From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JETFi-0003Zh-QI for garchives@archives.gentoo.org; Mon, 14 Jan 2008 17:37:39 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 76E0EE0A68; Mon, 14 Jan 2008 17:37:37 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 25B8EE0A68 for ; Mon, 14 Jan 2008 17:37:37 +0000 (UTC) Received: from stork.gentoo.org (stork.gentoo.org [64.127.104.133]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTP id A71EF65B7C for ; Mon, 14 Jan 2008 17:37:36 +0000 (UTC) Received: from neysx by stork.gentoo.org with local (Exim 4.68) (envelope-from ) id 1JETFf-0007cY-Kj for gentoo-doc-cvs@lists.gentoo.org; Mon, 14 Jan 2008 17:37:35 +0000 To: gentoo-doc-cvs@lists.gentoo.org Subject: [gentoo-doc-cvs] cvs commit: vpnc-howto.xml Message-Id: From: Xavier Neys Date: Mon, 14 Jan 2008 17:37:35 +0000 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-doc-cvs@lists.gentoo.org Reply-to: docs-team@lists.gentoo.org X-Archives-Salt: e3fd51d9-cf06-451b-8bbb-b973671f7f6d X-Archives-Hash: 58af32daccf4114e885c8e34bf848c17 neysx 08/01/14 17:37:35 Modified: vpnc-howto.xml Log: #205738 Enhanced Tips and Tricks Revision Changes Path 1.6 xml/htdocs/doc/en/vpnc-howto.xml file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/vpnc-howto.xml?rev=1.6&view=markup plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/vpnc-howto.xml?rev=1.6&content-type=text/plain diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/vpnc-howto.xml?r1=1.5&r2=1.6 Index: vpnc-howto.xml =================================================================== RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/en/vpnc-howto.xml,v retrieving revision 1.5 retrieving revision 1.6 diff -u -r1.5 -r1.6 --- vpnc-howto.xml 10 Jan 2008 06:15:12 -0000 1.5 +++ vpnc-howto.xml 14 Jan 2008 17:37:35 -0000 1.6 @@ -1,5 +1,5 @@ - + @@ -15,6 +15,9 @@ Christian Faulhammer + + Thomas Fischer + This document details how to connect your workstation to a Cisco VPN @@ -25,8 +28,8 @@ -1.3 -2008-01-09 +1.4 +2008-01-14 Introduction @@ -755,7 +758,8 @@

-The init scripts don't handle DNS separation. +The init scripts don't handle DNS separation, but you can use the custom +scripts to achieve that. See Tips and Tricks. @@ -765,12 +769,13 @@ Tips and Tricks
+Graphical remote access

-If you are looking for a linux application that supports RDP (Remote Desktop -Protocol) then give grdesktop a try. It's a GUI app written in Gtk that -fits in well with a gnome desktop, but doesn't require it. If you don't want +If you are looking for a Linux application that supports RDP (Remote Desktop +Protocol) then give grdesktop a try. It's a GUI app written in GTK+ that +fits in well with a Gnome desktop, but doesn't require it. If you don't want the GUI configuration dialogs that grdesktop provides, then just install rdesktop. Ultimately, grdesktop is just a frontend for rdesktop.

@@ -806,6 +811,47 @@
+
+Custom scripts on boot + + +

+The custom-made scripts for the init.d file can be used to setup a user-defined +routing for the vpnc connection. The examples below show how to setup the +routing table so that only connections to 123.234.x.x are routed over the VPN +and all other connections use the default gateway. The example uses +work-preup.sh to save the current default gateway before starting vpnc (which +resets the default gateway using the VPN connection). Once vpnc has been +started, work-postup.sh deletes this new default gateway, restores the old +default gateway and sets the route for all connections to 123.234.x.x to use +the vpnc connection. +

+ +
+#!/bin/sh
+route -n | grep -E '^0.0.0.0 ' | cut -c 17-32 >/var/tmp/defaultgw
+
+ +
+#!/bin/sh
+route del -net 0.0.0.0 netmask 0.0.0.0 dev tun1
+route add default gw $(cat /var/tmp/defaultgw)
+route add -net 123.234.0.0 netmask 255.255.0.0 dev tun1
+
+ +

+The example scripts assume that the vpnc connection uses tun1 as tun device. +You can set the device name in the connection's configuration file. +

+ +
+Interface name tun1
+IPSec gateway vpn.mywork.com
+Pidfile /var/run/vpnc.work.pid
+
+ + +
 -- gentoo-doc-cvs@lists.gentoo.org mailing list