What NAT is useful for

I can think of at least three things that NAT is good for:

  • it compacts address space; many machines can be behind a single IPaddress.
  • it makes a decent outgoing-traffic-only firewall, which provides asignificant amount of protection to machines.
  • to some degree it denies outsiders what I'll call 'trafficintelligence'; how many machines you have, how they're grouped,and what machine or group is responsible for what traffic.

(Sometimes the lack of traffic intelligence can be a problem


Why vfork() got created (part 2)

Although fork() theoretically copies the address space of the parentprocess to create the child's address space, Unix normally does notactually make a real copy. Instead it marks everything as copy onwrite and then waits foreither the parent or the child to dirty a page, whereupon it does copiesonly as much as it has to. This makes forks much faster, which is veryimportant since things in Unix fork a lot.

(Disclaimer: this is the traditional implementation for paged virtualmemory. I don


失眠的成果

兩本講集,一個魯迅


接下了中學閱讀班,自然名正言順細讀魯迅。記得中學時看給中學生的魯迅賞析書籍,我總把導讀和賞析部分跳過去——作品本身有力太多了。現在自己下手來做,自然不想重蹈浮泛悶蛋的導讀覆轍(當然也


Matching words against a list in the Bourne Shell

One of the interesting challenges in writing shell scripts isfiguring out how to do as much as is practical with shell builtinsand primitives. Since Bourne shell builtins are such a limited andconstrained environment, the results can be somewhat perverse andpeculiar and thus neat and amusing.

(If you can find an efficient way of doing things, using builtins ismuch faster than having to resort to external programs, especially whenthe system is loaded.)

My challenge today was checking whether a word was in a list of words(


20071112 網摘 – 露底

China

Copyrights

HK Movies

Google 調虎離山?


玩命.飛車.殺人狂Death Proof


周末無聊
看了昆頓塔倫天奴導演的這齣奇片
大呼過癮
看過以前美國B級片的觀眾應該會覺得更高興
此片很懷舊
很暴力
不喜歡昆頓塔倫天奴的人會覺得這樣的電影很討厭
但這樣的試驗也實在為昔日的文化加上了不一樣的意義
要搞一

Why vfork() got created (part 1)

The fork() system call presents a problem for strict virtual memoryovercommit . Because it duplicates a process's virtualaddress space, strictly correct accounting requires that the childprocess be instantly charged for however much committed address space theparent process has; if this puts the system over the commit limit, the fork() should fail.

At the same time, in practice most fork() child processes don't usevery much of the memory that they're being charged for; almost all thetime they


The Look of Love...譚蘭卿

以前的粵語長片洋為中用, 不一樣的有趣


一曲三變

香港人最熟悉的版本: 軟硬《食o野一族 》



原裝正版Melina Mercouri 《Never on Sunday》(Pote Tin Kyriaki)




The Muppert Show 《Never on Sunday》, 難得希臘人又接受得到美國式戲謔


中女三級制

中女三級制

二十八歲這個年齡,常常令我感到很苦惱。二十多歲的女人,正處於「氣質真空期」。她們既已失去十幾歲少女的天真瀾漫,卻又未發展出三十歲後的成熟韻味。不論事業、愛情、家庭,二十多歲的女性仍在起步、探