L2TP IPSec VPN with npppd on OpenBSD

Table of Contents

• Introduction
• Enable Daemons
• Kernel Configuration
• Configure isakmpd
• Configure npppd
• Configure pf
• Starting the VPN
• macOS Setup
• iOS Setup
• Conclusion
• Further Reading

Introduction

If you're even slightly security- or privacy-conscious, which in the present era of Big Data and tech oligarchs is a provident predilection, you should, if not already, be using a VPN (Virtual Private Network). And I don't mean one of the oft-advertised commercial offerings you see plastered about social media—but one that you control. Where every outgoing request that leaves your computer is tunneled through an encrypted private network owned and operated by you. Fortunately, the …

more ...

---

OpenBSD DNS Server with unbound and nsd

Table of Contents

• Introduction
• Start Unbound
• Configure DNSSEC
• NSD Configuration
• DNSCrypt
• Further Reading

Introduction

The default installation of OpenBSD comes with both unbound(8) and nsd(8); unbound is a validating, recursive, and caching DNS resolver that provides DNSSEC validation, while nsd is an authoritative name server that holds DNS records. The combination of the two running locally, means that name server lookups (i.e., requests to resolve domain names into IP addresses and vice versa) can be handled locally without being sent upstream to your ISP or another public name server such as Google. This almost completely prevents snooping or tampering …

more ...

---