Category | systems

I just received a little patch to my pmvcb from Tilman Schmidt. This patch add the support for the new ESXi syntax of snapshot.remove. You can download the last pmvcb from my Github page Thanks Tilman.

---

In my previous post I talked about Layer 3 VPN feature of OpenSSH (starting from version 4.3). Now, I'm talking about bridged VPN or Layer 2 VPN. With this feature you can create a virtual network device that, through the encrypted tunnel, is connected on the same network segment of remote server. In fact the VPN acts as a network switch connecting local virtual device with remote device in same ethernet network. With this setup your SSH client will connect to remote server and start forwarding packet between local end remote TUN/TAP device. All packets are forward through the encrypted SSH tunnel. using...

---

I'm in this situation: a VPN to remote concentrator that load many routes to private networks, vpn server push DNS configuration via OpenVPN protocol (see --dhcp-option DNS in openvpn(8) ). The scope of this post is to explain how you can use remote DNS pushed by VPN concentrator only for certain zones. For accomplish this I used a local PowerDNS server and a little OpenVPN up script: When OpenVPN make the tunnel the up script create a custom forward-zones-file used by PowerDNS. The script insert in the custom file the remote zones and the dns server authoritative for these zones. PowedDNS...

---

For testing purpose I have developed this little application to check an European VAT number. For use it you must configure this action URL as a function key in your Snom phone: http://www.bertera.it/snomVAT.php  

---

I up against this problem on a server hosted by Hetzner.My server is a virtual hypervisor containing several virtual machines.The Hetzner's politics is to statically associate a public IP to a single mac address, is therefore impossible to have multiple IP address on a single ethernet device.  Observing this rule you can associate only one virtual machine with one public IP, and you cannot create a firewall with all public IPs attested on public interface and private interfaces attached to a vSwitchs. To solve the problem you can use the macvlan module. Macvlan allow to create indipendent logical...

---

Avere a che fare con delle connettività scadenti è sempre un disastro. Uno strumento per tenere monitorata una VPN e reagire in caso di down puo' essere comodo. Esempio: In questo esempio ho una VPN tra la rete A (192.168.2.0/24) e la rete B (192.168.8.0/24) L'endpoint della rete A (192.186.2.1) è un router Cisco, l'enpoint B (192.168.8.1) non è in nostra gestione ma parla IPSec. Tramite le configurazione seguenti l'endpoint A tiene monitorato lo stato della VPN e in caso di down effettua il reload della VPN. 1) definiamo lo sla monitor in modo che esegua un ping verso l'host 192.168.8.1....

---

Packages available here: http://www.bertera.it/software/bacula/bacula-backports/

---

Update: for english version of this post you can read the README of pmvcb at github: https://github.com/pbertera/pmvcb/blob/master/README.md For bacula integration of pvmcb you can see the instruction on bacula wiki: http://wiki.bacula.org/doku.php?id=application_specific_backups:poor_man_vmware_consolidated_backupVMware offre un pacchetto di backup per le macchine virtuali: VCB (VMware consolidated Backup): http://www.vmware.com/products/vi/cb_overview.html Il VCB non fa altro che: eseguire uno snapshot di una VM clonare i dischi virtuali della VM consolidare lo snapshot (rimozione...

---