<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Packt Publishing has a book about FreeSWAN (don't use that) which is
almost all applicable to LibreSWAN (do use this, it's a newer fork).<br>
<br>
Easiest is to set up a tunnel with PSKs, more secure is with RSA
keys or X509 certs.<br>
<br>
Alex<br>
<br>
<div class="moz-cite-prefix">On 30/06/16 19:20, Chris Horry wrote:<br>
</div>
<blockquote
cite="mid:51177c9c-baeb-eb16-3a52-da9af742bd20@gmail.com"
type="cite">
<pre wrap="">
On 06/30/2016 13:34, Alex Crow wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I'd suggest changing IP as this practice is
a) a violation of trust, forcing you to use a potentially compromised
resource you have no control over
b) a clear violation of net-neutrality
c) a violation of standards (as it's probably one of those that instead
of returning NXDOMAIN as required sends you to an advertising page.
)
</pre>
</blockquote>
<pre wrap="">
Tell me about it. My ISP and I are having a pitched battle about it
now. Unfortunately my options are limited in my current area but at
least it's not Comcast!
</pre>
<blockquote type="cite">
<pre wrap="">I'm pretty sure you /can/ configure BIND to work like that. I should
imagine you could set up forwarders to TCP-based DNS servers.
The other option is to get a DNS server set up on a VPS and tunnel your
requests to it via IPSEC.
</pre>
</blockquote>
<pre wrap="">
Sounds like a good idea, time to learn IPSEC!
Thanks,
Chris
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
<br><pre>
--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.
"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).
</pre><br>
</body>
</html>