Anchors

Remove the bugger v0.9.13-3 and install v0.9.13-6 from these files. The issue has been patched but not pushed to the Debian and Ubuntu repositories. Install X11VNC package last.

Note: this is a public draft. It contains notes worth sharing, but it still needs a bit of rewriting. Background I’ve decided to ditch NoIP service today. As good it is for casual use, forgetting to renew the hostname results in… a lot of problems. I’ve switched to CloudFlare DNS due to faster DNS lookup times and content caching services. CDN is a nice thing to have. My current cloud server is on an A record, and all the home vhosts and other things are using CNAME redirection via the hopto.org domain. ...

configure set firewall name WAN_LOCAL rule 30 action accept set firewall name WAN_LOCAL rule 30 description ike set firewall name WAN_LOCAL rule 30 destination port 500 set firewall name WAN_LOCAL rule 30 log disable set firewall name WAN_LOCAL rule 30 protocol udp set firewall name WAN_LOCAL rule 40 action accept set firewall name WAN_LOCAL rule 40 description esp set firewall name WAN_LOCAL rule 40 log disable set firewall name WAN_LOCAL rule 40 protocol esp set firewall name WAN_LOCAL rule 50 action accept set firewall name WAN_LOCAL rule 50 description nat-t set firewall name WAN_LOCAL rule 50 destination port 4500 set firewall name WAN_LOCAL rule 50 log disable set firewall name WAN_LOCAL rule 50 protocol udp set firewall name WAN_LOCAL rule 60 action accept set firewall name WAN_LOCAL rule 60 description l2tp set firewall name WAN_LOCAL rule 60 destination port 1701 set firewall name WAN_LOCAL rule 60 ipsec match-ipsec set firewall name WAN_LOCAL rule 60 log disable set firewall name WAN_LOCAL rule 60 protocol udp set vpn l2tp remote-access ipsec-settings authentication mode pre-shared-secret set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret <L2TP_secret> set vpn l2tp remote-access client-ip-pool start <client-ip-pool-start> set vpn l2tp remote-access client-ip-pool stop <client-ip-pool-end> set vpn l2tp remote-access dns-servers server-1 <client-ip-DNS-1> set vpn l2tp remote-access dns-servers server-2 <client-ip-DNS-2> set vpn l2tp remote-access outside-address <router-external-ip> set vpn ipsec ipsec-interfaces interface <router-external-if> set vpn l2tp remote-access authentication mode radius set vpn l2tp remote-access authentication radius-server <RadiusIP> key <RadiusKEY> OR ...

I once said: I’m horribly lazy when it comes to setting up machines. Indeed. And this page is dedicated to fixing that. Let’s write a quick bundle of settings I use to set up machines, shall we? Note: i use C locale with Slovene keyboard when I set up new Debian 10. Just a taste. As soon as I manage to set up a basic Debian install and log in as root: ...

setup apt-get install qemu-kvm libvirt-clients libvirt-daemon-system virt-manager adduser ME libvirt adduser ME libvirt-qemu sample br0 config: auto lo iface lo inet loopback # The primary network interface auto eth0 #make sure we don't get addresses on our raw device iface eth0 inet manual iface eth0 inet6 manual #set up bridge and give it a static ip auto br0 iface br0 inet static address 192.168.1.2 netmask 255.255.255.0 network 192.168.1.0 broadcast 192.168.1.255 gateway 192.168.1.1 bridge_ports eth0 bridge_stp off bridge_fd 0 bridge_maxwait 0 dns-nameservers 8.8.8.8 #allow autoconf for ipv6 iface br0 inet6 auto accept_ra 1 https://wiki.debian.org/KVM ...