ETiV

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

Set up L2TP/IPsec VPN on Debian

Set up IPsec

Set up networking

Site List

Image Site

如何在路由器中实现透明代理？

0 互联网现状

目前整个互联网环境，被破坏最严重地部分，是 Web 服务体验。当直接破坏难以实现时，就会从流程链的上下游着手，如：DNS 污染。

其它地互联网服务类型，例如：邮件，可能小部分会受到 Web 服务上下游破坏地余震，但整体上基本不受影响。

常用的 HTML 头部标签

详细介绍参见原文：yisibl/blog#1

<!DOCTYPE html> <!-- 使用 HTML5 doctype，不区分大小写 -->
<html lang="zh-cmn-Hans"> <!-- 更加标准的 lang 属性写法 http://zhi.hu/XyIa -->
<head>
    <meta charset='utf-8'> <!-- 声明文档使用的字符编码 -->
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <!-- 优先使用 IE 最新版本和 Chrome -->

	# I have issues with OS X's defaults. Luckily, most are easy to change.
	# This is heavily based on saetia's gist: https://gist.github.com/saetia/1623487

	# Disable autocomplete, which effectively disables that really stupid Escape key autocomplete handler
	defaults write -g NSUseSpellCheckerForCompletions -bool false

	# Disable window animations
	defaults write NSGlobalDomain NSAutomaticWindowAnimationsEnabled -bool false

	# Expand save panel by default

	#!/usr/bin/sudo sh

	## ruby_revealer.sh -- decrypt obfuscated GHE .rb files. 2.0.0 to 2.3.1+.

	## From `strings ruby_concealer.so`:
	##
	## > This obfuscation is intended to discourage GitHub Enterprise customers
	## > from making modifications to the VM.
	##
	## Well, good, as long as its not intended to discourage me from doing this!

	# ---------------------------------------------------------------------------
	#
	# Description: This file holds all my BASH configurations and aliases.
	# Much of this was originally copied from:
	# http://natelandau.com/my-mac-osx-bash_profile/
	#
	# Sections:
	# 1. Environment Configuration
	# 2. Make Terminal Better (remapping defaults and adding functionality)
	# 3. File and Folder Management

	#!/bin/sh -ex
	# install xctool : brew install xctool

	inhouseserver="http://inhouse.xxx.com/upload"

	export DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer

	projectpath=$1
	scheme=$2
	projectname=$(basename "${projectpath}")

	#! /bin/bash

	# Set the default policies to allow everything while we set up new rules.
	# Prevents cutting yourself off when running from remote SSH.
	iptables -P INPUT ACCEPT
	iptables -P FORWARD ACCEPT
	iptables -P OUTPUT ACCEPT

	# Flush any existing rules, leaving just the defaults
	iptables -F