life ideas

December 3, 2006

OpenVPN 2.0 HOWTO

Filed under: soft Tips, software — manoftoday @ 4:51 am

 

Routing all client traffic (including web-traffic) through the VPN

Overview

By default, when an OpenVPN client is active, only network traffic to and from the OpenVPN server site will pass over the VPN. General web browsing, for example, will be accomplished with direct connections that bypass the VPN.

In certain cases this behavior might not be desirable — you might want a VPN client to tunnel all network traffic through the VPN, including general internet web browsing. While this type of VPN configuration will exact a performance penalty on the client, it gives the VPN administrator more control over security policies when a client is simultaneously connected to both the public internet and the VPN at the same time.

Implementation

Add the following directive to the server configuration file:

push "redirect-gateway def1"

If your VPN setup is over a wireless network, where all clients and the server are on the same wireless subnet, add the local flag:

push "redirect-gateway local def1"

Pushing the redirect-gateway option to clients will cause all IP network traffic originating on client machines to pass through the OpenVPN server. The server will need to be configured to deal with this traffic somehow, such as by NATing it to the internet, or routing it through the server site’s HTTP proxy.

On Linux, you could use a command such as this to NAT the VPN client traffic to the internet:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

This command assumes that the VPN subnet is 10.8.0.0/24 (taken from the server directive in the OpenVPN server configuration) and that the local ethernet interface is eth0.

When redirect-gateway is used, OpenVPN clients will route DNS queries through the VPN, and the VPN server will need handle them. This can be accomplished by pushing a DNS server address to connecting clients which will replace their normal DNS server settings during the time that the VPN is active. For example:

push "dhcp-option DNS 10.8.0.1"

will configure Windows clients (or non-Windows clients with some extra server-side scripting) to use 10.8.0.1 as their DNS server. Any address which is reachable from clients may be used as the DNS server address.

Caveats

Redirecting all network traffic through the VPN is not entirely a problem-free proposition. Here are some typical gotchas to be aware of:

  • Many OpenVPN client machines connecting to the internet will periodically interact with a DHCP server to renew their IP address leases. The redirect-gateway option might prevent the client from reaching the local DHCP server (because DHCP messages would be routed over the VPN), causing it to lose its IP address lease.
  • Issues exist with respect to pushing DNS addresses to Windows clients.
  • Web browsing performance on the client will be noticably slower.

For more information on the mechanics of the redirect-gateway directive, see the manual page.

Source: OpenVPN 2.0 HOWTO

Advertisements

November 24, 2006

Daily Cup of Tech » Check To See If Your ISP Is Cheating Your Speed

Filed under: soft Tips, software — manoftoday @ 4:49 am

 

Check To See If Your ISP Is Cheating Your Speed

1 Votes | Average: 4 out of 51 Votes | Average: 4 out of 51 Votes | Average: 4 out of 51 Votes | Average: 4 out of 51 Votes | Average: 4 out of 5 (1 votes, average: 4 out of 5)

Loading ... Loading …

Chat about this

Categories: Support, From the Files of DCOT…, System Administration, Internet

Posted on Sunday, October 15, 2006 by Tim Fehlman

In years past, I was not as technically savvy as I am today (which may be saying something). I was also naive enough to believe that what I was told I was getting from my ISP is actually what I received. Now, I’m not saying that all ISPs are out to cheat you but there are definitely some that are less than reputable.

One of the easiest ways for them to “steal” from you is by throttling your bandwidth. This means that they may tell you that you are getting one speed but actually receiving another. Luckily, there are a number of websites out there that let you test your bandwidth.

Recently, I ran across a very cool one that is super easy to use. It has a very nice graphical interface and lets you choose which server you want to test you speed with. Check out SpeedTest and see how your ISP is doing.

Source: Daily Cup of Tech » Check To See If Your ISP Is Cheating Your Speed

Overview of the Windows Vista Security Guide

Filed under: software — manoftoday @ 3:39 am

 

Link to Overview of the Windows Vista Security Guide

Daily Cup of Tech » Recovering Your Lost Passwords

Filed under: Security, software — manoftoday @ 3:19 am

 

Link to Daily Cup of Tech » Recovering Your Lost Passwords

November 23, 2006

tor package

Filed under: software — manoftoday @ 7:16 am

it is so stupid, tor, vadalia and Privoxy have the following issues.

1) Privoxy starts up with a GUI window, you need to manually close it.

2) vadalia creates data dir in c:\documents and settings\username\Application Data\vadalia

3) tor creates data dir in c:\documents and settings\username\Application Data\tor

all this makes portability lousy;in addition, you need to manually start Vadalia and privoxy one by one.

my solution:

1) in U:\Program Files\Privoxy create one file:

services.bat

start /min ..\Privoxy\privoxy.exe
cd ..\vidalia
run.bat

2) in U:\Program Files\Vadalia create one file:

run.bat

start /min .\vidalia.exe -datadir .\Vidalia

3) create these two directorys in U:\Program Files\Vadalia

U:\Program Files\Vadalia\Vadalia

U:\Program Files\Vadalia\Tor

4) in U:\Program Files\Vadalia\Vadalia edit these two files:

file-1: torrc

# This file was generated by Tor; if you edit it, comments will not be preserved
# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it
ControlPort 9051
Log notice stdout
DataDirectory .\Tor

file-2 : vadalia.conf

[General]
InterfaceStyle=Plastique
LanguageCode=en

[AboutDialog]
Position=@Point(0 0)
Size=@Size(500 420)

[BandwidthGraph]
Position=@Point(0 0)
Size=@Size(373 153)

[ConfigDialog]
Position=@Point(0 0)
Size=@Size(519 400)

[HelpBrowser]
Position=@Point(0 0)
Size=@Size(703 583)

[MessageLog]
Position=@Point(0 0)
Size=@Size(698 625)

[NetViewer]
Position=@Point(0 0)
Size=@Size(844 482)

[Server]
Changed=false
ExitPolicy=

[Tor]
TorExecutable=u:\\Program Files\\Tor\\tor.exe
Torrc=U:\\Program Files\\Vidalia\\Vidalia\\torrc

5) now you just click the services.bat to start privoxy and vadalia service in one click

November 20, 2006

230 Resources on Windows opensource and/or freeware – Listible!

Filed under: software — manoftoday @ 6:14 am

 

Link to 230 Resources on Windows opensource and/or freeware – Listible!

plugins for live writer

Filed under: software — manoftoday @ 4:19 am

http://windowswriterplugins.wordpress.com/

November 8, 2006

websites and skype 3.0

Filed under: software — manoftoday @ 10:49 pm

http://share.skype.com/sites/en/skype_beta_and_new_releases/

http://www.ghacks.net/forum/topic/4

Way to many to list,….
But here is “a few”
http://www.lifehacker.com/
http://www.ghacks.net/
http://thunder7.deviantart.com/
http://sciplus.com/
http://i-hacked.com/
http://homepage.ntlworld.com/hiren.thanki/index.html
http://www.hackaday.com/
http://www.extremetech.com/
http://www.dailyrotation.com/
http://www.artwanted.com/thunder7/
http://popurls.com/
http://www.refdesk.com/
http://www.algonet.se/~hubbabub/
http://shellcity.net/
http://www.donationcoder.com/Forums/bb/index.php?board=2.0
http://dubber6.tripod.com/whereisit/id18.html/
http://dubber6.tripod.com/whereisit/
http://dubber6.tripod.com/whereisit/id12.html/
http://www.virtualplastic.net/
http://rain.prohosting.com/chrisnet/csindex.htm
http://www.annoyances.org/
http://help.lockergnome.com/index.php?
http://www.downloadsquad.com/
http://www.nowpublic.com/400_freewares_direct_links
http://www.apn.gr/manager/publish/freeware.shtml
http://www.fixmyxp.com/
http://stupac2.blogspot.com/2006/09/microwave-propulsion.html
http://world.honda.com/ASIMO/
http://www.nano.org.uk/
http://www.newscientist.com/blog/fromthepublisher/2006/10/emdrive-on-trial.html
http://www.instructables.com/id/EEA99AAUR3EP28744T/
http://www.tradetricks.org/

And many many more likes to share

October 23, 2006

Subversion

Filed under: software — manoftoday @ 6:20 am

1)no undo-checkout

On Thu, 2005-01-27 at 23:43, David S. wrote:
> Some version control systems have the notion of undo check-out. In can
> see that with Subversion you can revert.
‘svn revert’ is used to undo the changes you make. You can’t
undo a checkout with ‘svn revert’.
Checkout in subversion means, you get a local copy of the repository,
or a portion of the repository. The server does not keep track of
working copies – If you need to get rid of a working copy, just
delete it.
> But what if you want to
> eliminate your view altogether? Do you just delete the directory?
>
> Thanks.
>
2) Commit failed: file has inconsistent newlines.

http://www.hanselman.com/blog/CategoryView.aspx?category=Subversion

3)  can not show diff because of inconsistent newlines in file

cannot show diff because of inconsistent newlines in file的解决方法

cannot show diff because of inconsistent newlines in file

有时候比较两个文件时,因为存在不同的换行格式,导致上面这个错误。

错误原因应该是TortoiseSVN自带的比较工具TortoiseMerge目前无法处理不同的换行格式。

解决方法:使用WinMerge作为外部比较工具

步骤:
1、下载WinMerge 2.6.0(本站下载区)或http://winmerge.org/downloads.php

2、安装WinMerge,在“选择额外任务”对话框中,将“integrate with TortoiseSVN”选上,

安装后,TortoiseSVN中的外部比较工具变成

e:\Program Files\WinMerge\WinMergeU.exe -e -x -ub -dl %bname -dr %yname %base %mine

(假设你的WinMerge安装在e:\Program Files\WinMerge)

再进行比较时,就不会出现cannot show diff because of inconsistent newlines in file了

http://www.iusesvn.com/bbs/thread-413-1-1.html

October 11, 2006

ZT:12 Tips for Creating Better Presentations

Filed under: soft Tips, software — manoftoday @ 8:08 pm

very valuable advice for business people.

http://www.microsoft.com/atwork/getworkdone/presentations.mspx

ZT:12 Tips for Creating Better Presentations

Filed under: soft Tips, software — manoftoday @ 8:07 pm

very valuable advice for business people

Create a free website or blog at WordPress.com.