import from old webserver

2024-01-27 15:10:12 +01:00 · 2024-01-27 15:10:12 +01:00 · ef633b2cf4
commit ef633b2cf4
182 changed files with 69233 additions and 0 deletions
--- a/about.shtml
+++ b/about.shtml
@ -0,0 +1,64 @@
+<!--#include virtual="ssi_site_header.html" -->
+
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005 - About</title>
+
+<!-- end of specific page header -->
+
+<!--#include virtual="ssi_site_intro.html" -->
+
+<!-- begin of specific page content -->
+
+
+<div class="announcement">
+<h3 class="announcement">About the Easterhegg</h3>
+</div>
+
+<div class="chapter">
+<h4>Was ist das Easterhegg?</h4>
+<p>
+Das Easterhegg ist die zweitgr&ouml;sste, regelm&auml;ssig durchgef&uuml;hrte
+Veranstaltung des <a href="https://www.ccc.de">Chaos Computer Clubs</a>.
+Die Teilnehmer kommen aus dem gesamten Bundesgebiet, vereinzelt auch aus dem Ausland.
+Es besteht haupts&auml;chlich aus Workshops, weniger aus reinen Vortr&auml;gen.
+Abgedeckt wird das ganze Spektrum von Technik &uuml;ber Netzkultur bis zum Szenetreff.
+Die Veranstaltung bietet eine F&uuml;lle an hochklassigen Workshops und Vortr&auml;gen.
+Dazu kommt, dass das Easterhegg unschlagbar preiswert ist, da es nichtkommerziell ist
+und alle Beteiligten ehrenamtlich arbeiten.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Was ist beim Easterhegg anders als beim Chaos Communication Congress?</h4>
+<p>
+Der auff&auml;lligste Unterschied ist wohl, dass das Easterhegg nicht nur
+aus Vortr&auml;gen besteht, sondern haupts&auml;chlich aus Workshops,
+bei denen die Besucher selbst mitmachen können und sollen.
+Zum anderen ist es keineswegs ein solch gigantisches Event wie der
+<a href="https://www.ccc.de/congress/">Chaos Communication Congress</a>,
+was allerdings hei&szlig;t, dass der Platz begrenzt ist und man sich deshalb
+<a href="https://easterhegg2005.hamburg.ccc.de/cgi-bin/anmeldung.cgi">anmelden</a>
+muss. Dar&uuml;berhinaus k&ouml;nnen Tageskarten nur solange ausgegeben werden,
+wie die Veranstaltung nicht &uuml;berf&uuml;llt ist.
+</p>
+<p>
+Im Eintrittspreis enthalten ist ein Fr&uuml;hst&uuml;cksbuffet (Br&ouml;tchen, Obst, Kaffee, Tee, ...),
+welches traditionell den ganzen Tag über zugänglich ist.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Wer steckt dahinter?</h4>
+<ul>
+<li><a href="https://www.ccc.de">Der Chaos Computer Club</a></li>
+<li><a href="https://www.hamburg.ccc.de">Der CCC Erfa-Kreis Hamburg</a></li>
+<li><a href="https://www.hamburg.ccc.de/bildungswerk/">Das Chaos-Bildungswerk</a></li>
+<li>...und eine Menge freiwilliger Personen</li>
+</ul>
+</div>
+
+<!-- end of specific page content -->
+
+<!--#include virtual = "ssi_site_extro.html" -->
+
--- a/announce.php
+++ b/announce.php
@ -0,0 +1,415 @@
+<?php
+
+// diese Seite stellt Orga-Funktionen für die eh2005-Seite zur Verfügung
+// + diese Seite liegt im öffentlichen Serverbereich, dieser darf *.php nicht als plain/text ausliefern ;)
+// + diese Seite verlangt zwingend https
+// + diese Seite fragt bei jedem Submit ein Authentifikationspasswort ab, es gibt jedoch keine Session
+
+/*
+  Struktur dieser Seite:
+  + write HTTP header
+  + check, defuse and shorten input variables
+  + Prüfung auf https
+    = OK => continue
+    = FAIL => Abbruchmeldung und Schlußverarbeitung
+  + Prüfung auf gültige Authentifizierung
+    = OK => continue
+    = FAIL => Abbruchmeldung und Schlußverarbeitung
+  + Prüfung auf Wartungsstatus
+    = OK => continue
+    = FAIL => Abbruchmeldung und Schlußverarbeitung
+  + Verarbeitung der Submit-Aktionen (POST), Anzeige der einzelnen Orga-Formulare
+*/
+
+
+
+
+// this script needs following additional server modules for PHP
+// - (none)
+
+
+// write HTTP header (anti-cache)
+header('Expires: Sun,	31 Dec 1989	23:59:59 GMT');
+header('Last-Modified: ' . gmdate('D,	d	M	Y	H:i:s')	.	'	GMT');
+header('Cache-Control: no-store, no-cache, must-revalidate');
+header('Cache-Control: post-check=0, pre-check=0');
+header('Pragma:	no-cache');
+
+
+// define general server constants
+define( "SERVER_SITE_MAINTENANCE", false );               // maintenance state, set to TRUE to lock this page temporarily
+define( "SERVER_LOCALHOST_IP", "127.0.0.1" );             // localhost IP, which does not need authentication
+define( "SERVER_PROTOCOL_HTTPS", "HTTPS" );               // HTTPS protocol name
+
+
+// define server file constants
+define( "SERVER_FILE_MYSELF", "announce.php" );           // submit target of forms = this file itself
+define( "SERVER_FILE_ANNOUNCE", "index.shtml" );          // announcement file; e.g. index file
+define( "SERVER_FILE_HEADER", "ssi_site_header.html" );   // SSI file for site header
+define( "SERVER_FILE_INTRO", "ssi_site_intro.html" );     // SSI file for site intro
+define( "SERVER_FILE_EXTRO", "ssi_site_extro.html" );     // SSI file for site extro
+
+// define auth constants
+define( "AUTH_SERVER_PASS", "Osterüberraschung" );       // auth password, [todo:] should be outsourced to an external, secured data file
+
+
+
+// init references to $_POST variables ($pxxx)
+$pstrauth = & $_POST['txtauth'];
+$pstrtitle = & $_POST['txttitle'];
+$pstrannouncement = & $_POST['txtannouncement'];
+$pbolannouncement = & $_POST['cmdannouncement'];
+
+// init post variables (only for mandatory variables, ignore variables submitted by special forms!)
+if ( !isset($pstrauth) ) $pstrauth = '';
+if ( !isset($pstrtitle) ) $pstrtitle = '';
+if ( !isset($pstrannouncement) ) $pstrannouncement = '';
+
+
+// init instance variables
+$intnow = time();
+
+$strmsg = '';                     // (status/error/etc.) message to user
+$strauth = '';
+$strinput = '';
+$stroutput = '';
+$intfileid = 0;
+
+$strtitle = '';
+$strannouncement = '';
+$strauth = '';
+
+$bolannouncement = false;
+$bolauthabort= false;
+$bolok = false;                   // action feedback, triggers confirmation if true or warning if false
+
+
+// function library
+
+function addmsg ($straddmsg)
+{
+  // adds $straddmsg to $strmsg
+  global $strmsg;
+  if ( $straddmsg != '' )
+  {
+    $strmsg = $strmsg . '<li>' . $straddmsg . '</li>';
+  }
+}
+
+function showmsg ()
+{
+  // shows messages in $strmsg if available
+  global $strmsg, $bolok;
+  if ( $strmsg != '' )
+  {
+    echo
+    '
+    <div class="announcement">
+    <h3 class="';
+    if ( $bolok )
+    {
+      echo 'confirmation';
+    }
+    else
+    {
+      echo 'warning';
+    }
+    echo '">Feedback</h3>
+    <ul>' . $strmsg . '</ul>
+    </div>
+    ';
+    $strmsg = '';
+  }
+}
+
+
+
+// check input variables
+//$bolannouncement = isset( $pbolannouncement ); // does not work in IE when submitted from within a text field by pressing Return key, reason unknown
+$bolannouncement = ( isset( $pbolannouncement ) || $pstrannouncement != '' );  //workaround for IE problem, see line above
+
+$intwsid = $pintwsid;
+$strtitle = $pstrtitle;
+$strannouncement = $pstrannouncement;
+$strauth = $pstrauth;
+
+// defuse input variables
+$strtitle = trim( htmlentities( $pstrtitle, ENT_QUOTES ));
+// leave announcement html'ed
+//$strannouncement = trim( htmlentities( $pstrannouncement, ENT_QUOTES ));
+$strauth = trim( htmlentities( $pstrauth, ENT_QUOTES ));
+
+// shorten input variables
+if ( strlen( $strauth ) > 255 ) $strauth = substr( $strauth, 0, 4095 ); //cut it, do not modify
+if ( strlen( $strtitle ) > 255 ) $strtitle = substr( $strtitle, 0, 252 ) . "...";
+if ( strlen( $strannouncement ) > 4095 ) $strannouncement = substr( $strannouncement, 0, 4092 ) . "...";
+
+
+if
+(
+  // localhost access
+  (
+    // direkter Aufruf von localhost
+    htmlspecialchars( $_SERVER['HTTP_X_FORWARDED_FOR'], ENT_QUOTES ) == ''
+    &&
+    htmlspecialchars( $_SERVER['REMOTE_ADDR'], ENT_QUOTES ) == constant("SERVER_LOCALHOST_IP")
+  )
+  ||
+  (
+    // indirekter Aufruf (z.B. transparenter SSL-Proxy) mit übergebenem localhost
+    htmlspecialchars( $_SERVER['HTTP_X_FORWARDED_FOR'], ENT_QUOTES ) == constant("SERVER_LOCALHOST_IP")
+  )
+)
+{
+  // localhost ist immer eingeloggt
+  // -> continue
+}
+else
+{
+  // check protocol and timeout
+
+
+
+  // check secure connection
+  // possible results:
+  // - secure => continue
+  // - insecure => force logout ($bolauthlogoutnow), show error page and prepare message ($strmsg)
+  if
+  (
+    (
+      // direct connection without HTTPS
+      $_SERVER['HTTPS'] == ''
+      &&
+      $_SERVER['HTTP_X_FORWARDED_PROTO'] == ''
+    )
+    ||
+    (
+      // indirect connection without local HTTPS proxy, e.g. orenosp
+      strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) != strtolower(constant("SERVER_PROTOCOL_HTTPS"))
+      && $_SERVER['HTTP_X_FORWARDED_PROTO'] != ''
+    )
+  )
+  {
+    // insecure connection -> abort
+    addmsg ( 'Dein Verbindungsprotokoll ist HTTP. Bitte verwende für die Announce-Seite Verschlüsselung mittels HTTPS.' );
+    $bolauthabort = true;
+  }
+}
+
+
+// check maintenance state
+if ( constant("SERVER_SITE_MAINTENANCE") )
+{
+  // cancel because of maintenance
+  addmsg ( 'Die Announce-Seite ist zurzeit wegen Wartungsarbeiten deaktiviert. Bitte sp&auml;ter wiederkommen. Danke.' );
+  $bolauthabort = true;
+}
+
+
+// prepare announce page
+// assume that all ssi files are there. No, I won't check _that_ explicitely.
+// If they ain't there, the user gets a partial page. ...so what? ;o)
+readfile( constant("SERVER_FILE_HEADER") );
+echo
+'
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005 - Announce</title>
+
+<!-- end of specific page header -->
+
+';
+readfile( constant("SERVER_FILE_INTRO") );
+echo
+'
+<!-- begin of specific page content -->
+
+';
+
+
+// show msg, if available
+if ( $strmsg != '' )
+{
+  echo
+  '
+  <div class="announcement">
+  <h3 class="warning">Authentifizierungshinweis:</h3>
+  <ul>' . $strmsg . '</ul>
+  </div>
+  ';
+  $strmsg = '';
+  $bolauthabort = true;
+}
+
+showmsg();
+
+
+
+if ( $bolauthabort )
+{
+  // close page and stoprun.
+  echo
+  '
+  <!-- end of specific page content -->
+
+  ';
+  readfile( constant("SERVER_FILE_EXTRO") );
+
+  die();
+}
+
+
+
+// Well, Checkpoint.
+// Now a defined and normal state of checking has been reached.
+// Possible states are now:
+// - $bolauthabort = false: user is authenticated to see this page
+// - $bolauthabort = true: user is not authenticated to see this page
+// If there were any messages on the way up to here, they are stored as list items (<li>) in variable $strmsg.
+
+
+// check auth phrase if user tries to login
+if ( $bolannouncement )
+{
+  if ( $strauth == htmlentities( constant("AUTH_SERVER_PASS") , ENT_QUOTES ))
+  {
+    // auth accepted
+    if ( $strannouncement != '' )
+    {
+      // announcement accepted
+      if ( $strtitle != '' )
+      {
+        // title accepted
+        // -> continue
+        $bolok = true;
+        
+        // this feature has been deactivated on the production machine due to security reasons
+        // to use it on your own machine just delete or uncomment the following lines
+        //addmsg ( 'Diese Funktion wurde aus Sicherheitsgründen deaktiviert.<br>Um sie auf Deiner Umgebung zu reaktivieren, entferne die Sperre in der Datei &quot;announce.php&quot;.' );
+        //$bolok = false;
+      }
+      else
+      {
+        // title empty
+        addmsg ( 'Bitte gib noch einen griffigen Titel an! Danke :-)' );
+      }
+    }
+    else
+    {
+      // announcement empty
+      addmsg ( 'Das Announcement funktioniert besser, wenn Du etwas zum Announcen einträgst... ;-)' );
+    }
+  }
+  else
+  {
+    // auth failed
+    addmsg ( 'Das klappt so nicht. Vermutlich hast Du Dich beim Passwort vertippt.' );
+  }
+}
+
+
+echo
+'
+<div class="announcement">
+<h3 class="announcement">Announce</h3>
+</div>
+
+';
+
+if ( $bolok && $bolannouncement )
+{
+  $bolok = false;
+  
+  //announce it now
+
+  $strinput = file_get_contents( constant("SERVER_FILE_ANNOUNCE") );
+
+  $stroutput =
+  '
+  
+  <div class="chapter">
+  <h4>' . $strtitle . '</h4>
+  <p>
+  <span class="timestamp">' .  date( "d.m.Y", $intnow ) . '</span>
+  ' . $strannouncement . '
+  </p>
+  </div>
+  ';
+  
+  $stroutput = str_replace( "<!--> [%announcement%] </!-->", '<!--> [%announcement%] </!-->' . $stroutput, $strinput );
+
+
+  if ( is_writable( constant("SERVER_FILE_ANNOUNCE") ))
+  {
+    // file_put_contents does not work with PHP 4.x, so use instead: fopen, fwrite, fclose
+    // file_put_contents( constant("SERVER_FILE_ANNOUNCE"), $stroutput );
+    $intfileid = fopen( constant("SERVER_FILE_ANNOUNCE"), "w" );
+    fwrite( $intfileid, $stroutput );
+    fclose( $intfileid );
+    $bolok = true;
+  }
+  else
+  {
+    addmsg ( 'Die Workshopdatei &quot;' . constant("SERVER_FILE_ANNOUNCE") . '&quot; konnte nicht geschrieben werden. (Rechteproblem?)');
+    $bolok = false;
+  }
+}
+
+if ( $bolannouncement )
+{
+  if ( $bolok )
+  {
+    addmsg ( 'Das Announcement wurde gesetzt.' );
+  }
+  else
+  {
+    addmsg ( 'Das Announcement wurde nicht gesetzt.' );
+  }
+}
+showmsg();
+
+
+
+// show announce page
+
+echo
+'
+<div class="chapter">
+<h4>Startseiten-Announcement</h4>
+</div>
+<div>
+<form	id="announceform" name="announceform" action="' . constant("SERVER_FILE_MYSELF") . '" method="post">
+<p>
+Hier können Announcements abgegeben werden, die anschließend auf der Startseite erscheinen.<br />
+HTML ist nicht nur erlaubt, sondern auch präferiert. Es wird darum gebeten, XHTML-konform zu bleiben.<br />
+<span class="line important"><span class="topic">Achtung:</span>Abgegebene Announcements können hier nicht mehr zurückgenommen oder korrigiert werden!</span>
+</p>
+<p>
+<span class="topic">Authentifizierung:</span><input name="txtauth" type="password" />
+<span class="topic">Titel:</span><input name="txttitle" type="text" ';
+if ( !$bolok ) echo 'value="' . $strtitle . '" ';
+echo '/>
+<span class="topic">Announcement: <span class="small">(HTML accepted)</span></span>
+<textarea class="db big" name="txtannouncement">';
+if ( !$bolok ) echo $strannouncement;
+echo
+'</textarea>
+<input name="cmdannouncement" type="submit" value="Spread it now!" />
+</p>
+</form>
+</div>
+';
+
+
+
+// close page and stoprun.
+echo
+'
+<!-- end of specific page content -->
+
+';
+readfile( constant("SERVER_FILE_EXTRO") );
+
+die();
+
+?>
--- a/css/site_aligns.css
+++ b/css/site_aligns.css
@ -0,0 +1,326 @@
+/* site_aligns.css */
+/* this is for all styles regarding site arrangement of blocks, elements etc. */
+
+body
+{
+  margin: 0px;
+  padding: 20px;
+
+  /* set "overflow" depending on include method of files: */
+  /* when using SSI there won't be scrollbars, so set "overflow: auto" */
+  /* when using <object>-Tags (XHTML 1.1) they will have own scrollbars, so set "overflow: hidden" */
+  overflow: auto;
+}
+
+div#div_body
+{
+  width: 96%;
+  height: 96%;
+}
+
+div#div_left
+{
+  position: fixed;
+  left: 20px;
+  width: 180px;
+  top: 20px;
+  bottom: 20px;
+  overflow: hidden;
+  z-index: 20;
+}
+
+div#div_menu
+{
+  position: relative;
+  left: 0px;
+  top: 20px;
+  bottom: 0px;
+  overflow: auto;
+  z-index: 70;
+}
+
+div#div_title
+{
+  position: fixed;
+  display: block;
+  left: 120px;
+  right: 20px;
+  top: 0px;
+  padding-left: 0px;
+  padding-top: 0px;
+  z-index: 50;
+}
+
+div#div_chaosknoten
+{
+  position: fixed;
+  display: block;
+  right: 20px;
+  top: 20px;
+  width: 150px;           /* div only holds floating image and must not overlay other elements */
+  height: 108px;          /* div only holds floating image and must not overlay other elements */
+  padding-right: 20px;
+  padding-top: 2px;
+  z-index: 50;
+}
+
+img.logo
+{
+  display: block;
+  padding: 0px;
+  margin: 0px;
+  z-index: 20;
+}
+
+img.rechts
+{
+  float: right;
+}
+
+div#div_main
+{
+  position: absolute;
+  display: block;
+  padding: 0px;
+  left: 220px;
+  right: 20px;
+  top: 90px;
+  bottom: 20px;
+  z-index: 30;
+}
+
+div#div_content
+{
+  display: block;
+  padding: 5px;
+  padding-bottom: 25px;  /* keep bottom margin free of content! */
+  min-height: 96%;
+}
+
+div.coverbar
+{
+  position: fixed;
+  display: block;
+  left: 220px;
+  right: 20px;
+  z-index: 40;
+}
+
+div.coverbar.top
+{
+  top: 0px;
+  height: 90px;
+}
+
+div.coverbar.bottom
+{
+  bottom: 0px;
+  height: 20px;
+}
+
+h1, h2
+{
+  padding: 0.4em;
+}
+
+ul.w3c
+{
+  position: absolute;
+  display: block;
+  float: left;
+  padding-left: 0px;
+  padding-bottom: 0px;
+  margin-bottom: 0px;
+  bottom: 0px;
+  left: 0px;
+  bottom: 0px;
+  z-index: 40;
+}
+
+li.w3c
+{
+  display: inline;
+  padding-top: 0px;
+  padding-right: 0px;
+  padding-left: 0px;
+  padding-bottom: 0px;
+}
+
+.textshadow
+{
+  position: absolute;
+  top: 0px;
+  left: 20px;
+  right: 0px;
+}
+
+.textshadow.front
+{
+  padding-top: 0.3em;
+  padding-left: 1.2em;
+  z-index: 22;
+}
+.textshadow.back
+{
+  padding-top: 0.4em;
+  padding-left: 1.3em;
+  z-index: 21;
+}
+
+/* workaround for CSS implementation problem relating */
+/* to anchor positions inside an inner division block */
+/* Problem: anchors will be positioned by top of body */
+/* Solution: anchors must be moved below all top bars */
+.linktarget
+{
+  display: block;       /* anchor must be drawn as block element */
+  top: 0px;            /* = sum of top and padding-top must be */
+  padding-top: 90px;     /* ...exact sum of heights of top bars */
+  border-bottom-style: none;
+}
+
+a
+{
+  border-bottom-style: dotted;
+  border-bottom-width: 1px;
+}
+
+p
+{
+  text-align: left;
+}
+
+div.leftmenu
+{
+  margin-left: 0px;
+  margin-bottom: 10px;
+  margin-right: 0px;
+  margin-top: 0px;
+}
+
+.headbox, a.leftmenu
+{
+  display: block;
+  padding-left: 5px;
+  padding-bottom: 2px;
+  padding-right: 5px;
+  padding-top: 2px;
+  border-style: solid;
+  border-width: 1px;
+  text-align: left;
+}
+
+a.leftmenu
+{
+  border-top-width: 0;
+}
+
+.announcement
+{
+  text-align: center;
+}
+
+div.announcement
+{
+  margin-bottom: 5px;
+  padding-left: 0px;
+  padding-bottom: 10px;
+  padding-right: 0px;
+  padding-top: 0px;
+  border-left-style: none;
+  border-bottom-style: dashed;
+  border-right-style: none;
+  border-top-style: dashed;
+  border-width: thin;
+}
+
+ul
+{
+  text-align: left;
+}
+
+div.chapter
+{
+  margin-top: 30px;
+}
+
+div.box
+{
+  padding: 2px;
+  border-style: solid;
+  border-width: thin;
+  margin-top: 20px;
+  margin-bottom: 20px;
+}
+
+h4
+{
+  margin-bottom: 10px;
+}
+
+.line
+{
+  display: block;
+}
+
+li
+{
+  padding-bottom: 10px;
+}
+
+input
+{
+  margin-top: 5px;
+  margin-bottom: 5px;
+}
+
+table.db
+{
+  border-spacing: 0.05em;
+  empty-cells: show;
+}
+
+tr.dbhead
+{
+  height: 3em;
+  border-spacing: 0.05em;
+}
+
+td.db
+{
+  padding: 0.2em;
+  border-left-style: dotted;
+  border-bottom-style: none;
+  border-right-style: dotted;
+  border-top-style: none;
+  border-width: thin;
+  vertical-align: top;
+}
+
+input.db, textarea.db, select.db
+{
+  width: 99%;
+  margin-bottom: 10px;
+}
+
+select.dbdata
+{
+  width: 105px;
+  margin: 0px;
+}
+
+textarea
+{
+  height: 50px;
+}
+
+.big
+{
+  height: 100px;
+}
+
+.verybig
+{
+  height: 200px;
+}
+
--- a/css/site_colors.css
+++ b/css/site_colors.css
@ -0,0 +1,127 @@
+/* site_colors.css */
+/* this is for all styles regarding site colorization */
+
+body
+{
+  color : #000000;
+  background-color: #2e526e;
+}
+
+div#div_main
+{
+  background: transparent;
+}
+
+div#div_content
+{
+  background-color: #d0e1f5;
+}
+
+div.coverbar
+{
+  background-color: #2e526e;
+}
+
+.textshadow.front
+{
+  color: #000000;
+}
+
+.textshadow.back
+{
+  color: #7d9fc4;
+  background-color: #d0e1f5;
+}
+
+.headbox
+{
+  background-color: #7d9fc4;
+  color: #ffffff;
+  border-color: #000000;
+}
+
+.headbox a:hover
+{
+  color: #ffffff;
+}
+
+h1.announcement, h2.announcement, h3.announcement, h4.announcement, h5.announcement, h6.announcement
+{
+  background-color: #7d9fc4;
+  color: #000000;
+}
+
+a
+{
+  color: #000000;
+}
+
+a.inactive
+{
+  color: #888888;
+}
+
+a.leftmenu:link, a.leftmenu:visited
+{
+  background-color: #d0e1f5;
+  border-color: #000000;
+}
+
+a.leftmenu:hover
+{
+  background-color: #98c2f0;
+  border-color: #000000;
+}
+
+a:hover
+{
+  background-color: #98c2f0;
+}
+
+a.linktarget:hover
+{
+  background-color: #d0e1f5;
+}
+
+div.announcement
+{
+  border-color: #000000;
+}
+
+div.box
+{
+  background: rgb(192,224,255);
+}
+
+.warning
+{
+  background-color: #ff0000;
+  color: #000000;
+}
+
+.confirmation
+{
+  background-color: #00aa00;
+  color: #000000;
+}
+
+tr.dbhead
+{
+  background: #7d9fc4;
+  color: rgb(255,255,255);
+}
+
+tr.db1
+{
+  background: rgb(192,224,255);
+}
+
+tr.db0
+{
+  background: rgb(192,255,255);
+}
+
+td.db
+{
+  border-color: #7d9fc4;
+}
--- a/css/site_fonts.css
+++ b/css/site_fonts.css
@ -0,0 +1,84 @@
+/* site_fonts.css */
+/* this is for all styles regarding font settings, except font colors */
+
+body
+{
+  font-family: Arial, Helvetica, sans-serif;
+  font-weight: normal;
+}
+
+h1, h2, h3, h4, h5, h6
+{
+  font-family: "Trebuchet MS", Verdana, "Lucida Sans", Arial, Geneva, Helvetica, Helv, "Myriad Web", Syntax, sans-serif;
+}
+
+h1, h2, h3, h4
+{
+  font-weight: bold;
+}
+
+h5, h6
+{
+  font-weight: normal;
+}
+
+a
+{
+  text-decoration: none;
+}
+
+.headbox, a.leftmenu
+{
+  font-weight: bold;
+  text-decoration: none;
+  font-size: 80%;
+  font-family: Verdana, "Lucida Sans", Arial, Geneva, Helvetica, Helv, "Myriad Web", Syntax, sans-serif;
+}
+
+p, ul, ol, td, span, div.chaptercontent
+{
+  font-size: 95%;
+}
+
+p
+{
+  font-weight: normal;
+}
+
+.announcement
+{
+  font-weight: bold;
+}
+
+span.timestamp
+{
+  font-size: 80%;
+  font-family: Courier New, monospace;
+  border-right: solid;
+  border-width: 1px;
+  padding-right: 5px;
+  margin-right: 5px;
+}
+
+.important
+{
+  font-weight: bold;
+  font-size: 90%;
+}
+
+.topic
+{
+  font-style: italic;
+  display: block;
+}
+
+.small
+{
+  font-size: 80%;
+}
+
+tr.dbhead
+{
+  font-weight: bold;
+}
+
--- a/css/site_others.css
+++ b/css/site_others.css
@ -0,0 +1,8 @@
+/* site_others.css */
+/* this is a dump area for all styles which do not match any other category */
+
+ul.w3c
+{
+  list-style: none;
+}
+
--- a/danke.shtml
+++ b/danke.shtml
@ -0,0 +1,28 @@
+<!--#include virtual="ssi_site_header.html" -->
+
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005 - Anmeldung erfolgt</title>
+
+<!-- end of specific page header -->
+
+<!--#include virtual="ssi_site_intro.html" -->
+
+<!-- begin of specific page content -->
+
+
+<div class="announcement">
+<h3 class="announcement">Danke f&uuml;r Deine Anmeldung!</h3>
+</div>
+
+<div class="chapter">
+<p>
+In den n&auml;chsten 1-2 Tagen erh&auml;lst du eine Anmeldebest&auml;tigung per Email.
+</p>
+</div>
+
+
+<!-- end of specific page content -->
+
+<!--#include virtual = "ssi_site_extro.html" -->
+
--- a/eh2005_website.tar
+++ b/eh2005_website.tar
--- a/eh2005_website.zip
+++ b/eh2005_website.zip
--- a/1
+++ b/1
@ -0,0 +1 @@
+20
--- a/1
+++ b/1
@ -0,0 +1 @@
+250
--- a/fahrplan.shtml
+++ b/fahrplan.shtml
--- a/faq.shtml
+++ b/faq.shtml
@ -0,0 +1,189 @@
+<!--#include virtual="ssi_site_header.html" -->
+
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005 - FAQ</title>
+
+<!-- end of specific page header -->
+
+<!--#include virtual="ssi_site_intro.html" -->
+
+<!-- begin of specific page content -->
+
+
+<div class="announcement">
+<h3 class="announcement">FAQ</h3>
+</div>
+
+<div class="chapter">
+<h4>Worum geht es?</h4>
+<p>
+Siehe die Zusammenfassung im <a href='about.shtml'>About</a> und die Beschreibungen zu den <a href='workshops.shtml'>Workshops</a>.
+Grundsätzlich ist das Easterhegg stark vom Gemeinsam-Tun geprägt, weniger von Vorträgen.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Wann und wo?</h4>
+<p>
+<span class="line">Wie jedes Jahr findet das Easterhegg 2005 von Karfreitag bis Ostermontag statt.</span>
+<span class="line">Und wie jedes zweite Jahr im Eidelstedter Bürgerhaus (Alte Elbgaustr. 12) in Hamburg.</span>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Wie kommt man dort hin?</h4>
+
+<ul>
+<li>
+<span class="topic">per Beam-Technology:</span>
+GPS: N53 36.411 E9 54.095 (hdddd´mm.mm /wgs84)
+</li>
+
+<li>
+<span class="topic">per Autopilot / Navigationsgerät:</span>
+Ziel: Hamburg - Ekenknick
+</li>
+
+<li>
+<span class="topic">per Bahn und Bus:</span>
+<span class="line">Von einem der vier Fernbahnhöfe (Hbf., Altona, Dammtor, Harburg) aus mit der S-Bahn S3 (Richtung Pinneberg) oder S21 (Richtung Elbgaustra&szlig;e) bis Haltestelle Elbgaustra&szlig;e.</span>
+<span class="line">Von dort aus weiter entweder zu Fu&szlig; (ca. 10 Minuten) entlang der Elbgaustra&szlig;e Richtung Norden
+oder mit den Bussen 21 (Richtung U Niendorf Nord) oder 284 (Richtung IKEA Schnelsen) bis Haltestelle Eidelstedter Platz.</span>
+</li>
+
+<li>
+<span class="topic">per Auto:</span>
+<span class="line">Die Autobahn A23 an der Ausfahrt Eidelstedt verlassen
+und auf der Holsteiner Chaussee etwa 1 km Richtung Innenstadt bis zum großen Busbahnhof fahren.</span>
+<span class="line">Am Busbahnhof dann einen Parkplatz suchen und zum Bürgerhaus durchschlagen.</span>
+Achtung: Anwohnerparkzonen. Das Parkhaus macht zu unklaren Zeiten zu, evtl. Aushang beachten wg. Feiertagen.
+</li>
+
+<li>
+<span class="topic">per Post:</span>
+<span class="line">Eidelstedter Bürgerhaus</span>
+<span class="line">Alte Elbgaustraße 12</span>
+<span class="line">22523 Hamburg, Germany</span>
+</li>
+
+<li>
+<span class="topic">per Heart of Gold:</span>
+<span class="line">
+Die Veranstaltung findet im Virgo-Galaxiencluster statt.
+Dort, etwas am Rande, befindet sich die Galaxienwolke Canes-Venatici.
+Hier bitte ein wenig Geschwindigkeit wegnehmen, da die Ziel-Galaxiengruppe leicht übersehbar ist.
+Außer dem Andromeda-Nebel und der Milchstraße gibt es darin nunmal leider nur noch
+ein paar vergleichsweise eher unbedeutende Galaxienhäufchen.
+</span>
+<span class="line">
+In der Milchstraße bitte in den Orion-Spiralarm abbiegen.
+Anschließend auf das im äußeren Arm befindliche System Sol zuhalten und dort am besten irgendwo
+in der Umlaufbahn um den kleinen blauen Planeten mit den lustigen Zweibeinern und den vielen Insekten (dritter von Sol) einparken.
+</span>
+<span class="line">
+Von dort aus kann man sich problemlos in die relativ gut ausgebaute SkyDSL-Architektur einklinken und
+per Datentransfer mittels TCP/IP-SMTP-Protokoll an mail(at)hamburg.ccc.de persönliches Zielgeleit zur Veranstaltung anfordern.
+</span>
+<span class="line important">
+p.s. Wer an Alpha Centauri vorbeikommt, möge bitte freundlichst im dortigen Bauplanungsamt nachfragen,
+ob der Einspruch gegen die geplante Errichtung der Hyperraum-Umgehung eingetroffen ist. Die Zeit drängt. Vielen Dank. :-)
+</span>
+</li>
+</ul>
+
+</div>
+
+<div class="chapter">
+<h4>Kann ich meinen Computer mitbringen?</h4>
+<p>
+Notebooks immer sehr gern. Wir haben überall Funkvernetzung nach IEEE 802.11b (11 MBit),
+(sowie begrenzt 22 MBit), auch WaveLAN/IEEE genannt.
+Zu manchen Workshops ist es durchaus vorteilhaft, einen eigenen Rechner dabei zu haben.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Kann man PCMCIA-Funknetzadapter ausleihen?</h4>
+<p>
+Leider k&ouml;nnen wir einen solchen Service nicht anbieten.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Gibt es ein Hackcenter?</h4>
+<p>
+Nein, das ist nicht vorgesehen! Einige Workshops werden sicher hackcenterartigen
+Charakter annehmen, aber am Ende des Workshops muss Technik auch wieder abgebaut werden,
+weil der Raum für den nächsten Workshop gebraucht wird.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Wo kann ich schlafen?</h4>
+<p>
+<span class="line">Im Geb&auml;ude gibt es keine zum Schlafen vorgesehenen Bereiche.
+Die Räume, in denen nachts keine Veranstaltungen stattfinden, m&uuml;ssen auf jeden Fall morgens
+wieder zur Verf&uuml;gung stehen, damit die Vortr&auml;ge stattfinden k&ouml;nnen.</span>
+<span class="line">Wir bem&uuml;hen uns auch kurzfristig um Vermittlung von Privatquartieren bei Hackern der Umgebung,
+siehe <a href="https://wiki.hamburg.ccc.de/index.php/Pennen#Schlafb.C3.B6rse">Schlafplatzb&ouml;rse</a>.</span>
+<span class="line">Am sichersten ist es aber, wenn Du Dich selbst mit
+Jugendherbergen, Hotels u.&auml;. in Verbindung setzt.</span>
+</p>
+Einige &Uuml;bernachtungsmöglichkeiten:
+<ul>
+<li><a href='http://www.schanzenstern.de'>G&auml;stehaus Schanzenstern</a></li>
+<li><a href='http://www.djh.de/02_jh/JHData.asp?ID_JH=523'>Jugendherberge</a> auf dem Stintfang (online buchbar)</li>
+<li><a href='http://www.instantsleep.de/home/home.html'>Instant Sleep</a> in Altona</li>
+<li><a href='http://woge.net/seiten/woge.html'>G&auml;stehaus "Woge"</a> Ottensen</li>
+<li><a href='http://www.hamburger-jugendpark.de/'>Jugendpark Langenhorn</a> wohl eher f&uuml;r Erfakreise und Chaostreffs, die gemeinsam anreisen</li>
+</ul>
+</div>
+
+<div class="chapter">
+<h4>Was kostet der Eintritt?</h4>
+<p>
+<span class="line">Der Eintrittspreis hängt davon ab, ob Du Mitglied des CCC e.V. bist, Schüler, oder als Engel mitarbeitest.
+Vom vollen Eintritt (50 Euro) für die gesamten vier Tage erh&auml;ltst Du
+t&auml;glich Fr&uuml;hst&uuml;ck (siehe weiter unten) sowie eine Easter(H)egg-Tasse.</span>
+<span>Erm&auml;&szlig;igung erhalten Mitglieder des CCC e.V. (35 Euro) sowie Sch&uuml;ler und Engel (jeweils 25 Euro).</span>
+<span class="topic small">Bisherige Ansage:</span>
+<span class="small">Tageskarten gibt es nicht.</span>
+<span class="topic">Neuer Stand:</span>
+<span class="line">Aufgrund der hohen Nachfrage haben wir uns entschlossen, Tageskarten zum Preis von 15 Euro auszugeben.</span>
+<span class="line">Tageskarten gelten von 11 Uhr bis 22 Uhr und beinhalten im Gegensatz zu Dauerkarten nicht den Erwerb einer Easterhegg-Tasse,
+welche aber trotzdem getrennt für 6 Euro erhältlich ist.</span>
+<span class="line important">Wir behalten uns vor, bei Überf&uuml;llung des B&uuml;rgerhauses die Ausgabe von Tageskarten
+vor&uuml;bergehend einzustellen.</span>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Gibt es etwas zu Essen?</h4>
+<p>
+<span class="line">Ja. Wir stellen Brötchen und Belag (Käse, Wurst, Marmelade) im Cafe
+ab morgens zur Verfügung. Auch Cornflakes, Müsli und etwas Obst sind vorgesehen.
+Zu Planungszwecken bitten wir, die jeweils gewünschten Mengen bei der Anmeldung bereits grob abzuschätzen.</span>
+<span class="line">Ansonsten gibt es diverse kommerzielle Versorgungsmöglichkeiten
+in direkter Nähe des Gebäudes.</span>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Und Getränke?</h4>
+<p>
+<span class="line">Tee und Kaffee gibt es kostenlos im Chaos-Cafe.
+Kalte Getränke sind ebenfalls zu zivilen Preisen erh&auml;ltlich.</span>
+<span class="line">Jeder Teilnehmer erh&auml;lt au&szlig;erdem eine Easterhegg-Tasse,
+die ihn die ganze Veranstaltung hindurch begleitet (und darüber hinaus).
+Wir empfehlen, Deinen Namen unten auf Deine Tasse zu schreiben.
+Dadurch müssen wir nicht dauernd leere Tassen im Gebäude suchen.</span>
+<span class="line"></span>
+</p>
+</div>
+
+
+<!-- end of specific page content -->
+
+<!--#include virtual = "ssi_site_extro.html" -->
+
--- a/favicon.ico
+++ b/favicon.ico
--- a/img/bionade.gif
+++ b/img/bionade.gif
--- a/img/chaosknoten-150x108-ugly.gif
+++ b/img/chaosknoten-150x108-ugly.gif
--- a/img/chaosknoten-150x108.gif
+++ b/img/chaosknoten-150x108.gif
--- a/img/chaosknoten-150x108.png
+++ b/img/chaosknoten-150x108.png
--- a/img/chaosknoten.gif
+++ b/img/chaosknoten.gif
--- a/img/easterhegg2005.gif
+++ b/img/easterhegg2005.gif
--- a/inc_db.php
+++ b/inc_db.php
@ -0,0 +1,337 @@
+<?php
+// include library db.php
+// database abstraction layer, supports multiple databases
+
+/*
+  usage:
+  - db_setdatabase will be called automatically each time you use db_sql (it will guarantee database availability)
+  - you may call db_unsetdabatase at the end of your work (e.g. at end of script)
+  - in normal operation use control constants in your main code and just call db_sql and similar functions
+  
+  control constants:
+  - SERVER_DB_TYPE declares database type, e.g. "POSTGRESQL", "ODBC", "MYSQL" or others
+  each database type needs some more special constants:
+  POSTGRESQL:
+  - SERVER_DB_HOST, e.g. "localhost"
+  - SERVER_DB_PORT, e.g. 5432
+  - SERVER_DB_NAME, e.g. "testdatabase"
+  - SERVER_DB_USER, e.g. "testuser"
+  - SERVER_DB_PASS, e.g. "testpass"
+  ODBC:
+  - SERVER_DB_NAME, e.g. "testdatabase"
+  - SERVER_DB_USER, e.g. "testuser"
+  - SERVER_DB_PASS, e.g. "testpass"
+
+  available functions:
+  - db_setdb = checks/initializes database, will be called automatically
+  - db_unsetdb = closes database manually, will be done automatically at the end of the parent script
+  - db_sql = executes SQL statement and returns resultset
+  - db_row = delivers a specific row from resultset, uses constants DB_ROW_*
+  - db_fields = delivers field list from resultset, uses constants DB_FIELD_*
+*/
+
+
+define( "DB_TYPE_POSTGRESQL", "POSTGRESQL" );
+define( "DB_TYPE_ODBC", "ODBC" );
+
+define( "DB_ROW_FIRST", 0 );
+define( "DB_ROW_NEXT", -1 );
+define( "DB_ROW_LAST", -2 );
+
+define( "DB_FIELD_NAME", 0 );
+define( "DB_FIELD_TYPE", 1 );
+define( "DB_FIELD_LEN", 2 );
+
+
+// **********************************************************************
+function db_setdb ( &$intdbconnid, &$strdberror )
+// checks/opens database connection
+// updates parameter intdbconnid and strdberror
+// returns true if database had already been opened or has been opened successfully,
+// otherwise returns false and sets strdberror
+{
+  $bolretcode = true;
+  $strdberror = '';
+  
+  if ( $intdbconnid == 0 )
+  {
+    // database is dead or closed -> (re)open it
+    switch ( trim(constant("SERVER_DB_TYPE")) )
+    {
+      case constant("DB_TYPE_POSTGRESQL"):
+        $intdbconnid = pg_connect ("host=" . trim(constant("SERVER_DB_HOST")) . " port=" . trim(strval(constant("SERVER_DB_PORT"))) . " dbname=" . trim(constant("SERVER_DB_NAME")) . " user=" . trim(constant("SERVER_DB_USER")) . " password=" . trim(constant("SERVER_DB_PASS")));
+        $strdberror = pg_last_error( $intdbconnid );
+        break;
+
+      case constant("DB_TYPE_ODBC"):
+        $intdbconnid = odbc_connect ( trim(constant("SERVER_DB_NAME")), trim(constant("SERVER_DB_USER")), trim(constant("SERVER_DB_PASS")), SQL_CUR_USE_ODBC );
+        $strdberror = odbc_errormsg( $intdbconnid );
+        break;
+
+      default:
+        // SERVER_DB_TYPE not supported!
+        $intdbconnid = 0;
+        $strdberror = 'Sorry, database of type "' . trim(constant("SERVER_DB_TYPE")) . '" is not supported.';
+        break;
+    }
+
+    // set return code on success
+    $bolretcode = ( $intdbconnid != 0 );
+  }
+  
+  return $bolretcode;
+}
+
+// **********************************************************************
+function db_unsetdb ( &$intdbconnid, &$strdberror )
+// checks/closes database connection
+// updates parameter intdbconnid and strdberror
+// returns true if database had already been closed or has been closed successfully,
+// otherwise returns false and sets strdberror
+{
+  $bolretcode = true;
+
+  if ( $intdbconnid != 0 )
+  {
+    // database is still opened -> close it
+    switch ( constant("SERVER_DB_TYPE") )
+    {
+      case constant("DB_TYPE_POSTGRESQL"):
+        $bolretcode = pg_close ( $intdbconnid );
+        $strdberror = pg_last_error( $intdbconnid );
+        break;
+
+      case constant("DB_TYPE_ODBC"):
+        $bolretcode = odbc_close ( $intdbconnid );
+        $strdberror = odbc_errormsg( $intdbconnid );
+        break;
+
+      default:
+        // SERVER_DB_TYPE not supported!
+        $bolretcode = false;
+        $strdberror = 'Sorry, database of type "' . constant("SERVER_DB_TYPE") . '" is not supported.';
+        break;
+    }
+    
+    // clear database connection id on success
+    if ( $bolretcode )
+    {
+      $intdbconnid = 0;
+    }
+  }
+  
+  return $bolretcode;
+}
+
+// **********************************************************************
+function db_sql ( &$intdbconnid, $strdbsql, &$intdbresult, &$lngdbrows, &$strdberror )
+// executes SQL statement on given database connection
+// updates parameter intdbconnid, intdbresult, lngdbrows and strdberror
+// returns true and sets intdbresult and lngdbrows if SQL statement had been executed successfully,
+// otherwise returns false and sets strdberror
+{
+  $bolretcode = false;
+  $intdbresult = 0;
+  $lngdbrows = 0;
+  $strdberror = '';
+
+  if ( db_setdb( $intdbconnid, $strdberror ))
+  {
+    // database is ok
+    
+    switch ( constant("SERVER_DB_TYPE") )
+    {
+      case constant("DB_TYPE_POSTGRESQL"):
+        $intdbresult = pg_query ( $intdbconnid, $strdbsql );
+        $strdberror = pg_last_error( $intdbconnid );
+        if ( $intdbresult != 0 )
+        {
+          $lngdbrows = pg_num_rows( $intdbresult ) + pg_affected_rows( $intdbresult );
+          $bolretcode = true;
+        }
+        break;
+
+      case constant("DB_TYPE_ODBC"):
+        $intdbresult = odbc_exec ( $intdbconnid, $strdbsql );
+        $strdberror = odbc_errormsg( $intdbconnid );
+        if ( $intdbresult != 0 )
+        {
+          // Attention: odbc_num_rows may return wrong record count in SELECT-statements!
+          // to retrieve exact number of records in SELECT statements you should walk through the recordset
+          $lngdbrows = odbc_num_rows( $intdbresult );
+          $bolretcode = true;
+        }
+        break;
+
+      default:
+        // SERVER_DB_TYPE not supported!
+        $bolretcode = false;
+        $strdberror = 'Sorry, database of type "' . constant("SERVER_DB_TYPE") . '" is not supported.';
+        break;
+    }
+  }
+
+  return $bolretcode;
+}
+
+// **********************************************************************
+function db_row ( $intdbresult, &$strdbrow, $intdbrow, &$strdberror )
+// fetches row on position intdbrow from intdbresult as associative array into strdbrow
+// position intdbrow may be DB_RESULT_NEXTROW to fetch the next row of intdbresult
+// updates parameter strdbrow, strdberror
+// returns true and sets strdbrow if row has been fetched successfully,
+// otherwise returns false and sets strdberror
+{
+  $bolretcode = false;
+  $strdbrow = '';
+  $strdberror = '';
+
+  if ( $intdbresult != 0 )
+  {
+    // resultset is ok
+    
+    switch ( constant("SERVER_DB_TYPE") )
+    {
+      case constant("DB_TYPE_POSTGRESQL"):
+        switch ( $intdbrow )
+        {
+          case constant("DB_ROW_FIRST"):
+            $bolretcode = ( $strdbrow = pg_fetch_assoc( $intdbresult, 0 ));
+            break;
+
+          case constant("DB_ROW_NEXT"):
+            $bolretcode = ( $strdbrow = pg_fetch_assoc( $intdbresult ));
+            break;
+
+          case constant("DB_ROW_LAST"):
+            $bolretcode = ( $strdbrow = pg_fetch_assoc( $intdbresult, pg_num_rows( $intdbresult ) - 1 ));
+            break;
+
+          default:
+            // specific $intdbrow given -> use it directly, offer start at position 1
+            $bolretcode = ( $strdbrow = pg_fetch_assoc( $intdbresult, $intdbrow - 1 ));
+            break;
+        }
+        $strdberror = pg_result_error( $intdbresult );
+        break;
+
+      case constant("DB_TYPE_ODBC"):
+        switch ( $intdbrow )
+        {
+          case constant("DB_ROW_FIRST"):
+            $bolretcode = ( $strdbrow = odbc_fetch_array( $intdbresult, 0 ));
+            break;
+
+          case constant("DB_ROW_NEXT"):
+            $bolretcode = ( $strdbrow = odbc_fetch_array( $intdbresult ));
+            break;
+
+          case constant("DB_ROW_LAST"):
+            // Attention: odbc_num_rows may return wrong record count in SELECT-statements!
+            // to retrieve exact number of records in SELECT statements you should walk through the recordset
+            $bolretcode = ( $strdbrow = odbc_fetch_array( $intdbresult, odbc_num_rows( $intdbresult ) - 1 ));
+            break;
+
+          default:
+            // specific $intdbrow given -> use it directly, offer start at position 1
+            $bolretcode = ( $strdbrow = odbc_fetch_array( $intdbresult, $intdbrow - 1));
+            break;
+        }
+        // ODBC does not support error messages on resultset level
+        if ( !$bolretcode )
+        {
+          $strdberror = 'Sorry, could not read result row on position ' . $intdbrow ;
+        }
+        break;
+
+      default:
+        // SERVER_DB_TYPE not supported!
+        $bolretcode = false;
+        $strdberror = 'Sorry, database of type "' . constant("SERVER_DB_TYPE") . '" is not supported.';
+        break;
+    }
+  }
+  else
+  {
+    $bolretcode = false;
+    $strdberror = 'Sorry, no data available to read.';
+  }
+
+  return $bolretcode;
+}
+
+
+// **********************************************************************
+function db_fields ( $intdbresult, &$strdbfields, &$strdberror )
+// returns list of field names, field type and field length from intdbresult as associative arrays into strdbfields
+// strdbfields will contain following partial arrays: DB_FIELD_NAME, DB_FIELD_TYPE, DB_FIELD_LEN
+// use as following: $strdbfields[constant("DB_FIELD_*")][$intdbfield or $strdbfieldname]
+// example: $intdbfieldtype[$strdbfieldname] = $strdbfields[constant("DB_FIELD_TYPE")][$strdbfieldname]
+// updates parameter strdbfields, strdberror
+// returns true and sets strdbfields if field names have been retrieved successfully,
+// otherwise returns false and sets strdberror
+{
+  $bolretcode = false;
+  $strdbfields = array (constant("DB_FIELD_NAME") => array(),
+                        constant("DB_FIELD_TYPE") => array(),
+                        constant("DB_FIELD_LEN") => array());
+  $strdberror = '';
+  $intindex = 0;
+
+  if ( $intdbresult != 0 )
+  {
+    // resultset is ok
+
+    //no errors expected at all
+    $bolretcode = true;
+
+    switch ( constant("SERVER_DB_TYPE") )
+    {
+      case constant("DB_TYPE_POSTGRESQL"):
+        // field numeration in PostgreSQL starts with 0
+        $intindex = 0;
+        while ( $intindex < pg_num_fields( $intdbresult ))
+        {
+          array_push ( $strdbfields[constant("DB_FIELD_NAME")], pg_field_name( $intdbresult, $intindex ));
+          array_push ( $strdbfields[constant("DB_FIELD_TYPE")], pg_field_type( $intdbresult, $intindex ));
+          array_push ( $strdbfields[constant("DB_FIELD_LEN")], pg_field_prtlen( $intdbresult, $intindex ));
+          $intindex++;
+        }
+        $strdberror = pg_result_error( $intdbresult );
+        break;
+
+      case constant("DB_TYPE_ODBC"):
+        // field numeration in ODBC starts with 1
+        $intindex = 1;
+        while ( $intindex <= odbc_num_fields( $intdbresult ))
+        {
+          $strfieldname = odbc_field_name( $intdbresult, $intindex );
+          array_push ( $strdbfields[constant("DB_FIELD_NAME")], $strfieldname );
+          array_push ( $strdbfields[constant("DB_FIELD_TYPE")], odbc_field_type( $intdbresult, $intindex ));
+          array_push ( $strdbfields[constant("DB_FIELD_LEN")], odbc_field_len( $intdbresult, $intindex ));
+          $intindex++;
+        }
+        // ODBC does not support error messages on resultset level
+        if ( !$bolretcode )
+        {
+          $strdberror = 'Sorry, could not read field names.';
+        }
+        break;
+
+      default:
+        // SERVER_DB_TYPE not supported!
+        $bolretcode = false;
+        $strdberror = 'Sorry, database of type "' . constant("SERVER_DB_TYPE") . '" is not supported.';
+        break;
+    }
+  }
+  else
+  {
+    $bolretcode = false;
+    $strdberror = 'Sorry, no data available to read.';
+  }
+
+  return $bolretcode;
+}
+
+?>
--- a/index.shtml
+++ b/index.shtml
@ -0,0 +1,208 @@
+<!--#include virtual="ssi_site_header.html" -->
+
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005</title>
+
+<!-- end of specific page header -->
+<!--#include virtual="ssi_site_intro.html" -->
+
+<!-- begin of specific page content -->
+
+
+<div class="announcement">
+<h3 class="announcement">Easterhegg 2005 - The workshop weekend</h3>
+Fr, 25.03.2005 - Mo, 28.03.2005 in Hamburg, im Eidelstedter B&uuml;rgerhaus
+</div>
+
+<!--
+          +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++
+             +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++
+
+            THIS TAG WILL BE HANDLED AUTOMATICALLY - DO NOT REMOVE!
+
+             +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++
+          +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++ +++++
+-->
+
+
+<!--> [%announcement%] </!-->
+  
+  <div class="chapter">
+  <h4>EH2007</h4>
+  <p>
+  <span class="timestamp">31.12.2006</span>
+  Die arbeiten beginnen
+  </p>
+  </div>
+  
+  
+  <div class="chapter">
+  <h4>Rechte und Links</h4>
+  <p>
+  <span class="timestamp">19.04.2005</span>
+  Form und Inhalt dieser Website unterliegen vollständig der <a href="http://www.gnu.org/copyleft/gpl.html">GNU General Public License</a>.<br />
+  Ab sofort ist diese Website als <a href="eh2005_website.tar">Tarball</a> und <a href="eh2005_website.zip">ZIP-Archiv</a> zur freien Verwendung verf&uuml;gbar.<br />
+  Die Archive beinhalten den vollständigen Source (PHP 4.x+) inklusive des Orga-Teils und die Datenbank (PostgreSQL 8.x+), nicht jedoch das cgi-Anmeldeskript und nat&uuml;rlich auch nicht das Wiki.<br />
+  Selbstverst&auml;ndlich ist die im Source referenzierte Datenbank und alle sonstigen manipulativen Funktionen auf der Produktiv-Maschine bereits deaktiviert. ;-)<br />
+  Habt Spa&szlig;! :-)<br />
+  </p>
+  </div>
+  
+  <div class="chapter">
+  <h4>Danke</h4>
+  <p>
+  <span class="timestamp">29.03.2005</span>
+  Wir danken allen Teilnehmern und Unterstützern für einen tollen und entspannten Easterhegg 2005 und freuen uns auf ein Wiedersehen vom 14.04. bis 17.04.2006 in Wien. :-)<br />
+  </p>
+  </div>
+  
+  
+  <div class="chapter">
+  <h4>&Uuml;berwachung muss nicht kompliziert sein - jeder kann mitmachen, es ist garnicht so schwer :-/</h4>
+  <p>
+  <span class="timestamp">28.03.2005</span>
+  Auf der von einem Pariser eingerichteten Website <a href="http://www.eurobilltracker.com">EuroBillTracker.com</a> mit angeschlossener Datenbank kann jeder seine eigenen Banknoten erfassen. Daraus entstehen dann Tracking-Daten der Banknoten und ganz nebenbei - natürlich völlig unbeabsichtigt - auch ein Finanz- und Kauf-Profil der Teilnehmer.<br />
+Damit der ganze Erfassungsaufwand für die Teilnehmer nicht ohne Gegenleistung bleibt, verspricht die Website in der FAQ, dass es ja Spaß macht. Nur das Brot zu den Spielen muss man eben selbst mitbringen.<br />
+&quot;...bitte jeder nur ein Kreuz...&quot; *seufz*
+  </p>
+  </div>
+  
+
+    <div class="chapter">
+    <h4>Workshop-Update</h4>
+    <p>
+    <span class="timestamp">27.03.2005</span>
+    Am Montag um 12 Uhr hält Momo einen neuen Workshop zum Thema <a href="workshops.shtml#ws44">GPS-Grundlagen</a>.
+    </p>
+    </div>
+    
+
+<div class="chapter">
+<h4>Sommerzeit-Workshop</h4>
+<p>
+<span class="timestamp">26.03.2005</span>
+Heute um 2.00 Uhr h&auml;lt Hans seinen Sommerzeit-Workshop im Maschinenraum.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Update der Workshopinhalte</h4>
+<p>
+<span class="timestamp">26.03.2005</span>
+Die Inhalte und Beschreibungen der Workshops sind jetzt auf dem aktuellen Stand des Wikis.<br />
+Außerdem sind die einzelnen Workshops auf der <a href="workshops.shtml">Workshop-Seite</a> nun - endlich ;-) - per Direktlink aus dem <a href="fahrplan.shtml">Fahrplan</a> heraus erreichbar.<br />
+Zur direkten und unkomplizierten Workshop-Planung kann und soll weiterhin der <a href="https://wiki.hamburg.ccc.de/index.php/VortraegeWorkshops">Workshop-Bereich</a> des öffentlichen Wikis genutzt werden. Die dortigen (nichttrivialen) Änderungen werden dann regelmäßig in die Easterhegg-Website übernommen.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Workshop-Update</h4>
+<p>
+<span class="timestamp">26.03.2005</span>
+Der verlegte Workshop &quot;Verschlüsselte Root-Dateisysteme&quot; wird heute (Samstag) zwischen 14 und 17 Uhr im Workshopraum 1 stattfinden.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Workshop-Update</h4>
+<p>
+<span class="timestamp">25.03.2005</span>
+Leider mussten kurzfristig beide Workshops am Freitag um 17 Uhr abgesagt werden.<br />
+Der Workshop &quot;Verschlüsselte Root-Dateisysteme&quot; wird verlegt auf einen anderen Tag. Dies wird dann hier bekanntgegeben.<br />
+Stattdessen wird es jetzt <span class="important">ab 17:00 Uhr einen Workshop &quot;Open Source Hardware&quot;</span> geben, der von hsank geleitet wird.<br />
+Dabei geht es um die Notwendigkeit von Open Source Hardware, wenn man Open Source Software einsetzen m&ouml;chte.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Nachfrage nach Tageskarten</h4>
+<p>
+<span class="timestamp">24.03.2005</span>
+Aufgrund der hohen Nachfrage haben wir uns entschlossen, Tageskarten zum Preis von 15 Euro auszugeben.<br />
+Tageskarten gelten von 11 Uhr bis 22 Uhr und beinhalten im Gegensatz zu Dauerkarten nicht den Erwerb einer Easterhegg-Tasse,
+welche aber trotzdem getrennt für 6 Euro erhältlich ist.<br />
+<span class="important">Wir behalten uns vor, bei Überf&uuml;llung des B&uuml;rgerhauses die Ausgabe von Tageskarten
+vor&uuml;bergehend einzustellen.</span>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Fahrplan-Update</h4>
+<p>
+<span class="timestamp">23.03.2005</span>
+Es gab noch ein paar &Auml;nderungen im Fahrplan, die neben anderen Punkten allesamt das vorrangige Ziel hatten,
+die großen, teilnehmerintensiven Workshops so zu legen, dass sie sich so wenig wie möglich gegenseitig behindern.<br />
+Im Falle von dringenden &Auml;nderungsw&uuml;nschen oder übersehenen Kollisionen bitte einen kurzen Hinweis an easterhegg2005(at)hamburg.ccc.de richten.<br />
+Selbstverst&auml;ndlich k&ouml;nnen auf Anfrage auch weiterhin noch neue Workshops im Rahmen der M&ouml;glichkeiten integriert werden.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Nochmal Anmeldebest&auml;tigungen versandt</h4>
+<p>
+<span class="timestamp">23.03.2005</span>
+Die in den letzten Tagen noch eingegangenen Anmeldungen wurden soeben per Email best&auml;tigt.<br />
+Auch diesmal kamen ein paar Mails als "unzustellbar" zurück.<br />
+Falls jetzt also noch jemand aus irgendwelchen Gründen Bedenken hat,
+ob seine Anmeldung ausreichend zur Kenntnis genommen wurde,
+bitte eine kurze Mail an easterhegg(at)hamburg.ccc.de.<br />
+Alles wird gut. ;-)
+</p>
+</div>
+
+<div class="chapter">
+<h4>Fahrplan online</h4>
+<p>
+<span class="timestamp">22.03.2005</span>
+Der vorl&auml;ufige Fahrplan ist online.<br />
+Vorl&auml;ufig hei&szlig;t, dass kleinere &Auml;nderungen noch m&ouml;glich sind, um gewichtige Kollisionen zu vermeiden.<br />
+Im Falle von dringenden &Auml;nderungsw&uuml;nschen (zeitliche oder r&auml;umliche Verschiebungen oder gar Absagen) diese bitte an easterhegg2005(at)hamburg.ccc.de richten.<br />
+Selbstverst&auml;ndlich k&ouml;nnen auf Anfrage auch weiterhin noch neue Workshops im Rahmen der M&ouml;glichkeiten integriert werden.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Restliche Anmeldebest&auml;tigungen versandt</h4>
+<p>
+<span class="timestamp">18.03.2005</span>
+Die noch ausstehenden Anmeldebest&auml;tigungen sind per Email versandt.<br />
+Auch wenn es einige Fälle von kaputten bzw. unvollst&auml;ndigen Emailadressen gab, wurden die Anmeldungen trotzdem akzeptiert.<br />
+Grunds&auml;tzlich gilt: Wer direkt nach der Anmeldung <a href="danke.shtml" title="Anmeldung erfolgt">diese</a> Seite gesehen hat, ist auch garantiert angemeldet.<br />
+</p>
+</div>
+
+<div class="chapter">
+<h4>HackBus aus Berlin zum EasterHegg</h4>
+<p>
+<span class="timestamp">17.03.2005</span>
+Sven schreibt: an alle hacker und haecksen in berlin und umgebung...<br/>
+ich wuerde hier in berlin immer noch einen bus mieten, wenn
+sich bis naechsten montag noch genuegend leute bei mir melden.<br/>
+plan: hinfahrt am donnerstag nachmittag - und rueckfahrt am montag nachmittag.<br/>
+Weitere Infos unter <a href="https://wiki.hamburg.ccc.de/index.php/Anreisen#Bus_Berlin_.3C.3D.3E_Hamburg">https://wiki.hamburg.ccc.de/index.php/Anreisen#Bus_Berlin_.3C.3D.3E_Hamburg</a>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Anmeldung aktiv</h4>
+<p>
+<span class="timestamp">07.03.2005</span>
+Die offizielle <a href="https://easterhegg2005.hamburg.ccc.de/cgi-bin/anmeldung.cgi">Anmeldeseite</a> ist scharf geschaltet.
+Bitte beachten, dass nur begrenzt Pl&auml;tze zur Verf&uuml;gung stehen.
+</p>
+</div>
+
+<div class="chapter">
+<h4>Chaoscalendar</h4>
+<p>
+<span class="timestamp">07.02.2005</span>
+Das Easterhegg 2005 taucht im <a href="https://www.ccc.de/calendar/?language=de">Chaoscalendar</a> auf, welcher auch im PDA-freundlichen <a href="https://www.ccc.de/calendar/chaoscalendar.ics?language=de">ICS-Format</a> verf&uuml;gbar ist.
+</p>
+</div>
+
+
+<!-- end of specific page content -->
+
+<!--#include virtual = "ssi_site_extro.html" -->
+
--- a/kontakt.shtml
+++ b/kontakt.shtml
@ -0,0 +1,46 @@
+<!--#include virtual="ssi_site_header.html" -->
+
+<!-- begin of specific page header -->
+
+<title>Easterhegg 2005 - Kontakt / Impressum</title>
+
+<!-- end of specific page header -->
+
+<!--#include virtual="ssi_site_intro.html" -->
+
+<!-- begin of specific page content -->
+
+
+<div class="announcement">
+<h3 class="announcement">Kontakt / Impressum</h3>
+<p>
+Verantwortlich für diese Seiten im Sinne des Teledienstegesetzes ist der Chaos Computer Club Hamburg.
+</p>
+<p>
+<span class="line">Chaos Computer Club Hamburg</span>
+<span class="line">Lokstedter Weg 72</span>
+<span class="line">20251 Hamburg</span>
+</p>
+<p>
+<span class="line">erreichbar:</span>
+<span class="line">per Mail an mail(at)hamburg.ccc.de</span>
+<span class="line">telefonisch unter +49(0)40/ 401 801 -0 (dienstags ab 19 Uhr)</span>
+</p>
+</div>
+
+<div class="chapter">
+<h4>Die Organisatoren des Easterhegg 2005</h4>
+<p>
+...sind direkt erreichbar per Mail an easterhegg2005(at)hamburg.ccc.de
+</p>
+<p>
+Dies ist gleichzeitig eine quasi-öffentliche Mailingliste.<br />
+Nähere Infos und Subscribe-Möglichkeit unter: <a href="https://www.hamburg.ccc.de/mailman/listinfo/easterhegg2005" title="Easterhegg 2005 Mailingliste">Easterhegg 2005 Mailingliste</a>
+</p>
+</div>
+
+
+<!-- end of specific page content -->
+
+<!--#include virtual = "ssi_site_extro.html" -->
+
--- a/noc/README.html
+++ b/noc/README.html
@ -0,0 +1,13 @@
+<pre>
+
+<b>Config-Daten vom Easterhegg 2005 Router</b>
+
+Router:
+- Debian/Unstable
+- Kleine Fujitsu/Siemens Box mit P4, 512mb RAM, 1xE100, 1xE1000 Interfaces
+- Uplink: Hansenet 5mbit down/500kbit up Leitung per PPPOE
+- Rechner/Router Anbindung: 2 100mbit Etherchannel Ports mit diversen VLANs
+  an einem Cisco 2948G, und dahinter als Raum-Satellites diverse Cisco
+  2950/2900
+- VLANs: Uplink, Management, Kabelnetz, WLAN, Freifunker, Funker+Printer
+</pre>
--- a/noc/configs-all.tar.gz
+++ b/noc/configs-all.tar.gz
--- a/noc/configs/dhcp3/dhcpd.conf
+++ b/noc/configs/dhcp3/dhcpd.conf
@ -0,0 +1,51 @@
+#
+#
+#ddns-update-style none;
+ddns-update-style interim;
+ddns-domainname "easterhegg.de";
+authoritative;
+
+# option definitions common to all supported networks...
+option domain-name "easterhegg.de";
+option domain-name-servers 172.16.0.1;
+min-lease-time 3600;
+default-lease-time 7200;
+max-lease-time 14400;
+ping-check true;
+update-optimization false;
+
+#subnet 204.254.239.0 netmask 255.255.255.224 {
+#  range 204.254.239.10 204.254.239.20;
+#  option broadcast-address 204.254.239.31;
+#  option routers prelude.fugue.com;
+#}
+
+# Kabel
+subnet 172.16.0.0 netmask 255.255.252.0 {
+   range 172.16.2.2 172.16.2.254;
+   range 172.16.3.2 172.16.3.254;
+   option broadcast-address 172.16.3.255;
+   option routers 172.16.0.1;
+}
+
+# WLAN
+subnet 172.16.4.0 netmask 255.255.252.0 {
+   range 172.16.6.2 172.16.6.254;
+   range 172.16.7.2 172.16.7.254;
+   option broadcast-address 172.16.7.255;
+   option routers 172.16.4.1;
+}
+
+# NOC
+subnet 172.16.42.0 netmask 255.255.255.0 {
+   range 172.16.42.128 172.16.42.254;
+   option broadcast-address 172.16.42.255;
+   option routers 172.16.42.1;
+}
+
+# AFU-Druck
+subnet 172.16.25.0 netmask 255.255.255.0 {
+   range 172.16.25.2 172.16.25.199;
+   option broadcast-address 172.16.25.255;
+   option routers 172.16.25.1;
+}
--- a/noc/configs/dhcp3/dhcpd.conf.dpkg-dist
+++ b/noc/configs/dhcp3/dhcpd.conf.dpkg-dist
@ -0,0 +1,108 @@
+#
+# Sample configuration file for ISC dhcpd for Debian
+#
+# $Id: dhcpd.conf,v 1.1.1.1 2002/05/21 00:07:44 peloy Exp $
+#
+
+# The ddns-updates-style parameter controls whether or not the server will
+# attempt to do a DNS update when a lease is confirmed. We default to the
+# behavior of the version 2 packages ('none', since DHCP v2 didn't
+# have support for DDNS.)
+ddns-update-style none;
+
+# option definitions common to all supported networks...
+option domain-name "example.org";
+option domain-name-servers ns1.example.org, ns2.example.org;
+
+default-lease-time 600;
+max-lease-time 7200;
+
+# If this DHCP server is the official DHCP server for the local
+# network, the authoritative directive should be uncommented.
+#authoritative;
+
+# Use this to send dhcp log messages to a different log file (you also
+# have to hack syslog.conf to complete the redirection).
+log-facility local7;
+
+# No service will be given on this subnet, but declaring it helps the 
+# DHCP server to understand the network topology.
+
+#subnet 10.152.187.0 netmask 255.255.255.0 {
+#}
+
+# This is a very basic subnet declaration.
+
+#subnet 10.254.239.0 netmask 255.255.255.224 {
+#  range 10.254.239.10 10.254.239.20;
+#  option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
+#}
+
+# This declaration allows BOOTP clients to get dynamic addresses,
+# which we don't really recommend.
+
+#subnet 10.254.239.32 netmask 255.255.255.224 {
+#  range dynamic-bootp 10.254.239.40 10.254.239.60;
+#  option broadcast-address 10.254.239.31;
+#  option routers rtr-239-32-1.example.org;
+#}
+
+# A slightly different configuration for an internal subnet.
+#subnet 10.5.5.0 netmask 255.255.255.224 {
+#  range 10.5.5.26 10.5.5.30;
+#  option domain-name-servers ns1.internal.example.org;
+#  option domain-name "internal.example.org";
+#  option routers 10.5.5.1;
+#  option broadcast-address 10.5.5.31;
+#  default-lease-time 600;
+#  max-lease-time 7200;
+#}
+
+# Hosts which require special configuration options can be listed in
+# host statements.   If no address is specified, the address will be
+# allocated dynamically (if possible), but the host-specific information
+# will still come from the host declaration.
+
+#host passacaglia {
+#  hardware ethernet 0:0:c0:5d:bd:95;
+#  filename "vmunix.passacaglia";
+#  server-name "toccata.fugue.com";
+#}
+
+# Fixed IP addresses can also be specified for hosts.   These addresses
+# should not also be listed as being available for dynamic assignment.
+# Hosts for which fixed IP addresses have been specified can boot using
+# BOOTP or DHCP.   Hosts for which no fixed address is specified can only
+# be booted with DHCP, unless there is an address range on the subnet
+# to which a BOOTP client is connected which has the dynamic-bootp flag
+# set.
+#host fantasia {
+#  hardware ethernet 08:00:07:26:c0:a5;
+#  fixed-address fantasia.fugue.com;
+#}
+
+# You can declare a class of clients and then do address allocation
+# based on that.   The example below shows a case where all clients
+# in a certain class get addresses on the 10.17.224/24 subnet, and all
+# other clients get addresses on the 10.0.29/24 subnet.
+
+#class "foo" {
+#  match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
+#}
+
+#shared-network 224-29 {
+#  subnet 10.17.224.0 netmask 255.255.255.0 {
+#    option routers rtr-224.example.org;
+#  }
+#  subnet 10.0.29.0 netmask 255.255.255.0 {
+#    option routers rtr-29.example.org;
+#  }
+#  pool {
+#    allow members of "foo";
+#    range 10.17.224.10 10.17.224.250;
+#  }
+#  pool {
+#    deny members of "foo";
+#    range 10.0.29.10 10.0.29.230;
+#  }
+#}
--- a/noc/configs/group
+++ b/noc/configs/group
@ -0,0 +1,45 @@
+root:x:0:
+daemon:x:1:
+bin:x:2:
+sys:x:3:
+adm:x:4:
+tty:x:5:
+disk:x:6:
+lp:x:7:lp
+mail:x:8:
+news:x:9:
+uucp:x:10:
+proxy:x:13:
+kmem:x:15:
+dialout:x:20:
+fax:x:21:
+voice:x:22:
+cdrom:x:24:
+floppy:x:25:
+tape:x:26:
+sudo:x:27:
+audio:x:29:
+dip:x:30:
+postgres:x:32:
+www-data:x:33:
+backup:x:34:
+operator:x:37:
+list:x:38:
+irc:x:39:
+src:x:40:
+gnats:x:41:
+shadow:x:42:
+utmp:x:43:
+video:x:44:
+staff:x:50:
+games:x:60:
+users:x:100:
+nogroup:x:65534:
+man:*:12:
+sasl:*:45:
+plugdev:*:46:
+crontab:x:101:
+ssh:x:102:
+noc:x:1000:
+bind:x:1001:
+ntp:x:103:
--- a/noc/configs/init.d/bind
+++ b/noc/configs/init.d/bind
@ -0,0 +1,50 @@
+#!/bin/sh
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+test -x /usr/sbin/named || exit 0
+
+case "$1" in
+    start)
+	echo -n "Starting domain name service: named"
+	ulimit -n 16384
+	#/usr/sbin/named -4 -t /var/named -u bind
+	/usr/sbin/named -t /var/named -u bind -n 1 -c /etc/namedb/named.conf
+	#/usr/sbin/named -t /var/named -u bind -n 1 -c /etc/namedb/named.conf.bind9.2
+	#/usr/sbin/named -4 -t /var/named -u bind -c /etc/namedb/named.conf.1
+	#/usr/sbin/named -4 -t /var/named -u bind -c /etc/namedb/named.conf.2
+	echo "."	
+    ;;
+
+    stop)
+	echo -n "Stopping domain name service: named"
+	    /usr/bin/killall named
+	echo "."	
+    ;;
+
+    restart)
+	/usr/bin/killall named
+	sleep 2
+	ulimit -n 16384
+	#/usr/sbin/named -4 -t /var/named -u bind -c /etc/namedb/named.conf.1
+	#/usr/sbin/named -4 -t /var/named -u bind -c /etc/namedb/named.conf.2
+	#/usr/sbin/named -t /var/named -u bind -n 2 -n 2
+	/usr/sbin/named -t /var/named -u bind -n 1 -c /etc/namedb/named.conf
+	#/usr/sbin/named -t /var/named -u bind -n 1 -c /etc/namedb/named.conf.bind9.2
+    ;;
+    
+    reload)
+	/usr/bin/killall -HUP named
+    ;;
+
+    force-reload)
+        $0 restart
+    ;;
+
+    *)
+	echo "Usage: /etc/init.d/bind {start|stop|reload|restart|force-reload}" >&2
+	exit 1
+    ;;
+esac
+
+exit 0
--- a/noc/configs/init.d/inetd
+++ b/noc/configs/init.d/inetd
@ -0,0 +1,67 @@
+#!/bin/sh
+exit 0
+
+#
+# start/stop inetd super server.
+
+if ! [ -x /usr/sbin/inetd ]; then
+	exit 0
+fi
+
+checkportmap () {
+    if grep -v "^ *#" /etc/inetd.conf | grep 'rpc/' >/dev/null; then
+        if ! [ -x /usr/bin/rpcinfo ]
+        then
+            echo
+            echo "WARNING: rpcinfo not available - RPC services may be unavailable!"
+            echo "         (Commenting out the rpc services in inetd.conf will"
+	    echo "         disable this message)"
+            echo
+        elif ! /usr/bin/rpcinfo -u localhost portmapper >/dev/null 2>/dev/null
+        then
+            echo
+            echo "WARNING: portmapper inactive - RPC services unavailable!"
+            echo "         (Commenting out the rpc services in inetd.conf will"
+	    echo "         disable this message)"
+            echo
+        fi
+    fi
+} 
+
+case "$1" in
+    start)
+        checkportmap
+	echo -n "Starting internet superserver:"
+	echo -n " inetd" ; start-stop-daemon --start --quiet --pidfile /var/run/inetd.pid --exec /usr/sbin/inetd
+	echo "."
+	;;
+    stop)
+	echo -n "Stopping internet superserver:"
+	echo -n " inetd" ; start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/inetd.pid --exec /usr/sbin/inetd
+	echo "."
+	;;
+    reload)
+	echo -n "Reloading internet superserver:"
+	echo -n " inetd"
+	start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/inetd.pid --signal 1
+	echo "."
+	;;
+    force-reload)
+	$0 reload
+	;;
+    restart)
+	echo -n "Restarting internet superserver:"
+	echo -n " inetd"
+	start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/inetd.pid
+	checkportmap
+	start-stop-daemon --start --quiet --pidfile /var/run/inetd.pid --exec /usr/sbin/inetd
+	echo "."
+	;;
+    *)
+	echo "Usage: /etc/init.d/inetd {start|stop|reload|restart}"
+	exit 1
+	;;
+esac
+
+exit 0
+
--- a/noc/configs/init.d/olsr
+++ b/noc/configs/init.d/olsr
@ -0,0 +1,92 @@
+#! /bin/sh
+#
+# skeleton	Example initscript
+#		This file should be used to construct scripts to be
+#		placed in /etc/init.d.
+#
+# Author:	Miquel van Smoorenburg <miquels@cistron.nl>.
+#		Ian Murdock <imurdock@gnu.ai.mit.edu>.
+#
+#		Please remove the "Author" lines above and replace them
+#		with your own name if you copy and modify this script.
+#
+# Version:	@(#)skeleton  2.85-23  28-Jul-2004  miquels@cistron.nl
+#
+
+set -e
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DESC="freifunk olsr"
+NAME=""
+
+# Read config file if it is present.
+#if [ -r /etc/default/$NAME ]
+#then
+#	. /etc/default/$NAME
+#fi
+
+#
+#	Function that starts the daemon/service.
+#
+d_start() {
+	screen -d -m -S olsr /usr/sbin/olsrd
+}
+
+#
+#	Function that stops the daemon/service.
+#
+d_stop() {
+	killall olsrd
+}
+
+#
+#	Function that sends a SIGHUP to the daemon/service.
+#
+d_reload() {
+	echo "no reload"
+}
+
+case "$1" in
+  start)
+	echo -n "Starting $DESC: $NAME"
+	d_start
+	echo "."
+	;;
+  stop)
+	echo -n "Stopping $DESC: $NAME"
+	d_stop
+	echo "."
+	;;
+  #reload)
+	#
+	#	If the daemon can reload its configuration without
+	#	restarting (for example, when it is sent a SIGHUP),
+	#	then implement that here.
+	#
+	#	If the daemon responds to changes in its config file
+	#	directly anyway, make this an "exit 0".
+	#
+	# echo -n "Reloading $DESC configuration..."
+	# d_reload
+	# echo "done."
+  #;;
+  restart|force-reload)
+	#
+	#	If the "reload" option is implemented, move the "force-reload"
+	#	option to the "reload" entry above. If not, "force-reload" is
+	#	just the same as "restart".
+	#
+	echo -n "Restarting $DESC: $NAME"
+	d_stop
+	sleep 1
+	d_start
+	echo "."
+	;;
+  *)
+	# echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
+	echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2
+	exit 1
+	;;
+esac
+
+exit 0
--- a/noc/configs/init.d/pppd-dns
+++ b/noc/configs/init.d/pppd-dns
@ -0,0 +1,10 @@
+#!/bin/sh -e
+exit 0
+
+#
+# Restore /etc/resolv.conf if the system crashed before the ppp link
+# was shut down.
+
+[ -x /etc/ppp/ip-down.d/0000usepeerdns ] \
+	&& exec /etc/ppp/ip-down.d/0000usepeerdns
+
--- a/noc/configs/init.d/wshaper
+++ b/noc/configs/init.d/wshaper
@ -0,0 +1,159 @@
+#!/bin/bash
+# Wonderous Shaper
+# please read the README before filling out these values 
+#
+# Set the following values to somewhat less than your actual download
+# and uplink speed. In kilobits. Also set the device that is to be shaped.
+
+DOWNLINK=5000
+UPLINK=490
+DEV=ppp0
+
+# low priority OUTGOING traffic - you can leave this blank if you want
+# low priority source netmasks
+NOPRIOHOSTSRC=
+
+# low priority destination netmasks
+NOPRIOHOSTDST=
+
+# low priority source ports
+NOPRIOPORTSRC="80 20 21 4662 4666 4772 4776 2142 4005 6881 6882 6883 6884 6885 6886 6887 6888 6889"
+
+# low priority destination ports
+NOPRIOPORTDST="4662 4666 4772 4776 2142 6881 6882 6883 6884 6885 6886 6887 6888 6889"
+
+
+my_tc() {
+        /sbin/tc "$@" || echo "failed: tc $@"
+}
+        
+# Now remove the following two lines :-)
+
+#echo Please read the documentation in 'README' first
+#exit
+
+if [ "$1" = "status" ]
+then
+	my_tc -s qdisc ls dev $DEV
+	my_tc -s class ls dev $DEV
+	exit
+fi
+
+
+# clean existing down- and uplink qdiscs, hide errors
+my_tc qdisc del dev $DEV root    2> /dev/null > /dev/null
+my_tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null
+
+if [ "$1" = "stop" ] 
+then 
+	exit
+fi
+
+
+###### uplink
+
+# install root HTB, point default traffic to 1:20:
+
+my_tc qdisc add dev $DEV root handle 1: htb default 20 r2q 1
+
+# shape everything at $UPLINK speed - this prevents huge queues in your
+# DSL modem which destroy latency:
+
+my_tc class add dev $DEV parent 1: classid 1:1 htb rate ${UPLINK}kbit burst 2k
+
+# high prio class 1:10:
+
+my_tc class add dev $DEV parent 1:1 classid 1:10 htb rate ${UPLINK}kbit \
+   burst 2k prio 1
+
+# bulk & default class 1:20 - gets slightly less traffic, 
+# and a lower priority:
+
+my_tc class add dev $DEV parent 1:1 classid 1:20 htb rate $[5*$UPLINK/10]kbit \
+   ceil $[9*$UPLINK/10]kbit \
+   burst 2k prio 2
+
+my_tc class add dev $DEV parent 1:1 classid 1:30 htb rate $[1*$UPLINK/10]kbit \
+   ceil $[7*$UPLINK/10]kbit \
+   burst 2k prio 5
+
+# all get Stochastic Fairness:
+my_tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10
+my_tc qdisc add dev $DEV parent 1:20 handle 20: sfq perturb 10
+my_tc qdisc add dev $DEV parent 1:30 handle 30: sfq perturb 10
+
+# TOS Minimum Delay (ssh, NOT scp) in 1:10:
+
+my_tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
+      match ip tos 0x10 0xff  flowid 1:10
+
+# ICMP (ip protocol 1) in the interactive class 1:10 so we 
+# can do measurements & impress our friends:
+my_tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 \
+        match ip protocol 1 0xff flowid 1:10
+
+# To speed up downloads while an upload is going on, put ACK packets in
+# the interactive class:
+
+my_tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
+   match ip protocol 6 0xff \
+   match u8 0x05 0x0f at 0 \
+   match u16 0x0000 0xffc0 at 2 \
+   match u8 0x10 0xff at 33 \
+   flowid 1:10
+
+# our tunnel to mms is "interactive"
+my_tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
+	match ip dst 193.103.161.61/32 flowid 1:10
+my_tc filter add dev $DEV parent 1: protocol ip prio 10 u32 \
+	match ip dst 194.97.108.53/32 flowid 1:10
+
+# rest is 'non-interactive' ie 'bulk' and ends up in 1:20
+
+# some traffic however suffers a worse fate
+for a in $NOPRIOPORTDST
+do
+	my_tc filter add dev $DEV parent 1: protocol ip prio 14 u32 \
+	   match ip dport $a 0xffff flowid 1:30
+done
+
+for a in $NOPRIOPORTSRC
+do
+ 	my_tc filter add dev $DEV parent 1: protocol ip prio 15 u32 \
+	   match ip sport $a 0xffff flowid 1:30
+done
+
+for a in $NOPRIOHOSTSRC
+do
+ 	my_tc filter add dev $DEV parent 1: protocol ip prio 16 u32 \
+	   match ip src $a flowid 1:30
+done
+
+for a in $NOPRIOHOSTDST
+do
+ 	my_tc filter add dev $DEV parent 1: protocol ip prio 17 u32 \
+	   match ip dst $a flowid 1:30
+done
+
+# rest is 'non-interactive' ie 'bulk' and ends up in 1:20
+
+my_tc filter add dev $DEV parent 1: protocol ip prio 18 u32 \
+   match ip dst 0.0.0.0/0 flowid 1:20
+
+
+########## downlink #############
+# slow downloads down to somewhat less than the real speed  to prevent 
+# queuing at our ISP. Tune to see how high you can set it.
+# ISPs tend to have *huge* queues to make sure big downloads are fast
+#
+# attach ingress policer:
+
+my_tc qdisc add dev $DEV handle ffff: ingress
+
+# filter *everything* to it (0.0.0.0/0), drop everything that's
+# coming in too fast:
+
+my_tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \
+   0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1
+
+
--- a/noc/configs/inittab
+++ b/noc/configs/inittab
@ -0,0 +1,70 @@
+# /etc/inittab: init(8) configuration.
+# $Id: inittab,v 1.91 2002/01/25 13:35:21 miquels Exp $
+
+# The default runlevel.
+id:2:initdefault:
+
+# Boot-time system configuration/initialization script.
+# This is run first except when booting in emergency (-b) mode.
+si::sysinit:/etc/init.d/rcS
+
+# What to do in single-user mode.
+~~:S:wait:/sbin/sulogin
+
+# /etc/init.d executes the S and K scripts upon change
+# of runlevel.
+#
+# Runlevel 0 is halt.
+# Runlevel 1 is single-user.
+# Runlevels 2-5 are multi-user.
+# Runlevel 6 is reboot.
+
+l0:0:wait:/etc/init.d/rc 0
+l1:1:wait:/etc/init.d/rc 1
+l2:2:wait:/etc/init.d/rc 2
+l3:3:wait:/etc/init.d/rc 3
+l4:4:wait:/etc/init.d/rc 4
+l5:5:wait:/etc/init.d/rc 5
+l6:6:wait:/etc/init.d/rc 6
+# Normally not reached, but fallthrough in case of emergency.
+z6:6:respawn:/sbin/sulogin
+
+# What to do when CTRL-ALT-DEL is pressed.
+ca:12345:ctrlaltdel:/sbin/shutdown -t1 -a -r now
+
+# Action on special keypress (ALT-UpArrow).
+#kb::kbrequest:/bin/echo "Keyboard Request--edit /etc/inittab to let this work."
+
+# What to do when the power fails/returns.
+pf::powerwait:/etc/init.d/powerfail start
+pn::powerfailnow:/etc/init.d/powerfail now
+po::powerokwait:/etc/init.d/powerfail stop
+
+# /sbin/getty invocations for the runlevels.
+#
+# The "id" field MUST be the same as the last
+# characters of the device (after "tty").
+#
+# Format:
+#  <id>:<runlevels>:<action>:<process>
+#
+# Note that on most Debian systems tty7 is used by the X Window System,
+# so if you want to add more getty's go ahead but skip tty7 if you run X.
+#
+1:2345:respawn:/sbin/getty 38400 tty1
+2:23:respawn:/sbin/getty 38400 tty2
+3:23:respawn:/sbin/getty 38400 tty3
+4:23:respawn:/sbin/getty 38400 tty4
+5:23:respawn:/sbin/getty 38400 tty5
+6:23:respawn:/sbin/getty 38400 tty6
+
+# Example how to put a getty on a serial line (for a terminal)
+#
+T0:23:respawn:/sbin/getty -L ttyS0 9600 vt100
+#T1:23:respawn:/sbin/getty -L ttyS1 9600 vt100
+
+# Example how to put a getty on a modem line.
+#
+#T3:23:respawn:/sbin/mgetty -x0 -s 57600 ttyS3
+
+s:23:respawn:/usr/bin/tail -F /var/log/squid/access.log /var/log/syslog >/dev/tty1 2>&1
--- a/noc/configs/modules
+++ b/noc/configs/modules
@ -0,0 +1,9 @@
+# /etc/modules: kernel modules to load at boot time.
+#
+# This file should contain the names of kernel modules that are
+# to be loaded at boot time, one per line.  Comments begin with
+# a "#", and everything on the line after them are ignored.
+ipv6
+capability
+e100
+e1000
--- a/noc/configs/network/if-down.d/openvpn
+++ b/noc/configs/network/if-down.d/openvpn
@ -0,0 +1,11 @@
+#!/bin/sh
+
+OPENVPN=/etc/init.d/openvpn
+
+if [ ! -x $OPENVPN ]; then
+  exit 0
+fi
+
+if [ -n "$IF_OPENVPN" ]; then
+  $OPENVPN stop $IF_OPENVPN
+fi
--- a/noc/configs/network/if-post-down.d/vlan
+++ b/noc/configs/network/if-post-down.d/vlan
@ -0,0 +1,27 @@
+#!/bin/sh
+
+# If IFACE is an automagic vlan interface (without the vlan-raw-device
+# parameter) then let's try to discover the magic here..  Another way would be
+# to just probe for the right device name in /proc/net/vlan
+
+case "$IFACE" in
+	eth*.0*)
+		IF_VLAN_RAW_DEVICE=`echo $IFACE|sed "s/\(eth[0-9][0-9]*\)\..*/\1/"`
+		;;
+	eth*.*)
+		IF_VLAN_RAW_DEVICE=`echo $IFACE|sed "s/\(eth[0-9][0-9]*\)\..*/\1/"`
+		;;
+	*)	exit 0
+		;;
+esac
+
+if [ -z "$IF_VLAN_RAW_DEVICE" ]
+then
+	exit 0
+fi
+if [ ! -x /sbin/vconfig ]
+then
+  exit 0
+fi
+
+vconfig rem $IFACE
--- a/noc/configs/network/if-pre-up.d/vlan
+++ b/noc/configs/network/if-pre-up.d/vlan
@ -0,0 +1,47 @@
+#!/bin/sh
+
+# Most of this stuff is to enable vlans
+
+case "$IFACE" in
+	vlan0*)
+		vconfig set_name_type VLAN_PLUS_VID
+		VLANID=`echo $IFACE|sed "s/vlan0*//"`
+		;;
+	vlan*)
+		vconfig set_name_type VLAN_PLUS_VID_NO_PAD
+		VLANID=`echo $IFACE|sed "s/vlan0*//"`
+		;;
+	eth*.0*)
+		vconfig set_name_type DEV_PLUS_VID
+		VLANID=`echo $IFACE|sed "s/eth[0-9][0-9]*\.0*//g"`
+		IF_VLAN_RAW_DEVICE=`echo $IFACE|sed "s/\(eth[0-9][0-9]*\)\..*/\1/"`
+		;;
+	eth*.*)
+		vconfig set_name_type DEV_PLUS_VID_NO_PAD
+		VLANID=`echo $IFACE|sed "s/eth[0-9][0-9]*\.0*//g"`
+		IF_VLAN_RAW_DEVICE=`echo $IFACE|sed "s/\(eth[0-9][0-9]*\)\..*/\1/"`
+		;;
+	*)	exit 0
+		;;
+esac
+
+if [ -n "$IF_VLAN_RAW_DEVICE" ]
+then
+	if [ ! -x /sbin/vconfig ]
+	then
+	  exit 0
+	fi
+	if ! ip link show dev "$IF_VLAN_RAW_DEVICE" > /dev/null
+	then
+		echo "$IF_VLAN_RAW_DEVICE does not exist, unable to create $IFACE"
+		exit 1
+	fi
+	ip link set up dev $IF_VLAN_RAW_DEVICE
+	vconfig add $IF_VLAN_RAW_DEVICE $VLANID
+fi
+
+# This is not vlan specific, and should actually go somewhere else.
+if [ -n "$IF_HW_MAC_ADDRESS" ]
+then
+	ip link set $IFACE address $IF_HW_MAC_ADDRESS
+fi
--- a/noc/configs/network/if-up.d/ip
+++ b/noc/configs/network/if-up.d/ip
@ -0,0 +1,18 @@
+#!/bin/sh
+# This should probably go into ifupdown
+# But usually only those with lots of interfaces (vlans) need these
+if [ -d /proc/sys/net/ipv4/conf/$IFACE ]
+then
+	if [ -n "$IF_IP_PROXY_ARP" ] && [ "$IF_IP_PROXY_ARP" -eq "1" ]
+	then
+		echo 1 > /proc/sys/net/ipv4/conf/$IFACE/proxy_arp
+	else
+		echo 0 > /proc/sys/net/ipv4/conf/$IFACE/proxy_arp
+	fi
+	if [ -n "$IF_IP_RP_FILTER" ] && [ "$IF_IP_RP_FILTER" -eq "0" ]
+	then
+		echo 0 > /proc/sys/net/ipv4/conf/$IFACE/rp_filter
+	else
+		echo 1 > /proc/sys/net/ipv4/conf/$IFACE/rp_filter
+	fi
+fi
--- a/noc/configs/network/if-up.d/ntp-server
+++ b/noc/configs/network/if-up.d/ntp-server
@ -0,0 +1,10 @@
+#!/bin/sh
+
+# remove (or comment out) the next line if your network addresses change
+exit 0
+
+case $IFACE in
+	eth*)
+		/etc/init.d/ntp-server restart
+		;;
+esac
--- a/noc/configs/network/if-up.d/openvpn
+++ b/noc/configs/network/if-up.d/openvpn
@ -0,0 +1,11 @@
+#!/bin/sh
+
+OPENVPN=/etc/init.d/openvpn
+
+if [ ! -x $OPENVPN ]; then
+  exit 0
+fi
+
+if [ -n "$IF_OPENVPN" ]; then
+  $OPENVPN start $IF_OPENVPN
+fi
--- a/noc/configs/network/ifstate
+++ b/noc/configs/network/ifstate
@ -0,0 +1,7 @@
+lo=lo
+bond0=bond0
+vlan24=vlan24
+vlan22=vlan22
+vlan25=vlan25
+vlan42=vlan42
+vlan23=vlan23
--- a/noc/configs/network/interfaces
+++ b/noc/configs/network/interfaces
@ -0,0 +1,88 @@
+#/etc/network/interfaces -- configuration file for ifup(8), ifdown(8)
+
+# The loopback interface
+auto lo
+iface lo inet loopback
+
+# The first network card - this entry was created during the Debian installation
+# (network, broadcast and gateway are optional)
+#auto eth1
+#iface eth1 inet static
+#	address 192.168.178.2
+#	netmask 255.255.255.0
+#	network 192.168.178.0
+#	broadcast 192.168.178.255
+#	gateway 192.168.178.1
+
+
+auto bond0
+iface bond0 inet static
+	pre-up /sbin/modprobe bonding mode=802.3ad
+	up /sbin/ifenslave bond0 eth0
+	up /sbin/ifenslave bond0 eth1
+	address 172.16.0.1
+	broadcast 172.16.3.255
+	netmask 255.255.252.0
+
+iface bond0 inet6 static
+	address 2001:748:306::1
+	netmask 64
+
+# WLAN
+auto vlan24
+iface vlan24 inet static
+	vlan_raw_device bond0
+	address 172.16.4.1
+	broadcast 172.16.8.255
+	netmask 255.255.252.0
+
+iface vlan24 inet6 static
+	address 2001:748:306:24::1
+	netmask 64
+
+# pptp
+auto vlan22
+iface vlan22 inet static
+	vlan_raw_device bond0
+	address 192.168.178.2
+	netmask 255.255.255.0
+
+iface vlan22 inet6 static
+	address 2001:748:306:22::1
+	netmask 64
+
+# freifunk
+auto vlan23
+iface vlan23 inet static
+	vlan_raw_device bond0
+	address 10.112.23.1
+	netmask 255.255.255.255
+
+iface vlan23 inet6 static
+	address 2001:748:306:23::1
+	netmask 64
+
+# NOC
+auto vlan42
+iface vlan42 inet static
+	vlan_raw_device bond0
+	address 172.16.42.1
+	broadcast 172.16.42.255
+	netmask 255.255.255.0
+	up /usr/local/bin/network-foo
+
+iface vlan42 inet6 static
+	address 2001:748:306:42::1
+	netmask 64
+
+# AFU Druck
+auto vlan25
+iface vlan25 inet static
+	vlan_raw_device bond0
+	address 172.16.25.1
+	broadcast 172.16.25.255
+	netmask 255.255.255.0
+
+iface vlan25 inet6 static
+	address 2001:748:306:25::1
+	netmask 64
--- a/noc/configs/network/interfaces.dpkg-new
+++ b/noc/configs/network/interfaces.dpkg-new
--- a/noc/configs/network/options
+++ b/noc/configs/network/options
@ -0,0 +1,3 @@
+ip_forward=yes
+spoofprotect=yes
+syncookies=no
--- a/noc/configs/olsrd.conf
+++ b/noc/configs/olsrd.conf
@ -0,0 +1,272 @@
+#
+# olsr.org OLSR daemon config file
+#
+# Lines starting with a # are discarded
+#
+# This file was shipped with olsrd 0.X.X
+#
+
+# Debug level(0-9)
+# If set to 0 the daemon runs in the background
+
+DebugLevel	2
+
+# IP version to use (4 or 6)
+
+IpVersion	4
+
+# HNA IPv4 routes
+# syntax: netaddr netmask
+# Example Internet gateway:
+# 0.0.0.0 0.0.0.0
+
+Hna4
+{
+#   Internet gateway:
+   0.0.0.0      0.0.0.0
+   172.16.0.0	255.255.252.0
+   172.16.4.0	255.255.252.0
+   172.16.25.0	255.255.255.0
+   172.16.42.0	255.255.255.0
+#   more entries can be added:
+#   192.168.1.0  255.255.255.0
+}
+
+# HNA IPv6 routes
+# syntax: netaddr prefix
+# Example Internet gateway:
+Hna6
+{
+#   Internet gateway:
+#   ::              0
+#   more entries can be added:
+#   fec0:2200:106:: 48
+}
+
+
+# Should olsrd keep on running even if there are
+# no interfaces available? This is a good idea
+# for a PCMCIA/USB hotswap environment.
+# "yes" OR "no"
+
+AllowNoInt	yes
+
+# TOS(type of service) value for
+# the IP header of control traffic.
+# If not set it will default to 16
+
+#TosValue	16
+
+# The fixed willingness to use(0-7)
+# If not set willingness will be calculated
+# dynamically based on battery/power status
+# if such information is available
+
+#Willingness    	4
+
+# Allow processes like the GUI front-end
+# to connect to the daemon.
+
+IpcConnect
+{
+     # Determines how many simultaneously
+     # IPC connections that will be allowed
+     # Setting this to 0 disables IPC
+
+     MaxConnections  8
+
+     # By default only 127.0.0.1 is allowed
+     # to connect. Here allowed hosts can
+     # be added
+
+     #Host            127.0.0.1
+     #Host            10.0.0.5
+
+     # You can also specify entire net-ranges 
+     # that are allowed to connect. Multiple
+     # entries are allowed
+
+     #Net             192.168.1.0 255.255.255.0     
+     Net 172.16.42.0 255.255.255.0
+}
+
+# Wether to use hysteresis or not
+# Hysteresis adds more robustness to the
+# link sensing but delays neighbor registration.
+# Used by default. 'yes' or 'no'
+
+UseHysteresis	no
+
+# Hysteresis parameters
+# Do not alter these unless you know 
+# what you are doing!
+# Set to auto by default. Allowed
+# values are floating point values
+# in the interval 0,1
+# THR_LOW must always be lower than
+# THR_HIGH.
+
+#HystScaling	0.50
+#HystThrHigh	0.80
+#HystThrLow	0.30
+
+
+# Link quality level
+# 0 = do not use link quality
+# 1 = use link quality for MPR selection
+# 2 = use link quality for MPR selection and routing
+# Defaults to 0
+
+LinkQualityLevel	2
+
+# Link quality window size
+# Defaults to 10
+
+#LinkQualityWinSize	10
+
+# Polling rate in seconds(float). 
+# Default value 0.05 sec
+
+Pollrate	0.05
+
+
+# TC redundancy
+# Specifies how much neighbor info should
+# be sent in TC messages
+# Possible values are:
+# 0 - only send MPR selectors
+# 1 - send MPR selectors and MPRs
+# 2 - send all neighbors
+#
+# defaults to 0
+
+TcRedundancy	2
+
+
+#
+# MPR coverage
+# Specifies how many MPRs a node should
+# try select to reach every 2 hop neighbor
+#
+# Can be set to any integer >0
+#
+# defaults to 1
+
+#MprCoverage	1
+
+
+# Olsrd plugins to load
+# This must be the absolute path to the file
+# or the loader will use the following scheme:
+# - Try the paths in the LD_LIBRARY_PATH 
+#   environment variable.
+# - The list of libraries cached in /etc/ld.so.cache
+# - /lib, followed by /usr/lib
+
+# Example plugin entry with parameters:
+
+LoadPlugin "olsrd_dyn_gw.so.0.3"
+{
+    # Here parameters are set to be sent to the
+    # plugin. Theese are on the form "key" "value".
+    # Parameters ofcause, differs from plugin to plugin.
+    # Consult the documentation of your plugin for details.
+
+    # Example: dyn_gw params
+
+    # how often to check for Internet connectivity
+    # defaults to 5 secs
+    PlParam     "Interval"   "5"
+    
+    # if one or more IPv4 addresses are given, do a ping on these in
+    # descending order to validate that there is not only an entry in
+    # routing table, but also a real internet connection. If any of
+    # these addresses could be pinged successfully, the test was
+    # succesful, i.e. if the ping on the 1st address was successful,the
+    # 2nd won't be pinged
+    PlParam	"Ping"       "212.12.48.122"
+    PlParam     "Ping"       "141.1.1.1"
+    PlParam     "Ping"       "194.25.2.129"
+}
+
+LoadPlugin "olsrd_dot_draw.so.0.3"
+{
+}
+
+
+# Interfaces and their rules
+# Omitted options will be set to the
+# default values. Multiple interfaces
+# can be specified in the same block
+# and multiple blocks can be set.
+
+# !!CHANGE THE INTERFACE LABEL(s) TO MATCH YOUR INTERFACE(s)!!
+# (eg. wlan0 or eth1):
+
+Interface "vlan23"
+{
+
+    # IPv4 broadcast address to use. The
+    # one usefull example would be 255.255.255.255
+    # If not defined the broadcastaddress
+    # every card is configured with is used
+
+    Ip4Broadcast		255.255.255.255
+
+    # IPv6 address scope to use.
+    # Must be 'site-local' or 'global'
+
+    # Ip6AddrType		site-local
+
+    # IPv6 multicast address to use when
+    # using site-local addresses.
+    # If not defined, ff05::15 is used
+
+    # Ip6MulticastSite		ff05::11
+
+    # IPv6 multicast address to use when
+    # using global addresses
+    # If not defined, ff0e::1 is used
+
+    # Ip6MulticastGlobal	ff0e::1
+
+
+    # Emission intervals.
+    # If not defined, RFC proposed values will
+    # be used in most cases.
+
+    # Hello interval in seconds(float)
+    # HelloInterval    2.0
+
+    # HELLO validity time
+    # HelloValidityTime	6.0
+
+    # TC interval in seconds(float)
+    # TcInterval        5.0
+
+    # TC validity time
+    # TcValidityTime	15.0
+
+    # MID interval in seconds(float)
+    # MidInterval	5.0
+
+    # MID validity time
+    # MidValidityTime	15.0
+
+    # HNA interval in seconds(float)
+    # HnaInterval	5.0
+
+    # HNA validity time
+    # HnaValidityTime 	15.0
+
+    # When multiple links exist between hosts
+    # the weight of interface is used to determine
+    # the link to use. Normally the weight is
+    # automatically calculated by olsrd based
+    # on the characteristics of the interface,
+    # but here you can specify a fixed value.
+    # Olsrd will choose links with the lowest value.
+
+    # Weight 0
+}
+
--- a/noc/configs/passwd
+++ b/noc/configs/passwd
@ -0,0 +1,25 @@
+root:x:0:0:root:/root:/bin/bash
+daemon:x:1:1:daemon:/usr/sbin:/bin/sh
+bin:x:2:2:bin:/bin:/bin/sh
+sys:x:3:3:sys:/dev:/bin/sh
+sync:x:4:65534:sync:/bin:/bin/sync
+games:x:5:60:games:/usr/games:/bin/sh
+man:x:6:12:man:/var/cache/man:/bin/sh
+lp:x:7:7:lp:/var/spool/lpd:/bin/sh
+mail:x:8:8:mail:/var/mail:/bin/sh
+news:x:9:9:news:/var/spool/news:/bin/sh
+uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
+proxy:x:13:13:proxy:/bin:/bin/sh
+postgres:x:31:32:postgres:/var/lib/postgres:/bin/sh
+www-data:x:33:33:www-data:/var/www:/bin/sh
+backup:x:34:34:backup:/var/backups:/bin/sh
+operator:x:37:37:Operator:/var:/bin/sh
+list:x:38:38:Mailing List Manager:/var/list:/bin/sh
+irc:x:39:39:ircd:/var/run/ircd:/bin/sh
+gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
+nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
+sshd:x:100:65534::/var/run/sshd:/bin/false
+noc:x:1000:1000:,,,:/home/noc:/bin/bash
+bind:x:1001:1001:bind user:/var/named:/bin/bash
+ntp:x:103:103::/home/ntp:/bin/false
+radvd:x:101:65534::/var/run/radvd:/bin/false
--- a/noc/configs/radvd.conf
+++ b/noc/configs/radvd.conf
@ -0,0 +1,51 @@
+interface bond0
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306::1/64
+   {
+   };
+};   
+
+interface vlan22
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306:22::1/64
+   {
+   };
+};   
+
+
+interface vlan23
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306:23::1/64
+   {
+   };
+};   
+
+
+interface vlan24
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306:24::1/64
+   {
+   };
+};
+
+
+interface vlan42
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306:42::1/64
+   {
+   };
+};   
+
+
+interface vlan25
+{
+   AdvSendAdvert on;
+   prefix 2001:748:306:25::1/64
+   {
+   };
+};   
--- a/noc/configs/resolv.conf
+++ b/noc/configs/resolv.conf
@ -0,0 +1,4 @@
+search easterhegg.de
+nameserver 127.0.0.1
+nameserver 172.16.0.1
+
--- a/noc/configs/shadow
+++ b/noc/configs/shadow
@ -0,0 +1,24 @@
+root:sxYXG0nuLEgFg:12862:0:99999:7:::
+daemon:*:12862:0:99999:7:::
+bin:*:12862:0:99999:7:::
+sys:*:12862:0:99999:7:::
+sync:*:12862:0:99999:7:::
+games:*:12862:0:99999:7:::
+man:*:12862:0:99999:7:::
+lp:*:12862:0:99999:7:::
+mail:*:12862:0:99999:7:::
+news:*:12862:0:99999:7:::
+uucp:*:12862:0:99999:7:::
+proxy:*:12862:0:99999:7:::
+postgres:*:12862:0:99999:7:::
+www-data:*:12862:0:99999:7:::
+backup:*:12862:0:99999:7:::
+operator:*:12862:0:99999:7:::
+list:*:12862:0:99999:7:::
+irc:*:12862:0:99999:7:::
+gnats:*:12862:0:99999:7:::
+nobody:*:12862:0:99999:7:::
+sshd:!:12862:0:99999:7:::
+noc:$1$zxg9hnVF$t.6zKVVLji4/u/JoKm6dW1:12865:0:99999:7:::
+ntp:!:12868:0:99999:7:::
+radvd:!:12868:0:99999:7:::
--- a/noc/configs/squid/squid.conf
+++ b/noc/configs/squid/squid.conf
--- a/noc/configs/sudoers
+++ b/noc/configs/sudoers
@ -0,0 +1,16 @@
+# /etc/sudoers
+#
+# This file MUST be edited with the 'visudo' command as root.
+#
+# See the man page for details on how to write a sudoers file.
+#
+
+# Host alias specification
+
+# User alias specification
+
+# Cmnd alias specification
+
+# User privilege specification
+root	ALL=(ALL) ALL
+noc	ALL=(ALL) ALL
--- a/noc/configs/sysctl.conf
+++ b/noc/configs/sysctl.conf
@ -0,0 +1,26 @@
+#
+# /etc/sysctl.conf - Configuration file for setting system variables
+# See sysctl.conf (5) for information.
+#
+# Be warned that /etc/init.d/procps is executed to set the following
+# variables.  However, after that, /etc/init.d/networking sets some
+# network options with builtin values.  These values may be overridden
+# using /etc/network/options.
+
+#kernel.domainname = example.com
+#net/ipv4/icmp_echo_ignore_broadcasts=1
+/proc/sys/net/ipv6/conf/all/forwarding=1
+/proc/sys/net/ipv6/conf/default/forwarding=1
+vm.swappiness = 0
+net.ipv4.tcp_rmem=4096 87380 174760
+net.ipv4.tcp_wmem=4096 16384 131072
+net.core.somaxconn=1024
+net.ipv4.tcp_max_syn_backlog=1024
+net.ipv4.tcp_moderate_rcvbuf=1
+vm.vfs_cache_pressure=100
+vm.overcommit_ratio=0
+vm.dirty_background_ratio=2
+vm.dirty_ratio=6
+vm.dirty_writeback_centisecs=250
+vm.dirty_expire_centisecs=1000
+vm.min_free_kbytes=16384
--- a/noc/configs/syslog.conf
+++ b/noc/configs/syslog.conf
@ -0,0 +1,73 @@
+#  /etc/syslog.conf	Configuration file for syslogd.
+#
+#			For more information see syslog.conf(5)
+#			manpage.
+
+#
+# First some standard logfiles.  Log by facility.
+#
+
+auth,authpriv.*			/var/log/auth.log
+#*.*;auth,authpriv.none		-/var/log/syslog
+*.*				-/var/log/syslog
+#cron.*				/var/log/cron.log
+daemon.*			-/var/log/daemon.log
+kern.*				-/var/log/kern.log
+lpr.*				-/var/log/lpr.log
+mail.*				-/var/log/mail.log
+user.*				-/var/log/user.log
+uucp.*				/var/log/uucp.log
+
+#
+# Logging for the mail system.  Split it up so that
+# it is easy to write scripts to parse these files.
+#
+mail.info			-/var/log/mail.info
+mail.warn			-/var/log/mail.warn
+mail.err			/var/log/mail.err
+
+# Logging for INN news system
+#
+news.crit			/var/log/news/news.crit
+news.err			/var/log/news/news.err
+news.notice			-/var/log/news/news.notice
+
+#
+# Some `catch-all' logfiles.
+#
+*.=debug;\
+	auth,authpriv.none;\
+	news.none;mail.none	-/var/log/debug
+*.=info;*.=notice;*.=warn;\
+	auth,authpriv.none;\
+	cron,daemon.none;\
+	mail,news.none		-/var/log/messages
+
+#
+# Emergencies are sent to everybody logged in.
+#
+*.emerg				*
+
+#
+# I like to have messages displayed on the console, but only on a virtual
+# console I usually leave idle.
+#
+#daemon,mail.*;\
+#	news.=crit;news.=err;news.=notice;\
+#	*.=debug;*.=info;\
+#	*.=notice;*.=warn	/dev/tty8
+
+# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
+# you must invoke `xconsole' with the `-file' option:
+# 
+#    $ xconsole -file /dev/xconsole [...]
+#
+# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
+#      busy site..
+#
+daemon.*;mail.*;\
+	news.crit;news.err;news.notice;\
+	*.=debug;*.=info;\
+	*.=notice;*.=warn	|/dev/xconsole
+
+#*.*		/dev/tty1
--- a/noc/configs/tinc/chaos.first/rsa_key.priv
+++ b/noc/configs/tinc/chaos.first/rsa_key.priv
@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/noc/configs/tinc/chaos.first/rsa_key.pub
+++ b/noc/configs/tinc/chaos.first/rsa_key.pub
@ -0,0 +1,5 @@
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ8UB4S2KiFsEI64ffK4kcG083Y4cz64lklKoB1gA720VI+wnsiUJAXF
+EgvrvcZuGqSTPM5aKWMMRllrLjBf0bNNpO66/GuN+F0O9pt8Q49NF867uNX+KHNu
+Fm1dpjugf3DIpvzbmWE3i3WAYU3yd9z3LBA1IuZ21q31Waup+MPNAgMBAAE=
+-----END RSA PUBLIC KEY-----
--- a/noc/configs/tinc/chaos.old/hosts/alioshome
+++ b/noc/configs/tinc/chaos.old/hosts/alioshome
@ -0,0 +1,14 @@
+Address=alios.dyndns.org
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.8.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAL6nQVPgKAXdt+sFsXR2b/f+DFLJDT7ENuB6fpBdosAI06UIlIov47AT
+0hIwhStixzBg1PlKi2QhqRQvGvX6rxWBb2rPU3lsHCOrG4jR+LaPs/fRLMd3nh/K
+jiH/QmbM0jn7Foms/Rladp8PJx4ZOFP1ACxnWslE/15BxqynxVeZAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/ccchh
+++ b/noc/configs/tinc/chaos.old/hosts/ccchh
@ -0,0 +1,16 @@
+Address=fwhh.hamburg.ccc.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=4200
+Subnet=192.168.16.0/23
+Subnet=192.168.20.0/23
+Subnet=192.168.0.64/26
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAKH0hS1wybu+D8DF5kOy6dirIlzhdlL0Z26G/S9JPJ4H3keDOdH3tEE/
+81D9S1IiHEkGgLFdJt6PS/mnBPaKInnV4OIS59l9eCZAVg432bb77JMSY0IWibcD
+mBZLQFrWTX4Tc8bd0C1UrIslr9PbO5gxEtKSaWsujsah2QOtVaN3AgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/dew
+++ b/noc/configs/tinc/chaos.old/hosts/dew
@ -0,0 +1,14 @@
+Address=home.ainex.net
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.13.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBALNiHGhNitniabwXpVRkSkULd5+qS3oLLung9kSD/cwIPgmJEaCLrmdF
+iVKcTKYRB7OIc7zv2Ss0eIhUHoD7FzwVYTO1hi/8hqrrUzTC6nN2HU3Rj7+M2724
+ZpE3Q3/my5W2rk6E9MWooWKIMSI5l1Uf6TF3XVhKym3wyk6bg8PXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/eh2005
+++ b/noc/configs/tinc/chaos.old/hosts/eh2005
@ -0,0 +1,17 @@
+Address=does.not.exist.example
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=172.16.0.0/22
+Subnet=172.16.4.0/22
+Subnet=172.16.42.0/24
+Subnet=10.112.0.0/12
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ8UB4S2KiFsEI64ffK4kcG083Y4cz64lklKoB1gA720VI+wnsiUJAXF
+EgvrvcZuGqSTPM5aKWMMRllrLjBf0bNNpO66/GuN+F0O9pt8Q49NF867uNX+KHNu
+Fm1dpjugf3DIpvzbmWE3i3WAYU3yd9z3LBA1IuZ21q31Waup+MPNAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/haegarhome
+++ b/noc/configs/tinc/chaos.old/hosts/haegarhome
@ -0,0 +1,14 @@
+Address=gate.sdinet.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.18.0/23
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMEEsKaNa8fq6+Z31Iy4pNwJub1Ncu1y/+Ngnldh6eC5TlgTsMa1qRfZ
+8i+vuNlC8UlXT43vGAdNuP/AJTQgjQWnSt2qlDRQyVE0RkdOnQPecTJckwzcceOv
+C76sLaA199ZtPlJl+W7Ft6SMs5UFCBhDpnUUD9GkrLuywHgZ6bpJAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/haegarwork
+++ b/noc/configs/tinc/chaos.old/hosts/haegarwork
@ -0,0 +1,14 @@
+Address=mercury.sdinet.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.0.99/32
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ3k2XMp+ryAsyDlRpTgffZGjSTE4kp2haX3Ax55CN/e7q+IG1yHvK2R
+M2v0WHh8e59Hb7IX86J7U6ZOO/7GQ8bkUZD9ntmyRjeIZ4XuF4X8Q5t7zZ6TEm8G
+lkh+IiZ3NlFRWdzVNLybQIluJsPIr/7rA3xet9IPUpm8sBgTcbwXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/lardass
+++ b/noc/configs/tinc/chaos.old/hosts/lardass
@ -0,0 +1,15 @@
+Address=lardass.arles-electrique.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.6.65.0/24
+Subnet=10.6.66.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMxqMzKqWX4e7mtiRVHnOWTkV7nxwsdgMZVkzx9ATG/9ew1CF6kOHjrq
+C4RsWpeuHMiQLUG3xF0Prajh5MXsqS7sP7Zn/6z3t3f1mqDLfBtx2e+6LqBs9j1W
+VkNcGI29ibDLYHcdjNejQfwPA+4JKfrq2T0Dzf3xWpMIHrcrLEOXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/packbarthome
+++ b/noc/configs/tinc/chaos.old/hosts/packbarthome
@ -0,0 +1,22 @@
+Address=gw23.formularfetischisten.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.42.0.0/16
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----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==
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/pescoheim
+++ b/noc/configs/tinc/chaos.old/hosts/pescoheim
@ -0,0 +1,14 @@
+Address=pesco.dyndns.org
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.9.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAOGdQo3wBi8pDtMe8IstjmWx5kKOKheTOjdPoLX4Qkr9bOhJb7NxalPV
+5Ub5BFR51kDafnSPaXtQGMkKgSD6NAXK4LF1Tvsnbr2/za38Zv9YCsoD+HiM9Vz8
+6eO6UpGkvHjXcKHsJbEa9jUnvOOFf7U23UijYgjbrkggckHojTxdAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/redbaron
+++ b/noc/configs/tinc/chaos.old/hosts/redbaron
@ -0,0 +1,14 @@
+Address=redcastle.mine.nu
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.47.11.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBALzcRKUSeEX/qHAJIqDnC+MfYD7F78ftdvOGDvYyzvHpNAlRyMZTea6V
+hnxgD3aJSM/MB80XZcdTOHLShYmAehZhfLph82oT0W8bAh+58RUgorYeYit5qvC5
+tNXV/zI8OFCfc08ttmK2Zb0Mqeh13OXzk2Un3gqgWeWauep6wBp1AgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/turing
+++ b/noc/configs/tinc/chaos.old/hosts/turing
@ -0,0 +1,14 @@
+Address=turing.hamburg.ccc.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=4200
+Subnet=192.168.0.98/32
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMeWu6JQGmHwalirbG6rSP+wLRNb+9H0wR89PM0s6OulzmRwZYESZXdU
+AXiY02+Y9YdkhHZ9b8UGfoL7g6jr3YC1aB5rGU7oOojGUGLO85K4nnd+FxzccY8K
+LyCdqkcLudLEP4SmgbKZgsBebR+46CKbnavXZ+l8KLYzQgWfA0kXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos.old/hosts/znet
+++ b/noc/configs/tinc/chaos.old/hosts/znet
@ -0,0 +1,14 @@
+Address=prometheus.datenknoten.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.23.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMHRsCzBgOvkCokphctbdX11P6MtwWIhaTHmI8BHhDN73Ch384KTFdqA
+gGsDkp2QoH2PvFRolOi1NjFuSSJfcGJdvEGa4R/bMhUF2LWTO2VIr3JIA0VsRS+8
+LXe+GpXURFgb9/cenjdzKWYLeksT1g/Y6MAgsl1MAdGFmOtNFc+zAgMBAAE=
+-----END RSA PUBLIC KEY-----  
+
--- a/noc/configs/tinc/chaos.old/rsa_key.priv
+++ b/noc/configs/tinc/chaos.old/rsa_key.priv
@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/noc/configs/tinc/chaos.old/rsa_key.pub
+++ b/noc/configs/tinc/chaos.old/rsa_key.pub
@ -0,0 +1,5 @@
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ8UB4S2KiFsEI64ffK4kcG083Y4cz64lklKoB1gA720VI+wnsiUJAXF
+EgvrvcZuGqSTPM5aKWMMRllrLjBf0bNNpO66/GuN+F0O9pt8Q49NF867uNX+KHNu
+Fm1dpjugf3DIpvzbmWE3i3WAYU3yd9z3LBA1IuZ21q31Waup+MPNAgMBAAE=
+-----END RSA PUBLIC KEY-----
--- a/noc/configs/tinc/chaos.old/tinc-up
+++ b/noc/configs/tinc/chaos.old/tinc-up
@ -0,0 +1,16 @@
+#!/bin/sh
+/sbin/ifconfig $INTERFACE 172.16.0.1 netmask 255.255.255.255
+/sbin/ip -4 route add 192.168.23.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.8.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.13.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.99/32 dev $INTERFACE
+/sbin/ip -4 route add 192.168.9.0/24 dev $INTERFACE
+/sbin/ip -4 route add 10.6.65.0/24 dev $INTERFACE
+/sbin/ip -4 route add 10.6.66.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.16.0/23 dev $INTERFACE
+/sbin/ip -4 route add 192.168.20.0/23 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.64/26 dev $INTERFACE
+/sbin/ip -4 route add 192.168.18.0/23 dev $INTERFACE
+/sbin/ip -4 route add 10.42.0.0/16 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.98/32 dev $INTERFACE
+/sbin/ip -4 route add 10.47.11.0/24 dev $INTERFACE
--- a/noc/configs/tinc/chaos.old/tinc.conf
+++ b/noc/configs/tinc/chaos.old/tinc.conf
@ -0,0 +1,17 @@
+AddressFamily=ipv4
+Device=/dev/net/tun
+Interface=chaos_vpn
+Mode=router
+Name=eh2005
+Hostnames=yes
+ConnectTo=znet
+ConnectTo=alioshome
+ConnectTo=dew
+ConnectTo=haegarwork
+ConnectTo=pescoheim
+ConnectTo=lardass
+ConnectTo=ccchh
+ConnectTo=haegarhome
+ConnectTo=packbarthome
+ConnectTo=turing
+ConnectTo=redbaron
--- a/noc/configs/tinc/chaos/hosts/alioshome
+++ b/noc/configs/tinc/chaos/hosts/alioshome
@ -0,0 +1,14 @@
+Address=alios.dyndns.org
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.8.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAL6nQVPgKAXdt+sFsXR2b/f+DFLJDT7ENuB6fpBdosAI06UIlIov47AT
+0hIwhStixzBg1PlKi2QhqRQvGvX6rxWBb2rPU3lsHCOrG4jR+LaPs/fRLMd3nh/K
+jiH/QmbM0jn7Foms/Rladp8PJx4ZOFP1ACxnWslE/15BxqynxVeZAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/ccchh
+++ b/noc/configs/tinc/chaos/hosts/ccchh
@ -0,0 +1,16 @@
+Address=fwhh.hamburg.ccc.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=4200
+Subnet=192.168.16.0/23
+Subnet=192.168.20.0/23
+Subnet=192.168.0.64/26
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAKH0hS1wybu+D8DF5kOy6dirIlzhdlL0Z26G/S9JPJ4H3keDOdH3tEE/
+81D9S1IiHEkGgLFdJt6PS/mnBPaKInnV4OIS59l9eCZAVg432bb77JMSY0IWibcD
+mBZLQFrWTX4Tc8bd0C1UrIslr9PbO5gxEtKSaWsujsah2QOtVaN3AgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/dew
+++ b/noc/configs/tinc/chaos/hosts/dew
@ -0,0 +1,14 @@
+Address=home.ainex.net
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.13.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBALNiHGhNitniabwXpVRkSkULd5+qS3oLLung9kSD/cwIPgmJEaCLrmdF
+iVKcTKYRB7OIc7zv2Ss0eIhUHoD7FzwVYTO1hi/8hqrrUzTC6nN2HU3Rj7+M2724
+ZpE3Q3/my5W2rk6E9MWooWKIMSI5l1Uf6TF3XVhKym3wyk6bg8PXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/eh2005
+++ b/noc/configs/tinc/chaos/hosts/eh2005
@ -0,0 +1,17 @@
+Address=does.not.exist.example
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=172.16.0.0/22
+Subnet=172.16.4.0/22
+Subnet=172.16.42.0/24
+Subnet=10.112.0.0/12
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ8UB4S2KiFsEI64ffK4kcG083Y4cz64lklKoB1gA720VI+wnsiUJAXF
+EgvrvcZuGqSTPM5aKWMMRllrLjBf0bNNpO66/GuN+F0O9pt8Q49NF867uNX+KHNu
+Fm1dpjugf3DIpvzbmWE3i3WAYU3yd9z3LBA1IuZ21q31Waup+MPNAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/haegarhome
+++ b/noc/configs/tinc/chaos/hosts/haegarhome
@ -0,0 +1,14 @@
+Address=gate.sdinet.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.18.0/23
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMEEsKaNa8fq6+Z31Iy4pNwJub1Ncu1y/+Ngnldh6eC5TlgTsMa1qRfZ
+8i+vuNlC8UlXT43vGAdNuP/AJTQgjQWnSt2qlDRQyVE0RkdOnQPecTJckwzcceOv
+C76sLaA199ZtPlJl+W7Ft6SMs5UFCBhDpnUUD9GkrLuywHgZ6bpJAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/haegarwork
+++ b/noc/configs/tinc/chaos/hosts/haegarwork
@ -0,0 +1,14 @@
+Address=mercury.sdinet.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.0.99/32
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ3k2XMp+ryAsyDlRpTgffZGjSTE4kp2haX3Ax55CN/e7q+IG1yHvK2R
+M2v0WHh8e59Hb7IX86J7U6ZOO/7GQ8bkUZD9ntmyRjeIZ4XuF4X8Q5t7zZ6TEm8G
+lkh+IiZ3NlFRWdzVNLybQIluJsPIr/7rA3xet9IPUpm8sBgTcbwXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/lardass
+++ b/noc/configs/tinc/chaos/hosts/lardass
@ -0,0 +1,15 @@
+Address=lardass.arles-electrique.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.6.65.0/24
+Subnet=10.6.66.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMxqMzKqWX4e7mtiRVHnOWTkV7nxwsdgMZVkzx9ATG/9ew1CF6kOHjrq
+C4RsWpeuHMiQLUG3xF0Prajh5MXsqS7sP7Zn/6z3t3f1mqDLfBtx2e+6LqBs9j1W
+VkNcGI29ibDLYHcdjNejQfwPA+4JKfrq2T0Dzf3xWpMIHrcrLEOXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/packbarthome
+++ b/noc/configs/tinc/chaos/hosts/packbarthome
@ -0,0 +1,22 @@
+Address=gw23.formularfetischisten.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.42.0.0/16
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIICCgKCAgEA7hNnj1THT0JCUPM2gEcF5Mrwj6onlBixFYZnbhNMssNAIhlP5Tvb
+7dNWhwnvBtCFCqEW8jnf9sD4+gJcp8vsiWmM8EQMGWuPkqqc+0TCyQKGb7ylbrNM
+4n7tzdJX18LEm5TnxQieBinnkYPTkNy8xzgQPe+SwyMwg6ECDIyBwJ5GaeyIjqME
+ZuVbvB81GJej2WGqSMlfZPGpGvriDrU0271S7NmAtfbzeuCGzFd877hcDx52YvzT
+SDqdFwtO+lEhbfaKzrPS96M3Jj+FyH2NC19NL93Kln4ZDdKZWSzvRwv1loFWDuZ0
+lrZC/Zk/sUSkxM1qQlXAi2wRVnQzl21j0saismra80eKEnv8f0rIbYfJFg4l5PUs
+eN7x5AriCR2wSyvuI6SkB7N3QxCSG2OWlTR8jqVd0iCgWum8+jQwvV9jCJBZYgEB
+xU85IjfH7yptd39LYJRsQcm58RTco3oO2VTBJ7uQZuIINVPjmp4cIeiF0r4O2WYf
+cA8FMX8IbUQAqwAte3J9AtfYcB8nXOsf2uBR+QoEnFf1n2R2vtzSuSTlEeTOD4MJ
+qv+4aFqbRMwR/cYTK4krYxJPSk8ZD/boFXcMPc6jud6MjA7PGEw1DKV4lhJ7pPRJ
+rgX/xUxmGNhwQEynunP6SWscg/7UFFDqanC/Pv6X7AR2VfmiLpJ66/cCAwEAAQ==
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/pescoheim
+++ b/noc/configs/tinc/chaos/hosts/pescoheim
@ -0,0 +1,14 @@
+Address=pesco.dyndns.org
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.9.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAOGdQo3wBi8pDtMe8IstjmWx5kKOKheTOjdPoLX4Qkr9bOhJb7NxalPV
+5Ub5BFR51kDafnSPaXtQGMkKgSD6NAXK4LF1Tvsnbr2/za38Zv9YCsoD+HiM9Vz8
+6eO6UpGkvHjXcKHsJbEa9jUnvOOFf7U23UijYgjbrkggckHojTxdAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/redbaron
+++ b/noc/configs/tinc/chaos/hosts/redbaron
@ -0,0 +1,14 @@
+Address=redcastle.mine.nu
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=10.47.11.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBALzcRKUSeEX/qHAJIqDnC+MfYD7F78ftdvOGDvYyzvHpNAlRyMZTea6V
+hnxgD3aJSM/MB80XZcdTOHLShYmAehZhfLph82oT0W8bAh+58RUgorYeYit5qvC5
+tNXV/zI8OFCfc08ttmK2Zb0Mqeh13OXzk2Un3gqgWeWauep6wBp1AgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/turing
+++ b/noc/configs/tinc/chaos/hosts/turing
@ -0,0 +1,14 @@
+Address=turing.hamburg.ccc.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=4200
+Subnet=192.168.0.98/32
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMeWu6JQGmHwalirbG6rSP+wLRNb+9H0wR89PM0s6OulzmRwZYESZXdU
+AXiY02+Y9YdkhHZ9b8UGfoL7g6jr3YC1aB5rGU7oOojGUGLO85K4nnd+FxzccY8K
+LyCdqkcLudLEP4SmgbKZgsBebR+46CKbnavXZ+l8KLYzQgWfA0kXAgMBAAE=
+-----END RSA PUBLIC KEY-----
+
--- a/noc/configs/tinc/chaos/hosts/znet
+++ b/noc/configs/tinc/chaos/hosts/znet
@ -0,0 +1,14 @@
+Address=prometheus.datenknoten.de
+Cipher=blowfish
+Compression=0
+Digest=sha1
+IndirectData=yes
+Port=655
+Subnet=192.168.23.0/24
+TCPonly=no
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAMHRsCzBgOvkCokphctbdX11P6MtwWIhaTHmI8BHhDN73Ch384KTFdqA
+gGsDkp2QoH2PvFRolOi1NjFuSSJfcGJdvEGa4R/bMhUF2LWTO2VIr3JIA0VsRS+8
+LXe+GpXURFgb9/cenjdzKWYLeksT1g/Y6MAgsl1MAdGFmOtNFc+zAgMBAAE=
+-----END RSA PUBLIC KEY-----  
+
--- a/noc/configs/tinc/chaos/rsa_key.priv
+++ b/noc/configs/tinc/chaos/rsa_key.priv
@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/noc/configs/tinc/chaos/rsa_key.pub
+++ b/noc/configs/tinc/chaos/rsa_key.pub
@ -0,0 +1,5 @@
+-----BEGIN RSA PUBLIC KEY-----
+MIGJAoGBAJ8UB4S2KiFsEI64ffK4kcG083Y4cz64lklKoB1gA720VI+wnsiUJAXF
+EgvrvcZuGqSTPM5aKWMMRllrLjBf0bNNpO66/GuN+F0O9pt8Q49NF867uNX+KHNu
+Fm1dpjugf3DIpvzbmWE3i3WAYU3yd9z3LBA1IuZ21q31Waup+MPNAgMBAAE=
+-----END RSA PUBLIC KEY-----
--- a/noc/configs/tinc/chaos/tinc-up
+++ b/noc/configs/tinc/chaos/tinc-up
@ -0,0 +1,16 @@
+#!/bin/sh
+/sbin/ifconfig $INTERFACE 172.16.0.1 netmask 255.255.255.255
+/sbin/ip -4 route add 192.168.23.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.8.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.13.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.99/32 dev $INTERFACE
+/sbin/ip -4 route add 192.168.9.0/24 dev $INTERFACE
+/sbin/ip -4 route add 10.6.65.0/24 dev $INTERFACE
+/sbin/ip -4 route add 10.6.66.0/24 dev $INTERFACE
+/sbin/ip -4 route add 192.168.16.0/23 dev $INTERFACE
+/sbin/ip -4 route add 192.168.20.0/23 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.64/26 dev $INTERFACE
+/sbin/ip -4 route add 192.168.18.0/23 dev $INTERFACE
+/sbin/ip -4 route add 10.42.0.0/16 dev $INTERFACE
+/sbin/ip -4 route add 192.168.0.98/32 dev $INTERFACE
+/sbin/ip -4 route add 10.47.11.0/24 dev $INTERFACE
--- a/noc/configs/tinc/chaos/tinc.conf
+++ b/noc/configs/tinc/chaos/tinc.conf
@ -0,0 +1,17 @@
+AddressFamily=ipv4
+Device=/dev/net/tun
+Interface=chaos_vpn
+Mode=router
+Name=eh2005
+Hostnames=yes
+ConnectTo=znet
+ConnectTo=alioshome
+ConnectTo=dew
+ConnectTo=haegarwork
+ConnectTo=pescoheim
+ConnectTo=lardass
+ConnectTo=ccchh
+ConnectTo=haegarhome
+ConnectTo=packbarthome
+ConnectTo=turing
+ConnectTo=redbaron
--- a/noc/configs/tinc/chaosvpn.conf
+++ b/noc/configs/tinc/chaosvpn.conf
@ -0,0 +1,41 @@
+# achtung: dies configfile ist perl ;)
+
+
+# name dieses rechners:
+$my_peerid		= "eh2005";
+
+# lokale ips dieses rechners/gateways
+# eins von beidem kann auch leergelassen werden, wenn man nur
+# ipv4 oder nur ipv6 sprechen moechte
+# (angaben ohne netmask, das hier sind die adressen die das 
+# chaos_vpn-device bekommt, netmask /32 bzw /128)
+$my_vpn_ip		= "172.16.0.1";
+$my_vpn_ip6		= "";
+
+$my_password		= "foo"; # unused
+$my_ip			= "127.0.0.1"; # unused for now
+$my_external_ip		= "193.103.161.30"; # unused
+
+# ueber diese einstellung koennen gewisse gegenstellen
+# bei chaosvpn-links ignoriert werden (sie werden vom eigenen rechner
+# behandelt als waehren sie nicht teil des chaosvpns)
+# dies ist z.b. nuetzlich wenn zu diesen gegenstellen schon eine
+# anderweitige vpn-verbindung besteht
+# im normalfall einfach ()
+@exclude		= (); # links zu gewissen peer-ids nicht aufbauen
+
+
+# ============================================================================
+# you should'nt need to change anything below, 
+# at least not for linux and chaosvpn
+
+$networkname		= "chaos";
+$tincd_bin		= "/usr/sbin/tincd";
+$ip_bin			= "/sbin/ip";
+$ifconfig		= "/sbin/ifconfig \$INTERFACE $my_vpn_ip netmask $my_vpn_netmask";
+$ifconfig6		= "$ip_bin addr add $my_vpn_ip6/128 dev \$INTERFACE";
+
+$master_url		= "https://www.vpn.hamburg.ccc.de/tinc-chaosvpn.txt";
+$base			= "/etc/tinc/$networkname";
+$pidfile		= "/var/run/tinc.$networkname.pid";
+$tincd_debuglevel	= 3;
--- a/noc/configs/tinc/nets.boot
+++ b/noc/configs/tinc/nets.boot
@ -0,0 +1 @@
+## This file contains all names of the networks to be started on system startup.
--- a/noc/monitor.easterhegg.de/README.html
+++ b/noc/monitor.easterhegg.de/README.html
@ -0,0 +1,7 @@
+<pre>
+
+<b>Config Daten von monitor.easterhegg.de</b>
+
+Drecks-Thinkpad R40e mit Debian/Unstable Webserver und 
+Netzwerk-Monitor-Krams
+</pre>
--- a/noc/monitor.easterhegg.de/apache2/README
+++ b/noc/monitor.easterhegg.de/apache2/README
@ -0,0 +1,82 @@
+Apache2 Configuration under Debian GNU/Linux
+============================================
+
+Debian's default Apache2 installation attempts to make adding and
+removing modules, virtual hosts, and extra configuration directives as
+flexible is possible, in order to make automating the changes and
+administering the server as easy as possible.
+
+Files and Directories in /etc/apache2:
+-------------------------------------
+
+apache2.conf
+
+	This is the main configuration file.
+
+conf.d/
+
+	Files in this directory are included by this line in
+	apache2.conf:
+
+	# Include generic snippets of statements
+	Include /etc/apache2/conf.d
+
+	This is a good place to add additional configuration
+	directives.
+
+httpd.conf
+
+	Empty file.
+
+magic
+
+	Magic data for mod_mime_magic Apache module, documented in
+	htdocs/manual/mod/mod_mime_magic.html.  You probably don't
+	need to touch this.
+
+mods-available/
+
+	This directory contains a series of .load and .conf files.
+	The .load files contain the Apache configuration directive
+	necessary to load the module in question.  The respective
+	.conf files contain configuration directives necessary to
+	utilize the module in question.
+
+mods-enabled/
+
+	To actually enable a module for Apache2, it is necessary to
+	create a symlink in this directory to the .load (and .conf, if
+	it exists) files associated with the module in
+	mods-available/.  For example:
+
+	cgi.load -> /etc/apache2/mods-available/cgi.load
+
+ports.conf
+
+	Configuration directives for which ports and IP addresses to
+	listen to.
+
+sites-available/
+
+	Like mods-available/, except it contains configuration
+	directives for different virtual hosts that might be used with
+	apache2.  Note that the hostname doesn't have to correspond
+	exactly with the filename.  'default' is the default host.
+
+sites-enabled/
+
+	Similar in functionality to mods-enabled/, sites-enabled
+	contains symlinks to sites in sites-available/ that the
+	admnistrator wishes to enable.
+
+	Example:
+	dedasys -> /etc/apache2/sites-available/dedasys
+
+Tools
+-----
+
+Currently, a2enmod and a2dismod are available for enabling and
+disabling modules utilizing the above configuration system.
+
+a2ensite and a2dissite have been added, which do essentially the
+same thing as the above tools, but for sites rather than modules.
--- a/noc/monitor.easterhegg.de/apache2/apache2.conf
+++ b/noc/monitor.easterhegg.de/apache2/apache2.conf
@ -0,0 +1,397 @@
+# Based upon the NCSA server configuration files originally by Rob McCool.
+# Changed extensively for the Debian package by Daniel Stone <daniel@sfarc.net>
+# and also by Thom May <thom@debian.org>.
+
+# ServerRoot: The top of the directory tree under which the server's
+# configuration, error, and log files are kept.
+#
+# NOTE!  If you intend to place this on an NFS (or otherwise network)
+# mounted filesystem then please read the LockFile documentation
+# (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>);
+# you will save yourself a lot of trouble.
+
+ServerRoot "/etc/apache2"
+
+# The LockFile directive sets the path to the lockfile used when Apache
+# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
+# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
+# its default value. The main reason for changing it is if the logs
+# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
+# DISK. The PID of the main server process is automatically appended to
+# the filename. 
+
+LockFile /var/lock/apache2/accept.lock
+
+# PidFile: The file in which the server should record its process
+# identification number when it starts.
+
+PidFile /var/run/apache2.pid
+
+# Timeout: The number of seconds before receives and sends time out.
+
+Timeout 300
+
+# KeepAlive: Whether or not to allow persistent connections (more than
+# one request per connection). Set to "Off" to deactivate.
+
+KeepAlive On
+
+# MaxKeepAliveRequests: The maximum number of requests to allow
+# during a persistent connection. Set to 0 to allow an unlimited amount.
+# We recommend you leave this number high, for maximum performance.
+
+MaxKeepAliveRequests 100
+
+# KeepAliveTimeout: Number of seconds to wait for the next request from the
+# same client on the same connection.
+
+KeepAliveTimeout 15
+
+##
+## Server-Pool Size Regulation (MPM specific)
+## 
+
+# prefork MPM
+# StartServers ......... number of server processes to start
+# MinSpareServers ...... minimum number of server processes which are kept spare
+# MaxSpareServers ...... maximum number of server processes which are kept spare
+# MaxClients ........... maximum number of server processes allowed to start
+# MaxRequestsPerChild .. maximum number of requests a server process serves
+<IfModule prefork.c>
+StartServers         5
+MinSpareServers      5
+MaxSpareServers     10
+MaxClients          20
+MaxRequestsPerChild  0
+</IfModule>
+
+# pthread MPM
+# StartServers ......... initial  number of server processes to start
+# MaxClients ........... maximum  number of server processes allowed to start
+# MinSpareThreads ...... minimum  number of worker threads which are kept spare
+# MaxSpareThreads ...... maximum  number of worker threads which are kept spare
+# ThreadsPerChild ...... constant number of worker threads in each server process
+# MaxRequestsPerChild .. maximum  number of requests a server process serves
+<IfModule worker.c>
+StartServers         2
+MaxClients         150 
+MinSpareThreads     25
+MaxSpareThreads     75
+ThreadsPerChild     25
+MaxRequestsPerChild  0
+</IfModule>
+
+# perchild MPM
+# NumServers ........... constant number of server processes
+# StartThreads ......... initial  number of worker threads in each server process
+# MinSpareThreads ...... minimum  number of worker threads which are kept spare
+# MaxSpareThreads ...... maximum  number of worker threads which are kept spare
+# MaxThreadsPerChild ... maximum  number of worker threads in each server process
+# MaxRequestsPerChild .. maximum  number of connections per server process (then it dies)
+<IfModule perchild.c>
+NumServers           5
+StartThreads         5
+MinSpareThreads      5
+MaxSpareThreads     10
+MaxThreadsPerChild  20
+MaxRequestsPerChild  0
+AcceptMutex fcntl
+</IfModule>
+
+User www-data
+Group www-data
+
+# The following directives define some format nicknames for use with
+# a CustomLog directive (see below).
+LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%h %l %u %t \"%r\" %>s %b" common
+LogFormat "%{Referer}i -> %U" referer
+LogFormat "%{User-agent}i" agent
+
+
+# Global error log.
+ErrorLog /var/log/apache2/error.log
+
+# Include module configuration:
+Include /etc/apache2/mods-enabled/*.load
+Include /etc/apache2/mods-enabled/*.conf
+
+# Include all the user configurations:
+Include /etc/apache2/httpd.conf
+
+# Include ports listing
+Include /etc/apache2/ports.conf
+
+# Include generic snippets of statements
+Include /etc/apache2/conf.d/[^.#]*
+
+#Let's have some Icons, shall we?
+Alias /icons/ "/usr/share/apache2/icons/"
+<Directory "/usr/share/apache2/icons">
+    Options Indexes MultiViews
+    AllowOverride None
+    Order allow,deny
+    Allow from all
+</Directory>
+
+# Set up the default error docs.
+#
+# Customizable error responses come in three flavors:
+# 1) plain text 2) local redirects 3) external redirects
+#
+# Some examples:
+#ErrorDocument 500 "The server made a boo boo."
+#ErrorDocument 404 /missing.html
+#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
+#ErrorDocument 402 http://www.example.com/subscription_info.html
+#
+
+#
+# Putting this all together, we can Internationalize error responses.
+#
+# We use Alias to redirect any /error/HTTP_<error>.html.var response to
+# our collection of by-error message multi-language collections.  We use 
+# includes to substitute the appropriate text.
+#
+# You can modify the messages' appearance without changing any of the
+# default HTTP_<error>.html.var files by adding the line;
+#
+#   Alias /error/include/ "/your/include/path/"
+#
+# which allows you to create your own set of files by starting with the
+# /usr/local/apache2/error/include/ files and
+# copying them to /your/include/path/, even on a per-VirtualHost basis.
+#
+
+<IfModule mod_negotiation.c>
+<IfModule mod_include.c>
+    Alias /error/ "/usr/share/apache2/error/"
+
+    <Directory "/usr/share/apache2/error">
+        AllowOverride None
+        Options IncludesNoExec
+        AddOutputFilter Includes html
+        AddHandler type-map var
+        Order allow,deny
+        Allow from all
+        LanguagePriority en es de fr
+        ForceLanguagePriority Prefer Fallback
+    </Directory>
+
+    ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
+    ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
+    ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
+    ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
+    ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
+    ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
+    ErrorDocument 410 /error/HTTP_GONE.html.var
+    ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
+    ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
+    ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
+    ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
+    ErrorDocument 415 /error/HTTP_SERVICE_UNAVAILABLE.html.var
+    ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
+    ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
+    ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
+    ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
+    ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
+
+</IfModule>
+</IfModule>
+
+DirectoryIndex index.shtml index.html index.cgi index.pl index.php index.xhtml
+
+# UserDir is now a module
+#UserDir public_html
+#UserDir disabled root
+
+#<Directory /home/*/public_html>
+#	AllowOverride FileInfo AuthConfig Limit
+#	Options Indexes SymLinksIfOwnerMatch IncludesNoExec
+#</Directory>
+
+AccessFileName .htaccess
+
+<Files ~ "^\.ht">
+    Order allow,deny
+    Deny from all
+</Files>
+
+UseCanonicalName Off
+
+TypesConfig /etc/mime.types
+DefaultType text/plain
+
+HostnameLookups Off
+
+IndexOptions FancyIndexing VersionSort
+
+AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
+
+AddIconByType (TXT,/icons/text.gif) text/*
+AddIconByType (IMG,/icons/image2.gif) image/*
+AddIconByType (SND,/icons/sound2.gif) audio/*
+AddIconByType (VID,/icons/movie.gif) video/*
+
+# This really should be .jpg.
+
+AddIcon /icons/binary.gif .bin .exe
+AddIcon /icons/binhex.gif .hqx
+AddIcon /icons/tar.gif .tar
+AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
+AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
+AddIcon /icons/a.gif .ps .ai .eps
+AddIcon /icons/layout.gif .html .shtml .htm .pdf
+AddIcon /icons/text.gif .txt
+AddIcon /icons/c.gif .c
+AddIcon /icons/p.gif .pl .py
+AddIcon /icons/f.gif .for
+AddIcon /icons/dvi.gif .dvi
+AddIcon /icons/uuencoded.gif .uu
+AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
+AddIcon /icons/tex.gif .tex
+AddIcon /icons/bomb.gif core
+
+AddIcon /icons/back.gif ..
+AddIcon /icons/hand.right.gif README
+AddIcon /icons/folder.gif ^^DIRECTORY^^
+AddIcon /icons/blank.gif ^^BLANKICON^^
+
+
+# This is from Matty J's patch. Anyone want to make the icons?
+#AddIcon /icons/dirsymlink.jpg ^^SYMDIR^^
+#AddIcon /icons/symlink.jpg ^^SYMLINK^^
+
+DefaultIcon /icons/unknown.gif
+
+ReadmeName README.html
+HeaderName HEADER.html
+
+IndexIgnore .??* *~ *# HEADER* RCS CVS *,t
+
+AddEncoding x-compress Z
+AddEncoding x-gzip gz tgz
+
+AddLanguage da .dk
+AddLanguage nl .nl
+AddLanguage en .en
+AddLanguage et .et
+AddLanguage fr .fr
+AddLanguage de .de
+AddLanguage el .el
+AddLanguage it .it
+AddLanguage ja .ja
+AddLanguage pl .po
+AddLanguage ko .ko
+AddLanguage pt .pt
+AddLanguage no .no
+AddLanguage pt-br .pt-br
+AddLanguage ltz .ltz
+AddLanguage ca .ca
+AddLanguage es .es
+AddLanguage sv .se
+AddLanguage cz .cz
+AddLanguage ru .ru
+AddLanguage tw .tw
+AddLanguage zh-tw .tw
+
+LanguagePriority en da nl et fr de el it ja ko no pl pt pt-br ltz ca es sv tw
+
+
+#AddDefaultCharset	ISO-8859-1
+
+AddCharset ISO-8859-1  .iso8859-1  .latin1
+AddCharset ISO-8859-2  .iso8859-2  .latin2 .cen
+AddCharset ISO-8859-3  .iso8859-3  .latin3
+AddCharset ISO-8859-4  .iso8859-4  .latin4
+AddCharset ISO-8859-5  .iso8859-5  .latin5 .cyr .iso-ru
+AddCharset ISO-8859-6  .iso8859-6  .latin6 .arb
+AddCharset ISO-8859-7  .iso8859-7  .latin7 .grk
+AddCharset ISO-8859-8  .iso8859-8  .latin8 .heb	
+AddCharset ISO-8859-9  .iso8859-9  .latin9 .trk
+AddCharset ISO-2022-JP .iso2022-jp .jis
+AddCharset ISO-2022-KR .iso2022-kr .kis
+AddCharset ISO-2022-CN .iso2022-cn .cis
+AddCharset Big5        .Big5       .big5
+# For russian, more than one charset is used (depends on client, mostly):
+AddCharset WINDOWS-1251 .cp-1251   .win-1251
+AddCharset CP866       .cp866
+AddCharset KOI8-r      .koi8-r .koi8-ru
+AddCharset KOI8-ru     .koi8-uk .ua
+AddCharset ISO-10646-UCS-2 .ucs2
+AddCharset ISO-10646-UCS-4 .ucs4
+AddCharset UTF-8       .utf8
+
+AddCharset GB2312      .gb2312 .gb 
+AddCharset utf-7       .utf7
+AddCharset utf-8       .utf8
+AddCharset big5	       .big5 .b5
+AddCharset EUC-TW      .euc-tw	
+AddCharset EUC-JP      .euc-jp
+AddCharset EUC-KR      .euc-kr
+AddCharset shift_jis   .sjis
+
+AddType application/x-httpd-php .php
+AddType application/x-httpd-php-source .phps
+
+AddType application/x-tar .tgz
+
+# To use CGI scripts outside /cgi-bin/:
+#
+#AddHandler cgi-script .cgi
+
+# To use server-parsed HTML files
+#
+AddType text/html .shtml
+<FilesMatch "\.shtml(\..+)?$">
+    SetOutputFilter INCLUDES
+</FilesMatch>
+
+
+# If you wish to use server-parsed imagemap files, use
+#
+#AddHandler imap-file map
+
+BrowserMatch "Mozilla/2" nokeepalive
+BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
+BrowserMatch "RealPlayer 4\.0" force-response-1.0
+BrowserMatch "Java/1\.0" force-response-1.0
+BrowserMatch "JDK/1\.0" force-response-1.0
+
+#
+# The following directive disables redirects on non-GET requests for
+# a directory that does not include the trailing slash.  This fixes a 
+# problem with Microsoft WebFolders which does not appropriately handle 
+# redirects for folders with DAV methods.
+#
+
+BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
+BrowserMatch "^WebDrive" redirect-carefully
+BrowserMatch "^gnome-vfs" redirect-carefully 
+BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
+
+# Allow server status reports, with the URL of http://servername/server-status
+# Change the ".your_domain.com" to match your domain to enable.
+#
+#<Location /server-status>
+#    SetHandler server-status
+#    Order deny,allow
+#    Deny from all
+#    Allow from .your_domain.com
+#</Location>
+
+# Allow remote server configuration reports, with the URL of
+#  http://servername/server-info (requires that mod_info.c be loaded).
+# Change the ".your_domain.com" to match your domain to enable.
+#
+#<Location /server-info>
+#    SetHandler server-info
+#    Order deny,allow
+#    Deny from all
+#    Allow from .your_domain.com
+#</Location>
+
+# Include the virtual host configurations:
+Include /etc/apache2/sites-enabled/[^.#]*
+
+Include /etc/cacti/apache.conf
--- a/noc/monitor.easterhegg.de/apache2/envvars
+++ b/noc/monitor.easterhegg.de/apache2/envvars
@ -0,0 +1,21 @@
+# Copyright 2001-2005 The Apache Software Foundation or its licensors, as
+# applicable.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+#
+# envvars-std - default environment variables for apachectl
+#
+# This file is generated from envvars-std.in
+#
+
--- a/noc/monitor.easterhegg.de/apache2/httpd.conf
+++ b/noc/monitor.easterhegg.de/apache2/httpd.conf
@ -0,0 +1,5 @@
+# This is here for backwards compatability reasons and to support
+#  installing 3rd party modules directly via apxs2, rather than
+#  through the /etc/apache2/mods-{available,enabled} mechanism.
+#
+#LoadModule mod_placeholder /usr/lib/apache2/modules/mod_placeholder.so
--- a/noc/monitor.easterhegg.de/apache2/magic
+++ b/noc/monitor.easterhegg.de/apache2/magic
@ -0,0 +1,371 @@
+# Magic data for mod_mime_magic Apache module (originally for file(1) command)
+# The module is described in htdocs/manual/mod/mod_mime_magic.html
+#
+# The format is 4-5 columns:
+#    Column #1: byte number to begin checking from, ">" indicates continuation
+#    Column #2: type of data to match
+#    Column #3: contents of data to match
+#    Column #4: MIME type of result
+#    Column #5: MIME encoding of result (optional)
+
+#------------------------------------------------------------------------------
+# Localstuff:  file(1) magic for locally observed files
+# Add any locally observed files here.
+
+#------------------------------------------------------------------------------
+# end local stuff
+#------------------------------------------------------------------------------
+
+#------------------------------------------------------------------------------
+# Java
+
+0	short		0xcafe
+>2	short		0xbabe		application/java
+
+#------------------------------------------------------------------------------
+# audio:  file(1) magic for sound formats
+#
+# from Jan Nicolai Langfeldt <janl@ifi.uio.no>,
+#
+
+# Sun/NeXT audio data
+0	string		.snd
+>12	belong		1		audio/basic
+>12	belong		2		audio/basic
+>12	belong		3		audio/basic
+>12	belong		4		audio/basic
+>12	belong		5		audio/basic
+>12	belong		6		audio/basic
+>12	belong		7		audio/basic
+
+>12	belong		23		audio/x-adpcm
+
+# DEC systems (e.g. DECstation 5000) use a variant of the Sun/NeXT format
+# that uses little-endian encoding and has a different magic number
+# (0x0064732E in little-endian encoding).
+0	lelong		0x0064732E	
+>12	lelong		1		audio/x-dec-basic
+>12	lelong		2		audio/x-dec-basic
+>12	lelong		3		audio/x-dec-basic
+>12	lelong		4		audio/x-dec-basic
+>12	lelong		5		audio/x-dec-basic
+>12	lelong		6		audio/x-dec-basic
+>12	lelong		7		audio/x-dec-basic
+#                                       compressed (G.721 ADPCM)
+>12	lelong		23		audio/x-dec-adpcm
+
+# Bytes 0-3 of AIFF, AIFF-C, & 8SVX audio files are "FORM"
+#					AIFF audio data
+8	string		AIFF		audio/x-aiff	
+#					AIFF-C audio data
+8	string		AIFC		audio/x-aiff	
+#					IFF/8SVX audio data
+8	string		8SVX		audio/x-aiff	
+
+# Creative Labs AUDIO stuff
+#					Standard MIDI data
+0	string	MThd			audio/unknown	
+#>9 	byte	>0			(format %d)
+#>11	byte	>1			using %d channels
+#					Creative Music (CMF) data
+0	string	CTMF			audio/unknown	
+#					SoundBlaster instrument data
+0	string	SBI			audio/unknown	
+#					Creative Labs voice data
+0	string	Creative\ Voice\ File	audio/unknown	
+## is this next line right?  it came this way...
+#>19	byte	0x1A
+#>23	byte	>0			- version %d
+#>22	byte	>0			\b.%d
+
+# [GRR 950115:  is this also Creative Labs?  Guessing that first line
+#  should be string instead of unknown-endian long...]
+#0	long		0x4e54524b	MultiTrack sound data
+#0	string		NTRK		MultiTrack sound data
+#>4	long		x		- version %ld
+
+# Microsoft WAVE format (*.wav)
+# [GRR 950115:  probably all of the shorts and longs should be leshort/lelong]
+#					Microsoft RIFF
+0	string		RIFF		audio/unknown	
+#					- WAVE format
+>8	string		WAVE		audio/x-wav	
+
+#------------------------------------------------------------------------------
+# c-lang:  file(1) magic for C programs or various scripts
+#
+
+# XPM icons (Greg Roelofs, newt@uchicago.edu)
+# ideally should go into "images", but entries below would tag XPM as C source
+0	string		/*\ XPM		image/x-xbm	7bit
+
+# this first will upset you if you're a PL/1 shop... (are there any left?)
+# in which case rm it; ascmagic will catch real C programs
+#					C or REXX program text
+0	string		/*		text/plain
+#					C++ program text
+0	string		//		text/plain
+
+#------------------------------------------------------------------------------
+# compress:  file(1) magic for pure-compression formats (no archives)
+#
+# compress, gzip, pack, compact, huf, squeeze, crunch, freeze, yabba, whap, etc.
+#
+# Formats for various forms of compressed data
+# Formats for "compress" proper have been moved into "compress.c",
+# because it tries to uncompress it to figure out what's inside.
+
+# standard unix compress
+0	string		\037\235	application/octet-stream	x-compress
+
+# gzip (GNU zip, not to be confused with [Info-ZIP/PKWARE] zip archiver)
+0       string          \037\213        application/octet-stream	x-gzip
+
+# According to gzip.h, this is the correct byte order for packed data.
+0	string		\037\036	application/octet-stream
+#
+# This magic number is byte-order-independent.
+#
+0	short		017437		application/octet-stream
+
+# XXX - why *two* entries for "compacted data", one of which is
+# byte-order independent, and one of which is byte-order dependent?
+#
+# compacted data
+0	short		0x1fff		application/octet-stream
+0	string		\377\037	application/octet-stream
+# huf output
+0	short		0145405		application/octet-stream
+
+# Squeeze and Crunch...
+# These numbers were gleaned from the Unix versions of the programs to
+# handle these formats.  Note that I can only uncrunch, not crunch, and
+# I didn't have a crunched file handy, so the crunch number is untested.
+#				Keith Waclena <keith@cerberus.uchicago.edu>
+#0	leshort		0x76FF		squeezed data (CP/M, DOS)
+#0	leshort		0x76FE		crunched data (CP/M, DOS)
+
+# Freeze
+#0	string		\037\237	Frozen file 2.1
+#0	string		\037\236	Frozen file 1.0 (or gzip 0.5)
+
+# lzh?
+#0	string		\037\240	LZH compressed data
+
+#------------------------------------------------------------------------------
+# frame:  file(1) magic for FrameMaker files
+#
+# This stuff came on a FrameMaker demo tape, most of which is
+# copyright, but this file is "published" as witness the following:
+#
+0	string		\<MakerFile	application/x-frame
+0	string		\<MIFFile	application/x-frame
+0	string		\<MakerDictionary	application/x-frame
+0	string		\<MakerScreenFon	application/x-frame
+0	string		\<MML		application/x-frame
+0	string		\<Book		application/x-frame
+0	string		\<Maker		application/x-frame
+
+#------------------------------------------------------------------------------
+# html:  file(1) magic for HTML (HyperText Markup Language) docs
+#
+# from Daniel Quinlan <quinlan@yggdrasil.com>
+# and Anna Shergold <anna@inext.co.uk>
+#
+0	string		\<!DOCTYPE\ HTML	text/html
+0	string		\<!doctype\ html	text/html
+0	string		\<HEAD		text/html
+0	string		\<head		text/html
+0	string		\<TITLE		text/html
+0	string		\<title		text/html
+0       string          \<html          text/html
+0       string          \<HTML          text/html
+0	string		\<!--		text/html
+0	string		\<h1		text/html
+0	string		\<H1		text/html
+
+#------------------------------------------------------------------------------
+# images:  file(1) magic for image formats (see also "c-lang" for XPM bitmaps)
+#
+# originally from jef@helios.ee.lbl.gov (Jef Poskanzer),
+# additions by janl@ifi.uio.no as well as others. Jan also suggested
+# merging several one- and two-line files into here.
+#
+# XXX - byte order for GIF and TIFF fields?
+# [GRR:  TIFF allows both byte orders; GIF is probably little-endian]
+#
+
+# [GRR:  what the hell is this doing in here?]
+#0	string		xbtoa		btoa'd file
+
+# PBMPLUS
+#					PBM file
+0	string		P1		image/x-portable-bitmap	7bit
+#					PGM file
+0	string		P2		image/x-portable-greymap	7bit
+#					PPM file
+0	string		P3		image/x-portable-pixmap	7bit
+#					PBM "rawbits" file
+0	string		P4		image/x-portable-bitmap
+#					PGM "rawbits" file
+0	string		P5		image/x-portable-greymap
+#					PPM "rawbits" file
+0	string		P6		image/x-portable-pixmap
+
+# NIFF (Navy Interchange File Format, a modification of TIFF)
+# [GRR:  this *must* go before TIFF]
+0	string		IIN1		image/x-niff
+
+# TIFF and friends
+#					TIFF file, big-endian
+0	string		MM		image/tiff
+#					TIFF file, little-endian
+0	string		II		image/tiff
+
+# possible GIF replacements; none yet released!
+# (Greg Roelofs, newt@uchicago.edu)
+#
+# GRR 950115:  this was mine ("Zip GIF"):
+#					ZIF image (GIF+deflate alpha)
+0	string		GIF94z		image/unknown
+#
+# GRR 950115:  this is Jeremy Wohl's Free Graphics Format (better):
+#					FGF image (GIF+deflate beta)
+0	string		FGF95a		image/unknown
+#
+# GRR 950115:  this is Thomas Boutell's Portable Bitmap Format proposal
+# (best; not yet implemented):
+#					PBF image (deflate compression)
+0	string		PBF		image/unknown
+
+# GIF
+0	string		GIF		image/gif
+
+# JPEG images
+0	beshort		0xffd8		image/jpeg
+
+# PC bitmaps (OS/2, Windoze BMP files)  (Greg Roelofs, newt@uchicago.edu)
+0	string		BM		image/bmp
+#>14	byte		12		(OS/2 1.x format)
+#>14	byte		64		(OS/2 2.x format)
+#>14	byte		40		(Windows 3.x format)
+#0	string		IC		icon
+#0	string		PI		pointer
+#0	string		CI		color icon
+#0	string		CP		color pointer
+#0	string		BA		bitmap array
+
+
+#------------------------------------------------------------------------------
+# lisp:  file(1) magic for lisp programs
+#
+# various lisp types, from Daniel Quinlan (quinlan@yggdrasil.com)
+0	string	;;			text/plain	8bit
+# Emacs 18 - this is always correct, but not very magical.
+0	string	\012(			application/x-elc
+# Emacs 19
+0	string	;ELC\023\000\000\000	application/x-elc
+
+#------------------------------------------------------------------------------
+# mail.news:  file(1) magic for mail and news
+#
+# There are tests to ascmagic.c to cope with mail and news.
+0	string		Relay-Version: 	message/rfc822	7bit
+0	string		#!\ rnews	message/rfc822	7bit
+0	string		N#!\ rnews	message/rfc822	7bit
+0	string		Forward\ to 	message/rfc822	7bit
+0	string		Pipe\ to 	message/rfc822	7bit
+0	string		Return-Path:	message/rfc822	7bit
+0	string		Path:		message/news	8bit
+0	string		Xref:		message/news	8bit
+0	string		From:		message/rfc822	7bit
+0	string		Article 	message/news	8bit
+#------------------------------------------------------------------------------
+# msword: file(1) magic for MS Word files
+#
+# Contributor claims:
+# Reversed-engineered MS Word magic numbers
+#
+
+0	string		\376\067\0\043			application/msword
+0	string		\333\245-\0\0\0			application/msword
+
+# disable this one because it applies also to other
+# Office/OLE documents for which msword is not correct. See PR#2608.
+#0	string		\320\317\021\340\241\261	application/msword
+
+
+
+#------------------------------------------------------------------------------
+# printer:  file(1) magic for printer-formatted files
+#
+
+# PostScript
+0	string		%!		application/postscript
+0	string		\004%!		application/postscript
+
+# Acrobat
+# (due to clamen@cs.cmu.edu)
+0	string		%PDF-		application/pdf
+
+#------------------------------------------------------------------------------
+# sc:  file(1) magic for "sc" spreadsheet
+#
+38	string		Spreadsheet	application/x-sc
+
+#------------------------------------------------------------------------------
+# tex:  file(1) magic for TeX files
+#
+# XXX - needs byte-endian stuff (big-endian and little-endian DVI?)
+#
+# From <conklin@talisman.kaleida.com>
+
+# Although we may know the offset of certain text fields in TeX DVI
+# and font files, we can't use them reliably because they are not
+# zero terminated. [but we do anyway, christos]
+0	string		\367\002	application/x-dvi
+#0	string		\367\203	TeX generic font data
+#0	string		\367\131	TeX packed font data
+#0	string		\367\312	TeX virtual font data
+#0	string		This\ is\ TeX,	TeX transcript text	
+#0	string		This\ is\ METAFONT,	METAFONT transcript text
+
+# There is no way to detect TeX Font Metric (*.tfm) files without
+# breaking them apart and reading the data.  The following patterns
+# match most *.tfm files generated by METAFONT or afm2tfm.
+#2	string		\000\021	TeX font metric data
+#2	string		\000\022	TeX font metric data
+#>34	string		>\0		(%s)
+
+# Texinfo and GNU Info, from Daniel Quinlan (quinlan@yggdrasil.com)
+#0	string		\\input\ texinfo	Texinfo source text
+#0	string		This\ is\ Info\ file	GNU Info text
+
+# correct TeX magic for Linux (and maybe more)
+# from Peter Tobias (tobias@server.et-inf.fho-emden.de)
+#
+0	leshort		0x02f7		application/x-dvi
+
+# RTF - Rich Text Format
+0	string		{\\rtf		application/rtf
+
+#------------------------------------------------------------------------------
+# animation:  file(1) magic for animation/movie formats
+#
+# animation formats, originally from vax@ccwf.cc.utexas.edu (VaX#n8)
+#						MPEG file
+0	string		\000\000\001\263	video/mpeg
+#
+# The contributor claims:
+#   I couldn't find a real magic number for these, however, this
+#   -appears- to work.  Note that it might catch other files, too,
+#   so BE CAREFUL!
+#
+# Note that title and author appear in the two 20-byte chunks
+# at decimal offsets 2 and 22, respectively, but they are XOR'ed with
+# 255 (hex FF)! DL format SUCKS BIG ROCKS.
+#
+#						DL file version 1 , medium format (160x100, 4 images/screen)
+0	byte		1			video/unknown
+0	byte		2			video/unknown
+
--- a/noc/monitor.easterhegg.de/apache2/mods-available/actions.load
+++ b/noc/monitor.easterhegg.de/apache2/mods-available/actions.load
@ -0,0 +1 @@
+LoadModule actions_module /usr/lib/apache2/modules/mod_actions.so
--- a/noc/monitor.easterhegg.de/apache2/mods-available/asis.load
+++ b/noc/monitor.easterhegg.de/apache2/mods-available/asis.load
@ -0,0 +1 @@
+LoadModule asis_module /usr/lib/apache2/modules/mod_asis.so
--- a/noc/monitor.easterhegg.de/apache2/mods-available/auth_anon.load
+++ b/noc/monitor.easterhegg.de/apache2/mods-available/auth_anon.load
@ -0,0 +1 @@
+LoadModule auth_anon_module /usr/lib/apache2/modules/mod_auth_anon.so
--- a/noc/monitor.easterhegg.de/apache2/mods-available/auth_dbm.load
+++ b/noc/monitor.easterhegg.de/apache2/mods-available/auth_dbm.load
@ -0,0 +1 @@
+LoadModule auth_dbm_module /usr/lib/apache2/modules/mod_auth_dbm.so
--- a/Show more
+++ b/Show more
				`@ -0,0 +1 @@`
				`## This file contains all names of the networks to be started on system startup.`
				`@ -0,0 +1 @@`
				`LoadModule actions_module /usr/lib/apache2/modules/mod_actions.so`
				`@ -0,0 +1 @@`
				`LoadModule asis_module /usr/lib/apache2/modules/mod_asis.so`
				`@ -0,0 +1 @@`
				`LoadModule auth_anon_module /usr/lib/apache2/modules/mod_auth_anon.so`
				`@ -0,0 +1 @@`
				`LoadModule auth_dbm_module /usr/lib/apache2/modules/mod_auth_dbm.so`