Some notes on Solaris 9's Sunscreen IP filtering package

I spent today reading up on Sunscreen, the Solaris 9 bundled IPfiltering system. It's been interesting, partly because Sunscreen'sbuilt around a different packet matching model than I'm used to, anduses a great deal of different terminology (for example, what I thinkof as 'transparent bridging' is called 'stealth mode').

Sunscreen doesn't actually match packets as such. Instead you define'services', for which you specify some combination of destinationand/or source ports


the least but not the last

趁呢個blog仲唔知有幾多人睇,我想向世貿期間,常到、偶而路經、不幸錯摸來到(但都看了點文)本blog的各位朋友,所付予的耐性、關懷、真誠,鞠躬道個輕微的謝。除了感謝相識朋友的助力和幫忙,尤其感謝那些將鄙人文章貼

不存在絕壁

12月30日,我們在觀塘法院聽審。來港處理被捕事件的韓國官員,坐到前排。幾位在聽審席上的韓國朋友突然起身,大聲喊了好幾句話,樣子憤怒。我等不解,葉蔭聰以英語問了他們,才知道這次來的韓國官員,是支持通過

悲苦小劇場之《如果.愛》續篇

《如果.愛》曾給予鄙人強大打擊, 當時江記曾有壯語:「小樺,我約你睇如果愛!!!!」
不旋踵,12月25日,江記自首:「我同第個睇左如果愛了。我請你食飯!」
日本料理加《情義我心知》減社群建設費,江記面色發

The old nameserver glue record hell

A recent commentator on HowNotToDoDNSI has prompted me to write aboutthe hell that glue records could be in in the Internet's old days. Toreally cover the horror, I'll start with the ordinary glue recordhorror.

Glue records are additional A records that get returned by higherlevel nameservers when people ask for NS records to avoid recursionproblems that would otherwise ensue when, eg, foo.com has www.foo.com as its nameserver. This can be exploited to optimize DNSlookups a bit, as


blog後感想

blog了一段日子
開始掌握大家看blog的心態
自問寫得不好
不過很想把自己留意到的事物與別人分享
一個意見不傳出去只是一個空想
一個意見越傳越遠才會產生力量
最近在張系國先生的blog上讀到他談blog的文章 https://blog.chinatimes.com/changsk/

Is concurrency 'hard'?

Is concurrency hard? You can certainly find people arguing both sidesof the issue if you look hard enough (mostly for rather than against).But I think the question may be blurring two things together that areworthwhile to separate: 'concurrency is difficult to learn andunderstand', and 'concurrency is tricky to implement correctly'.

For example, in his reaction to Joel Spolsky's Java Schools article ,Tim Bray gives a little taxonomy of difficulty:

My experience differs from Joel's in another respect:


警察封鎖線不得越過


IMG_5369
Originally uploaded by chi_hung .


警察封鎖線
不得越過


stop wto


STOP WTO
Originally uploaded by chi_hung .

圖片設計:黃守仁

Python synergies in list addressing

Something I took from this Ian Bicking entry is that synergies and elegance don't just happen; someone usually workedhard to make it all come out neatly. Python lists have an interestingcase of this; some apparently odd decisions in other places turn out tobe needed to create useful (and error-avoiding )synergies.

Python lists (and sequences in general) are indexed from 0. Zero-basedindexing presents a problem, which can be succinctly stated as this:list element indexes run from 0 to len