This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
vpn:openbsd [2019/11/15 05:06] jrmu |
vpn:openbsd [2020/06/14 03:57] (current) jrmu |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== OpenBSD 6.6 on amd64 ====== | + | ====== OpenBSD 6.6 on amd64 ====== |
| Add this to /etc/iked.conf (replace 203.0.113.5 with your server's public IP address): | Add this to /etc/iked.conf (replace 203.0.113.5 with your server's public IP address): | ||
| Line 90: | Line 90: | ||
| <code> | <code> | ||
| - | $ awk '!/^ *#/ && NF' hosts # taken from stevenblack's list | + | $ awk '!/^ *#/ && NF' hosts > newhosts # taken from stevenblack's list |
| $ sed 's/0\.0\.0\.0 \([^#]*\).*$/local-zone: "\1" static/' newhosts > newhosts2 | $ sed 's/0\.0\.0\.0 \([^#]*\).*$/local-zone: "\1" static/' newhosts > newhosts2 | ||
| - | $ sed 's/ "/"' newhosts2 > newhosts3 | + | $ sed 's/ "/"/' newhosts2 > newhosts3 |
| </code> | </code> | ||
| Manually check for malformed entries, then put this into /var/unbound/etc/unbound.conf. | Manually check for malformed entries, then put this into /var/unbound/etc/unbound.conf. | ||
| + | |||
| + | Does this need to be added to /etc/sysctl.conf: | ||
| + | |||
| + | <code> | ||
| + | net.inet.ip.forwarding=1 | ||
| + | net.inet.ipcomp.enable=1 | ||
| + | net.inet.esp.enable=1 | ||
| + | net.inet.ah.enable=1 | ||
| + | </code> | ||
| + | |||
| To start iked, | To start iked, | ||
| Line 110: | Line 120: | ||
| $ doas iked -6 -dv | $ doas iked -6 -dv | ||
| </code> | </code> | ||
| + | |||
| + | Note: You may consider using blacklists from here: | ||
| + | https://dsi.ut-capitole.fr/blacklists/index_en.php | ||
| + | https://github.com/4skinSkywalker/anti-porn-hosts-file/blob/master/HOSTS.txt | ||
| + | https://mirror1.malwaredomains.com/files/justdomains https://blocklist.site/app/dl/piracy https://blocklist.site/app/dl/torrent https://mirror1.malwaredomains.com/files/justdomains https://github.com/mmotti/pihole-regex/blob/master/regex.list https://blocklist.site/app/dl/porn | ||
| + | |||
| + | Banned networks: | ||
| + | |||
| + | irc.p2p-network.net | ||
| + | irc.gazellegames.net | ||
| + | irc.nzbs.in | ||