280 reputation
17
bio website develer.com
location Florence, Italy
age 35
visits member for 3 years, 11 months
seen Mar 22 at 19:29

May
28
awarded  Popular Question
Jan
28
accepted How to convert proxy ARP setup to IPv6?
Jan
28
comment How to convert proxy ARP setup to IPv6?
Thanks! Does it work also if the default gateway for the network is a link local address (fe80::1)? IOW, can I use proxy NDP to insert a transparent proxy within a link-local eth segment, so that I can still configure fe80::1 as default gateway on all computers, and at the same time intercept all the traffic?
Jan
27
asked How to convert proxy ARP setup to IPv6?
Nov
5
comment Large VPN network (~600 servers) with OpenVPN
Sorry I don't follow, which specific 100Mbit/s interface was being overloaded?
Nov
5
asked Large VPN network (~600 servers) with OpenVPN
Oct
15
awarded  Yearling
Oct
1
comment OpenVPN port-share with apache 443/10443 not working
Is your public IP directly assigned to a network interface on the server, right? You're not behind some sort of 1:1 NAT?
Sep
14
awarded  Commentator
Sep
14
comment Radius feedback from AP to WiFi client
Uhm. If you manually run radiusd -X, you get full debugging trace (no passwords). Can you please produce two traces, one for a valid authentication and one for a wrong authentication, and the publish them (or at least their diff)?
Sep
13
comment Radius feedback from AP to WiFi client
Try "default_eap_type = peap" at the beginning of the file. Re the certificate: the wifi standard does not allow to identify the server BUT with a certificate. Without the server certificate, your passwords can be easily stolen. Notice that I'm not speaking of generating a certificate per each client; just the server certificate, to be installed on each client, and then you can still authenticate with username/password.
Sep
12
comment Radius feedback from AP to WiFi client
BTW you should create a CA certificate on the server and install it on the clients. Otherwise, an attacker can easily setup an AP with the same ESSID of your network, and clients will send him the passwords (actually, MSCHAPv2 requires a challenge-response, but it's old stuff that can be broken in minutes, see en.wikipedia.org/wiki/…)
Sep
12
comment Radius feedback from AP to WiFi client
I'm not aware of any TTLS+PEAP protocol. My understanding is that you are using PEAPv0 + MSCHAPv2. Can you please post a link to the full eap.conf you are using?
Sep
11
answered ssh + tinyproxy: poor performance
Sep
11
comment SSH in script without user interaction
It's easier to use "ssh-copy-id myserver" to install the public key onto the server
Sep
11
revised SSH tunneling via the router/gateway
added 6 characters in body
Sep
11
answered Radius feedback from AP to WiFi client
Sep
11
awarded  Teacher
Sep
10
answered SSH tunneling via the router/gateway
Sep
5
comment Connecting to an analog dial-in PSTN terminal without a PSTN line
Thank you, I managed to login through a GSM phone (even if not the first one I tried).The callback approach is also interesting even if I am not sure I can actually make calls through that landline (will have to check for the billing, etc:), as most (all?) dialup ISP in Italy nowadays directly bills through special phone numbers, sometimes without even requiring a registration.