มีเพิ่มเติม 2 บรรทัด ให้ push routing ไปยัง client บรรทัดแรกบอกว่าทั้งหมดในจุฬาให้ใช้ผ่าน vpn บรรทัดที่สองบอกว่าต่อเข้า server ovpn ผ่านทาง network ปรกติ
push route 161.200.0.0 255.255.0.0
push route remote_host 255.255.255.255 net_gateway 1
This might seems trivial to many people. However, I don't really know how to have some of my SysV init scripts being executed every time a machine restart. For Fedora, this is very simple using chkconfig. However, I don't know what is its equivalence on Ubuntu.
Googling around and I found that the command is actually update-rc.d. A default modus operandi is
update-rc.d foobar defaults
where foobar is my init script. This will place links to /etc/init.d/foobar on appropriate run levels.
Anybody could notice that there are at least two urls that direct to this page. Originally, I registered for http://www.nattee.net/ and http://our.obor.us/. Both works well thanks to Drupal site configuration method. Drupal use name based resolution. All I have to do is to edit the setting.php to point to the same database for both of the name. Users can access my site using any of these urls and drupal simply direct it to the same place (because all information is stored in the database).
Once again I have to build up a machine for OpenVPN. I have previously wrote articles about this but when I follow those instruction it still does not work. But first, let us talk about what I want to achieved. I just simply want to set up a road warrior configuration, i.e., I would like to have a machine, from any place, to securely access all the resource within our laboratory. This is not possible via public interface because the firewall rules block most of the port. Besides, it is not secure.
-- updated 08 March 07 --
From the stat at mybloglog, many ppl come to my web from the Google search about OpenVPN and DotA. I will summarize the howto again because my previous two entries do not give enough information.
Today I cannot access my blog site from my home because of the [bad behavior] module that block malicious request. It is blocked because my home IP (dynamically determined) is listed in CBL(Composite Blocking List) because someone who used this IP a week ago seems to have lots of trojan and spam bot installed in his/her machine.
My solution is that I need another proxy and the best one out there is my own. I Installed squid in my server. However, I don't want to share this proxy with anyone else. So, this are what I have to do.
UPDATED!!! More recent summarize and route setting can be found here.
The situation is that, our lab network is behind firewall, only a few ports/protocol are permitted. In fact, the entire network in CU has a firewall. Moreover, our network is sectioned such that ppl in the different rooms will be under different subnet. Hence, LAN game is not possible.