vBlog

Mar 11, 15

DHCP Option 121 in PFSense

The DHCP Option 121 is described here: http://tools.ietf.org/html/rfc3442. It allows the DHCP server to send a classless route.

In PFSense, one can add this option by setting the type to string. The

Read more >>

Feb 04, 15

Custom SSL certificate for iDrac 7 without CSR

If you want to use the Dell iDrac with a certificate signed by your CA, the web gui allows you to create a CSR, and upload the signed certificate. But if for some reason you want to generate the cert

Read more >>

Dec 08, 14

Zone transfer setup for BIND with split horizon on the same zone

With the default configuration, a zone transfer from a master to a slave of BIND with split horizon has the slave transfer only the view of that zone that is available to its IP address. The document

Read more >>

Aug 22, 14

How to transfer Duo Security installation to a new phone on Android

The Duo Security application can be used to generate one time passwords for online services, as an alternative to Google Authenticator.

However, it does not offer a way to backup the configuration,

Read more >>

Jun 19, 14

Establishing IPSec tunnel between Linux and Fortigate

Here is an example of a tunnel setup beetween Linux and Fortigate. It uses StrongSwan.

conn myconn
    type=tunnel
    left=[local_ip_address]
    leftsubnet=[local_subnet_to_be_acces

Read more >>

May 09, 14

IPv6 routing and router advertisments on Ubuntu / Debian

If your Linux box gets its IPv6 routing information via router advertisments, you may have noticed that upon enabling forwarding, it disregards those advertisments and it loses the configured gateways

Read more >>

May 09, 14

IPv6 prefix delegation with static address and dhclient on Ubuntu / Debian

Some hosting providers, like Online in France provide IPv6 access via prefix delegation. You get a DUID that has to be sent to their DHCP server. The IP address is configured by t

Read more >>