Ipsec gre between OpenBSD en Linux

Filed under: Computers — Zarya 28 October, 2009 @ 10:46 am

Linux Side:

Tools u need are:
racoon
ipsec-tools

/etc/ipsec-tools.conf

spdadd <Remote IP> <Local IP> any
    -P in ipsec esp/transport/<Remote IP>-<Local IP>/require;
spdadd <Local IP> <Remote IP> any
    -P out ipsec esp/transport/<Local IP>-<Remote IP>/require;

/etc/racoon/psk.txt

<Remote IP> <Your PSK>

/etc/racoon/racoon.conf

remote <Remote IP> {
    exchange_mode main;
    proposal {
        encryption_algorithm blowfish;
        hash_algorithm md5;
        authentication_method pre_shared_key;
        dh_group modp1024;
    }
}

sainfo address <Local IP>/32 any address <Remote IP>/32 any {
    pfs_group modp1024;
    encryption_algorithm blowfish;
    authentication_algorithm hmac_md5;
    compression_algorithm deflate;

}

sainfo address <Remote IP>/32 any address <Local IP>/32 any {
    pfs_group modp1024;
    encryption_algorithm blowfish;
    authentication_algorithm hmac_md5;
    compression_algorithm deflate;
}

Configuration on the OpenBSD side:

Keep in mind the if PF is enabled you need to add firewall rules for the ipsec traffic
proto ah
proto esp
proto ipencap
port 500 udp
and check the rules for interface enc0 its advised to set skip on that interface

/etc/ipsec.conf

ike esp transport from <Local IP> to <Remote IP> peer <Remote IP> \
main auth hmac-md5 enc blowfish group modp1024 \
quick auth hmac-md5 enc blowfish group modp1024 \
psk <Your PSK>

/etc/isakmpd/isakmpd.policy

Authorizer: "POLICY"
Comment: This bare-bones assertion accepts everything

/etc/sysctl.conf

net.inet.gre.allow=1
net.inet.ipip.allow=1
net.inet.ah.enable=1
net.inet.esp.enable=1

/etc/rc.conf

isakmpd_flags=""
ipsec=YES

CyanogenMod 4.2.1

Filed under: Computers — Zarya 25 October, 2009 @ 11:28 am

Just upgraded to cm-4.2.1 it looks like that everything is working super
even the mpd client pmix works fine.  I hope that the music player bug is fixed
now its was starting to annoy me but we wil see

Links:
Cyanogenmod
pmix

Ujean & Glazyrin.

Filed under: Random stuff — Zarya 22 October, 2009 @ 9:58 am

Just found 2 painters from russia and i love their art.

Credits: http://ujean-glazyrin.com

Making a time lapse

Filed under: Computers — Zarya 15 October, 2009 @ 12:07 pm

I wanted to make a time lapse of the construction of the basement of my parents
so i placed 4 web cams around the building site and captured a image every 5 min.

a friend of mine (maze) helped to construct the time lapse check http://text.maze.io/2009/10/13/converting-images-to-a-movie to see what we have done

Next Page >>>