This techniqe is headless so will we connect to the virtual-pc with vnc, the network device is bridged with the main connect interface ( it will be changed because of changing of the topology )
The script analise the enviroment to determine network and virtual machine state but this detection is very poor. I want to rewrite it with qemu-kvm pidfile function.

And now the function:
#!/bin/bash
VNETBR="vnet0"
VNETIF="tap0"

CHECK_VIRT=$(ps -A | grep qemu-kvm)
if [ "$CHECK_VIRT" == "" ]; then
echo “start virtual machine”
$qemu -hda $hda -m $memory -boot c -name $name -vnc :$vncport -net nic -net tap,ifname=$NETIF,script=no >/dev/null 2>&1 &
CHECK_VIRT=$(ps -A | grep qemu-kvm)
echo “details $CHECK_VIRT”
else
echo “virtual machine already run : “$CHECK_VIRT” ”
fi
;;
stop)
CHECK_VIRT=$(ps -A | grep qemu-kvm)
echo “shutdown $CHECK_VIRT”
killall qemu-kvm
;;
restart)
CHECK_VIRT=$(ps -A | grep qemu-kvm)
echo “shutdown $CHECK_VIRT”
killall qemu-kvm
sleep 5
echo “start virtual machine”
$qemu -hda $hda -m $memory -boot c -name $name -vnc :$vncport -net nic -net tap,ifname=$NETIF,script=no >/dev/null 2>&1 &
CHECK_VIRT=$(ps -A | grep qemu-kvm)
echo “details $CHECK_VIRT”
;;
status)
CHECK_VIRT=$(ps -A | grep qemu-kvm)
if [ "$CHECK_VIRT" == "" ]; then
echo “virtual machine stopped”
else
echo “details $CHECK_VIRT”
fi
;;
*)
echo “Usage {start|stop|restart|status}”
exit 1
esac

It’s the 2nd time in the mounth where I get a pozitive feedback from a girl:
” That was a facebook profile-pucture like face! ”
o.O

There is a forum thread at hup.hu where somebody ask for a good router device or software. I write 3 or 4 post with router recommendation and good to know features but no answer to my post. When an other people write there alway an answer. What is wrong man?! o.O

Today I have been doing an virtual enviroment and I configured a non-volatile bridge:

#yum install brdige-utils
With runtime command it’s very short
brctl addbr vnet0
brctl addif vnet0 eth0

It you want to impement it with network-script, first configure bridge interface ( very simple setting, maybee require some tuning )

DEVICE=vnet0
TYPE=Bridge
ONBOOT=yes
BOOTPROTO=dhcp
DELAY=0

There device name and witch in online at boot time and ask an dhcp-server to get an address.
And after that, configure the real interface:

DEVICE=eth0
BRIDGE=vnet0
TYPE=ethernet
HWADDR=44:1E:A1:3E:E1:C4
ONBOOT=yes

restart networking /etc/init.d/network restart ( it’s and oldschool network reload ) and take a look around:

brctl show
bridge name bridge id STP enabled interfaces
vnet0 8000.441ea13ee1c4 no eth0
#ip addr show
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
2: eth0: mtu 1500 qdisc mq qlen 1000
link/ether 44:1e:a1:3e:e1:c4 brd ff:ff:ff:ff:ff:ff
8: vnet0: mtu 1500 qdisc noqueue
link/ether 44:1e:a1:3e:e1:c4 brd ff:ff:ff:ff:ff:ff
inet 172.21.57.114/24 brd 172.21.57.255 scope global vnet0

The documentation of networking on centos system : /usr/share/doc/initscripts

At home there was a new little dog. She is a wolfkiller baby with big-big coat. Her name is Endre. Yes she got a boy name but she is a girl.

Was a good day. I hate drive at night but there wasn’t problems on the road when we come back.

I built a lan system with windows PDC for windows XP systems to file sharing. Designed a lan system, with network printers and get some good non configurable network switches for free to my old primary school.

And now without ANY ask for an offer from me an other man will work with it and does the system maintanance, of course he will get money for this job.
So the rsync is running, clearing the system from guides. I write the school data to a disk, and after that please give me a blow yob dear mayor.

It’s a good choise use and test firewalls on virtual enviroment. You are able to change the default route of the host network, and with tap interface make nat across the virtual enviroment or check connections on the other way.

User feeling of IPfire is funny. It isn’t the same feeling of the pfsense.
Pfsense is a network device. The gui is designed for it. The feeling is “Hey, it’s a netwok device, keep it in your mind “.
IPfire gui is scream about there is a linux based gui. Undeliberate menus and config opcions. Pfsense much more clear and It’s based on bsd.
I believe for firewall functions a bsd based system is better.

I don’t give up, there are some very good package and a lot of learning skill about linux system, but I will not change my pfsense router.

To test functions I want to set:
-proxy with content filter
-openvpn connections
-firewall
-torrent and file storeage functions
-snort based IDS

Sokat voltam azon az oldalon, akit vertek. De tegnap este, ököllel szembenézve nem volt bennem félelem. Persze még most is ráz az ideg. Durva volt. Durva lehetett volna. De végül ennyiben maradt.
Rendőr persze nem jött. Ki tudja, miért. Fura világ. A megállapításaim megvannak. Önuralomból elég jó kegyet kaptam. Holnap majd ax ideg is kimrhy kettlebellen. Remélem.

IAS konfig:

1 connection reques policies
-drop exiting policies
-add new:
client-vendor matches “Radius standard”

2. Remote Access Policies
-add new
custom
windows group
grand remote access
edit
authentication
select pap,spap, unselect ms-chap & ms-chap v2
advanced
drop ppp
add vendor-specific ( vendor code 3224 )
-yes, it conforms
configure attribute
vendor assigned attribute number ( 3 )
attribute format ( string )
value external ( group name @juniper device )

3. Add client ( radius standard )

Juniper config:
1. configure radius server
set auth-server "radius_teszt" id 1
set auth-server "radius_teszt" server-name "ip-address"
set auth-server "radius_teszt" account-type auth xauth
set auth-server "radius_teszt" radius secret "shared secret"

2. configure external group ( groupname the external value configured @
remote access policy )
set user-group "proba" id 1
set user-group "proba" location external
set user-group "proba" type auth xauth

You can flavour it with timeout or other parameter you want. It’s just a working tutorial to use it with firewall filters.