OpenVPN OpenBSD FreeBSD

OpenVPN server on FreeBSD with pf firewall

FreeBSD 10, with the new and improved packet filter/firewall pf, and OpenVPN are all great products. But I had a not so great time making them play together - especially with a Windows 8 client. As with everything, it is easy when you know how. Most OpenVPN examples seem to be using the tap interface and ethernet bridging. To keep things simple, I wanted to go with the default ip-routed tun interface. Apart from being default, thus requiring less config fiddling, it fits nicely with pf and requires one less kernel module. ...

November 3, 2014 · 6 min · wpgundersen
Unreal Tournament 99 GOTY

Unreal Tournament Server on FreeBSD

Unreal Tournament from 1999 (Game of the Year - GOTY - Edition) is now 15 years old and still a great multiplayer game, especially at LAN parties. It is free to download so you can share this gem with anyone. If you play it regularly you will want to host a server. This guide for FreeBSD closely follows the Linux guide, but as always FreeBSD needs a couple of adjustments. First of all make a new user with adduser. All default settings, I call mine ut99. ...

October 19, 2014 · 2 min · wpgundersen
Netflix Mad Men

American Netflix on any device without VPN or site-wide DNS changes - using pfSsense

It seems like everyone is finding ways to watch American Netflix content. While it is easy with one of many plugins on the computer, it gets harder on devices such as iPad or PS3 and even more so on Chromecast with its hard-coded google DNS. Some people will also want a solution for the home router, covering all devices at once. The most common fix is to get a VPN. Usable from the computer, iPad, Chromecast or a sufficiently advanced router, a VPN routes your traffic through a server in the US. The main drawback is speed. Most VPN providers are over-subscribed and, in general, it will be hard to get Super HD streaming - at least with any stability and on more than one device. You will also want to separate your other browsing traffic from the VPN to avoid the speed loss, and avoid having all websites think you are from the US. All in all, a solution with drawbacks. ...

April 14, 2014 · 3 min · wpgundersen

Altibox med egen ruter med pfSense

Denne posten fra 2014 er oppdatert i 2015 med IPv6-innstillinger - se nederst. De fleste som har Altibox fiber-bredbånd og vil bruke egen ruter hjemme setter Altibox-ruteren i bridge-mode. Men det er unødvendig å ha den som et ekstra ledd mellom deg og internett. Du kan like gjerne kople din egen ruter eller server rett på linjen. Denne trengs ikke Om du ikke har vært Altiboxkunde alt for lenge så har du en mediekonverter foran ruteren som leveres av Altibox. Da kopler du deg direkte i mediekonverteren. Har du ikke en mediekonverter er jobben litt mer innfløkt fordi du må direkte på fiberen med f.eks egen mediekonverter. ...

April 6, 2014 · 4 min · wpgundersen
Pidgin on Lync

Pidgin to Lync integration: solved

I had been trying to get the open source instant messenger client Pidgin to connect to Lync using SIPE. However, they wouldn’t play nice. The Pidgin GUI kept saying “Web ticket request to https:// webdir0e- ext.online.lync.com:443/ CertProv/ CertProvisioningService.svc failed” while the debug log from running pidgin –debug ended with an XML containing “Web ticket request error - SIP URI mismatch” - after confirming username and password to be ok. My environment was Pidgin 2.10.7 and SIPE 1.15.0 on Win8 connecting to Office 365 (no local AD). ...

March 26, 2013 · 3 min · wpgundersen

32bit jail on 64bit FreeBSD

Sometimes it can be necessary or preferable to run software in 32bit versions, even if the OS is 64bit (i.e. running the i386-version on amd64 OS). As an example, software with deep memory structures mainly consisting of pointers, such as dictionaries of dictionaries of light-weight objects, will occupy almost twice the RAM on a 64bit OS. If multiple instances of, say, 3GB memory structures are needed, the 64bit penalty quickly adds up. ...

September 8, 2012 · 2 min · wpgundersen