Things look quiet here. But I've been doing a lot of blogging at
dan.langille.org because I prefer WordPress now.
Not all my posts there are FreeBSD related.
I am in the midst of migrating The FreeBSD Diary over to WordPress
(and you can read about that here).
Once the migration is completed, I'll move the FreeBSD posts into the
new FreeBSD Diary website.
IPsec is a smart way to secure communications. It prevents others from sniffing
your traffic. I like using it for my wireless network.
To be fair, my WLAN consists of one laptop. But that's so far. More may join later.
I first wrote about Wireless IPsec late last year.
In that article, I describe how to create a gateway for your WLAN and implement IPsec
to secure the communications. Since then, it's been working flawlessly.
However, it's time to move the gateway to a new box. The existing gateway is a
Pentium P150. It's a fine machine. Never had a problem with it! However, I have too
many machines. I recently got my hands on a Dell Optiplex GX-260.
This box will replace two other boxes: the WLAN gateway box and my FreeBSD 5.4 box
that I use to build world for my laptop. It will also be used for a test box for
the Bacula project. I put a SCSI card into it
and plan to attach an external DLT drive.
Functions to be moved
The following services need to be implemented on this box:
Commenting out that line ensures that named listens on
all available IP addresses. You can restrict it if you need. See the comments in
the configuration file for details.
An easy move. I copied /etc/ipsec.conf
to the new system. A chown root:wheel was done.
I also added
ipsec_enable="YES" to /etc/rc.conf.
A bit trickier. I failed to set the owner right on the files and so racoon
did not start up properly. The file I needed where in
/usr/local/etc/racoon/. I copied over
psk.txt and racoon.conf. You'll also
No problems here. I copied
/usr/local/etc/dhcpd.conf from one system to the other
and ensured it was chown root:wheel. Remember to add
dhcpd_enable="YES" to /etc/rc.conf.
For debugging purposes, you might want to
review the steps I went through when doing my first