Strongswan is a IPsec provider for Linux. It can be used to provide a responder endpoint for connection to phone systems using OXO Connect. Below are the key settings that have been tested to work with a OXO Connect PSK-PSK profile, using Debian Linux: /etc/ipsec.conf: conn ike2psk-clientA auto=add keyexchange=ikev2 ike=aes256-sha2_256-modp2048! # modify to match esp=aes256-sha2_256-modp2048! … Continue reading OXO Connect to Linux with Strongswan
Australian Linux (Debian)
To quickly deploy Debian GNU/Linux with presets for use in Australia, you can use the preseed files provided here. First download and write the Net Install ISO to a USB (or connect to your VM). Boot to the installer and select Advanced -> Automated install -> enter one of the below depending on your requirement: … Continue reading Australian Linux (Debian)
Invoice Ninja behind Apache reverse proxy
Invoice Ninja is an invoicing web application, based on the Laravel framework. Configuring this behind an Apache 2.4 web server requires some special configuration. These notes assume you have an already working Apache2 server configured for reverse proxy operation, and separate working web server for Invoice Ninja. On the reverse proxy server: /etc/apache2/sites-enabled/ninja: <Location /invoices> … Continue reading Invoice Ninja behind Apache reverse proxy
Configure Geo-blocking with Apache on Debian
To enable Geo-IP Blocking on Debian 9 Stretch, assuming you already have a running Apache web server: apt install libmaxminddb0 libmaxminddb-dev apt install apache2-dev Download and extract the latest MaxMind Apache mod version from: https://github.com/maxmind/mod_maxminddb/releases Follow the instructions to configure and install from the source code Download and install the GeoIP Update program to automate … Continue reading Configure Geo-blocking with Apache on Debian
OpenVPN on MikroTik Router
The steps below show how to configure OpenVPN connections to a MikroTik router. Note that at the time of writing MikroTik’s RouterOS only supports TCP connections to OpenVPN, not UDP. Before proceeding, a Certificate Authority should be available to manage certificates – see our previous post for using the MikroTik for this. Configure the IP … Continue reading OpenVPN on MikroTik Router
Managing Certificates on Mikrotik Router with Winbox
Certificates on Mikrotik’s RouterOS can be managed through the web interface or the Winbox software. Below are basic guidelines for configuring a CA to get you started. Configure the CA Firstly, create a certificate to be used for the CA (Certificate Authority) signing, then self sign it: System -> Certificates -> Add New -> Name … Continue reading Managing Certificates on Mikrotik Router with Winbox
Linux Shell Menu (TUI)
Linux shell menu (TUI – Text User Interface), using pdmenu samples and examples available here:https://gitlab.com/majorbob/sys-menu Start by installing pdmenu (apt install pdmenu, or dpkg -i pdmenu.deb).Then download and expand the zip file, copy folders to appropriate locations (as expanded).Make /usr/bin/menu executable. Type menu to start the menu.
The Windows 10 Backup Mess
Windows 10, in 2018, has a variety of built-in backup mechanisms. Unfortunately these are mostly incongruent with each other and each offers different points of protection. 1) File History This is the native Windows 10 backup component. It requires a second disk or SMB network share, to which data located in the User folders are … Continue reading The Windows 10 Backup Mess
Read bkf files in Linux
mtftar is a utility that can read data stored in BKF files generated with Windows NTBackup program. The original source is: https://github.com/geocar/mtftar However, on Debian 9 in 2018, this code currently produces errors such as: MTF error out of order mtftar (files before directory saw 4 while expecting limit of 0)This does not look like a tar … Continue reading Read bkf files in Linux
Light locker settings
This article is about the following Linux packages: xset – the user preference command-line tool for X11, controlling screen blanking and monitor power management, light-locker – the package for password locking screens, where lightdm is the desktop manager. light-locker-settings – the GUI configuration tool for light-locker xscreensaver – the popular screen saver program light-locker-settings is a … Continue reading Light locker settings