Raw Matter

Another attempt to shorten my list of movies where not having seen them makes me an absolute philistine, according to various friends: Papillon, with Steve McQueen and Dustin Hoffmann. Ignoring the tragic history behind it (the French penal system in French Guiana during the colonial era — I didn't know about this from school), it's great entertainment. There is a kind of happy end, but nowhere close to what Hollywood does to its stories these days...

A long time on the “to watch” list: The Fifth Element by Luc Besson. I don't know why but I had always been sceptical if I'd enjoy this one, but my feeling was completely wrong. Real fun.

While I think the basic idea of superheroes getting older and having a midlife crisis, or a daughter, (and of course during the film, getting back into action) could make a wonderful film, the ending of Watchmen left me with a bad feeling about the whole film. But then I never read or watched superhero cartoons anyway, so maybe it's just that I'm not the intended audience for this one.

Finally, V for Vendetta is another interpretation of the 1984 theme (actually, it's the interpretation of a graphic novel, but I've not read that), with a very well chosen John Hurt as “Big Brother” (or, I should say, High Chancellor Adam Sutler.) With quite a few slapstick moments, this isn't really as dark as the theme might suggest.

Playing around a bit with ssh tunneling right now. When I create a kind of VPN concentrator with a few tun interfaces: is there any reason why I can't just assign the same IP on all these tun interfaces? A quick test shows this set up working nicely, with ifconfig tunX localip pointopoint remoteip (the localip part being the same) setting up the routes to chose the right tun device for all remote IP addresses, and ping worked just fine for me. Firewall rules will always have the remote IP and/or the interface name to decide when a packet applies.

Obviously setting up a listening socket at only one of these interfaces is not so trivial now since I can't just listen to the IP, but that's a restriction I'm happy with. Anything else I'm not thinking of right now?