Hi there đź‘‹

I’m a sysadmin based in germany. Eventually random blog posts will appear here.

AudioCodes MP1xx Configuration

The AudioCodes MediaPack 1xx (112,114,118) are analog VoIP gateways. I use an MP-112 for my old “Clubtelefon 41” payphone, as these gateways can also generate a metering pulse. To be able to operate the device on a Fritz!Box, some special settings are necessary that do not seem logical at first glance. In general, a large number of configuration options are available, which can be overwhelming. Fritz!Box Hurdles What can be very annoying when testing, the Fritz!Box has a brute force protection on the SIP server. This blocks the affected IP for 9600 seconds. So even if everything is set up correctly, a previous misconfiguration may have caused it to still not working. ...

February 13, 2025 Â· Jan Brand

SR-IOV on a Lenovo M720q (Proxmox & Mellanox)

Preamble So, why build a firewall with Proxmox as a hypervisor and not install bare-metal directly? Well, i ran OPNSense bare-metal for years on a Sophos XG105. It was stable and running fine. The Sophos also had an usb serial port, which was very useful for console access. Unfortunaly, the system began to show its age and performance was not sufficient anymore. When there was a lot of network traffic on other VLANs, I had intermittent packet loss and lag spikes in video and voice calls. I tried to spread out the VLANs on all interfaces, but it only helped marginal because the CPU was the limiting factor. Also the ports were only just 1000BASE-T, meh. ...

October 19, 2024 Â· Jan Brand

NetworkManager: Start script only on certain connections

I backup my laptop using Syncoid from the Sanoid package to my homeserver. Because I don’t want to do this manually (e.g. forget it), I was looking for a way to automate the whole thing. A systemd-timer seems like a simple solution at first, but the system is not online all the time and also switches between networks. Also my backup destination is not accessible from the outside without VPN. So I need a solution which only runs if the laptop connects to the home network. ...

April 17, 2021 Â· Jan Brand

Fritzbox Recovery

For testing purpose i have an old Fritz!Box 7360 flashed with OpenWRT. For $reasons I needed to reflash the original firmware. Unfortunaly the Recovery tool didn’t work with my model, because it used to be provider branded by EWE. There is a rebranded Version of the tool by EWE, but this didn’t work either. So i researched a little and it turns out you can flash the firmware manually via the ADAM bootloader, just like OpenWRT. ...

January 17, 2021 Â· Jan Brand

Icinga 2 satellite setup

Introduction A Icinga 2 satellite is very useful to monitor external remote networks that are not directly accessible from the master server. The Icinga 2 documentation clearly describes the master->satellite->client setup, but (hopefully) nowadays you use Icinga Director for the configuration management. This raised a question for me: How to configure it and especially where. Define the zones in the Icinga core config? Director? Custom config which is shipped via the fileshipper? ...

December 17, 2020 Â· Jan Brand

Homenetwork rebuild

Recently I moved and need to rethink my rack and network solution. Previously my server and the main switch lived in my IKEA Oppli TV-Bench, which was already showing its age. I used a Mikrotik CSS326-24G-2S+RM which is a very capable switch for the price, but unfortunaly don’t have PoE (For 120€ also a little too much asked). (At the time) my only PoE device was my Ubiquiti Unifi AP AC Pro which I powered via the included injector. Not an ideal solution, but it worked. As my hardware only stayed in one room, this was enough. ...

December 16, 2020 Â· Jan Brand

Coreboot on T430

About a year ago I replaced the horrible TN display of my boyfriend’s T430 with a Full-HD IPS and in the same move I replaced the LAN Ethernet USB Board due to a bent USB port. Because the laptop had to be completely disassembled anyway, I decided to give Coreboot a try. This blogpost serves as a memory support, if I should decide to flash another laptop. I’ve used a CH341A programmer. Unfortunately I did not take any pictures, but you should find some in the linked blogposts below. ...

October 22, 2020 Â· Jan Brand

DN42

Recently I discovered the DN42 project. It’s basically a private network similar to the public internet and is designed not only to learn routing technologies like BGP, but also provides a internet registry, DNS root servers and internal services. Currently my only public node is a virtual machine on my Colocation Host in the datacenter FRA4, Germany. Short overview: Debian Unstable 1 Gbps Bandwidth Fully dualstacked Wireguard (preferred) and OpenVPN (Unfortunaly) no BGP-MP If you want to peer with me, all needed information are on my DN42-Page. Over there you can also find a list of all current peerings, a peering form and soon™ there also should be a looking-glass instance. ...

October 14, 2020 Â· Jan Brand