Ein toller Tag ;-)

... soooo schön ...

Einfach nur schön ;-)

... mit meiner Isa ...

Amrum ...

... ein wahrer Traum ;-)

Mickel in Urlaub ;-)

... soooo eine tolle Erfahrung!

Donnerstag, 23. August 2018

Kerberos

Kerberos - Single Sign-on in gemischten Linux/Windows-Umgebungen


https://www.dpunkt.de/buecher/10822/9783898644440-kerberos.html

September 2011, 558 Seiten, Broschur
dpunkt.verlag
ISBN Print: 978-3-89864-444-0
45 EUR

Inhaltsverzeichnis

Sehr interessant - besonders, um die SSO-Dinge im SAP mit MIT Kerberos zu verstehen ;-)
Share:

Mittwoch, 22. August 2018

Apfelmaennchen

Apfelmännchen



https://www.heise.de/newsticker/meldung/Zahlen-bitte-Die-Feigenbaum-Konstante-beschreibt-Ordnung-im-Chaos-4141733.html

 

Great 3D-Anmation ;-)

https://www.theverge.com/2012/5/14/3014698/assembly-4k-demoscene-fractals

Really 4K (50MBit):

720p:

https://www.youtube.com/watch?v=UjgRGDhgehA

http://www.pouet.net/prod.php?which=59086

Apfelmännchen Bilder @ Google:

Apfelmännchen

https://www.google.com/search?q=apfelm%C3%A4nnchen+bilder&sxsrf=APq-WBu82UxOdrWNkwm3GSIz0qJmBwNKaQ:1650142722510&source=lnms&tbm=isch&sa=X&ved=2ahUKEwi76rbWvJn3AhVoR_EDHUwuDYIQ_AUoAXoECAEQAw&biw=1920&bih=858&dpr=1

Fractals:

https://www.google.com/search?q=fractals&tbm=isch&ved=2ahUKEwi5rtSivpn3AhXQyqQKHYbUBuUQ2-cCegQIABAA&oq=fractals&gs_lcp=CgNpbWcQAzIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBAgAEB4yBAgAEB4yBAgAEB4yBAgAEB4yBAgAEB4yBAgAEB46BwgjEO8DECc6CAgAELEDEIMBOgQIABBDOgQIABADOgcIABCxAxBDOggIABCABBCxAzoKCAAQsQMQgwEQQ1DiC1jZIGDgJGgBcAB4AIABYYgBqAaSAQIxMJgBAKABAaoBC2d3cy13aXotaW1nwAEB&sclient=img&ei=ri9bYrmfMdCVkwWGqZuoDg&bih=858&biw=1920

Mandelbrot:

https://www.google.com/search?q=Mandelbrot&tbm=isch&ved=2ahUKEwiMiJPPv5n3AhXvEmMBHXHPD9sQ2-cCegQIABAA&oq=Mandelbrot&gs_lcp=CgNpbWcQAzIECAAQQzIICAAQgAQQsQMyBQgAEIAEMgQIABBDMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEOgcIIxDvAxAnOgQIABAeOgQIABADOgcIABCxAxBDOgsIABCABBCxAxCDAVDqCFjFGGCwIGgAcAB4AIABhQGIAewHkgEDNy40mAEAoAEBqgELZ3dzLXdpei1pbWfAAQE&sclient=img&ei=GDFbYoycIe-ljLsP8Z6_2A0&bih=858&biw=1920





( Apfelmännchen, Apfelmaennchen, Fractal , Fractals, Mandelbrot, Feigenbaum, Apfel )


Share:

Samstag, 18. August 2018

SoftEther VPN (&OpenVPN)

SoftEther VPN

 
The VPN Server, that "just supports everything" and works great and is open source ;-)

https://www.softether.org 

 
Compare "old" VPNs with SSL VPNs:

Architecture

Features

  • Free for Server & Clients
  • Open Source (!)
  • Supported Protocols
    • SoftEther SSL VPN (proprietary)
    • L2TP/IPSec
    • MS-SSTP SSL
    • OpenVPN
  • OS for 
    • Servers: Linux & Windows
    • Clients: Windows (Intel & ARM), Linux, Mac OS X, iOS, Android & Windows Mobile

SoftEther VPN <=> VpnGate Service

SoftEther VPN is the VPN-Server & Client Technology. This is just the Server and the Client in order to setup the VPN yourself. If you now are located in an area where Internet is partly blocked or you want to watch TV with geo-coding, you can use the VpnGate Service in order to "get through" ;-)
VpnGate uses the SoftEther Servers and Clients, but a lot of people worldwide are providing this as a service for you.

http://106.255.46.237:63913/en/  <<< free VpnGates in the web ;-)

Example VpnGate Server:
https://opengw.net

Username: vpn, Password: vpn
Pre-shared Key (Secret): vpn

http://106.255.46.237:63913/en/howto_l2tp.aspx

https://www.vpngate.net/en/howto_softether.aspx

Firewall "Hacks" via DNS & ICMP


Support in Europe:

TDT AG, 84051 Essenbach

http://www.tdt.de/lng/en/softether-vpn.html
http://www.tdt.de/lng/en/products/vpn-gateways-loadbalancer.html

LEIBOLD, Nürnberg 

https://www.leibold-it.de/portfolio/softether
https://www.leibold-it.de/wp-content/uploads/2015/12/flyervpn.pdf


Installation SoftEther

https://www.atlantic.net/dedicated-server-hosting/how-to-install-softether-vpn-server-on-ubuntu-22-04/

https://www.softether-download.com/en.aspx?product=softether

 

root

apt-get install build-essential gnupg2 gcc make

Download ... or similar like this:
wget http://www.softether-download.com/files/softether/v4.38-9760-rtm-2021.08.17-tree/Linux/SoftEther_VPN_Server/64bit_-_Intel_x64_or_AMD64/softether-vpnserver-v4.38-9760-rtm-2021.08.17-linux-x64-64bit.tar.gz

 

cd /sapcd/softether

tar -xvf softether-vpnserver-v4.43-9799-beta-2023.08.31-linux-x64-64bit.tar.gz

cd /sapcd/softether/vpnserver

make

cd ..
mv vpnserver /usr/local/

cd /usr/local/vpnserver/
chmod 600 *
chmod 700 vpnserver
chmod 700 vpncmd

vi /etc/init.d/vpnserver

#!/bin/sh
# chkconfig: 2345 99 01
# description: SoftEther VPN Server
DAEMON=/usr/local/vpnserver/vpnserver
LOCK=/var/lock/subsys/vpnserver
test -x $DAEMON || exit 0
case "$1" in
start)
$DAEMON start
touch $LOCK
;;
stop)
$DAEMON stop
rm $LOCK
;;
restart)
$DAEMON stop
sleep 3
$DAEMON start
;;
*)
echo "Usage: $0 {start|stop|restart}"
exit 1
esac
exit 0


mkdir /var/lock/subsys
chmod 755 /etc/init.d/vpnserver


Start & Stop the SoftEther VPN

/etc/init.d/vpnserver restart
/etc/init.d/vpnserver start
("start" can be run many times ...)
/etc/init.d/vpnserver stop

Logs ...

cd /usr/local/vpnserver/server_log 

e.g.:
view vpn_20250325.log

 

update-rc.d vpnserver defaults


vi /usr/local/vpnserver/vpn_server.config

... this is done, in order to reduce  many dns requests ...

 declare DDnsClient
        {
                bool Disabled false =>true
                byte Key dZk...

=>

 declare DDnsClient
        {
                bool Disabled true
                byte Key dZk...



(as 443 is used already, we have to change this in order to get the SoftEther Server up & running ...)

                declare Listener0
                {
                        bool DisableDos false
                        bool Enabled true
                        uint Port 443
                }
=>

 declare Listener0
                {
                        bool DisableDos false
                        bool Enabled true
                        uint Port 992
                }

declare Listener1
                {
                        bool DisableDos false
                        bool Enabled true
                        uint Port 1194
                }
declare Listener2
                {
                        bool DisableDos false
                        bool Enabled true
                        uint Port 5555
                }
declare Listener3
                {
                        bool DisableDos false
                        bool Enabled true
                        uint Port 5556
                }

chmod 777 /var/lock/subsys

 

SSL Certificate Update

... Copy & convert the letsencrypt for SoftEther:

cd /etc/letsencrypt/live/vpn.gueldenpfennig.info

openssl pkcs12 -export -out vpn.gueldenpfennig.info.pfx -inkey privkey.pem -in  fullchain.pem
(No PIN!) 

The import of this certificate vpn.gueldenpfennig.info.pfx happens via the SoftEther Server-Manager.
This is a 4096 Bit Certificate right now - this is supported by SofEther 5 ONLY (4.x does support 1024 & 2048 only)

 

Web-Interface - General

https://vpn.gueldenpfennig.info:5555

Web-Interface - Admin (pretty BAD - please use Win-Admin Tool below ...)

https://vpn.gueldenpfennig.info:5555/admin/default/
(Login with pwd of root BUT without user!!!)

 

Admin via Windows-Admin Tool - "VPN Server Manager"

VPN Server Manager - Admin pwd: like root ... (just the pwd, not the user!)

Dynamic IP for the Server: (DynDns - not really needed) <<< deactivated in the meantime! (bool Disabled true - can only be reactivated again with changing the config - admin tool is gray on this side now)
vpn918606294.softether.net

DNS Key: dZkdFx+2ztqicOZaIVI/YKJ5sC0=

VPN Azure Cloud VPN Service activated: <<< deactivated in the meantime as well! (could be activated via Admin Tool again)
vpn918606294.vpnazure.net
=>
https://www.vpnazure.net/en/

VPN User: Volker
pwd - like root ...

Encryption:
AES128-SHA => AES256-SHA256

Manage Virtual Hub -> Virtual NAT and Virtual DHCP Server (SecureNAT)
- Enable SecureNAT
- SecureNAT Configuration for "real VPN":
  - Adjust the Network: 192.168.217.x
  - DNS-Server: 45.89.127.31
- SecureNAT Configuration for "Pi-hole ONLY":
  - Adjust the Network: 192.168.227.x
  - DNS-Server: 45.89.127.31

Setup Windows VPN:

vpn918606294.softether.net:5555 <<< deactivated - see above

vpn.gueldenpfennig.info:5555

Official certificate should be installed ... perhaps the same one as for OpenConnect?
=> then Windows VPN will work without changing the trusted certificates ...

Setup Softether VPN:

Install Softether Client

vpn.gueldenpfennig.info:5555
or
vpn918606294.softether.net:5555

Certificates are not checked by default

Setup L2TP VPN: (e.g. iPhone)

PSK in Keepass Volker - "Softether - PSK IPsec - for iPhone L2TP IPsec"

Setup the client ... unfortunately, it did not work ... perhaps because of wrong certificate ...

vpn.gueldenpfennig.info:5555




#

Share:

Sonntag, 5. August 2018

Michaelshof

Michaelshof Sammatz - Archehof



http://www.michaelshof-sammatz.de

Öffnungszeiten Café am Michaelshof
Mo-Fr 8.00 - 19.00
Sa 8.00 - 19.00
Sonn- & Feiertag 9.30 - 19.00

Adresse:
Michaelshof Sammatz
Im Dorfe 11
29490 Sammatz
Tel: 05858 97030
Mail: info@sammatz.de

( arche hof )

Share:

Villa Ruebe

Café Villa Rübe

... leider geschlossen ... aber ggf. weitere Neuigkeiten auf den Homepages ;-)


http://www.villa-ruebe.de

https://www.facebook.com/villaruebe

Adresse:
Villa Rübe
In den Wiesen 2
29575 Eddelstorf
Tel. 05807 – 151 322 oder
0175 – 568 93 33
Share:

Donnerstag, 2. August 2018

Schnecke

Restaurant Schnecke im Best Western Residenz-Hotel


http://www.residenzhotel.de/seiten/gastronomie.html


Adresse:
Best Western Plus Residenzhotel Lüneburg
Munstermannskamp 10
21335 Lüneburg
Tel: 04131 75 99 10
E-Mail: info@residenzhotel.de

Kein Ruhetag
Share:

Blog-Archiv

Powered by Blogger.

Blog Archive

Blogger templates