firewalld

Last week, for the better part of 4.5 days, this site was offline.

Along with, of course, every other domain hosted hereon .

Here’s the timeline of my actions

  • Tuesday, reboot to update kernel revs
    • system did not come back online
  • over the next several days, tried all kinds of diagnostic attempts, including
    • verified host was pingable, tracerouteable, etc
    • rescue environments to chroot and remove out of date packages, update boot menus, etc
    • remote KVM (which is Java based, and wouldn’t run on my macOS Sierra machine with Java 8 U121)
  • late Friday (or maybe it was Saturday), received a cron-generated email – which meant the server was up
    • had a bolt of inspiration, and thought to check the firewall (but couldn’t for several hours for various reasons)
  • Saturday evening, using a rescue environment from my hosting provider, chroot’ed into my server, and reset firewalld
    • reboot, and bingo bango! server was back

So. What happened? Short version, something enabled firewalld, and setup basic rules to block everything. And I do mean everything – ssh, http, smtp, etc etc.

Not sure exactly how the firewall rules got mucked-up, but that was the fix.

 

circus

“Ladies and Gentlemen. Boys and Girls. Children of ALL ages. Ringling Brothers and Barnum and Bailey’s Circus is proud to present … GUNTHER .. GABLE .. WILLIAMS!!!”

Is about all I recall in vivid detail from when I went to see the RB&B&B circus as a kid with my parents, aunt, and friends. (And, as a sidebar, gave me the idea to be a host of something “cool” someday.”)

Saturday, my wife and I are taking our three to see Ringling Brothers on their farewell tour.

It’s exciting that I get to take my kids to see it.

But incredibly sad they won’t get to go again.

somewhere over the buffet

From the late, great John Pinnete (to the tune of “Somewhere Over the Rainbow”)

Somewhere over the buffet:
Food piled high.
There’s a meal I must get to,
Stop me and you will die.

Somewhere over the buffet:
Watch me fly.
Eating up all of the profits,
Making the owner cry.

Someday I’ll have my own buffet
Where no one can tell me to stop eating.
With prime rib, pork chops, pizza, ham –
A gastronomic wonderland!

I’ll be at every seating!

If scrawny, skinny men can fly
Over the buffet,
Why oh why can’t I?

modularity is great – if you commoditize the right complements

Google bought Android and made great things with it.

They also had an interesting audacity to announce an “open, modular” phone that ‘anyone’ could design from, and make components that would play nicely together (like IBM did with their initial ISA architecture releases back in the 80s). (Microsoft then flipped the tables on IBM and non-exclusively licensed MS-DOS to them, which meant hardware manufacturers could build entire replacement “[IBM] PC compatible” machines … that ran Microsoft software. )

But this only works if you’re Google – an advertising company that wants more eyeballs on its ads.

If you’re a phone manufacturer, like Motorola, the absolute last thing you want is for “anyone” to be able to replace all of the modules in your phone – because you’re not selling the OS, you’re selling hardware. As Joel Spolsky wrote 15 years ago,

If you can run your software anywhere, that makes hardware more of a commodity. As hardware prices go down, the market expands, driving more demand for software (and leaving customers with extra money to spend on software which can now be more expensive.)

Sun’s enthusiasm for WORA is, um, strange, because Sun is a hardware company. Making hardware a commodity is the last thing they want to do.

Motorola is a hardware company. They may want add-ons to be available to their base phone, but the certainly don’t want you replacing everything – unless it’s from them.

Jean-Louis Gassée notes these issues in his latest article, “Lazy Thinking: Modularity Always Works”,

In order to succeed, “disruptive modularity” needs a stable architecture with well-defined and documented boundaries. Module innovators need to be able to slide their creations into place without playing havoc with the rest of the edifice. This is how it worked in the Wintel PC world…sort of. In PC reality, as many of us have experienced, the sliding in and out of modules wasn’t so neat and often landed us in Device Driver purgatory. In the mid-nineties, one Microsoft director told me that the Redmond company actually spent more engineering resources on drivers than on Windows’ core software. …
Most important, strongly-worded theories are less interesting than exploring their cracks, where they don’t seem to work. This is how physics keeps moving forward and this is also how our understanding of business should advance. In the case of Project Ara, the unexamined consensual acceptance of Disruption Theory led many to believe that Modularity Always Wins meant smartphones would (and should) follow the same path as PCs.

I hope JLG (and I, and Joel Spolsky, and basic economics) are wrong.

But I doubt it.

the fishing’s great!

Several years ago, we lost my great-uncle Don. This is a story from him, as handed-down by my dad.

We had been fishing all day. Rowed north and south across the pond. Rowed east and west across the pond. Saw turtles sunning themselves on low tree branches. It was hot. It was muggy. It was cloudless.

Hours went by. And more hours. As dinner time neared, we had caught precisely….nothing. Bupkis. Zilch. Zero. Nada. Don even brought out the Vibra-Bat. When the Vibra-Bat came out, you knew it was time to pack it in: if Don had ever caught something with the Vibra-Bat, I’m pretty sure he would’ve died of a heart attack. The Vibra-Bat was the lure of last resort. If the Vibra-Bat came out of the tackle box, you knew there were no fish. Anywhere. The pond was empty. There might not have even been an amoeba. No fish could pass-up the Vibra-Bat! So if it came out, you knew the day was up: because no fish was EVER caught with a Vibra-Bat. Not. Even. One.

The Vibra-Bat was out. It was time to row for the Bronco. It was time to put your poles away, folks. It was time to plan for dinner – no explanations as to why there were no fish coming home: the Vibra-Bat had come out!

As we came ashore, a station wagon pulled-up. Out hopped an excited dad! There was a whole friggin’ posse of kids in the back.

“How’s the fishing?” he asked.

“The fishing’s great!” replied Don.

“Hey, kids! Let’s get out and start fishing!” exclaimed the dad.

As the boat was hurriedly tied atop the Bronco, Don said, “boy – I’m sure happy he didn’t ask how the catching was.”

That was my uncle Don. Always ready to answer what, exactly, you asked.

fighting the lack of good ideas