
Source: 浮線發想之島
Address : http://p-water.myweb.hinet.net/
看了就知道… ^^
Dynamips (the actual emulator): http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator
Dynamips Blog (where most of the action is): http://www.ipflow.utc.fr/blog/
Dynagen (a front-end to the emulator): http://dyna-gen.sourceforge.net/
Dynagui: http://dynagui.sourceforge.net/
Dynamips / Dynagen Bug tracking: http://www.ipflow.utc.fr/bts/
Hacki’s Dynamips / Dynagen / Dynagui Forum: http://hacki.at/7200emu/index.php
靠記帳成為富翁,聽起來像是天方夜譚,不過,這可是美國石油大王洛克斐勒家族,教導子孫理財的第一課;商界名女人何麗玲也提到,小學五年級起,祖母就要求她記帳, 這個習慣讓她日後受益無窮,由此可見從小學習「記帳」的重要性。
一本小小的記帳本,究竟能有什麼用處?美國石油大王洛克斐勒,之所以能夠富足六代,靠的就是「記帳」。不僅自己從年輕時就記帳,即使身家財富已達數十億美元,他仍要求孩子每天睡覺前,必須詳細記錄所有花費。記帳這門功夫,可說是洛克斐勒家族對子孫的理財教育的第一課。
要 靠記帳成為富翁,聽起來似乎有點像是天方夜譚,不過鄭鈺蓉可是從小領悟到記帳的重要性。今年三十四歲的鄭鈺蓉,從五歲開始就由父親教她記帳,當時她才就讀 幼稚園中班,剛剛學會寫阿拉伯數字。直到現在,她認為記帳已經成為生活中不可或缺的一部分,「就像每天都要刷牙一樣自然。」
對數字有概念 花錢先問值不值得
「從 我有記憶以來,就有一本記帳簿跟著我。」鄭鈺蓉說,父親在小時候就告訴她,想要領零用錢就一定要記帳才行。而且每隔一段時間,父親就會和她一起檢視記帳 簿,分析支出的項目,並與她討論「是不是買貴了?」以及「需不需要做這筆花費?」她也可以借此檢討自己的花費是否有其必要。直到上了高中,父親才不再看她 的帳簿,讓她學習獨立管理金錢。
透過父親的訓練,讓她小時候連看到商店販賣的糖果,都會去思考「要不要花這個錢?」雖然零用錢的金額並不高,即使僅有幾十塊錢收入,每個月仍有結餘。
用帳簿寫日記 金錢管理一目了然
不 僅是鄭鈺蓉,鄭鈺蓉的父親發給所有家庭成員包含母親、姊姊與弟弟人手一本記帳簿。鄭鈺蓉的母親回憶說:「記得剛結婚時,常為了記帳而和先生起爭執,總覺得 這些芝麻小事何必計較呢?」當時連買一塊香皂、一條魚,先生都要求她記錄下來,讓她感到不受信任,足足適應了半年才習慣。現在她了解當初先生的用意,對於 掌控家庭消費、孩子教育經費等也更有一套。
「記帳,在累積財富過程中十分重 要。」鄭爸爸說,從記帳即可了解近年物價的變化,其中以電子用品的跌幅最為明顯。翻開記帳本,鄭爸爸馬上列出記憶卡最近幾年的價格消長,他曾買過容量1G 的記憶卡要價八千六百元,也買過8G的記憶卡卻只需三千六百八十元。「像這樣容易跌價的東西就最好少買。」他舉例時,連詳細金額都記得一清二楚,這也是記 帳的優點。
鄭爸爸之所以重視記帳,是因為從小看媽媽拿著一本帳簿,將家中大小花費詳盡記錄。當時他還不太了解理由,直到大學讀了會統系後,他才理解財務管理的重要性。他發現,「只要懂得量入為出,就沒有負債的恐懼。」
父 親的好習慣,深深影響了鄭鈺蓉的金錢觀念,讓她出了社會後,即使支出漸漸增加,也絕不透支。除了貸款買房外,即使使用信用卡,也絕不利用循環利息。若是想 購買較高價的物品,她會先衡量自己的能力,先減少幾個月的部分支出,預留一筆足夠的金額才會下手。例如她會為了與先生一同到國外旅遊,先省下幾個月購買衣 服、包包的預算,才安排行程。
一直以來,她從檢視帳本了解自己有多少的收 入、資產與負債,來掌握自己可支配的資金。五年前,她將紙本的記帳簿改為電腦記帳,利用Excel檔案製表,對於消費金額更加一目了然,方便追蹤過去的支 出紀錄。不僅如此,就連現在所投資的股票、基金帳戶,也可立即掌握獲利狀況,隨時做出各個資金部位的調整,因而讓她在理財投資上,平均獲利率可達三○至四 ○%的好成績。
鄭鈺蓉說,雖然現在的財富仍在累積中,但因為利用記帳做財務規畫,讓她更能控制花錢的節奏,生活的安排也多了一點彈性。
商界名女人何麗玲,也從小學五年級就由祖母培養記帳的能力,透過記錄每日支出來控制花費。她曾說過,「記帳就像女人每天搽口紅一樣。」可見得記帳與她的生 活同樣密不可分,是累積財富的重要工具。因此,學會記帳,絕對是成功致富的必要途徑之一! (更多精采內容,請見550期今周刊)Time, I've been passing time watching trains go by
All of my life
Lying on the sand watching seabirds fly
Wishing there could be someone
Waiting home for me
Something's telling me it might be you
It's telling me it might be you
All of my life
Looking back as lovers go walking past
All of my life
Wondering how they met and what makes it last
If I found the place would I recognize the face
Something's telling me it might be you
It's telling me it might be you
So many quiet walks to take
So many dreams to wake and there's so much love to make
I think we虐e gonna need some time
Maybe all we need is time
And it's telling me it might be you
All of my life
I've been saving love songs and lullabies
And there's so much more
No one's ever heard before
Something's telling me it might be you
Yeah, it's telling me it must be you and
I'm feeling it'll just be you
All of my life
It's you, it's you I've been waiting for all of my life
Maybe it's you Maybe it's you I've been waiting for all of my life.
Posted by uljanow on Wed 4 Jul 2007 at 11:11
Trying to insert 70.000 rules in iptables on a recent machine takes about an hour and going through these rules for each packet is even more of a burden. But iptables can send packets to userspace to be handled there. This article describes how to filter network traffic based on thousands of IPs with a new tool called nfqueue efficiently.
nfqueue requires a 2.6.14 kernel or later with the option CONFIG_NETFILTER_XT_TARGET_NFQUEUE enabled (module or build-in). On a standard Debian installation (Etch) the additional packages libnetfilter-queue1 and
Install prerequisites
aptitude install libnetfilter-queue1 libnfnetlink1
Get the Debian nfqueue package and install it
wget http://nfqueue.sf.net/debian/nfqueue_0.11-1_i386.deb
dpkg -i nfqueue_0.11-1_i386.deb
IP ranges are specified in p2p, dat, csv text files or in nfq binary format.
A p2p format looks like this:
foo : 127.0.0.1 - 127.0.0.2
A dat file looks like this:
127.0.0.1, 127.0.0.2, <0-255>, foo
(Values less than 127 are dropped.)
For available lists take a look at /usr/share/doc/nfqueue/README.lists.
Sending packets to userspace is done by using the NFQUEUE target. E.g:
iptables -I INPUT -p all -j NFQUEUE
From userspace there are basically 3 things one can do with packets.
Repeating Packets sends them back to the chain (IN-, OUTPUT or FORWARD) they came from. Since this could lead to endless loops marking packets is possible. The other options Accept and Drop are terminating targets. See "man 1 nfqueue" for more details.
Get the csv file from webhosting.info
wget http://ip-to-country.webhosting.info/downloads/ip-to-country.csv.zip
Let's assume we want to block the whole US. First we put the ip ranges of the USA into a nfq binary to make loading faster.
unzip -c ip-to-country.csv.zip | grep -i usa | \
nfqueue -t repeat -o usa.nfq -
The easy way now would be to use the /usr/share/doc/nfqueue/nfqueue.sh script which I will explain later. Updating these values is all that needs to be done:
INPUT_FILES=/path/to/usa.nfq
OUTPUT_FILES=/path/to/usa.nfq
Run:
nfqueue.sh start
nfqueue.sh stop
nfqueue.sh status
Packets are filtered in the INPUT and OUTPUT chain. For each new connection (both directions) nfqueue looks if the IP is specified in usa.nfq. If the IP is found then it gets marked and repeated so that it can be rejected by iptables. If the IP is not found nfqueue marks the packet to avoid looping forever and sends it back (repeat again) to be handled by the rest of the iptables configuration.
The script only rejects packets from clients specified in files and the rest is handled by your iptables configuration.
Note that the script rejects packet properly instead of just dropping.
There is also an ipset tool from netfiler.org which requires kernel-patching and some scripting to parse the IPs from files and insert them.