I managed to flash my Speedtouch 706WL box and reconfigure it to work with Base (former Tele2, with former Tele2AllIn service) service provider, in Belgium.

Both Internet and Phone (VOIP) work fine.

Tele2/Base Speedtouch routers use a firmware that restricts configuration possibilities for their users.  It also gives them direct access to the router’s configuration.  I really don’t like such practices – they should give users a way to use standard routers and configurations, like other providers do, and permit their users to use the full power of the routers they’ve bought.

Knowing these configuration settings, users may even use other routers to connect to Tele2/Base, which in fine is really beneficial to them if they don’t need the support of Tele2/Base or need/want to use some other router, like one they already own – removing the need to acquire one from Tele2.

As Tele2/Base don’t provide their users with full configuration settings, I decided to publish them.

After having flashed the box, I configured it with the following information:

Tele2/Base connection settings

WAN connection

User: vtxxxxxxx@tele2allin.be

Password: the ADSL password

PPPoA 8/35

ntp1.versatel.be

ntp2.versatel.be

VOIP

User: phone number (for 02/234 55 44, use 22345544)

PPPoA 0/32

Password: the ADSL password

Registrar: versatel.be:5060

Proxy: 62.58.224.212:5060

Timeout: 3600

This week-end, I managed to reconfigure my complete home network to use a virtualized instance of Endian Firewall 2.3 Community.  And it rocks.

You simply download the ISO file, install it in a new VM, connect to its web interface, and that’s all.  Or almost.  I think even people without much knowledge of TCP/IP would be able to use it after some hours.  It took me 3 hours to completely set it up: DHCP, internal zone and DMZ, routing, DNS, firewall, proxy (transparent proxy, the must for easy configuration and control of every single byte transmitted through the network), anti-virus and VPN.

All these applications are configured through one single conherent web interface.  WOW!

I just thought: maybe we should call a firewall with anti-virus an ‘anti-firus’?

OK that’s dumb, I know. Sorry.

The only other appliance I had to set up was a DNS server – quite easy with openSUSE 11.1.  The next step will consist of setting up an LDAP server.  But that’s another story.

Not everything is perfect: for example, one cannot easily install other software on this appliance.  I would have expected to be able to install some DNS server on it, or some other security-related software.  It’s not clear how this should be managed.  Nevermind, that’s not a show-stopper.

For anyone looking for a simple free firewall-proxy-VPN-dhcp-QOS appliance, I can only recommend Endian Firewall Community.

Check it at: http://www.endian.com/

If everyday of this new year is like the first, I’ll bet that 2009 is going to change a lot of habits in personal computing.

Today, I updated VirtualBox to the version 2.1.  I must say that I was much surprised when I read in the changelog that experimental support for OpenGL has been added to this release.  WOW!  Virtualized 3D!?  Out of the box?  With no other configuration than installing the updated guest additions?  WOW!

Then I was surprised again: Host networking now works without a bridged interface, without TUN/TAP!  I must say that it took a lot of efforts, many days of trials, to finally configure automatic bridged host interface creation with the needed user rights for several VM running on the same host (I wished that my VM’s started at boot, like any other service).  And now this also comes out of the box!? WOW again!

I believe Sun/Innotek’s engineers have hired Popeye or ate a lot of spinash-for-their-mind during the last 6 months of 2008 (hum, in fact I don’t really believe this, but… why not?).

If these two functionalities prove to be stable and working, the final last two ones I’ll need for virtualization is more user-friendly USB support and correct sound support for PulseAudio, which is very scratchy on my PC.  I’m convinced that PulseAudio has a better design that ALSA or OSS, but it still isn’t satisfying when used with VirtualBox. (Yes, I know there are still a lot of features to improve or to add, but to be honest, these are not the ones I need at this time.)

Here is how I use VirtualBox:

On my desktop PC:

  • Virtualization of Windows.  I try to avoid to use Windows, especially because of two reasons: it’s not free and very vulnerable to viruses.  So I installed it in a VM.  Having only Linux, I miss some games running only on Windows.
  • Virtualization for new OSes which I’d like to test.

On my server:

  • Separation of concerns: each different kind of server software is installed in a different VM, so if one proves to be unstable or vulnerable to attacks, others are kept untouched.
  • Decoupling services from the host server.  This permits me to keep my infrastructure unchanged when I update or change the OS of the host server.
  • Creation of two network zones (internal and DMZ).

I’ll first try this new version of VirtualBox on my desktop, and after everything is fine, I’ll put it on the server.

Let’s mention that all my appliances (server, desktop and laptops), are run with openSUSE 11 and 11.1.

—-

…Some days (3) have passed now during which I could test the changes in VirtualBox 2.1.

  • OpenGL works well most of the time, but is still unstable, on a Windows Vista guest and openSUSE 11.1 host with ATI GPU.  Good news.  Note that I tried OpenGL with the Really Slick Screensavers, and that some made the virtual machine crash, although others work quite fine.
  • Host networking works out of the box.  Very good news.  Here I have nothing special to say, it does all I want, and configuration is really simple: you only have to say that you want host networking instead of NAT.  It’s very comfortable to remove all complicated configuration while still yielding the same results.  Especially when several VMs are running on the same host.

VirtualBox engineers hold their promises, they do nothing more, but they do it well.  What the changelog says is effectively what you get.  I’ll finally be able to run a Linux host and still to be able to play 3D games without dualbooting.

From my end-user point of view, I can say that this year begins quite well, and I wish you the same.

Have a happy new year!