|
Packt Publishing has a book about FreeSWAN (don't use that) which is
almost all applicable to LibreSWAN (do use this, it's a newer fork). Easiest is to set up a tunnel with PSKs, more secure is with RSA keys or X509 certs. Alex On 30/06/16 19:20, Chris Horry wrote:
On 06/30/2016 13:34, Alex Crow wrote:I'd suggest changing IP as this practice is a) a violation of trust, forcing you to use a potentially compromised resource you have no control over b) a clear violation of net-neutrality c) a violation of standards (as it's probably one of those that instead of returning NXDOMAIN as required sends you to an advertising page. )Tell me about it. My ISP and I are having a pitched battle about it now. Unfortunately my options are limited in my current area but at least it's not Comcast!I'm pretty sure you /can/ configure BIND to work like that. I should imagine you could set up forwarders to TCP-based DNS servers. The other option is to get a DNS server set up on a VPS and tunnel your requests to it via IPSEC.Sounds like a good idea, time to learn IPSEC! Thanks, Chris -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. This email is not intended to, nor should it be taken to, constitute advice. The information provided is correct to our knowledge & belief and must not be used as a substitute for obtaining tax, regulatory, investment, legal or any other appropriate advice. "Transact" is operated by Integrated Financial Arrangements Ltd. 29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300. (Registered office: as above; Registered in England and Wales under number: 3727592). Authorised and regulated by the Financial Conduct Authority (entered on the Financial Services Register; no. 190856). |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
