<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" version="2.0">

<channel>
	<title>AndyB</title>
	
	<link>http://andrewbevitt.com</link>
	<description>shakin' up noth-ink</description>
	<lastBuildDate>Mon, 26 Sep 2011 03:32:09 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/andrewbevitt" /><feedburner:info xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" uri="andrewbevitt" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><item>
		<title>Sacrifice – A Summary</title>
		<link>http://andrewbevitt.com/2010/07/31/sacrifice-a-summary/</link>
		<comments>http://andrewbevitt.com/2010/07/31/sacrifice-a-summary/#comments</comments>
		<pubDate>Sat, 31 Jul 2010 13:33:43 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[on a hill]]></category>

	<!-- AutoMeta Start -->
	<category>sacrifice</category>
	<category>burning</category>
	<category>lord</category>
	<category>bush</category>
	<category>alive</category>
	<category>summary</category>
	<category>blesses</category>
	<category>expecting</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=339</guid>
		<description><![CDATA[<br/><p>We had a prayer and fast today on Sacrifice. Here is a summary of the thoughts:</p> Jesus&#8217; sacrifice made way for us to have the promises of God, keep them by holding on to them. A sacrifice is made out of love, expecting nothing, fast with that same love; but We understand the Lord blesses [...]]]></description>
			<content:encoded><![CDATA[<br/><p>We had a prayer and fast today on Sacrifice. Here is a summary of the thoughts:</p>
<ul>
<li>Jesus&#8217; sacrifice made way for us to have the promises of God, <strong>keep them by holding on to them</strong>.</li>
<li>A sacrifice is made out of love, expecting nothing, fast with that same love; but</li>
<li>We understand the Lord blesses and so the more you choose the Lord the better off you will be (i.e. sacrifice is in your best interest).</li>
<li>Any sacrifice we make is tiny in comparison to those who loved God in the Bible.</li>
<li>The burning bush that God spoke to Moses through was burning, but alive! We are to be a living sacrifice for the Lord, burning for him, shining that flame to all who see/hear. Alive and on fire for the Lord!</li>
</ul>
<p>The analogy of our lives as the burning bush was quite insightful!</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2010/07/31/sacrifice-a-summary/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Shine Jesus Shine</title>
		<link>http://andrewbevitt.com/2010/07/20/shine-jesus-shine/</link>
		<comments>http://andrewbevitt.com/2010/07/20/shine-jesus-shine/#comments</comments>
		<pubDate>Tue, 20 Jul 2010 03:28:21 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[on a hill]]></category>

	<!-- AutoMeta Start -->
	<category>shine</category>
	<category>light</category>
	<category>taller</category>
	<category>miraculously</category>
	<category>moses</category>
	<category>jehovah</category>
	<category>kids</category>
	<category>hearing</category>
	<category>shine</category>
	<category>light</category>
	<category>taller</category>
	<category>miraculously</category>
	<category>moses</category>
	<category>jehovah</category>
	<category>kids</category>
	<category>hearing</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=336</guid>
		<description><![CDATA[<br/><p>We&#8217;ve had an awesome week this last 7 days at the NSW Kids Camp and following weekend. Seeing 7 people get baptised, seeing 5 people miraculously fill people with the Holy Spirit and speak in tongues, hearing the comments from people that we seem taller&#8230; the light that shone from Moses&#8217; face after he spoke [...]]]></description>
			<content:encoded><![CDATA[<br/><p>We&#8217;ve had an awesome week this last 7 days at the NSW Kids Camp and following weekend. Seeing 7 people get baptised, seeing 5 people miraculously fill people with the Holy Spirit and speak in tongues, hearing the comments from people that we seem taller&#8230; the light that shone from Moses&#8217; face after he spoke to Jehovah is shining out of us and people are seeing it just as we are seeing him &#8220;confirm his Word with signs following&#8221;.</p>
<p>Let&#8217;s get up on a hill and let that light shine!</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2010/07/20/shine-jesus-shine/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PuTTY gethostbyname: unknown error</title>
		<link>http://andrewbevitt.com/2010/02/04/putty-gethostbyname-unknown-error/</link>
		<comments>http://andrewbevitt.com/2010/02/04/putty-gethostbyname-unknown-error/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 06:04:37 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Work]]></category>
		<category><![CDATA[putty]]></category>
		<category><![CDATA[windows7]]></category>

	<!-- AutoMeta Start -->
	<category>putty</category>
	<category>gethostbyname</category>
	<category>executable</category>
	<category>unable</category>
	<category>error</category>
	<category>unknown</category>
	<category>executed</category>
	<category>invalid</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=332</guid>
		<description><![CDATA[<br/><p>I had an issue using PuTTY (free Windows SSH client) this afternoon when trying to login to a work server. The error message seemed very odd:</p> <p>Unable to open connection to andrewbevitt.com<br /> gethostbyname: unknown error</p> <p>OR BY IP ADDRESS</p> <p>Unable to open connection to 220.233.157.156<br /> Network error: Invalid argument</p> <p>Turns out that it&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<br/><p>I had an issue using PuTTY (free Windows SSH client) this afternoon when trying to login to a work server. The error message seemed very odd:</p>
<p>Unable to open connection to andrewbevitt.com<br />
gethostbyname: unknown error</p>
<p>OR BY IP ADDRESS</p>
<p>Unable to open connection to 220.233.157.156<br />
Network error: Invalid argument</p>
<p>Turns out that it&#8217;s a Windows 7 feature. I had the PuTTY executable sitting on my Desktop as part of my domain account so apparently something executed out of $HOMEDIR\* gets limited.</p>
<p>Solution: Copy the executable to a local disk partition.</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2010/02/04/putty-gethostbyname-unknown-error/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Finished the Rickshaw Run</title>
		<link>http://andrewbevitt.com/2010/01/28/finished-the-rickshaw-run/</link>
		<comments>http://andrewbevitt.com/2010/01/28/finished-the-rickshaw-run/#comments</comments>
		<pubDate>Thu, 28 Jan 2010 05:52:35 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[rickshaw]]></category>
		<category><![CDATA[travel]]></category>

	<!-- AutoMeta Start -->
	<category>final</category>
	<category>thoughts</category>
	<category>andrew</category>
	<category>fantastic</category>
	<category>thing</category>
	<category>read</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=329</guid>
		<description><![CDATA[<br/><p>You can read my final thoughts at <a href="http://andrewbevitt.com/rickshawrun/updates/159-final-thoughts-from-andrew">Final Thoughts from Andrew</a>. Truly a fantastic thing to have done.</p>]]></description>
			<content:encoded><![CDATA[<br/><p>You can read my final thoughts at <a href="http://andrewbevitt.com/rickshawrun/updates/159-final-thoughts-from-andrew">Final Thoughts from Andrew</a>. Truly a fantastic thing to have done.</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2010/01/28/finished-the-rickshaw-run/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Rickshaw Run</title>
		<link>http://andrewbevitt.com/2009/12/21/rickshaw-run/</link>
		<comments>http://andrewbevitt.com/2009/12/21/rickshaw-run/#comments</comments>
		<pubDate>Mon, 21 Dec 2009 05:36:45 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[rickshaw]]></category>
		<category><![CDATA[travel]]></category>

	<!-- AutoMeta Start -->
	<category>rickshaw</category>
	<category>mercycorps</category>
	<category>nepal</category>
	<category>rickshawrun</category>
	<category>auto</category>
	<category>helping</category>
	<category>maiti</category>
	<category>india</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=324</guid>
		<description><![CDATA[<br/><p>This is a copy of the email I sent out to everyone about the Rickshaw Run.</p> <p>Hi All,</p> <p>As most of you know: in January myself and 5 friends will be driving an auto-rickshaw from Pokhara Nepal to Cochin India &#8211; a distance of roughly 3000km (equivilent of Sydney to Perth). If you don&#8217;t know, [...]]]></description>
			<content:encoded><![CDATA[<br/><p>This is a copy of the email I sent out to everyone about the Rickshaw Run.</p>
<p>Hi All,</p>
<p>As most of you know: in January myself and 5 friends will be driving an auto-rickshaw from Pokhara Nepal to Cochin India &#8211; a distance of roughly 3000km (equivilent of Sydney to Perth). If you don&#8217;t know, this is an auto-rickshaw (aka tuk tuk):</p>
<p><img src="http://andrewbevitt.com/wp-content/uploads/2009/12/autorickshaw-300x225.jpg" alt="Auto Rickshaw" /></p>
<p>We have two &#8216;shaws between the 6 of us. We have dubbed them:<br />
The Bull-dosa; and<br />
Daal-Lemma</p>
<p>An auto-rickshaw has an average cruising speed of 35km/h so this is going to take some time. And they are, erm, somewhat totally unsuitable for the trip we are taking them on. However we have supreme confidence in their ability to deliver adventure!</p>
<p>On a serious note: The organisers of this event ask teams to fundraise for a few charity/humanitarian causes. This time the total was 1000 pounds (~AU$1800). The charities are Maiti Nepal and MercyCorps in India.</p>
<p>Maiti Nepal exists to offer help, support, protection and rehabilitation to Nepali girls and women who are victims, or have been victims in the past of crimes such as domestic violence, trafficking for flesh trade, child prostitution, child labour and various forms of exploitation and torture.</p>
<p>MercyCorps is a team of 3700 professionals helping turn crisis into opportunity for millions around the world.  MercyCorps exists to alleviate suffering, poverty and oppression by helping people build secure, productive and just communities.</p>
<p>If you feel like giving a bit please use the donation section of the website. Donations should be made by February 2010 so there is still plenty of time.</p>
<p>Now because everyone has better things to do than read email I&#8217;ll let you go.</p>
<p>Remember to checkout our website: <a href="http://andrewbevitt.com/rickshawrun/">http://andrewbevitt.com/rickshawrun/</a><br />
And for information on the event: <a href="http://rickshawrun.theadventurists.com/">http://rickshawrun.theadventurists.com/</a></p>
<p>We&#8217;ll keep the site up-to-date with our progress.</p>
<p>Thank you for your comments of &#8220;you&#8217;re crazy&#8221;!</p>
<p>Andrew</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/12/21/rickshaw-run/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Tutorial: DD-WRT RADIUS Authentication w/ Server 2008 R2</title>
		<link>http://andrewbevitt.com/2009/12/07/tutorial-dd-wrt-radius-authentication-w-server-2008-r2/</link>
		<comments>http://andrewbevitt.com/2009/12/07/tutorial-dd-wrt-radius-authentication-w-server-2008-r2/#comments</comments>
		<pubDate>Mon, 07 Dec 2009 06:15:42 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Work]]></category>
		<category><![CDATA[dd-wrt]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[radius]]></category>
		<category><![CDATA[server2008]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=295</guid>
		<description><![CDATA[<br/><p>I&#8217;ve just put up a new tutorial (strangely enough about the title)! You can read it <a href="http://andrewbevitt.com/tutorials/dd-wrt-radius-authentication-w-server-2008-r2/">here</a>.</p>]]></description>
			<content:encoded><![CDATA[<br/><p>I&#8217;ve just put up a new tutorial (strangely enough about the title)! You can read it <a href="http://andrewbevitt.com/tutorials/dd-wrt-radius-authentication-w-server-2008-r2/">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/12/07/tutorial-dd-wrt-radius-authentication-w-server-2008-r2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WDS Windows 7 and Server 2008 R2</title>
		<link>http://andrewbevitt.com/2009/11/05/wds-windows-7-and-server-2008-r2/</link>
		<comments>http://andrewbevitt.com/2009/11/05/wds-windows-7-and-server-2008-r2/#comments</comments>
		<pubDate>Thu, 05 Nov 2009 05:51:24 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Work]]></category>
		<category><![CDATA[server2008]]></category>
		<category><![CDATA[wds]]></category>
		<category><![CDATA[windows7]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/2009/11/05/wds-windows-7-and-server-2008-r2/</guid>
		<description><![CDATA[<br/><p>I&#8217;ve been playing with Windows Deployment Services for rolling out Windows 7 Professional (from Server 2008 R2) over the last couple of days. Aside from a missing NIC driver everything seems to be fairly straight forward.</p> <p>Plenty of documentation already exists on this subject, but I spent the good part of a day wading through [...]]]></description>
			<content:encoded><![CDATA[<br/><p>I&#8217;ve been playing with Windows Deployment Services for rolling out Windows 7 Professional (from Server 2008 R2) over the last couple of days. Aside from a missing NIC driver everything seems to be fairly straight forward.</p>
<p>Plenty of documentation already exists on this subject, but I spent the good part of a day wading through it, so here I present a &#8220;get you up and running quickly&#8221; list of docs:</p>
<ol>
<li><a href="http://technet.microsoft.com/en-us/library/cc766320%28WS.10%29.aspx">Technet Step-by-Step (for Server 2003)</a></li>
<li><a href="http://blog.brianleejackson.com/sysprep-a-windows-7-machine-start-to-finish">Sysprep Windows 7</a></li>
<li><a href="http://www.itechtalk.com/thread1904.html">Better Instructions for Discover Images</a> (i.e. for non-pxe hardware)</li>
</ol>
<p>Of course this set of articles is meant to just by a quick and dirty start&#8230; you&#8217;ll have to read deeper if you want definitive instructions on unattended remote installs. But not too much deeper. <a href="http://www.windowsnetworking.com/articles_tutorials/Deploying-Windows-7-Part10.html">WindowsNetworking.com</a> has the start of a set of articles on Windows 7 deployment which will probably help you out with that.</p>
<p><i>This is for as much my reference as anyone else.</i></p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/11/05/wds-windows-7-and-server-2008-r2/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Shameless Rickshaw Plug</title>
		<link>http://andrewbevitt.com/2009/10/20/shameless-rickshaw-plug/</link>
		<comments>http://andrewbevitt.com/2009/10/20/shameless-rickshaw-plug/#comments</comments>
		<pubDate>Tue, 20 Oct 2009 12:23:12 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[adventure]]></category>
		<category><![CDATA[rickshaw]]></category>
		<category><![CDATA[travel]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/2009/10/20/shameless-rickshaw-plug/</guid>
		<description><![CDATA[<br/><p>If you don&#8217;t already know I am 1/6 of a team of adventurers setting off in the <a href="http://rickshawrun10w.theadventurists.com/">Rickshaw Run 2010 Winter Edition</a>. It&#8217;s going to be a crazy (my style crazy) trip and I can&#8217;t wait to get on that Rickshaw. We&#8217;ve put together a little bit of a team website at <a href="http://andrewbevitt.com/rickshawrun">http://andrewbevitt.com/rickshawrun</a> [...]]]></description>
			<content:encoded><![CDATA[<br/><p>If you don&#8217;t already know I am 1/6 of a team of adventurers setting off in the <a href="http://rickshawrun10w.theadventurists.com/">Rickshaw Run 2010 Winter Edition</a>. It&#8217;s going to be a crazy (my style crazy) trip and I can&#8217;t wait to get on that Rickshaw. We&#8217;ve put together a little bit of a team website at <a href="http://andrewbevitt.com/rickshawrun">http://andrewbevitt.com/rickshawrun</a> so that all the world can follow along in our shenanigans.</p>
<p>As I said. It&#8217;s a shamless plug.</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/10/20/shameless-rickshaw-plug/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Having Broadband</title>
		<link>http://andrewbevitt.com/2009/06/21/having-broadband/</link>
		<comments>http://andrewbevitt.com/2009/06/21/having-broadband/#comments</comments>
		<pubDate>Sat, 20 Jun 2009 15:20:15 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Everyday Life]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[nbn]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=286</guid>
		<description><![CDATA[<br/><p>I&#8217;ve been a little lax in properly reading my RSS feeds of late. But <a href="http://www.itnews.com.au/News/105936,australia-pipped-on-broadband-top-10.aspx">this article</a> on Australia being 11th in broadband penetration caught my eye before I used the magic mark all as read.</p> <p>While I am entirely hesitant to truly believe what is said in this article: 1) because it seems deliberately [...]]]></description>
			<content:encoded><![CDATA[<br/><p>I&#8217;ve been a little lax in properly reading my RSS feeds of late. But <a href="http://www.itnews.com.au/News/105936,australia-pipped-on-broadband-top-10.aspx">this article</a> on Australia being 11th in broadband penetration caught my eye before I used the magic <em>mark all as read</em>.</p>
<p>While I am entirely hesitant to truly believe what is said in this article: 1) because it seems deliberately vague; and 2) There are no references nor can I find another correlating story. If it is true then my initial response must be: being 11th doesn&#8217;t mean it&#8217;s good enough. But then one should look a little deeper at the top 10 results: South Korea, Singapore, and Taiwan are very different, demographically and geographically, from Australia you&#8217;re really comparing apples and oranges which, we all know, <a href="http://en.wikipedia.org/wiki/Apples_and_oranges">just doesn&#8217;t work</a>.</p>
<p>Compare two metro areas: Sydney and Seoul. I know that Sydney will have worse services at higher prices. Which obliterates the &#8220;is good enough&#8221; argument. I feel that access should be equivelent &#8211; it&#8217;s not like the technology doesn&#8217;t exist. And then to bring it home: Sydney vs Cobar; no points for guessing the outcome there.</p>
<p>All this got me thinking though: I just managed to crack the 3 digit friends size on <a href="http://facebook.com/andrewbevitt/">Facebook</a> (shameless linking). If all we&#8217;re generally using our broadband for is socialising: do we need 100Mbps or FTTH? No I don&#8217;t think so. And believe me I like my internet(s) to be fast.</p>
<p>That&#8217;s apathy though.</p>
<p>To Senator Minchin: <em>it&#8217;s not a competition, it&#8217;s about having good service for reasonable price, and those stats to be globally equivelent. Let&#8217;s pick the technology we <strong>should</strong> have in place nation wide and implement it.</em></p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/06/21/having-broadband/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>pfsense 1.2 openvpn w/ tls-auth</title>
		<link>http://andrewbevitt.com/2009/06/18/pfsense-1-2-openvpn-w-tls-auth/</link>
		<comments>http://andrewbevitt.com/2009/06/18/pfsense-1-2-openvpn-w-tls-auth/#comments</comments>
		<pubDate>Wed, 17 Jun 2009 23:42:12 +0000</pubDate>
		<dc:creator>AndyB</dc:creator>
				<category><![CDATA[Work]]></category>
		<category><![CDATA[openvpn]]></category>
		<category><![CDATA[pfsense]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://andrewbevitt.com/?p=284</guid>
		<description><![CDATA[<br/><p>I really like <a href="http://pfsense.org/">pfsense</a> it makes a really good firewall, router, vpn connector &#8211; alone or together. The web interface is intuitive and the first-run wizard &#8220;just works&#8221;. I am using it to run an <a href="http://openvpn.net/">OpenVPN</a> VPN.</p> <p>OpenVPN comes with a feature called &#8220;TLS Auth&#8221;: which basically uses TLS to encrypt the SSL [...]]]></description>
			<content:encoded><![CDATA[<br/><p>I really like <a href="http://pfsense.org/">pfsense</a> it makes a really good firewall, router, vpn connector &#8211; alone or together. The web interface is intuitive and the first-run wizard &#8220;just works&#8221;. I am using it to run an <a href="http://openvpn.net/">OpenVPN</a> VPN.</p>
<p>OpenVPN comes with a feature called &#8220;TLS Auth&#8221;: which basically uses TLS to encrypt the SSL handshake between client and server. Ok that wasn&#8217;t basic: makes saying hello safe. However the pfsense GUI for configuring an OpenVPN server does not, <a href="http://forum.pfsense.org/index.php/topic,2747.msg16214.html">yet</a>, support tls-auth. As documented in the previous link you can add custom configuration options and manually create the file until v1.3 is released.</p>
<p>Here&#8217;s the point: The pfsense + openvpn boot scripts will write the OpenVPN configuration files and security certificates to: /var/etc/openvpn_serverX.* (X being the instance number). So for consistency you might be inclined to create your tls-auth file as /var/etc/openvpn_serverX.tls.</p>
<p><strong>DON&#8217;T!</strong></p>
<p>The /var/etc folder gets cleared on reboot. Which is a feature of pfsense&#8217;s PHP init scripts + in hind sight sensible.</p>
<p>So today&#8217;s lesson is: When manually specifying tls-auth support for OpenVPN on pfsense-1.2.X put the tls-auth file in /etc/openvpn_serverX.tls so that it is persistent.</p>
]]></content:encoded>
			<wfw:commentRss>http://andrewbevitt.com/2009/06/18/pfsense-1-2-openvpn-w-tls-auth/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

