<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Offroad</title>
	<atom:link href="http://offroad.gonzofamily.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://offroad.gonzofamily.com</link>
	<description>Chris&#039; blog</description>
	<lastBuildDate>Thu, 15 Mar 2012 15:03:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Suis-je sur une antenne freemobile ou Orange ?</title>
		<link>http://offroad.gonzofamily.com/2012/03/14/suis-je-sur-une-antenne-freemobile-ou-orange/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=suis-je-sur-une-antenne-freemobile-ou-orange</link>
		<comments>http://offroad.gonzofamily.com/2012/03/14/suis-je-sur-une-antenne-freemobile-ou-orange/#comments</comments>
		<pubDate>Wed, 14 Mar 2012 18:02:16 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[apple]]></category>
		<category><![CDATA[fr]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[phone]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1251</guid>
		<description><![CDATA[Sur un iPhone je ne connais qu&#8217;un seul moyen de savoir sur quelle antenne nous sommes : il faut passer par le Field Test. Je n&#8217;ai pas testé sur les autres téléphones. Composer le *3001#12345#* Puis aller dans MM Info -&#62; Serving PLMN -&#62; Mobile Network Code. 0, 1 ou 2 ? Vous êtes chez [...]]]></description>
			<content:encoded><![CDATA[<p>Sur un iPhone je ne connais qu&#8217;un seul moyen de savoir sur quelle antenne nous sommes : il faut passer par le Field Test. Je n&#8217;ai pas testé sur les autres téléphones.</p>
<p>Composer le *3001#12345#*<br />
Puis aller dans MM Info -&gt; Serving PLMN -&gt; Mobile Network Code.<br />
0, 1 ou 2 ? Vous êtes chez Orange.<br />
14 ou 15 ? Vous êtes chez Free.</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2012/03/14/suis-je-sur-une-antenne-freemobile-ou-orange/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>suPHP</title>
		<link>http://offroad.gonzofamily.com/2011/09/10/suphp/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=suphp</link>
		<comments>http://offroad.gonzofamily.com/2011/09/10/suphp/#comments</comments>
		<pubDate>Sat, 10 Sep 2011 21:11:57 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[Server]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1228</guid>
		<description><![CDATA[On a web server, suPHP allows PHP to run as the user and group that owns the file. In WordPress, for example it allows to upload files, update wordpress itself or its plugins. But obvious security issues can make this Apache module really dangerous for your other websites. Here is how I installed it only for [...]]]></description>
			<content:encoded><![CDATA[<p>On a web server, suPHP allows PHP to run as the user and group that owns the file.</p>
<p>In WordPress, for example it allows to upload files, update wordpress itself or its plugins.</p>
<p>But obvious security issues can make this Apache module really dangerous for your other websites. Here is how I installed it only for WordPress.</p>
<p><a title="Wiki SuPHP" href="http://wiki.gonzofamily.com/a/SuPHP">http://wiki.gonzofamily.com/a/SuPHP</a></p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/09/10/suphp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Git Server on Debian</title>
		<link>http://offroad.gonzofamily.com/2011/04/29/git-server-on-debian/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=git-server-on-debian</link>
		<comments>http://offroad.gonzofamily.com/2011/04/29/git-server-on-debian/#comments</comments>
		<pubDate>Fri, 29 Apr 2011 11:19:16 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[apple]]></category>
		<category><![CDATA[dev]]></category>
		<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Server]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1205</guid>
		<description><![CDATA[After testing GIT, and without hesitation, I decided to abandon SVN/Subversion. I won&#8217;t write here one more article comparing them but I wrote (and update regularly) a wiki page explaining how to install it on Debian and give access via HTTP, SSH and HTML. http://wiki.gonzofamily.com/a/Install_GIT_as_public_repository_on_Debian I also noted how I transfered my existing local XCode repositories [...]]]></description>
			<content:encoded><![CDATA[<p>After testing GIT, and without hesitation, I decided to abandon SVN/Subversion. I won&#8217;t write here one more article comparing them but I wrote (and update regularly) a wiki page explaining how to install it on Debian and give access via HTTP, SSH and HTML.</p>
<p><a title="Wiki page" href="http://wiki.gonzofamily.com/a/Install_GIT_as_public_repository_on_Debian" target="_self">http://wiki.gonzofamily.com/a/Install_GIT_as_public_repository_on_Debian</a></p>
<p>I also noted how I transfered my existing local XCode repositories to this server, but I will improve this doc soon:</p>
<p><a title="Wiki Page" href="http://wiki.gonzofamily.com/a/GIT_and_XCode" target="_self">http://wiki.gonzofamily.com/a/GIT_and_XCode</a></p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/04/29/git-server-on-debian/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Retrieve local IPv4/IPv6 on Wifi/Cellular on iPhone</title>
		<link>http://offroad.gonzofamily.com/2011/04/29/retrieve-local-ipv4ipv6-on-wificellular-on-iphone/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=retrieve-local-ipv4ipv6-on-wificellular-on-iphone</link>
		<comments>http://offroad.gonzofamily.com/2011/04/29/retrieve-local-ipv4ipv6-on-wificellular-on-iphone/#comments</comments>
		<pubDate>Fri, 29 Apr 2011 10:47:35 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[apple]]></category>
		<category><![CDATA[dev]]></category>
		<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[phone]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1202</guid>
		<description><![CDATA[On iOS, you want to know your local IP (for example, when an application opens a webpage on the wifi interface) but the iOS SDK provides no simple way to get the IP Address for the wifi connection. I found an interesting Method in Objective-C which retrieve the IPv4 address of the wifi connexion as [...]]]></description>
			<content:encoded><![CDATA[<p>On iOS, you want to know your local IP (for example, when an application opens a webpage on the wifi interface) but the iOS SDK provides no simple way to get the IP Address for the wifi connection.</p>
<p>I found an interesting Method in Objective-C which retrieve the IPv4 address of the wifi connexion as a NSString on <a title="Zach Waugh's blog" href="http://blog.zachwaugh.com/post/309927273/programmatically-retrieving-ip-address-of-iphone" target="_blank">Zach Waugh&#8217;s blog</a>.</p>
<p>Sadly it doesn&#8217;t work with IPv6. So I modified it and here is the code:</p>
<p><a title="Wiki page" href="http://wiki.gonzofamily.com/a/Retrieve_local_IPv4/IPv6_on_Wifi/Cellular" target="_self">http://wiki.gonzofamily.com/a/Retrieve_local_IPv4/IPv6_on_Wifi/Cellular</a></p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/04/29/retrieve-local-ipv4ipv6-on-wificellular-on-iphone/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PID on Mac OS X without Netstat</title>
		<link>http://offroad.gonzofamily.com/2011/04/28/pid-on-mac-os-x-without-netstat/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=pid-on-mac-os-x-without-netstat</link>
		<comments>http://offroad.gonzofamily.com/2011/04/28/pid-on-mac-os-x-without-netstat/#comments</comments>
		<pubDate>Thu, 28 Apr 2011 16:12:32 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[apple]]></category>
		<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Server]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1196</guid>
		<description><![CDATA[On Linux we use to see the Processes associated to a listening network port with the following command netstat -p On Windows it&#8217;s netstat -o Sadly on Mac OS X this option doesn&#8217;t exist. The equivalent will be sudo lsof -P So we can imagine that we need to know which program dare listening on [...]]]></description>
			<content:encoded><![CDATA[<p>On Linux  we use to see the Processes associated to a listening network port with the following command<br />
<code>netstat -p</code></p>
<p>On Windows it&#8217;s<br />
<code>netstat -o</code></p>
<p>Sadly on Mac OS X this option doesn&#8217;t exist. The equivalent will be<br />
<code>sudo lsof -P</code></p>
<p>So we can imagine that we need to know which program dare listening on port 123<br />
<code>sudo lsof -Pn | grep 123</code></p>
<p>You will see something like that:<br />
<code><br />
ntpd         21           root   20u     IPv4 0x0899ace4        0t0      UDP *:123<br />
ntpd         21           root   21u     IPv6 0x0899ac08        0t0      UDP *:123<br />
ntpd         21           root   22u     IPv6 0x0899baa4        0t0      UDP [::1]:123<br />
ntpd         21           root   23u     IPv6 0x0899b8ec        0t0      UDP [fe80:1::1]:123<br />
ntpd         21           root   24u     IPv4 0x0899b810        0t0      UDP 127.0.0.1:123<br />
ntpd         21           root   25u     IPv6 0x098b5658        0t0      UDP [fe80:4::cabc:c8ff:fe90:6472]:123<br />
ntpd         21           root   27u     IPv6 0x098b5b80        0t0      UDP [2002:3ba7:d4b1::cabc:c8ff:fe90:6472]:123<br />
ntpd         21           root   28u     IPv4 0x15463370        0t0      UDP 10.0.130.101:123<br />
ntpd         21           root   30u     IPv6 0x15464b80        0t0      UDP [2002:3ba7:d4b1::c3e:e29a:8de6:68cc]:123<br />
</code></p>
<p>So it was the NTP Daemon with the process ID 21&#8230;. petit coquin !</p>
<p>(Cf this page of my Wiki: <a title="wiki page" href="http://wiki.gonzofamily.com/a/Port_listening_on_Mac,_Windows_or_Linux" target="_blank">http://wiki.gonzofamily.com/a/Port_listening_on_Mac,_Windows_or_Linux</a>)</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/04/28/pid-on-mac-os-x-without-netstat/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Wiki</title>
		<link>http://offroad.gonzofamily.com/2011/04/11/wiki/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=wiki</link>
		<comments>http://offroad.gonzofamily.com/2011/04/11/wiki/#comments</comments>
		<pubDate>Mon, 11 Apr 2011 10:21:37 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[blog]]></category>
		<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1193</guid>
		<description><![CDATA[As most of my IT articles were about guides, I decided to open a Wiki. It will be more convenient to keep them updated and organised. Little by little this wiki will become my main website. Here it is : http://wiki.gonzofamily.com What is a wiki? It&#8217;s a collaborative website that allows the creation and editing [...]]]></description>
			<content:encoded><![CDATA[<p>As most of my IT articles were about guides, I decided to open a Wiki. It will be more convenient to keep them updated and organised.</p>
<p>Little by little this wiki will become my main website.</p>
<p>Here it is : <a href="http://wiki.gonzofamily.com">http://wiki.gonzofamily.com</a></p>
<p>What is a wiki?<br />
It&#8217;s a collaborative website that allows the creation and editing of any number of webpages. It&#8217;s easy to modify its pages without programming knowledge, and then to keep them up-to-date</p>
<p>You can correct yourself anything on this wiki. You just need to login with a real email address.</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/04/11/wiki/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPv6 Forwarding OVH</title>
		<link>http://offroad.gonzofamily.com/2011/01/17/ipv6-forwarding-ovh/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=ipv6-forwarding-ovh</link>
		<comments>http://offroad.gonzofamily.com/2011/01/17/ipv6-forwarding-ovh/#comments</comments>
		<pubDate>Mon, 17 Jan 2011 18:27:44 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[fr]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[Server]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1177</guid>
		<description><![CDATA[Vous arrivez peut-être sur cette page car vous galerez  à votre tour. Le symptome : Dès qu&#8217;on active le forwarding IPv6 sur un serveur dédié OVH on ne peut plus utiliser l&#8217;IPv6. Un ping6 indique &#8220;Network unreachable&#8221;. Dans le fichier /etc/sysctl.conf vous avez ajouté la ligne suivante : # Uncomment the next line to enable [...]]]></description>
			<content:encoded><![CDATA[<p>Vous arrivez peut-être sur cette page car vous galerez  à votre tour.</p>
<p>Le symptome :</p>
<p>Dès qu&#8217;on active le forwarding IPv6 sur un serveur dédié OVH on ne peut plus utiliser l&#8217;IPv6. Un ping6 indique &#8220;Network unreachable&#8221;.</p>
<p>Dans le fichier /etc/sysctl.conf vous avez ajouté la ligne suivante :</p>
<blockquote><p>
# Uncomment the next line to enable packet forwarding for IPv6<br />
#  Enabling this option disables Stateless Address Autoconfiguration<br />
#  based on Router Advertisements for this host<br />
net.ipv6.conf.all.forwarding=1&gt;</p></blockquote>
<p>C&#8217;est bien indiqué : en activant cette option on perd la configuration automatique de l&#8217;ipv6 (Stateless Address Autoconfiguration).<br />
Il faut donc indiquer votre routeur à la main dans /etc/network/interfaces (pour Debian) :</p>
<blockquote><p>
iface eth0 inet6 static<br />
address 2001:DB8:1:52bb::1<br />
netmask 56<br />
up route -A inet6 add default gw 2001:DB8:1:52FF:FF:FF:FF:FF<br />
down route -A inet6 del default gw 2001:DB8:1:52FF:FF:FF:FF:FF</p></blockquote>
<p>Vous l&#8217;avez surement compris avec cette exemple, notre serveur est en fait sur un netmask /56 et sa gateway est basée sur l&#8217;ipv6 de votre host où vous remplacez les derniers octets ainsi:</p>
<blockquote><p>
aaaa:bbbb:cccc:ddFF:FF:FF:FF:FF</p></blockquote>
<p>Cela me perturbait d&#8217;écrire /56 au netmask, mais OVH est formel sur cette page : <a href="http://guides.ovh.com/Ipv4Ipv6" target="_blank">http://guides.ovh.com/Ipv4Ipv6</a></p>
<p>A présent, je comprend mieux d&#8217;où viennent les erreurs kernel régulièrement affichées dans le syslog :</p>
<blockquote><p>
kernel: IPv6 addrconf: prefix with wrong length 56</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/01/17/ipv6-forwarding-ovh/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPv6 sur Dedibox v3</title>
		<link>http://offroad.gonzofamily.com/2011/01/10/ipv6-sur-dedibox-v3/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=ipv6-sur-dedibox-v3</link>
		<comments>http://offroad.gonzofamily.com/2011/01/10/ipv6-sur-dedibox-v3/#comments</comments>
		<pubDate>Mon, 10 Jan 2011 13:54:11 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[fr]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1167</guid>
		<description><![CDATA[Comme l&#8217;explique si bien http://wiki.debian.org/DebianIPv6 &#8220;Vous ne le savez peut-être pas, mais si vous avez une adresse publique IPv4, vous avez déjà une adresse IPv6 réservée. Il existe un système de transition nommé 6to4 qui lie toute adresse IPv4 à un sous réseaux entier d&#8217;adresses IPv6&#8243;. Donc pour toutes IPv4 aaa.bbb.ccc.ddd vous avez le sous réseau [...]]]></description>
			<content:encoded><![CDATA[<p>Comme l&#8217;explique si bien <a href="http://wiki.debian.org/DebianIPv6" target="_blank">http://wiki.debian.org/DebianIPv6</a></p>
<p>&#8220;Vous ne le savez peut-être pas, mais si vous avez une adresse publique IPv4, vous avez déjà une adresse IPv6 réservée. Il existe un système de transition nommé 6to4 qui lie toute adresse IPv4 à un sous réseaux entier d&#8217;adresses IPv6&#8243;.</p>
<p>Donc pour toutes IPv4 aaa.bbb.ccc.ddd vous avez le sous réseau entier suivant:</p>
<p>2002:aaa.bbb.ccc.ddd::/48 (ce qui vous permet plus de 65000 sous réseau en /64, et de connecter des millions d&#8217;ordinateurs dans chacun).</p>
<p>aaa.bbb.ccc.ddd doit être converti en Hexadecimal. La commande suivante est très efficace sur Mac et Linux:<br />
printf &#8220;2002:%02x%02x:%02x%02x::1\n&#8221; aaa bbb ccc ddd</p>
<p>Example : IPv4 88.34.32.76, prefix de votre réseau IPv6 2002:5822:204c::/48</p>
<p>Encore faut-il un minimum d&#8217;installation pour que ça marche. Un tunnel vers 192.88.99.1 qui vous assure d&#8217;être connecté au routeur le plus proche. Si votre provider ou équipe informatique a bien fait son travail.</p>
<p>Sur Debian, ajoutez tout simplement dans /etc/network/interfaces :</p>
<blockquote><p>auto tun6to4<br />
iface tun6to4 inet6 v4tunnel<br />
address 2002:5822:204c::1<br />
netmask 16<br />
gateway ::192.88.99.1<br />
endpoint any<br />
local 88.34.32.76 #fits address</p></blockquote>
<p>Le mode tunnel IPv6 automatique de la Time Capsule et Airport extrem doit certainement être basé là dessus. Et le firewall ipv6 intégré est plus rassurant que la Freebox.</p>
<p>D&#8217;après mes premiers tests sur Dedibox, le tunnel broker (Hurrican) est plus rapide que le 6to4. Mais le 6to4 est d&#8217;une simplicité bien bluffante. Et si Proxad avait choisi un routeur 192.88.99.1 dans leur locaux au lieu d&#8217;hurricane (justement <img src='http://offroad.gonzofamily.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  ) les résultats seraient certainement bien meilleurs que le tunnel broker.</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/01/10/ipv6-sur-dedibox-v3/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>IPv6 and Privacy</title>
		<link>http://offroad.gonzofamily.com/2011/01/04/ipv6-and-privacy/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=ipv6-and-privacy</link>
		<comments>http://offroad.gonzofamily.com/2011/01/04/ipv6-and-privacy/#comments</comments>
		<pubDate>Mon, 03 Jan 2011 22:27:27 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[apple]]></category>
		<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1150</guid>
		<description><![CDATA[IPv6 makes it easy to track you. Let me explain. IPv6 is composed of a Prefix and a suffix: IPv6 address: 2001:0DB8:1fc3:481:b357:83ff:fecb:4c30 Prefix: 2001:0DB8:1fc3:481: Suffix: b357:83ff:fecb:4c30 The prefix changes according to your internet access (at home, work, friend&#8217;s&#8230;) but the Suffix is deduced from your MAC address and will be always the same for one [...]]]></description>
			<content:encoded><![CDATA[<p>IPv6 makes it easy to track you. Let me explain.</p>
<p>IPv6 is composed of a Prefix and a suffix:<br />
<strong> IPv6 address:</strong> 2001:0DB8:1fc3:481:b357:83ff:fecb:4c30<br />
<strong> Prefix: </strong>2001:0DB8:1fc3:481:<br />
<strong> Suffix:</strong> b357:83ff:fecb:4c30</p>
<p>The prefix changes according to your internet access (at home, work, friend&#8217;s&#8230;) but <strong>the Suffix is deduced from your MAC address and will be always the same for one computer.</strong><br />
So even if your IPv6 Adresse changes, the end of it is unique and identifies your device for sure.</p>
<p><strong>The counter mesure is called IPv6 Privacy Address.<br />
</strong> When you enable this policy on your computer, a second IPv6 is randomly affected during autoconfiguration, called <strong>Temporary IPv6 address</strong>. Even if you cannot change the Prefix, the Suffix changes each time.<br />
It means: you can still contact your computer with the previous IPv6 address, but in the other way (when the computer connect to the internet) it will have a different random address. It has got 2 addresses.<br />
<strong>Windows Vista/Seven:</strong> it&#8217;s enabled by default, you certainly saw &#8220;Temporary IPv6 Address&#8221; in your ipconfig<br />
<strong> Mac OS X 10.6:</strong> you have to enable it</p>
<p><strong>How to enable IPv6 Privacy Address on Mac?</strong></p>
<p>you must create the file /etc/sysctl.conf with the following content:</p>
<blockquote><p>net.inet6.ip6.use_tempaddr=1<br />
net.inet6.ip6.prefer_tempaddr=1</p></blockquote>
<p>Next restart you&#8217;ll get a second IPv6 address and it will be prefered for every internet access.</p>
<p><a href="http://offroad.gonzofamily.com/files/2011/01/Screen-shot-2011-01-01-at-2.17.03-AM.png" rel="lightbox[1150]" title="IPv6 and Privacy"><img class="aligncenter size-full wp-image-1156" src="http://offroad.gonzofamily.com/files/2011/01/Screen-shot-2011-01-01-at-2.17.03-AM.png" alt="" width="331" height="282" /></a></p>
<p><strong>But I use to protect my servers via the IP address!</strong></p>
<p>Many SSH/FTP/HTTPS servers use IP Addresses to filter access. You would like to keep always the same IP.</p>
<p>I think that every client software should be able to choose which IPv6 address it want to use (since we have 2 IPv6 in Privacy Mode), I guess it will become common very soon. For example in ssh you can add the following line in .ssh/config :</p>
<blockquote><p>BindAddress 2001:0DB8:1fc3:481:b357:83ff:fecb:4c30</p></blockquote>
<p>But I think, most of the time, a limited access can be based on the prefix of your IPv6 address. Allowing all your local network to access.</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2011/01/04/ipv6-and-privacy/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>IPv6 Certification</title>
		<link>http://offroad.gonzofamily.com/2010/12/25/ipv6-certification/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=ipv6-certification</link>
		<comments>http://offroad.gonzofamily.com/2010/12/25/ipv6-certification/#comments</comments>
		<pubDate>Sat, 25 Dec 2010 03:44:11 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[en]]></category>
		<category><![CDATA[IT]]></category>
		<category><![CDATA[network]]></category>

		<guid isPermaLink="false">http://offroad.gonzofamily.com/?p=1143</guid>
		<description><![CDATA[I just got my Free IPv6 certification from Hurrican ( tunnelbroker.net ). It&#8217;s a very interesting process. I think this certification is worth the time spent on it, and means you really mastered IPv6 network and servers configuration. Before continuing I must wait for my Glue Register&#8230; Anyway, here in Australia this free tunner broker [...]]]></description>
			<content:encoded><![CDATA[<p>I just got my Free IPv6 certification from Hurrican ( <a href="http://tunnelbroker.net/" target="_blank">tunnelbroker.net</a> ).</p>
<p>It&#8217;s a very interesting process. I think this certification is worth the time spent on it, and means you really mastered IPv6 network and servers configuration.</p>
<p>Before continuing I must wait for my Glue Register&#8230;<br />
<a href="http://ipv6.he.net/certification/scoresheet.php?pass_name=chriscatfr" target="_blank"><img src="http://ipv6.he.net/certification/create_badge.php?pass_name=chriscatfr&amp;badge=3" border="0" alt="IPv6 Certification Badge for chriscatfr" width="229" height="137" /></a></p>
<p>Anyway, here in Australia this free tunner broker is very efficient. It allowed me to connect my all home network on IPv6 (the Apple Time Capsule has everything necessary for ipv6 tunnels, even a selective Firewall).</p>
<p>It also allowed me to connect my experimental Linux server (whose provider doesn&#8217;t provide IPv6 connexion). This website (on a Dedibox v3) will at last receive an IPv6 next week, Online.net promised&#8230; thanks to Hurricane Electric, I did all the necessary tests before the big jump (that I already had done 4 years ago on an OVH server&#8230; Online.net is very late&#8230;)</p>
]]></content:encoded>
			<wfw:commentRss>http://offroad.gonzofamily.com/2010/12/25/ipv6-certification/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

