Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Installation 

yum install -y install --enablerepo=epel openswan xl2tpd bind


Configure /etc/named.conf and the zone file /var/named/masters/commonidtrust.org (see examples attached).  Configure xl2tpd and Openswan.

chkconfig named on

chkconfig ipsec on

chkconfig xl2tpd on

Recursion is disabled and rate limiting is set at 5 per second.  Since there are a total of 3 records, this is basically impossible to use in any form of attack, ever, and it's in a personal account anyway.

...