (SMB). Connecting to this from my windows box is simple, since microsoft is good enough to make mounting shares over SMB a piece of cake. My MacbookPro running OS X Lion, however, was a different story.</p>
<p>One option is to use the finder to manually connect to the share, but since I often connect to various computers using SSH I wanted to find a purely command-line solution. Thankfully, it&#8217;s super simple. Just use the UNIX command mount &#8211; as follows:</p>
<p><strong>mount -t smbfs //&lt;username&gt;@&lt;ip or fqdn&gt;/&lt;share name&gt; &lt;mount point&gt;</strong></p>
<p>The example of this on my network is as follows:</p>
<p><strong>mount -t smbfs //james@192.168.0.4/james /Users/jamesanslow/linuxserverfiles</strong></p>
<p>Note: you will require smbfs + samba installed + configured for this to work (<a title="How to install samba on Ubuntu" href="http://jamesanslow.net/blog.html" target="_blank"><em>duh?</em></a>)</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/19/connecting-to-smb-shares-from-the-command-line-in-os-x/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Networking &#8211; let&#8217;s get complicated.</title>
		<link>http://zrmt.com/2011/10/18/networking-lets-get-complicated/</link>
		<comments>http://zrmt.com/2011/10/18/networking-lets-get-complicated/#comments</comments>
		<pubDate>Tue, 18 Oct 2011 19:03:37 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[ICT]]></category>
		<category><![CDATA[architecture]]></category>
		<category><![CDATA[design]]></category>
		<category><![CDATA[firewall]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[switching]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1597</guid>
		<description><![CDATA[Ok, so things have hotted up a notch in here.  My networking knowledge has come on leaps and bounds in the past few months, but I need to learn more, lots more, and fast. Here&#8217;s where I&#8217;m at: A firewall doesn&#8217;t always sit at the edge of your estate, sometimes a HIDS device belongs there [...]]]></description>
			<content:encoded><![CDATA[<p>Ok, so things have hotted up a notch in here.  My networking knowledge has come on leaps and bounds in the past few months, but I need to learn more, lots more, and fast. Here&#8217;s where I&#8217;m at:</p>
<p><em>A firewall doesn&#8217;t always sit at the edge of your estate, sometimes a HIDS device belongs there instead.</em></p>
<p><em>A firewall can do lots of things, but can do a lot of things badly.</em></p>
<p><em>There is more than one way to skin a cat.</em></p>
<p>So I&#8217;ve been looking at some interesting reading, courtesy of <a title="Sourceguru" href="http://www.sourceguru.net/">Mez</a>, and have come across the following:</p>
<p><a title="Firewall Design" href="http://oreilly.com/catalog/fire/chapter/ch04.html">http://oreilly.com/catalog/fire/chapter/ch04.html</a> - Firewall Design.</p>
<p>This interests me muchly, as I currently use, and have always designed server-networks in the past as follows:</p>
<p><a title="Firewall Design" href="http://oreilly.com/catalog/fire/chapter/fire0407.gif" target="_blank"><img class="aligncenter" title="Default Thinking" src="http://oreilly.com/catalog/fire/chapter/fire0407.gif" alt="" width="502" height="321" /></a></p>
<p>However, it seems that pretty soon that can have an adverse affect on the firewall; for each connection hitting the firewall from the net, there&#8217;s at least 6x the traffic passing through it. (  NET -&gt; FW -&gt; DMZ -&gt; FW -&gt; BACKEND -&gt; FW -&gt; DMZ -&gt; FW -&gt; NET )  This isn&#8217;t good, especially if you&#8217;re looking to purchase a firewall with a pretty low &#8216;max sessions limit.&#8217;  It gets worse if you&#8217;re thinking of splitting the &#8216;BACKEND&#8217; into a number of different zones.  However, there is a nifty little improvement:</p>
<p><a title="Multiple Bastion Hosts" href="http://oreilly.com/catalog/fire/chapter/fire0406.gif" target="_blank"><img class="aligncenter" title="Bastion Hosts" src="http://oreilly.com/catalog/fire/chapter/fire0406.gif" alt="" width="502" height="321" /></a></p>
<p>With this approach, you can move your &#8216;internet facing&#8217; machines into their own DMZ zone, and still communicate with your backend services without passing too many times through the firewall.  It means that the number of connections the external firewall needs to handle is fewer, meaning you can get a more powerful machine, cheaper &#8211; and don&#8217;t have to compromise because of that pesky connection table limit.</p>
<p><a title="More" href="http://oreilly.com/catalog/fire/chapter/fire0411.gif" target="_blank"><img class="aligncenter" title="Multiple Internal Networks" src="http://oreilly.com/catalog/fire/chapter/fire0411.gif" alt="" width="502" height="321" /></a></p>
<p>Using this diagram now gives even more flexibility, as there is now a nice segregation between the networks behind the interior router.  This setup means that you can have a single-purpose network zone, which is neat, as PCI DSS states that all servers should have a single purpose.  If those have a single purpose, they should share a similar communications port setup &#8211; therefore it seems sensible to group them all into the same zone.  They&#8217;ll also probably not need much by the way of &#8216;interzonal&#8217; communications &#8211; and if they do, it&#8217;s segregated off the external firewall.  It will also be much easier to spot problems introduced by an external event (DDoS, Digg Effect, Social Media Strategy Success), and those introduced by those pesky web developers (internal connections increasing).</p>
<p><strong>Switching</strong></p>
<p>This is where it starts to get complicated.  Where do you use switches here?  How do you segregate the switch.  Well, I guess I need to look into VLANs to segregate the switch.  Using the diagram above, the two Internal Networks could probably exist on the same switch, providing it was VLAN&#8217;d into separate blocks.  It&#8217;d be interesting to know if anyone has any preference here in terms of switch &#8211; or will a fairly basic switch do what you&#8217;d want it to do in this situation?</p>
<p><strong>Conclusion / Call for Recommendations</strong></p>
<p>With all this in mind, and the network infrastructure suddenly growing from what was essentially just a &#8216;firewall&#8217; with loads of devices plugged into it to a much more complicated setup &#8211; how important is it that the technologies used in each of these individual networking devices are integrated?  There are a couple of vendors selling solutions that would integrate the entire networking stack, using the same technology in routers, switches and firewalls. Is it better to go with a single vendor to reduce the management headache, or will the benefits of an integrated solution only come about when many more devices are connected?</p>
<p>I look forward to hearing what others have done, and I look to sharing more of my decision making progress as things progress.</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/18/networking-lets-get-complicated/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Traffic Management</title>
		<link>http://zrmt.com/2011/10/18/active-traffic-management/</link>
		<comments>http://zrmt.com/2011/10/18/active-traffic-management/#comments</comments>
		<pubDate>Tue, 18 Oct 2011 18:15:49 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[Social]]></category>
		<category><![CDATA[active traffic management]]></category>
		<category><![CDATA[driving]]></category>
		<category><![CDATA[m42]]></category>
		<category><![CDATA[m6]]></category>
		<category><![CDATA[motorway]]></category>
		<category><![CDATA[politics]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1593</guid>
		<description><![CDATA[As many motorists in the UK will be aware, over the last few years there has been a massive increase in &#8216;Active Traffic Management,&#8217; which came from a decision to prevent the &#8216;environmental impact&#8217;/cost of widening the M42 motorway south of Bimingham.  Well, as one of the lucky people that call the &#8216;South of Birmingham&#8217; [...]]]></description>
			<content:encoded><![CDATA[<p>As many motorists in the UK will be aware, over the last few years there has been a massive increase in &#8216;Active Traffic Management,&#8217; which came from a decision to prevent the &#8216;environmental impact&#8217;/cost of widening the M42 motorway south of Bimingham.  Well, as one of the lucky people that call the &#8216;South of Birmingham&#8217; my home &#8211; I&#8217;ve benefitted from this new system, and also seen it extended up and down the M6 past Birmingham, just about covering my entire commute to work.</p>
<p><img class="alignright" title="Active Traffic Management" src="http://www.enm.bris.ac.uk/teaching/projects/2009_10/tg5412/pic9.jpg" alt="" width="270" height="188" /></p>
<p>Ok, I&#8217;ve only been commuting this route for the past three months, though I have noticed a few key problems with the &#8216;Active Traffic Management&#8217; system that probably require a more sophisticated form of complaint than a &#8216;blog rant&#8217; &#8211; but who knows, it was worth trying it here first.</p>
<p>For those of you unaware of &#8216;Active Traffic Management,&#8217; it consists of overhead gantries every x metres along the motorway, with a nice LED sign above each lane showing either the speed limit, a big red &#8216;X&#8217; for Lane Closed, or an arrow, pointing either to the bottom left, or right, advising the motorist of which lane they should filter into.  There are also big information display board at special intervals (and before junctions) that advise motorists of issues ahead on the motorway network, and provide nice little diagrams for how to get off at any particular junction (as the junction dynamics change depending on the lane closure).  There are also average speed checks along the entire route, as well as nifty &#8216;traditional&#8217; speed cameras every so often, to catch out the unsuspecting driver who strays above the limit imposed on the overhead sign.</p>
<p>Having my leg broken by a car, you think I&#8217;d have a bias towards slowing them down, but surprisingly, I don&#8217;t.</p>
<p>The problem for me lies in that there doesn&#8217;t appear to be a &#8216;level of assurance&#8217; in the quality of the overhead sign.  A few months ago I was driving home at 2300 hours from Manchester, and pulled onto the M42.  The traffic was slowed to 50mph by the overhead signs (without a decrement from 70 to 60 to 50), and it was shown that lane closures would be ahead.  The traffic cones soon came into view, and I was shuffled down to the slow lane, with 50mph passing over my head every few metres.  Not long after I&#8217;d been driving, the speed limit reduced to 40, and I noticed a car come up behind me, clearly doing more than the 50 they should have been &#8211; and not looking like they&#8217;d be slowing to the 40 I was adhering to.  I then looked up, and the next sign was showing 20mph.  20MPH!!  I had to either slow down to this new sign, or face the fact the guy behind me was either going to career into me, or into the unsuspecting workmen that this very system was designed to protect.</p>
<p>Luckily for me, and them, they were able to slow down &#8211; but not without them rudely beeping their horn (which I know to be illegal past 2300 hours on a weekday).  The speed limit then increased back to 40mph, so I felt a little less bad &#8211; but then back down to 30mph.  They must have thought I was teasing them.  When I finally got to the end of the roadworks, I sped up to 70mph as fast as possible, and they joined me &#8211; pulling funny faces and signs out of their window, then speeding off at a speed considerably faster than me.</p>
<p>The problem I have here, is that there should be some legislation (or programming control) preventing the signs decrementing by more than 10mph between two signs.  I understand that in certain emergencies it is necessary to put the signs up immediately &#8211; but to have planned works without considering the effect of lowering the speed limit on the motorway to 20mph.. well it just seems ridiculous.</p>
<p>The second problem I had with them (that caused me to write this post in the first place), was on my way home the other night after work.  The motorway was then again brought down to one lane, using the aforementioned arrow system.  It correctly put us down to one lane, then as soon as the cones were signally us all to move over, the signs above changed to show all three lanes open and running at 50mph, despite us being limited to three lanes.  When the cones stopped, there was no difference between what had been shown on the gantries with the lanes closed.  It really annoys me that millions has been spent on this system, yet it is being used incorrectly through laziness.  This is not a technical issue &#8211; it is simply a lack of pride in doing a job well.  When thousands of hours of time must have been spent on the technical proposal and the theories into fluid dynamics and traffic movement &#8211; the implementers have appeared to ignore any use of controls to keep from adversely affecting traffic flow rather than increasing it.  I&#8217;d also love to see a few days a week with the &#8216;Active Traffic Management&#8217; turned off completely, to confirm whether or not having it on has made a positive different or not.</p>
<p>So when David Cameron and the other ConDems are reading over their legislation on increasing the speed limit to 80mph, please can they spare a couple of hours to look over the crippling &#8216;Active Traffic Management&#8217; that may &#8211; or may not &#8211; be improving Britain&#8217;s motorways.</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/18/active-traffic-management/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Guest Bloggers</title>
		<link>http://zrmt.com/2011/10/13/guest-bloggers/</link>
		<comments>http://zrmt.com/2011/10/13/guest-bloggers/#comments</comments>
		<pubDate>Thu, 13 Oct 2011 08:42:00 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[ICT]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1588</guid>
		<description><![CDATA[I&#8217;ve decided to allow a couple of other guys to post a few guest blogs. I&#8217;m going to update the ubuntu planet to only pull my &#8216;ubuntu&#8217; tagged posts in future.]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve decided to allow a couple of other guys to post a few guest blogs.  I&#8217;m going to update the ubuntu planet to only pull my &#8216;ubuntu&#8217; tagged posts in future.</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/13/guest-bloggers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>iPhone4S or Galaxy S2?</title>
		<link>http://zrmt.com/2011/10/12/iphone4-or-galaxy-s2/</link>
		<comments>http://zrmt.com/2011/10/12/iphone4-or-galaxy-s2/#comments</comments>
		<pubDate>Wed, 12 Oct 2011 20:32:16 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[ICT]]></category>
		<category><![CDATA[iphone 4s]]></category>
		<category><![CDATA[phone]]></category>
		<category><![CDATA[samsung galaxy s2]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1586</guid>
		<description><![CDATA[So it&#8217;s come to decision time &#8211; I&#8217;m giving my current Galaxy S phone to my little sister (so she can tether away to her hearts&#8217; content). This leaves me with a dilema; what phone should I upgrade to? Though I have recently purchased an Apple MacBook Pro, I am not yet ready to sign [...]]]></description>
			<content:encoded><![CDATA[<p>So it&#8217;s come to decision time &#8211; I&#8217;m giving my current Galaxy S phone to my little sister (so she can tether away to her hearts&#8217; content). This leaves me with a dilema; what phone should I upgrade to?</p>
<p>Though I have recently purchased an Apple MacBook Pro, I am not yet ready to sign my entire technology stack off to them, and I&#8217;ve been really happy with my Android devices over the past 18 months. I&#8217;m loving the synchronisation between my gmail account and my phone, and it&#8217;s a really slick platform that I think is going to get better and better.</p>
<p>So all I need now is a <a href="http://www.mobilefun.co.uk/cat/Galaxy-S2-Cases.htm">Samsung Galaxy S2 case</a>, and then I&#8217;m away.</p>
<p>I&#8217;m not sure anyone else would suggest going for the iPhone 4S &#8211; it just looks like too much &#8211; the tariff will be 33% more if I go for that, and with a 24 month contract, it&#8217;ll be out of date and crippled come the end of it.</p>
<p>Is there any new phone to be released that I&#8217;m missing?</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/12/iphone4-or-galaxy-s2/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Health and Exercise</title>
		<link>http://zrmt.com/2011/10/12/health-and-exercise/</link>
		<comments>http://zrmt.com/2011/10/12/health-and-exercise/#comments</comments>
		<pubDate>Wed, 12 Oct 2011 13:02:12 +0000</pubDate>
		<dc:creator>andylockran</dc:creator>
				<category><![CDATA[Social]]></category>
		<category><![CDATA[diet]]></category>
		<category><![CDATA[exercise]]></category>
		<category><![CDATA[health]]></category>

		<guid isPermaLink="false">http://zrmt.com/?p=1584</guid>
		<description><![CDATA[I&#8217;ve once again decided to try harder to get myself into shape, and as always with the help of peer pressure, I&#8217;m more likely to succeed. I&#8217;m recording my eating and drinking habits here - with a nice graph of my daily weight. I&#8217;m also recording my exercise in that spreadsheet, but also on Endomondo. If [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve once again decided to try harder to get myself into shape, and as always with the help of peer pressure, I&#8217;m more likely to succeed.</p>
<p>I&#8217;m recording my eating and drinking habits <a title="Eating and Drinking" href="https://docs.google.com/spreadsheet/ccc?key=0AlKY4PHKlIapdDRTQ1dJMlNTQm5hMExzRlFQWE14WXc&amp;hl=en_US#gid=2">here</a> - with a nice graph of my daily weight.</p>
<p>I&#8217;m also recording my exercise in that spreadsheet, but also on <a title="andylockran on Endomondo." href="http://www.endomondo.com/profile/116030" target="_blank">Endomondo</a>.</p>
<p>If there&#8217;s anyone out there with any tips/suggestions, I&#8217;d be glad to hear them; please comment below.</p>
]]></content:encoded>
			<wfw:commentRss>http://zrmt.com/2011/10/12/health-and-exercise/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

