IPSec Tunneling Using FreeBSD June 4th, 2010
IPsec is a protocol which sits on top of the Internet Protocol (IP) layer. IPsec allows communication between hosts in a secure manner. The FreeBSD IPsec based on the KAME implementation.
I’ll use FreeBSD 7.2 for this howto, before we start to configure IPsec we need to compile IPSEC module into FreeBSD kernel if you don’t know to recompile FreeBSD kernel then please follow this document. To enable IPsec support into your kernel, add the following options in kernel configuration file:
Options IPSEC_DEBUG #debug IP security
Device crypto
Let’s draw the scenario which will be use throughout this tutorial
FreeBSD as a Router with Packet Filter June 4th, 2010
In this howto We will learn how to configure FreeBSD as a Router using PF (Packet Filter).
PF (Packet Filter, know as pf) is a BSD licensed statefull firewall. It is comparable to linux iptables, ipfw and ipfilter. PF is developed by OpenBSD, but has been ported to many other operating system like FreeBSD.
FreeBSD 7.2 will be used for this tutorial. Let’s breakdown that what we want and what should we do.
PRELIMINARY SETUP
1) Configure network cards for internal and external network in /etc/rc.conf file.
ifconifg_rl1=”inet 202.199.199.199 netmask 255.255.255.240″
2) Set the defaultrouter in /etc/rc.conf assigned by your ISP.
Posted in feebsd, Networking | 3 Comments »
Chroot Bind FreeBSD with Master/Slave June 4th, 2010
FreeBSD known as one of the most rock solid reliable and perfect operating systems, I personally lover of FreeBSD OS, so I want to publish a very nice howto about dns (Bind).
In this tutorial I’ll describe to you that how to set up secure FreeBSD based master/slave DNS server. You can use this tutorial on both 64-bit and 32-bit platforms.
We will use 192.168.0.1 as a Master Server and 192.168.0.2 as Slave Server
Installing and Configuring DNS:
FreeBSD 7.2 will be use for this tutorial. BIND is already installed in FreeBSD installation. You can check installed bind version using this link
1) Update your ports tree, I personally preferred portsnap for ports tree management. After updating ports tree check the version you have in the ports collection.
If ports version equal your existing installed bind version then we don’t need to installation new bind version otherwise we will install new version.
Installation from Ports: Master/Slave Read the rest of this entry »
Postfix + MySQL + Dovecot and FreeBSD June 4th, 2010
In this how-to I’ll guide you how to install postfix with mysql & dovecot and I’ll also introduce a new tool named (PostfixMailAdmin) for managing postfix mysql users.
We all knows Postfix is fast, easy to administer, and secure. The outside has a definite Sendmail-ish flavor, but the inside is completely different.
Installing Postfix
make install clean(Be sure “SASL2”, “TLS“, “MySQL“, and “VDA” are selected in the menu).
Note: If you want use dovecot as backend for SASL then also select DOVECOT from option menu.
I have already mentioned that i will introduce a new software for managing postfix virtual users. The software name is postfixmailadmin.
The main feature of this software is new web interface, easy to use, optimized search and vacation module.
You can download postfixmailadmin from this url: http://sourceforge.net/projects/postfixmiladmin/
Now Install PostfixMailAdmin
tar -xzvf postfixmailadmin-1.0.1.tar.gz Read the rest of this entry »
