All right, good morning, Radiant Church. Good to see you, Portage, good to see you. Thanks for joining us and people are online. My name's John, I'm the campus pastor here at the Richland location. And Pastor Lee and Jane, I think you either get back today or tomorrow. They've been on vacation and as you heard, we're gonna launch right into Red Hot, which is such a, it's really a pivotal moment for our church because we get to kind of expound on some things that in a shorter span that you can't hit on every single Sunday. So again, just want to encourage you to come out for that and invite some friends for that. But today we're doing a stand kind of a lone message that I feel like the Lord's given me to just again, encourage us and help us grow to look more like Jesus. So if you brought your Bibles, turn to Luke chapter seven. Luke is in the Old Testament after Exodus. Just kidding, that's a lie. Kept it easy for you. Luke chapter seven, let's pray. Ask the Lord to bless this time. Father, we do ask that you would open the eyes of our heart. God, we don't want to just hear for the sake of hearing. We want to hear so that your Holy Spirit ministers to us.  So God, I pray that Lord, it would be more than my words that the word of God would go forth and speak to each one of our hearts and each one of our situations, God. We love you and we honor you in Jesus' name. And everyone said, amen, amen, amen. I called the message Jesus paid it all and it brought me back to when I was a child, I've shared before the church background I had was a little more, I would say fundamental than this church, it was a smaller church. And part of my upbringing was we had Sunday school, every single week in between the two services. So I went to church and Sunday school, so I don't want to brag, but that's why I'm really holy. Anyway, love our children's ministry here. We have such an incredible, incredible team that right now is not like babysitting, they're not just giving out crackers, they're literally pouring into this generation with the good news of who Jesus is and partnering with us as parents. So can we give them a huge round of applause? They can't hear us because they're serving, but we're so grateful for them. So my, again, my experience was a little different. We had kind of a smaller room we met in and we had a teacher in the front, but we would all just sit down and we would go through Bible stories and we had a felt board.  Look at that, a lot of us felt boards are the best.   This is amazing technology, but I don't remember a whole lot of my childhood church experiences. I have very few memories. I do have two though that have honestly stuck with me all the way till now I'm 45 years old. One was in probably like third or fourth grade in Mrs. Davies class. I was not paying attention to the lesson whatsoever. So I know it's hard for you guys to believe, but I was in the back talking to my friend, Scott Null and I had no, she could have been, I had no idea what she was talking about. And then obviously I was probably talking louder and I became a distraction to the entire class and the teacher stopped. I didn't even know that she had stopped talking because again, I wasn't paying any attention. And she out of the blue says, John, do you know who that was? And I didn't know who that was, who she was talking about, but I didn't want to admit that because I'm a survivor. Like I'm not gonna just pack it in and admit I wasn't paying attention. So when you're in Sunday school and your teacher says, do you know who that was? You're gonna say Jesus, right? 100%.  So that's what's going through my head. I didn't want to admit I wasn't paying attention. This girl named Amy who I kind of had a crush on and was in the class and I wasn't gonna just pack it in. So I was in that moment, I was like, you can kind of answer Jesus? Like Jeopardy style, like in a question or you could just be bold John like and just nail this. So I was like, Jesus. And then the teacher said, no John, Jesus did not betray himself for 30 pieces of silver. And I was the laughing stock of Bible stories and I was scarred for hours. Anyway, that stuck with me. But another thing that I remember from children's church was the story that I'm gonna expound on today, the scripture that we're gonna look at. And again, this was a weird moment for me in the sense that I don't remember really as a child being gripped by the Lord very often. But this was one of those times and it was sort of an obscure story in the sense that it wasn't David and Goliath or Daniel and the lion's den, stories that you would expect a 10 year old boy to really gravitate to, although I knew those stories. I had never heard this. I had never encountered this story before and this teacher is talking about this woman who comes into a house and kisses the feet of Jesus, washes the feet of Jesus, dries the feet of Jesus with her hair and then dumps a bottle of perfume onto Jesus' feet. And so it was, I was, for whatever reason, just mesmerized by this story. Like it didn't, I couldn't figure out any context for it, like what is happening? How would that be a thing? Part of it might have been like there was a lady behind this, Mrs. Johnson, bless you if you're watching, but she wore enough perfume to like kill a small tree basically, right? So when I hear you're dumping perfume on Jesus' feet, I was like, I hope it's not Mrs. Johnson. But for whatever reason, I went home and I never, I can never remember doing this any other time and I asked my parents, like what is that? Why, what is that story about? What does that mean? And it's something that's stuck with me all of these years. And so today we're gonna look at this encounter that Jesus has with a particular woman and a man. And I want to just, I wanna tell it to us. So it's, I'm not gonna just read it, I'm gonna try to add some more detail and context to it because I really want all of us to feel the sort of weight of this story, of this situation and of what's really happening. And my prayer for all of us is that it will recalibrate our hearts and give us a new ability and potential to know God, love God and recognize what we receive from God. Okay, so in Luke chapter seven, you can kind of follow along or you can just listen, but it starts out this story in verse 36, I think, all the way through 50. With someone inviting Jesus over for dinner, his name is Simon and he's a Pharisee. So Pharisees were the religious leaders and scholars of the day. They were super, super educated, super smart and probably Simon would have been one of, if not the most respected person in this entire town. So he's got clout, he's got authority and he invites Jesus over to his house for a meal. And we don't know exactly why he invited him, we're not told, but it's evident pretty quickly that it's not because Simon encountered like the love of Jesus in a powerful way. And it's not because Simon suddenly recognized his need for a savior. And the reason we know this is because in first century Middle Eastern culture, it would have been incumbent upon someone who had a guest over to take a little bit of oil. This was part of their custom and take a little olive oil and just anoint the head of a guest as a way of honor, as a way of respecting someone who's a guest in your home. But Simon offers Jesus no oil. Another thing would have been to greet someone who's coming into your home with a kiss, a kiss on the cheek. Some cultures still do that today. But Simon offers Jesus no kiss. And then obviously this is Middle Eastern roads, they're muddy, they're dusty and people wore sandals. So it was almost a given that when you went somewhere to someone's house, they would offer you a bowl of water or something to be able to wash your feet before you entered their home. But Simon offers no water to Jesus either. So what he's saying without saying anything is this, you Jesus might be a bit of a curiosity. To me I might want to get to know you a little better but I have some serious suspicions about you. I don't believe what people are saying that you could be the Messiah and I don't see you as an equal much less as an authority in my life. That's what Simon is basically saying because of his rudeness quite honestly to Jesus coming to his home. So that's what's happening. Then the story shifts and it says that a woman enters this Pharisee's home who is the complete opposite of Simon in every single way. Luke says, behold a woman of the city, a sinner. That word behold was meant to bring like shock value. Like you cannot have a greater dichotomy between Simon and between this woman. And when it says a sinner and a woman of the city it's implied that it has something to do with her reputation. Some pastors will teach this that it was a, she was actually a prostitute. We're not told that in the text but she may have been. She may have been an adulteress. She may have just lived a promiscuous lifestyle but there's something about this woman, her past and her choices that the entire town is aware of. And she comes into this room and it's shocking not in the sense that she enters his house because that was normal. If a respected Pharisee had a guest over it would be normal for people to actually line the room of the home against the wall and just listen. Like entertainment, like a movie. He's an educated person and they're gonna have probably a debate so people just line the house or stick their head in the window, find some way to try to listen.  Like this is shocking that a woman with her past, her reputation would walk into a Pharisee's house. Like they as I said were so well respected. They were like set apart. And so there's massive shock value here and we don't know exactly why she did this, why she entered this but again you can gain from the rest of the story that there was probably a moment that this woman encountered the message of Jesus, the gospel, the good news of Jesus. Maybe earlier when he was teaching the sermon on the Mount, maybe John the Baptist when he was talking about repentance but at some point this woman gravitated to the message of Jesus that says there can be freedom in me. There can be forgiveness in me. Your past doesn't have to define you. You can have new life in Christ and she has this moment where her faith rises up and she says I believe that. I can access that. This man's different than anybody else and I want to receive what he's saying and there was probably a salvation experience and maybe she wanted to meet Jesus but as often was the case there were huge crowds that would surround him. So maybe she couldn't get to him because the Bible says then she heard that he was dining at a Pharisee's house and something rose up in her and she said I'm going.  The Bible says she grabs an alabaster jar of perfume or of ointment. Probably the most prized possession she owns maybe she didn't even know why she was doing this but she was just like I'm bringing this with me and she clutches that little jar and she crosses the threshold of that home amidst the stairs, amidst the shame, amidst the accusations and she stands before Jesus. I want you to picture this happening in a room. The Bible actually says that she's behind him at his feet and the reason that can happen is because the table, the Middle Eastern tables at that time were very low to the ground. So you would actually like kind of like lie down and maybe have your elbow on the table and then the person would be across from you so your feet would kind of splay behind you.  And maybe she intended to say something. Maybe she was like I'm gonna thank him.  I'm gonna tell him how much encountering his love has meant to me, but the Bible says she's so overcome with emotion that she just begins to cry. She starts weeping, which is not untypical for someone who encounters or meets someone who has meant so much to them in their lives. Like sometimes emotions just take over. I remember for me I got saved. I gave my heart to the Lord in this church in 1999 on a Sunday in March and I didn't intend to do that but I had had some rough experiences and I was not living the way that I wish I had been and I just remember when the opportunity came, I went up front, I confessed my sin and I just, I literally bawled for, I don't even know how long, but it felt like eternity and it was this cleansing like deep, like not a few sniffles, like I was just a broke mess and that's what she's doing. My wife's been reading these books about the Holocaust and we all know how terrible that was, but there's this video I watched of a man who was a German soldier and he de factoed from the army and instead of doing what German soldiers were doing to Jewish people, instead he decided I'm gonna liberate these Jews and I'm gonna risk my own neck to save them and to bring them into safety and so there's this meeting, they set up this meeting between these two men 70 years later, this former German soldier and this Jewish man who was liberated by him and it's like this big event, there's a band, there's big crowd and you watch these two men come onto the stage and they haven't met each other and they're older, I think one was in like a wheelchair and one had a cane and they start walking towards each other and this Jewish man when they come together just begins to weep uncontrollably, literally like throws himself on this man and he's sobbing and he's kissing his neck and he's kind of like patting his face and everything that was gonna be scripted and everything that was gonna happen in that moment was just out the window because of the emotion and that's what this woman is doing. She's experiencing God in a way that she'd never felt possible and the Bible says that she's literally raining tears down on Jesus' feet, she notices that they're dirty and so she takes her eyes that maybe at one point had been flirtatiously painted to attract men and she's using them to wash the feet of Jesus and then she does something even more scandalous, she lets down her hair and that culture, you would, as a Jewish woman, let your hair down only on your wedding night for your husband, like it was part of, you know, your crown of glory would be to keep your hair and she just says and lets her hair down and begins to dry the feet of Jesus and then the Bible says she starts kissing Jesus' feet in a room full of people who are just staring at her, wondering what is going on. Lipset probably kissed multiple men now kissing the feet of her king. It's a beautiful picture of Romans 6 that says don't present your members as instrument of unrighteousness to sin, instead present your members as instruments of righteousness to God as those who have been brought from death to life. So she takes her eyes, she takes her hair, she takes her lips that had been used in sinful ways and she presents them now to her king and to Jesus in front of this crowd. And it's a beautiful picture of heartfelt worship. Then she takes that prized possession and maybe she didn't even know she was gonna do this but in the moment she breaks it open.   And that's what Jesus is experiencing but then you see Simon's reaction. So all of this is happening. I'm sure people, like I said, are shocked and then it says Simon, the Pharisee looks at this woman and he says to himself, he doesn't say it out loud, he says in his head, look, I didn't really believe he was the Messiah to begin with but now I'm sure he's not. In fact, I don't think this guy has any prophetic gifting at all because if he did, he would know what kind of woman this is, what her history is, what her background is and he wouldn't even let her in the room much less kiss his feet. So Simon judges this woman immediately but now he's judging Jesus for what he's done. And ironically, the very thing he doesn't think Jesus has, the prophetic gifting Jesus uses because he reads his mind and knows his thoughts. So he knows he's thinking this even though he hasn't said it. And Jesus looks at Simon and he says, I want to say something to you. And Simon says, say it, teacher. And he tells a story, a simple story. He says, there's a money lender. Two people are in debt to him. One of them for 50 denarii, one for 500 denarii. Both of them are forgiven. Both of them can't pay. Both of them have their debts released. Which one's gonna love him more? That's all Jesus says. He tells a simple story. Somebody owes a money lender money. Two people, 150 denarii, 1500. A denarii was a day's wage for a laborer. So what you would make in one day. So imagine 500. It's like a year and a half of debt of every cent that you make you owe. And 50 is still substantial.  And it's forgiven. Totally wiped away. Not a payment plan. Not debt consolidation. Not, hey, we'll work with you. Not the TV commercials you see all the time. Wiped away. Scandalously, like that never happens. Imagine your bank calling you and saying, you know that payment you make every month on your house? Yeah, just keep that. The house is yours, right? You'd be like, that will never happen. Exactly. That will never happen. And so this is just a crazy story, but it's so simple. And he just says to Simon, okay. Both of them forgiven. They can't pay. Who's gonna love more? And Simon, I think reluctantly answers. I suppose the one who had the larger debt. Okay, I get it. It's math, Jesus. You know, he answers. And Jesus' response is so powerful. He says, you have judged correctly. And then he points to this woman. And he says, do you see her? You offered no water for my feet, but she came in and she washed my feet with her tears and dried it with her hair. You offered no kiss, but she hasn't ceased to kiss my feet since she came in this room. And you gave me no oil from my head, but she's anointed my feet with her most prized possession. Her sins, Jesus said, though there are many, they're forgiven. And he who is forgiven much, loves much.  And then he looks at this woman and he says, your sins are forgiven. And then the crowd goes crazy. Like, what is this guy? He pays no attention to that. And he looks at this woman and he says, your faith has saved you. Go in peace. And what he was saying, the whole premise of this story, what he's saying to Simon is this, Simon, you know what your problem is? You're cold to me. You're distant. You're not able to love me because you don't think you're that bad. You don't think you really need a savior. You're over there haughty. You're over there judging. You're over there looking down on her, but she has felt the weight of her sin. She recognizes her need and the value of a savior.  I recognize my brokenness, my failure, my inability. And I accept your mercy. And that's why she loves me the way that she does. He was saying to Simon, you don't see your need. You think your performance, you think your ability to keep the law has somehow excused you from needing mercy, but this woman understands how desperately she needs a savior. And it's a beautiful picture of what experiencing the mercy and love of God produces in a humble and submitted heart, but it's also a picture of what someone who thinks their own righteousness is enough gives them the inability to see and know Jesus the way someone else does. So I wanna talk, I wanna just unpack that a little more, but first let me just say what Jesus isn't saying by what happened in the story. He's not saying that this woman was forgiven because she loved much. He's not saying because she loved much, because she broke open that, ointment, and because she kissed my feet, now I'm gonna forgive her, like she's earned her forgiveness. That would contradict pretty much the whole New Testament. So that's not what Jesus was saying. We don't earn the right to be forgiven. He's saying she already was forgiven, and the response of her heart is this heartfelt worship, is this extravagant response to the mercy of God. In verse 50, he says, "'Your faith has saved you.'" Not your actions, not what you did here today, your faith. However many days ago when you heard that message, when you knew that's for me, when you by faith said I can have a new star, I can have a new life, I can receive the love of God, that's when you were saved.  That's what saved you. So that's what Jesus is saying. And the second thing he's not saying is he's not putting like a premium on sin. He's not saying, hey, as long as you, if you sin a lot, you can love me more than other people. That's not, he's not trying to say, yep, so Simon, here's your deal, bro.   He's not saying that. It's not about, hey, should I sin more? In fact, in Romans six, they asked, like, should we keep on sinning so that grace can abound? And he says, no. Paul says, no, it's not about the amount of sin, but some people think that.  You know, or something? It's not what God's saying. He's saying it's not about the amount of sin. Listen, this is so important. It's the amount of sin realized. He, Simon, didn't think his sins were that bad. He didn't think his need was that bad. He looks at this woman with her past and her actions and her decisions. Obviously she needs a savior, but I don't, I don't struggle with that. I don't have those issues. And there's a spiritual pride that crept into Simon's heart and kept him from experiencing God and his love and his goodness. That's what Jesus is saying. It's not about sin amount, it's about sin recognized. Sometimes it's not so much what you're doing as who you're doing it to. And here's what I mean. It's real easy to judge other people's actions, other people's sins and compare them to yours. Like, well, I'm not that bad. I'm not as bad as Joe I work with. He's the worst.  So it's easy to judge other people, right? But it's not so much what others do against God. We need to realize every sin, every failure in our lives is in a front against a holy God. And so I use this example. It's not so much what you do as much as who you do it to. So let's say I'm having a family reunion, me and my brother getting a fight and I punch my brother. What's gonna happen? Not much. My mom's gonna be like, you're not 10 years old, stop punching your brother, right? And that's gonna be it. But what if I punch my boss? Sorry, Pastor Lee, I would never do that. It's the same action, different response, different consequence, different way of experiencing it. Now I'll probably get fired, I'll get in trouble. I'll probably get beat up, quite honestly. But then what if I punch the Queen of England? Seriously. It's the same action. It's the same thing I did to my brother. I didn't get in trouble. Now I'm probably gonna get shot for real.  Same action, different significance. And so that's what Simon didn't understand. He's like, look, at least I'm not as bad as her. She punched the Queen of England. I can't believe this is on a podcast. Nobody tell anyone that I said that. So he's not saying that, but what is he saying? And I wanna take the rest of the time that we have to just give you a couple of things that I feel like this story can help us in. First is this, recognizing this story beautifully depicts that you need the mercy of God in your life. Every single one of us. And when I say you, I'm speaking right now primarily to Christians, primarily to followers of Jesus. You still need to recognize you're coming to Jesus as a debtor. In this story, all they had was debt. They didn't have anything in their own strength to offer to the creditor. They didn't have any way of recovering anything. They came completely indebted and it was graciously wiped away. That's our relationship with Jesus. We come as broken debtors. And we say, but by your mercy, but by your grace, but by your goodness, I am incapable of doing anything of significance in my own strength. And that's what Simon didn't understand. And that's what sometimes Christians today don't understand. They think, okay, I pray a prayer, I give my heart to the Lord. And now I gotta get better at this and I've gotta somehow pull myself up on my bootstraps. I'm gonna try harder. I gotta stop doing this. I gotta start doing that. And it becomes about performance instead of position. And it is a dangerous way to live your Christian life. To go before God and say, look, I'm not perfect, but I am better than a lot of people and look at what I've done and look at what I'm doing and look what I've accomplished. And we hand that to God, like here's my righteousness and God is saying, I don't want that. It's filthy rags to me. We don't come before God with our resume and with our list of things we've done.  It's okay to need the mercy of God. It's okay to be broken. It's okay to be vulnerable. And to say it's not my strength, God, it's yours that I need to live my life the way you're calling me to. And I feel like sometimes there's a disconnect and we think, no, God really wants us performing. And I'm not saying that we don't care about sin. I'm not saying that we are slaves to that and that's our identity. I'm saying we have to recognize, like this woman did, I don't have anything to offer, but my worship, my praise and give you my heart. And when we do that, God says, my strength is perfected in your weakness. My grace is sufficient for your needs. As soon as you're able to put yourself in a place of humility and in a place of needing the mercy of God, he comes in like a flood. He's not holding you at arm's length. He's not dangling carrots of mercy. He is overwhelming you with his goodness and his grace. If you ask him for it, we have to recognize who we are and who God is because we're sinners. We are broken. Raise your hand in here if you've ever sinned. Okay, that's most of us. A few Christians in the back, nice, okay.  No, I'm just kidding. Raise your hand in here if you sin more than once. Okay, again, most of us. Raise your hand in here if you've sinned the same sin more than one time. Okay, there's no perfect people in here. Even Kendra, I'm just kidding. He's kidding, there's no perfect people. And we have to recognize that. I'm telling you, there is a culture, there is a culture wide idea that what we need to do is just accept who we are, grab the identity of that, and then somehow become comfortable with the way that we are. That's what society says. But the kingdom of God says no. You're not comfortable in who you are.   Christianity is not Tony Robbins with a little bit of Jesus.  You're not a champion. You're an overcomer but in Christ. You're a new creation but only in Christ. You have nothing to offer unless it's in Christ. Like it's not us. And we have an entire culture that just says, well, I was born that way or this is who I am. And we have an entire culture that's saying, well, just go with that. Grab onto that. It's okay, get comfortable in your own skin. No, don't. My kids will tell you, I sometimes listen to pink. And if that makes you think less than me, I don't know what to tell you. But her song, literally the Lord put it in my head. Should I sing it for you? I will. Pretty, pretty please.  Perfect. And then I was like, wait, what? Perfect. I'm not perfect. None of us are perfect. We're messed up.   I can see it from here. But we have a whole generation that say, no, no, no, no. Don't ever feel like you're less than perfect. No, feel like you're less than perfect.  Jeremiah said, this I call to mind, therefore I have hope through the Lord's mercies. We are not consumed for their new every morning. Great is thy faithfulness. Lamentations three, 20, pray it every single day. God, it's your mercy. It's the only reason I've not been consumed. It's the only reason I have any standing is the mercy and goodness of God. And I received that today. And my past doesn't define me. My failures don't define me. My own righteousness does not define me. The goodness and mercy of God is the only identity I can have and be full in Christ Jesus. Okay? So important. The second part that we learn from this though is that other people who aren't Christians also need the mercy of God. It's not just us. What is Simon's response when the woman comes in? He isn't like, wow, looks like she had serious life change. Praise the Lord. That's so cool. Look at that. She's really worshiping, crying hard, amazing. No, instantly he's judging. Instantly he has disdain and disgust for this woman because in his mind, she's the issue. She's the problem. She's the sinner and we're the saints. And in the kingdom of God, especially in the body of Christ, we have to stop looking at non-Christians as the enemy. They're actually the prize that we're fighting for as Christians. They're not who we're fighting against. They're literally who we are called to fight for. So we pray for them and we ask God, break our hearts for what breaks yours.  Everyone is in need of the grace and mercy of God. And sometimes as Christians, when we're dealing with non-Christians, we forget that at one point we were non-Christians. We were unbelievers. We're not somehow better than anyone else and that's why we have a relationship with God. He chose us. He rescued us. He showed us his goodness and his grace and now he asks us as his people to reciprocate that to the world around us. But we're so divided and it's so easy to look at other people and point out their issues and say things like, well, thank God I'm not like that. Thank God I'm at this church and we can't let those crazy people in here and we can't have them contaminate.  That's not a good church motto. We have to be a church and a body that says, everyone is welcome. Come as you are. Come in your brokenness. Come in your pain. Come in your sin. Come in your insecurity. And come into the presence of God and then it's the Holy Spirit's job to convict people of sin, righteousness and judgment. It's the Holy Spirit's job to move on people's hearts. The Bible says it is the kindness of God that leads people to repentance. It is not the judgment of God's followers. There's a huge difference between those things and we have to ask God, break my heart, forgive me for when I've been too judgmental, for when I've pointed at other people groups. It's their fault. It's the Democrats. It's the Republicans. They're the, it's those Muslims. They're the problem. It's homosexuals. They're ruining it for everyone. They're ruining mirror, whatever it is I'm asking you. Don't see through the lens of us against them in the kingdom of God. There is no us against them. There's only us praying for them to encounter the same love of God that changed us. That's what it looks like in the kingdom. And it's so easy guys. It's so easy to just come against everybody else and somehow insulate ourselves in our own kind of Christian cocoon. We have to be different. I'm not saying we lower our standards. I'm not saying we advocate for everybody's lifestyles or choices. I'm not, but I'm saying this and it's true. Love precedes any life change. If you wanna see someone's life changed who isn't a follower of Jesus, it's only gonna happen through love. It's not gonna happen through condemnation or judgment. And you're not gonna debate someone into the kingdom of God. It's the Lord asking you to love somebody who right now you think is unlovable. A person, a people group. Jesus was filled with compassion for people. This woman came forward and he was like, wow, I pray for you. But I'm also gonna pray for this self-righteous Pharisee. I'm not turning my back on him either. People would accuse Jesus all the time. Why are you hanging out with sinners? Why are you eating with those people? Christian people would say that about Jesus. And he said, because I'm a physician and they're the sick ones. Physicians don't only hang out with the well. No one goes to the hospital and they're healthy feeling 100%. Can I see a doctor? No, we don't do that. And Jesus says, I'm here for the sick. I came to seek and save the lost. And the mercy of God is for us, but it's for others. And the last thing is that we learn from the story that worship is the natural response to encountering the mercy of God. This woman, she didn't script it. She didn't have this all figured out in her head. She encountered the mercy of God. When your depravity, when your sin comes into alignment with the goodness and grace of God and you recognize how desperately you need a savior, you recognize all that God has done.  When you see that and you recognize that, I'm telling you church worship is the only natural outcome. It comes out of you. But you have to recognize your need first. That was Simon's problem. He couldn't really love God, only a little bit. Why? Because he didn't recognize how desperately he needed God. He didn't recognize how much God had really done in his life. And sometimes we have to remind our hearts that the gospel is not, hey, I'm pretty good, but I could add Jesus to get a few things better. No, the gospel is you're created in the image of God, but you're messed up and you're broken because of sin and you need the goodness of God. Ephesians 2 4 says that we were sinners on our way to hell, but God who was rich in mercy, not but I tried a lot harder. I did what I had to do. No, it's only God. And the expression of that is worship. And we're gonna end the service a little different than we normally do. And so don't stand up yet, but I'm gonna have you in a minute. And I don't want you to leave because I purposely tried to orchestrate this moment just so that you could have an opportunity to respond to the goodness of God in your life. Maybe you've been fixated on a problem, fixated on a relationship that's gone wrong, fixated on some circumstance that hasn't happened the way you wanted to.   Or maybe you're in here and you're one of the women of the city with a bad past, bad choices, bad decisions, and you're bearing the marks of those in any condition. The answer every time is the mercy of God. The love of Jesus who paid it all for you. And so I'm not saying this is the only way we worship and if you really lift your hands, you're holier or God loves you more, it's a heart thing, but all I want us to do in this moment is say, God, maybe for the first time or maybe it's been a long time, connect my heart to what we're singing. Let it be more than words on the screen.  Will you stand up with me? And Father, as we sing this song, as we meditate on this reality, we ask, holy spirit, speak to our hearts. Each one, not worried about the person to our right or the person to our left, right now, God, let us feel not just the weight of our own brokenness, but even more the weight of your love, your goodness, and your mercy in our lives. O praise the one who paid our debt despite ourselves, our brokenness and our weakness, our immaturity, God came rich in mercy and raised us from the dead. Let us never forget that wonder, that love, that love that loved us first, not by anything we brought in an offering, but came and searched us out and won us over. I want us all actually just to open our arms before the Lord. This is a moment to declare and to remember the love of God. Our circumstances, our time, our busyness can cloud and cause that truth to fade away. And we forget that it was God that loved us first. That we don't earn anything. We don't earn his attention or his affection. So I want you to repeat after me. We're gonna pray this prayer together and we're gonna declare it to our heart. We're gonna declare it to our circumstances and we're gonna declare it to the accuser trying to take that truth away from you. Say, Jesus, I thank you for saving me by your blood. I repent for letting that truth fade into the background. I declare I am not a slave. I am a child of God. I was once dead, but I am now alive in Christ. I was once lost, but I have been found by you. My sin has no hold on me, but I have victory in Jesus' name. Amen.


Tom here for more systems, and we're going to talk about WireGuard VPN and by no coincidence I'm wearing a shirt that says simplicity is genius And I thought this was something that really applied to WireGuard and I grabbed this shirt figured Hey This is a good shirt to wear doing this video because WireGuard has a simplicity to it that makes it very attractive and one of the reasons It's very popular What we're going to discuss in this video is how to set up your own WireGuard server I have all the time indexes below if you don't want to hear me talk about some of the fundamentals WireGuard and want to skip right to the tutorial part and I will be discussing some of the shortcomings of WireGuard That's the first part that I'm going to ramble on a little bit about and I want to make sure all the Understanding of the WireGuard VPN protocol is there, especially some of the fundamentals before we dive into all this Let's first feel like to learn more about me or my company head over to Lawrence systems calm If you like to hire short project, there's a hires button right at the top If you like to help keep this channel sponsor free and thank you to everyone who already has There is a join button here for YouTube and a patreon page. Your support is greatly appreciated If you're looking for deals or discounts on products and services we offer on this channel Check out the affiliate links down below. They're in the description of all of our videos Including a link to our shirt store We have a wide variety of shirts that we sell and new designs come out well randomly So check back frequently and finally our forums forums.laurancesystems.com is where you can have a more in-depth discussion about this Video and other tech topics you've seen on this channel now back to our content We'll start here at wireguard.com wireguard is a modern fast secure VPN that uses modern cryptography Pretty straightforward in terms of all the details they have and you know why you should use it It's simple and easy to use cryptographically sound minimal attack surface high performance well-defined Thoroughly considered and people that have followed my channel for a while may ask about formal verification They do have formal verification on the protocols themselves They have several white paper several write-ups and it's gone through quite a bit of review But one thing I want to mention here and we'll get into the known limitations in a second But they have an entire white paper that breaks down exactly how it works Lots of really good details I've actually spent a lot of time reading to make sure I understand every aspect of it Which is also why I want to get to known Limitations and some of the challenges with wire guard now they have a whole page on this But I'm just gonna speak to it one of the problems with wire guard is it does not have a username or password implementation They have left this up to third party and this may be a problem for some people because I've been asked Well won't this just automatically replace open VPN and not exactly those mechanisms that are well-defined and well open VPN for example has been around for a long time and Username password plus key authentication Multiple factors here has been around and very popular and well thought out in open VPN Wire guard just kind of left that aside and basically decided they were going to create a very basic protocol Have really solid implementation But leave it up to third party for all the other features around it and many firewall vendors will then come up with how they Want to implement wire guard now wire guard is a very easy replacement for something like IP sex So if you have the option to use wire guard and it has a full kernel space implementation in your distribution currently Linux has a full kernel space Implementation as of November 2020 the BSD one is coming for other firewalls that are ready to fully implement this in kernel space That are based on BSD But the firewall vendors are going to have to leave it up to them if they want to integrate username password in there And this is going to be a challenge because this is where the attack surface comes in wire guard The protocol is sound and just like open VPN the protocol is very sound but many vendors start doing their own thing of how they implement it and that System they create around it for username and password is where there may be some attack surface So even though the protocol is solid and if you were just to do a site-to-site VPN You probably wouldn't how much to worry about if each firewall vendor will have to examine how they do Implementation of things like username password because it's not part of the wire guard protocol It'll be their implementation of it and I bring this up because there's also a company called tail scale now the goal in the end of this video is you're gonna have a completely working VPN server to Connect to and wrap all your traffic in but we're doing this a hundred percent manual because the goal is also to have an Understanding of the fundamentals of how wire guard works Tail scale is well It's gonna be a solution for the majority who go I don't want to know the inner workings I want to secure VPN, but I don't want to deal setting it up And they're just a company that I have not used I bring them up because well They were just in the news for this and I tweeted this out talking about the embrace of money and people gasping to review it It's a paid service that just is a wrapper for wire guard. So it's not anything. I really I mean it might be a cool solution It's not something I plan on deploying anytime soon or actively using as far as I'm concerned Opa VPN is gonna be around for quite a while a couple other limitations one of them is deep packet inspection There is nothing in wire guard to support Obstocation what that means is anyone doing any type of really basic Deep packet inspection is going to be able to recognize the traffic as wire guard traffic TCP mode same problem open VPN all throughout there's an example again open VPN has some methods to one switch it to TCP mode and then hide it to make it look like SSL to try to fool deep packet inspection systems It's not like foolproof, but it's a way to hide the type of traffic wire guard makes nothing In no attempts to hide this and this may be a problem for some people So it's not likely to be a protocol that's getting around so to speak any type of filtering matter of fact It's quite easy to filter not based on the port but based on the definition of the traffic because any type of Obstocation will have to come from a third party and add on for wire guard. It's not something where guard has any native support for Well, they have a few other details in here I'm not going to dive into but they are really solid though on overall and I will at least mention on performance Well hardware crypto is a thing that helps some of the other protocols It's not even really needed in wire guard But maybe it will make it even faster in the future as of right now It does not have any well right now I should say it doesn't really have any need for hardware crypto Which is good because it then it works on a general-purpose CPU, but this is actually where potential Maybe someone will develop some type of processor that makes it even faster So that's some future thinking stuff, but I'll leave you links to all this Of course, it's all at wire guard calm of some of the things we talked about And if you want to dive even deeper than I plan to dive into the white paper now We're going to go to the tutorial part and I'm going to break down how to set up a server in digital ocean and The accompanying for your forum post so all the commands that I'll be typing you'll be able to find In the forum pulse that'll be linked below in the descriptions video So let's get started on building our server and getting routing set up Now we're going to be doing this in digital ocean because I've had an account for a while And I've always been happy a digital ocean It's where my forums and other projects I have are hosted We do have an affiliate code down below that does help out and give us some resources to create these and it helps out The channel if you want to use the affiliate link to sign up not required, but appreciate it now choose an image We chose a bunch of 20 dot 10 Basic and their $5 a month plan here really straightforward New York option and or choose region year Wherever you want to come out for your VPN. I chose New York for the purpose of the demo I already have my SSH keys installed in digital ocean And I've got a video if you were looking for more information on how SSH keys work Now I just check this box to say yes load those keys and then we give it a name Now I've already created the project and I have actually more than one I've created Specifically the one we're going to be using is this YouTube WG for a wire guard demo and the public IP address is 192 241 141 25 and no for anyone that may not be completely familiar with how Private IP space works just because it begins to 192 doesn't mean it's private IP It's as public IP is this one six dive one below it, but specifically this is the one we're going to be using Now we're going to go over here and walk you through what was changed in here So this is the YouTube WG demo and then we have The write-up that will be linked as well. This is this step by step write up So if you see me typing commands, you know, I'll have to grab them off the screen There's a link below to this right up in my forums and this video is embedded within so you whether you started at the forums I started this video. There's links back and forth to both now server site set up create the droplet load of onto 2010 Update it. We've already taken care of that, but I recommend it people ask How do you get your command prompt to look like that? Well, I do have the dot files and how that works So it's easy enough to go through and change those command prompt looks like that optional Maybe you don't want to change it But that's something that I have linked and listed in there The first thing we need to do is enable IP forwarding to have this server act as a Forwarding server so you can connect your computer to it and forward all the traffic So it comes out of that as a public IP address you need to enable forwarding. So to enable it right here We do the edit the ETC sysctl.cn C-o-n-f so sysctrl.conf in the Etsy folder. So go over here. We're gonna go to Vim drop that in there and Right here where it says net IPv4 forward equals one. So normally That's commented out all they did was get rid of it use Vim use nano use whichever you're one here comfortable with and that's how you turn it on So that's all we have to do is enable the forwarding Next step you can run sysctl-p activate it or reboot the server once you change that it doesn't change immediately It changes next time that's loaded But sysctl-p will activate the changes or like I said rebooting the server app to get install wire guard Pretty straightforward there just to go after get install wire guard. We've already got the latest one installed So no big deal pretty straightforward. This is all built right into Ubuntu. This is one of the reasons I chose it Everything's already in here now this part's really important You want to regenerate where I should say generate private keys if I did it again It would regenerate them you mass 077 WG Gen key now the way wire guard works WG is the server command so it starts up WG. There's also WG quick It's part of the command structure that we'll be using for this and what we have is we want to We'll go to CDSC wire guard and we want to create these So they have you mass 077 so the permissions are proper the default you mask would create them with other Permissions that could be a problem you have But there's the public key and there's a private key and don't worry this server when I'm done with this video We'll get destroyed so it's okay that I show these public and private keys Next step after you've created the keys is you're gonna want to Cat private key and I'll show you what that does so if we go here to cat private key There's the private key that we need from there. We need to create the WG0.com file so little Vim WG0.com now if it's not created Vim and typing a blank file name or nano the file name will create the file Then we got to put these settings in but we need to make sure we have this right here this private key I recommend copying it pasting it in To the configuration because you have to get that private key set up here So here is our private key and this is the settings for the While your guard server we're gonna ignore this part for now the peer settings We're gonna focus on the top part interface address 192.1 6869.1 you have to set up an internal IP address for the routing to take place It's kind of like an intermediary So this is an internal IP that we have then we need this right here This is a very important line for Masquerading to work properly in that so this allows the servers that are connecting Well, I should say the clients that are connecting to route through here via essentially NAS So they're gonna be able to come through from their location come through as Nat Assume the IP address of this particular server and then go back out post up versus post down post up means turn on all these Features when the wire guard interface comes up post down means shut this interface down when you're done You don't really need to post down but I left that in here that way It shuts everything down and turns everything off on this server whenever you stop the where guard interface Listen port I'm using the default listen port of 51820 use whichever listen port you want But you have to modify this tutorial of course everywhere that listen port comes up and there's that private key So when we said cat private key and dump that out that just simply goes here So straightforward private key, please note. There's a private key space Equals space then the private key and yes, there's an equals at the end So don't add a space there. It's very important that the formatting is right and I have the formatting in here Exactly the same because this is all copy and pasted other than your private key goes here So someone doesn't try to use my private keys and mess things up They are private and public key pairs if you were to copy some of the settings I have and put my private key but have a different public key you'll get problems with this system. All right Now that's pretty much it for the interface setup and essentially the server side set up peers are those Systems you're going to have connecting to you and we're going to go and look at our peer settings, which are pretty much the same We go over here and same thing. This is a Debian Server that I set up just for this and it's behind a firewall It's just one of my lab systems that I had conveniently located and it's running Debian Linux bullseye so by and a kernel 5.9 which has the Wireguard client built in we did the same thing updated it loaded wire guard And now we can go over here and actually we can just jump right to the edit at see wire guard And we're gonna create a config over here. We're gonna call it youtube.com I just wanted to make sure there are two different names. I could have called this anything I want We called it WG zero. I don't know about anything, but within reason you can give it different names we're calling this one YouTube VPN dot co nf and I did this to try to be as clear as possible when I'm on The client side, which is this Debian machine versus the Ubuntu machine That's gonna act as a server that waiters kind of a distinction between them. So when we're in here We have the peer as in this is its peer. So this is the server side This is essentially the client config the YouTube VPN So this is where the public key is and the public key and we'll actually exit out of this real quick And we can go cat slash at see wire guard Public key There's the public key of the Debian client system They want to connect and you can see we'll just look at the last couple Z zero pkw and we see Z zero pkw So this is what allows us to have this system connect to it So we did the same thing generate those keys and we got to put the public key of this server over here And let's before we go any further jump into this This is kind of a layout so those of you that like me mapping it out in a tool This is done in draw.io and you can see this is the interface config for the Ubuntu wire guard server This is the interface config for the Debian test server and both of these are also laid out in that forum post So this particular box is behind a firewall It's gonna go through here go out to the internet and connect to this the same thing the public key of this server is Located in the config of the Ubuntu server and vice versa. It's true the public key of the Ubuntu server is going to be what we put Into the Debian test server So that's all you need in terms of how wire guard authenticates as I said, it doesn't have a username and password It does all of this with peered authentication with public key. So there's just a Public key over here a public key over here as long as we know each other public keys We heat the private keys private. That's all we need to know to have these connecting So let's go back over to our config I'm gonna go here look at it now comes the endpoint and so we have the public key over here the endpoint There's that <IP_ADDRESS> 141.25 colon 51820 for the ports now we have allowed IPs Allowed IPs forward all traffic to server is what I have here But if you were to say we'll insert another line afterward and we need to do allowed IPs equal <IP_ADDRESS> 24 Then whatever other networks we could then and we'd have to comment this one out This would allow for essentially a split tunnel type of routing you would specify what networks and IP addresses are allowed And this means the client would connect and only route that particular traffic But where guard has the option to route all traffic through so this is where if you were doing split tunnel You would just split it here if you're not doing split tunnel you on a full tunnel where all traffic you do 000 slash zero and forward all traffic to server This is it. This is one of the beauties of wire guard is that's all the config we need to get that working So we'll go ahead and exit that And then we'll go ahead and exit this Now one more thing that's in the tutorial here is getting this set up so it works on boot So one of the things that we have here is if you want the WG zero interface to be active on boot You need to run system control enable WG dash quick at WG zero so this command right here Let me talk about what that does so where guard when it's up and running and we'll actually go over here We're on the server the digital ocean server clear and We use the WG quick command to down The interface so we went down the interface. So there's nothing in here. So if you do WG show Wire guard show, there's no connections. There's no tunnels. There's nothing here. So we're gonna go WG quick We're gonna up and we're gonna up that interface WG zero That's it. There's the entirety of it and we do W show The interface is just sitting here waiting for something to happen So it dumps out the public key right here the listening port all UDP This is the peers that are allowed. So currently there's this peer right here is allowed persistent keep alive every 25 seconds Now I won't get too much into it persistent keep alive You may or may not need that depending on if the client is One behind nat and two whether or not you're worried about those connections going stale what that means is if you have a client and we'll explain this really quickly here and You have like this deviant test client and we have it connecting to here because Silence is a virtue according to the documentation of wire guard, which means it does not make a bunch of noise to keep the tunnels alive and It doesn't really need to so if both devices are on public IP addresses anytime they initiate traffic it automatically renegotiates and starts passing traffic, but They keep alive if you want the Ubuntu Wire guard server in digital ocean to be able to talk to the deviant server whenever it wants to even though It's behind a firewall you need to occasionally send a keep alive to keep the state table alive If not, this will go quiet over here and then this will not be able to initiate a connection over here That's if you need that Let's say and we'll use the phone as an example if I'm using a phone Which is behind a firewall and I want it to connect well I only want my connections initiated from the phone So in that case I wouldn't want to keep alive or if I didn't care whether or not this server could talk back to this I don't need to keep alive because as soon as this server initiates a connection It'll go through and create its own state table or a fresh one if the old one expired and go through there So they have a better explainer if you look up the keep alive options inside of wire guard It goes more in depth of different scenarios, but we'll go ahead and leave it in for purposes of this video But it just of note if you were using a phone less likely you'll be using it there So this is up and running if we go to if config There is wg0 wire guard just adds an interface once you bring these up So we have our standard e0 e1 which is an internal shared your local and then wg0 Now let's go over here and we'll do wg quick and you're probably thinking I want to up the Make sure you probably have an interface up. No, none of them are up. So We actually go here wg quick up and we'll type in YouTube vpn before we type that let me show you what if config brings up. There's e0. There's our local ip address And there's the local interface. So there's only the couple interfaces, but when we do wg quick Up and we type in youtube vpn Then we type if config again We have a interface called youtube vpn Now this is actually kind of neat and we'll play something real quick here wg quick down youtube vpn And we'll go over to Let's see wire guard and we'll list. I have a handful of different ones in here. I have a wg1 Let's even do this. We're just going to copy the youtube vpn to tom.com Now we're not changing anything about it. We're just creating a copy, but now when we do wg quick again up We'll call it Tom and then we go in if config now. There's a tom interface Wg0 makes the most sense from a logical standpoint like we have over here Because it's wire guard interface zero and yes, you can have multiple interfaces because we can even do wg quick And then Up and then we can do the youtube one and then we go if config and now we have a tom vpn and a youtube vpn So this is kind of a fun thing about wire guard is you can just create creating all these different interfaces This is also why wire guard Is not a protocol that's very big because after this once it creates interface all the other routing information everything else It's just standard linux networking and routing to configure this. So now we'll go back to wg quick Down and we'll take down the youtube one All right and with all the interfaces brought down we're back to just the basics Now let's bring the interface pack up so we can actually do some wire guard commands here So wg quick we'll up and we're going to just use youtube vpn like we have in the write up And I want you to notice something here. There's not anything really to show So if we Look at it latest handshake six seconds ago, and we should be able to ping now 192 168 dot 69.1 Which I can ping it and 69.1 if you didn't notice is this ip address here There's not anything to tell you or do anything about the interfaces Like making noise as a matter of fact Without restarting this particular one. We're going to stop this one. So we'll do wg quick we'll do Down wg zero. So we took it down broke the connection And now we're just going to go ahead and wg quick bring the connection back up Now normally and once again, I'll use open vpn example You would have to go to the client and tell it to reconnect re-establish those connections There might be some type of delay In the world of Simplicity and it's going to take a second here because it's realizing that old state table Probably broke But it will renegotiate without any noise without you having to re-authenticate and just start talking again to that server And that's it all done in real time. I didn't edit that or make a jump ahead That's this slow delay from this server starting it to the route and connection being re-established It's really fast overall when you're doing Things get moved around matter of fact if there's any type of roaming because we did not specify like a specific ip that this has to come from in terms of this Debian client so if it were to move or it's behind a different ip address That can happen relatively seamlessly because as soon as you negotiate the negotiation process extremely fast And you don't have to actively take it up and down So we didn't have to do anything on here. It tried the old state table. It waited It realized it was broken it established as a new one automatically and now we're talking Of course the next question is If we go here to if config actually we want to know the ip address this let's uh if config and We see that 69.2 is where we're routing everything over but if we type the route We're now pushing out everything over here So 192 68 is now the default route the youtube vpn This means all the traffic is going to be tunneled there now if you're not familiar with the website If config.co It's a really handy and i've blurred out my Information here, but this website tells you what's your ip address very similar to what's my ip But the cool thing is you can use curl to find out what your public ip address is now i've blurred out my public IP address at my office here, but let's go over here and we're going to type curl if config That's co After I spell it right if config.co And it gives me 192 241 141 Dot 25 and if we do wg quick down The youtube vpn And then we go back to curl i have config.co I'm blurring it out, but that's my public ip address So that quick we can bring it up and down and actually let's go Wg quick and go up actually clear Then we're going to go curl if config.co And we're back to routing traffic all back out of our digital ocean vpn It very quickly brings these services up and down. There's not much delay Especially when you already have the server running. I can take this down bring it back up There's not a long negotiation process wire guard goes through to get connected and routing again Now the next thing I want to do and we're going to leave this depian client Up and running and it has the ip address of 192 168 69.2 internally And we're going to leave it up and running while we connect another system and Working in linux is pretty easy for me, but I know a lot of people are going to be using windows So I have a windows client that I'll show how to do this as well And the nice thing is there's already a wire guard client for windows pretty straightforward We go here to wire guard wire guard dot com slash install I downloaded the windows installer and then we ran through the installer Really just a couple next and yes and now we have to build our tunnel So we're going to go here and we're going to add an empty tunnel and call it youtube Demo so we can call it whatever you want youtube demo sounds good to me And we have here the public key don't worry about the private key once again I'm going to be destroying all these when I'm done with this video But we need to get the public key over to the other server So here's that public key and let's get the server setting set up. So we're going to switch back over and this is our youtube wg demo server and we're going to go ahead and take down the VPN so we'll go wg Down wg zero Them such the wire guard wg zero And now we have to add another peer. So here's that test debbie and client peer public allowed persistent keep alive And we're going to create another peer over here. Let me call this peer Windows client. Here's the public key. There's the allowed ip's 69.3 Because we're going to increment up Lee now as I stated before There's not any type of DHCP system or any IP addressing system inside of wire guard natively You can rely on external services for it in this case because we're mainly creating the files We're just going to increment to the next IP address But you can set these however you want as long as you're within the address range here, which is 192 168 69.1 slash 24 giving it a slash 24 range. So we'll go to dot three here There's that public key And there's the IP address that we want go back over to here There's that same public key that we copied over there and now we got to put some settings inside of here And we got to put the peering settings in And it's the same as it was on our Linux system There's the public key that public key is related to the public key of a bunch of server And we put that public key allowed ip's endpoint 192 168 141 dot 25 And the same thing colon 51 280 one more thing we have to add up here is we got to assign the IP address So we're going to say address equals 192 168 69.3 slash 24 And we we go so here we go hit save Block untunnel traffic kill switch. I like that they built this right in that means once we wrap this system It is going to lock in all the traffic and send it out over through that tunnel So if you're looking for the whole vpn solution, this is the way to implement it So we're going to hit save but we're not going to activate it just yet And the reason why is because well, we didn't Save this yet. So we're going to go ahead and Save this and then we do wg quick Up wg zero All right, so now this is turned up and running Go back over here Go to our wire guard and we're going to hit activate Simple as that. It's activated now. We should be able to go to What's my ip? And that didn't work meaning we did something wrong. So let's troubleshoot this real quick and figure out which command Tom copied and pasted wrong I found it. I mistaped the public key right here because I copied and pasted a wrong one So this public key we'll go back over here Did not match inside of here. So we're going to go here and vim where guard comf Delete this public key and replace it with the right one. So I figured I'll leave this mistake in the video instead of editing it out So there we go. There's the public key now we can do wg quick down Whoops down wg zero And we'll do a quick up wz zero Oh and for those wondering, yes, we could do a system control and restart it as well I just started using wg quick and starting familiarizing myself with the wire guard commands But now this should bring the tunnel back up and running We'll go back over to our windows with the correct one in now And toggle the tunnel. So we'll hit save Activate we'll do a ping test real quick feel weird using Oh, look, it's working feel weird. Sometimes using windows. I've used linux so much Sorry about the little typos there. Now, let's do it. What's my ip And we see the 192 and of course I prefer to go to if config.co Which failed this time for a different reason The dns isn't set I have it blocked a tunnel and I had it forced to be a local ip local dns address Which we can fix pretty quickly. We're going to go change your network settings for that And you can specify dns settings right inside of here I'm just choosing to use cloudflare's dns to make it simple But you can specify another dns server or even other local servers, etc. However, uh, you want to specify them But we'll go ahead here and hit activate now Make sure dns is working Hey, look it's resolving and that means I have config.co should work now And it does and the ip address is the same as our digital ocean server So I left all these little mistakes in here because these are some of those troubleshooting things you'll find And of course go through the documentation I encourage you to do that if you want to know all the extra features that are available inside of wire guard of note So this ip address is 192 168 69.3 and if you remember our debbie and linux client was 69.2 So if we go back over to that Make sure the tunnel is still up and running Yes, it's still getting the right ip address We'll go back over to windows. Let me go over here and we're going to do a ping dot too And now i'm actually pinging all the way out to the wire guard server round trip and coming back So i'm able to talk to the servers on there This is one of the natures of the way the default settings are is all the clients that Attached to this same interface are all in that same 192 168 69 subnet There's no rules written between them now You could write rules between them not necessarily in wire guard, but with other firewall utilities That are built into linux But by default just so you know if you build this out all of the clients that you connect Also will be able to talk to each other that may be a feature you want that may be a feature You don't want one of the ways to easily get around this is we can build multiple tunnels on the wire guard Server so we can build like a tunnel for one group and another group and another group That way those groups don't necessarily talk to each other or you can go out and build rules between them Now hopefully this is helpful for setting up your wire guard server I know it's a lot to go through there's a lot of documentation But i wanted to do this video To talk about the raw settings of wire guard having these fundamentals to me really helps understand When you start using it inside of a firewall or inside of another Deployment or integrated with something else like i said There's popular tools out there tail scale being one of them that i mentioned at the beginning That offer basically an interface to put on top of this as the wire guard protocol becomes more popular And we see more vpn companies implementing it each one of them will do their own thing on top of it But whenever you want to get deep into network troubleshooting I always find it helpful to understand the fundamentals of how these things work And that's what i wanted to cover in this video So of course i'll leave link to the forum post feel free to comment down there But this should be enough to get you started and start playing with it and gain better understanding of it Also because everything is run from the command line with this with wire guard You'll probably find if you spend some time on github A lot of automatic deployment utilities And of course you can think of ways to automatically deploy this yourself by being able to script all these installs And all the functionality of it. It's actually a pretty Very much powerful system To get up and running for you know tying seams together even if they're behind firewalls Hopefully this was helpful and thanks And thank you for making it to the end of the video If you like this video, please give it a thumbs up if you'd like to see more content from the channel Hit the subscribe button and hit the bell icon if you like youtube to notify you when new videos come out If you'd like to hire us head over to laurancesystems.com fill out our contact page And let us know what we can help you with and what projects you'd like us to work together on If you want to carry on the discussion head over to forums.laurancesystems.com Or we can carry on the discussion about this video other videos or other tech topics in general Even suggestions for new videos. They're accepted right there on our forums, which are free Also, if you like to help the channel out in other ways head over to our affiliate page We have a lot of great tech offers for you. And once again, thanks for watching and see you next time


Now, let's say, for example, that I'm dealing with people who are not IT guys, the doctor came up to me and said, oh, hey, what's the most common reasons for people to come visit? That way I can kind of gear things and buy proper supplies. Well, okay, here's the problem. He doesn't know how to use access. He went to med school, and it's been years since he had to take CIS 110. So what can I do? Well, I can use the create tab again, and instead of going into my form, query or tables, I can go to my reports section, and I can actually go to my reports wizard. And as you can see, I can get a number of different options. Instead of just my tables, I can also go with my queries. For example, common reason for visits. And I'll just go ahead and add them both and just see what happens. We hit finish. You see, I've now got an entire printout sort of readily available for my doctor guy, to my doctor guy, could clearly be a woman, my doctor gal, to see this stuff. And it's already organized, and this is ready to print. I can click over here and guess what? I can do a print statement on this. Now, again, I closed out of that. I don't want to really deal with this nonsense, but let's say we want to make a little bit more complex one. I'm going to come over to my create tab. I'm going to go to report wizard. This time, I'm going to select my invoice table, and I'm going to select everything from my invoice table. Now, from here, what I'm going to do is I'm going to go ahead and click on next because it asks, how do I want to group things? Well, I can group things because I had that visit ID, remember. I can group by it, or I can choose any other kind of way I want. I do want it to stay this way, and I'll go ahead and hit next. How do I want it to be presented? What do I want to be my order? I'm going to say I want it in ascending order of my dates, makes perfect sense. We click on next. How do we wish to have my form viewed? I can say stepped, and we get a little sneak preview of it. Here's block, and here's outline. I'm going to say go with stepped because that's what's asked on SAM. I'm going to go ahead and hit next, invoices, report. We hit finish, and you see now I get exactly that. I can see when a particular report was done. Now, if you look at it, it looks kind of, it's getting cut off over there, so I can clean this up. First, I have to close out of my print preview. Again, I don't want to do it over here. This is a little more than what we need to do for this class, so I'm going to just switch my view. You can see we get the nice little report view, but I'm going to switch it to my layout view. Layout view is exactly what we were doing in tutorial one. This allows for me to reorganize my data. Visit ID, for example, doesn't really need to take up that much space. It's only four characters long, so I can come in here and shrink that down to about there. My invoice date. My invoice date, well, I'm going to first expand it over this way, and then shrink it over this way. If you accidentally shrink it too much, it will look like that. The pound symbol for Microsoft offices is just to tell you you're dealing with numbers and you don't have enough space on the screen. I'm going to move my invoice date. I do have to do both of them. I know it sucks, but I do have to do both of them. I'm going to move my invoice number as well. If I want to quick cheat, I can hold down my control key and select multiple things. Notice I have these both selected, and I can resize both of them at the same time. That's pretty nice. Do the exact same thing with my invoice amount right about there. Invoice item. Boom. Boom. And that walk-in information. That's some information that I do need. I'm trying to see, let's see, where would it be? Ah-ha. Yes, that's page one of one now. Let's see. I'm trying to find out where my walk-in page set up. Let's see. Where would you be? Landscape? I don't know. I guess it's not even showing it. That's perfectly fine. That's not going to be the end of the world for us on our end. You'll be fine without it. Don't worry about that. You can see now I've got this all built out as one. If I want to continue to doll things up a little bit, what I can do is I can change my theme, for example, and go through all the same themes that we've been dealing with inside of all of our Office products. I'll just go ahead and select Integral. Look at that. Now it looks nice and clean and I can work from there.


What qualities do you possess which will make you a good civil servant? Sir, I believe what I can draw at the outset from my legal experience is the ability to communicate, the ability to organize, the ability to convince and the ability to delve into legal policy with clear language. This is at, you can say, the background level. At the ground level I believe that my experience as a lawyer in terms of organizational and institutional discipline can add to civil services. Good. Can you tell us about some judgments of the Supreme Court which has redefined the constitution given a new meaning to the constitution? Sir, in any particular sphere or... No, basic constitutional issues which has redefined the powers of the executive, the legislative. Sir, the first judgment that is the Locust Classicals judgment which added another whole new dimension to the constitution was the Keshavanan Bharti case, which added the concept of basic structure. It basically dealt with the legislature's power to amend the constitution and it was limited to the basic structure. Then, sir, if we go a little forward, the relationship between fundamental rights and direct principles. It was determined in the Minerva Mills case. That is also considered the Locust Classicals judgment. Both of these, the spin-off came in Vamanrao and Iyer-Pohelo cases where what used to happen was once the basic structure doctrine came into being, the legislature used to circumvent the process by adding it to the Ninth Schedule legislatures. Iyer-Pohelo case, which is a Ninth Judgement, stated that post... Affirm, Vamanrao stated that post 24th April 1973, all the judgments that are added to the Ninth Schedule will also be checked for... Open to... Yes, open to judicial review. Then, sir, of late, if we come to the recent judgments, we have three judgments which are in the previous year and the year before that. One is the NGAC judgment, which has spoken about the independence of judiciary and struck down the NGAC Act. Another case is the Right to Privacy judgment, the Justice Puttu Swami judgment, which came out last year, which has affirmed the Right to Privacy as a part of Article 21. Was Right to Privacy not a fundamental right before this? What were the causes? Sir, actually, the position of Right to Privacy was ambiguous. In the two cases of M. B. Sharma and Kharal Singh, actually there it was obit-up because what happened was that... Yes, sir. So, another judgment? Yes, of course, sir. The Sharaya Banu judgment, Triple Talak, where two sets of majorities have come out. One led by Justice Keher, which said that Muslim law is personal law and protected under Article 25. However, the second majority, which was the real judgment, which said that Triple Talak, has been declared unconstitutional. Okay, now, coming to this. Subsequently, the government came up with a law, which is yet to fall. Do you think there was a need for a law when Triple Talak, instant Triple Talak, means nothing after that judgment? Yes, sir. Sir, what is usually seen is that a position of law with legislative backing has more force in terms of enforceability as well. Another thing is that perhaps the government saw this as a view as a point towards moving towards uniforms that were called in Article 44. So, those were the twin purposes. Why do we need to criminalize something which does not exist? Because after the Supreme Court judgment, it has no validity in that thing. So, why do we need to criminalize Triple Talak? Sir, one of the theories is that punitive approach carries a deterrent effect. Now, if you criminalize it, then it will have a deterrent effect on people committing instant with Triple Talak. Looking at the social reality. Yes. So, the fear of punishment is going to act as a deterrent. Okay. RTI. Yes. What are the views on legal position on political parties being brought within the Ambitra party? Sir, it has been a contentious issue till now. However, I believe since political parties are an embodiment of... Are you aware of some CIC judgment on this? Sir, there was a recent... Not so recent any longer, but there was a judgment on RTI and political parties. But I'm not sure what exactly it said. Okay. Now, tell us. There is a dispute between India and Pakistan and the ICJ. Yes, sir. There was initial legal hurdles which we crossed. And there would be some legal issues involved subsequently. What are these? Sir, the initial hurdles were whether ICJ had jurisdiction over the government. Now, what happens is under Article 36 of the ICJ statute, there are three ways of exercising ICJ jurisdiction. Sir, once ICJ accepted jurisdiction which was opposed by Pakistan, ICJ assumed preliminary jurisdiction to hear the matter. How did it bypass 36 declarations by India about Commonwealth nation being barred? Yes, sir. Sir, there is a principle called forum prorogatum, which is that once Pakistan and India have exceeded our parties to the ICJ statute, so once they have their parties to the ICJ statute, and there is a principle of customary international law involved, which is part of the Vienna Convention on Consularization. India has signed and Pakistan has also signed a protocol to the Vienna Convention. Yes. Which gives confidence. Yes. Now, let's talk about that. Now, last question.  What purpose does it serve? Sir, judicial impact assessment is brought up in discourse of late. What happens is that once judgments are given by the Supreme Court or the High Court, judicial impact assessment will be another body or another organization which will look at the impact of those judgments and whether the certitude of those judgments can be determined or not. I'm afraid. I don't think it's about the burden that laws will, new laws will put on the judiciary and for the delay in number of cases. Like we had 138 cases. Right. Okay. Thank you, sir. You are from Haryana? Yes. Sir, I was born in Haryana. Okay. I remember the relation.  Yes, sir. Is it skewed? Yes, sir. It has been improving in the last three years. It has come to 914, I believe, per 1,000 minutes. Even now it is skewed? Yes, sir. Even with 914, which are now come out to it? Okay. Yes, sir. You know government of India have come out with some schemes and also some act for prevention of female fetishite and for welfare of the girls child. Yes, sir. Can you name them? Yes, sir. Sir, the main scheme that was launched in Haryana by the PM was Viti Bajau, Viti Padau. The two acts, sir, are, there are two acts. One is prohibiting sex selection and one is prohibiting sex-selective abortions. So, sex selection is the PCBNDT Act, which came in 1993. 1994, it came to force. And the medical termination of pregnancy act in 1971. That prohibits sex-selective abortions. Okay. That is about the prevention of the pre-natal sex. Yes. And now that is pre-natal forced pre-natal sex. Yes. Okay. That is one, then. These are the two legislations, sir. The schemes include Viti Bajau, Viti Padau, as I said. Then there's Sukanya... Viti Bajau, Viti Padau. Umbrella scheme. Yes. Number of projects. Yes. What are those schemes? Within that there is, if you have Sukanya, then you have movements like Selfie with a daughter in Haryana. Then you have Gudagudi Bolj. These are also... ICDS. ICDS. Yes, sir. ICDS. Yes, sir. And midday milk scheme. Midday milk. So that is... Yes, sir. Yes, sir. Yes, sir. Yes, sir. Okay. I would ask you about Swachh Bharata Meera. Yes, sir. How it is very important and what is the present progress? Sir, it is important because as we have progressed as a society, we have seen that Swachhata has not been our main focus over the past few years. So it has wide-ranging impacts on our health, on our general standard of living, on our education, on how you see, even how we are perceived in the international community of nations by the outsiders. So all those factors, which is why it is important. The progress, sir, in terms of rural sanitation, I believe the latest figures are that it was increased from 40 to 44 percent to 63 percent. So in the previous years, economics have... It came out all in newspaper. Sir, 63 percent is... No. Okay. At the 8 percent to 76 percent. I am sorry. How many states and union territories have declared them open defecations free? Sir, there are three states which are rural open declared... No, no, no. You are right. They replace a lot of figures. You read up. Okay. Now I will come to something else. Yes, sir. What are the commonalities between these Swachhata Kabir and Namami Ganga? That is another... Yes, sir. There are some common... Yes, sir. Sir, Namami Ganga, the commonality... Outright commonality is that Namami Ganga includes Swachh Bharat around the Ganga Brahmas. So that is the outright commonality. But of course the base is that they both look at cleanliness. Correct. Namami Ganga with respect to Ganga and Swachh Bharat with respect to our rural and urban... That is one. The other is Swachh Bharat has open defecation free whereas Namami Ganga also looks at effluence within the river. It looks at how our industries along the river are... That is all. They are the components of the scheme. Yes, sir. The commonality one you mentioned clearly. Yes, sir. Behavioral changes. Sorry, sir. Behavioral changes. Right, sir. You know the... Behavioral changes. Behavioral changes. Okay. Thank you. You have a very impressive bio-data. How many courses, how many gold medals, publications and sports? Yes. What should I ask you to come? Tell me about your research paper which was published. Ma'am, I can start with one on the concepts of tying and bundling. Or I can start... No. What is this concept? Ma'am, it comes under the Competition Act. The principle is the main case from which it spun off was the Microsoft and Internet Explorer case in the European Court and Antitrust legislation in the US. So what happens is, with service providers, with their main product, you know, as a bundle, they tie various other products which consumers are forced to buy. So here if I ask you, tell me something about net neutrality. What would you say? Ma'am, net neutrality is treating data on the Internet as all equal. It is no... So there was this free basics and... Yes, free basics and... What was all that about? Ma'am, what happened was that, for example, Facebook, free basics, with their Facebook account, they were tying a lot of peripheral applications which came free along with usage of Facebook for people. Now, that would have ideally... For Facebook, it was a commercial interest, but for users, access was discriminatory. Would it be a detriment for some of the startups? Yes, ma'am. It is perceived as a detriment because they would have to enter into a revenue-sharing agreement with Facebook. Okay. Now, you've also played a lot of games. Yes, ma'am. Played squash. Yes, ma'am. How is it that India is not doing so well in this area? Pakistan and Pakistan, their teams are doing so much better. Yes, ma'am. Why? Ma'am, one is that we are quite focused on cricket as our main sport. Historically, hockey, but not any longer. The other is the institutional support and the organizational support is not as much as it is in the other sports. Sir, in cricket, since you mentioned cricket, we had lots of problems with the BCCIs. So, do you think the Lodha Committee recommendations are going to help cricket? Ma'am, I believe it's a good start because we did see cricket administration being... it had a lot of ills in the system in terms of MPs and bureaucrats serving long tenures, there being conflicts of interest. So, on those principles, I believe, what has been stated by the Lodha Committee is in the right direction. Now, you're from Haryana. Yes. We hear of the cops and we hear of other killings, some social problems, humans. What is your view on the cops? Ma'am, actually, historically, they played a positive role in the society. And presently? Present. Unfortunately, the elements that you can say have taken over the Khabban chariots, they have negative spillovers in the society. So, has the Supreme Court said anything regarding the cops? Yes, Ma'am. Recently, the Supreme Court, I believe yesterday or the day before, the Supreme Court has observed, it's not really a judgment, but the Supreme Court has observed that cops have no right to interfere and marriage. But one of the arguments that was brought on was that, you know how even the Hindu Marriage Act talks about sub-india and sagutra? So, that talks about five degrees on the father's side and three degrees on the mother's side. So, the argument is that either you change the law or you permit marriages. But that said, Ma'am, I think the Supreme Court is right in pointing out that it is a personal choice. Okay. Now, there is this problem with the Yamuna-Satras-Lin Kanai. What is the present status? Ma'am, the present status is that Punjab, after the new government came in, has withdrawn the idea of their legislation. They had to bring about a legislation. And Punjab has said that they will not. And they have not, they have severed any proposal of sharing of the Kanai as such. And they want to start returning the land to them? Yes. Yes, Ma'am. Now, last question, Neethi, are you aware of it? Yes, Ma'am. Are you aware of it? Yes. Ma'am, I think, I believe it has two latters. One is focused on cooperative federalism, which is dealing with the states and engaging states and bringing states on board in the government of India's programs. And the other is their knowledge or policy think-tank role. All right. Thank you. Right. I'll ask you a few questions. Which agency or institution in India has been in the forefront in climate criminalization of politics? Sir, in terms of a non-government organization, we have the Association of Democratic Reforms, which brings out facts and figures. But if you say which organization is the Supreme Court, which through its judgments has attempted to... They have some judgments. There are some judgments in this case. Sir, the recent landmark judgment was a Lili Thomas case, where they struck down section 8-4 of the representation of people that 1950s. Right. That was one. Sir, one was... When they brought in the nota, none of the above option. One was Jan Chaukidar's case. The latest judgment? Sir, the bar of six years plus conviction came in the Lili Thomas case, which is... Right. That is now... Yes, sir. The latest last year and towards in October, remember, it was another... This type of look. Sir, in which direction... Special groups. Yes, sir. To set up 12 fast track codes for... Yes, it was... It was being done. It was chasing the government to establish... Yes, yes. ...government has to send a recommendation. It is appropriate. That's right, sir. Okay. What is unclosed? UNCLOS. Yes, sir. Very brief. Yes, sir. Unclosed is the United Nations Convention on Law of the Sea. It was brought into force in 1994, drafted in 1982. How many countries have accepted it? Sir, I don't know the exact numbers. Is it voluntary or it is mandatory? Sir, all conventions are voluntary, but UNCLOS is also drafting of what was believed or considered by the ICJs already a part of customary international law principles. So, but of course, Article 21 of the Vienna Convention on Law of Treaty says that any convention is voluntary for every country. Sir, if I may... What is Supreme Court's position on branded drugs and generic drugs? What is its latest position and what was that judgment? Yes, sir. So, I'll start with the judgment. It was in Novartis case where Glyvik, its prime anti-cancer drug, was not granted its second... What was the judgment? So, the judgment is on Evergreen, which is Section 3D of the Baton Act, which is where they've said that any drug that has to continue its beta needs to have an appreciable improved impact... Efficacy. Efficacy, apart from what its original drug... Can't be only an incremental... Yes, sir. And Glyvik was only a beta-crystalline form of it. Okay, got it, got it. Now, Google has been fined, you must have read 136 crores. Right, sir. What is the reason it has been fined? Right, sir. Sir, I believe it has been... I'm sorry, sir, I'm not sure, but if I am maybe in the right direction, I believe it's because of its search engine being monitored to Google's favourite search results. That was the main issue. They call it search bias. Search bias. It creates a search bias. Yes, sir. Now, does it conflict with the principle of net neutrality? Yes, sir. I mean, whatever the finding of the CCI is. Sir, Praveh FSI, any meddling with treatment of the internet or data does conflict with net neutrality. That says, sir, Google... Who controls internet? Sir, the internet is governed by ICANN, which is... It used to be dominated by US government, but now it has been... After Dilma Rousseff from Brazil's initiation, it has been an independent organisation. What is global commons? Sir, global commons are... For example, you have the high seas, which are considered as quality... Just name... Yes, sir. Sir, high seas... High seas is one. Space. Outer space. Outer space, yes. Outer space. Then, now, within the high seas, you have all your minerals, which are vested, which are also considered as global commons. Of course, the international seabed authority under the UNCLOS monitors them, but they are considered as global commons. What else? I can't think of any other movie. Perhaps... Space? Yes, sir. Yes, sir. Okay. Internet? Yes, sir. Antarctic region? Sorry, sir? Antarctic region. Yes, sir. Thank you. Now, recently, there's a conflict. Lawyers cannot be MPs or vice versa. MPs cannot do lawful practice. Sir, there's a proposition... What is this case? Sir, there's a proposition to... In which file is this case? Sir, I'm not aware of whose file... Whose environment would? I'm not aware of whose file... So, we should be MP, I think. Yes, sir. Okay, right. We'll close the matter here.


What do we use S for in Vim? Well, we use it for sub-stitutions, sub-stitutions. What's up? Welcome back to another day of our short series called Vim Alphabet, going from A to Z in Vim. Today we're talking about S and S is for substituting things, kind of like R, kind of like C. We're gonna have to explore the differences there. So let's jump into our editor and open our lipsum.txt file. Yesterday we covered R, which allows us to replace a character. So we do R and do a lowercase l. We can replace that character without going into insert mode. S is really similar, except it does put us in insert mode. So if I undo that and I use S, it will delete the character under the cursor. And now you can see that we are in insert mode. So if we needed to replace more than one character, so now let's say we have Lorem has a silent H in it and we needed to add that H. We could use S for that. Now this also bears some similarities and it is actually an alias for C L, which is to change to the right. So that's the way that we have in the past, deleted a certain character and gotten into insert mode. And so S is an alias for that. Now capital S will, no matter where you're at, delete the entire line. And as we've covered before, these are just one line, there's no line breaks in here. So this is why it deleted the whole paragraph. So if we hit capital S, we can delete the entire line and get into insert mode. So insert new text here. Okay. That is also an alias for a C command, which is CC. So if you don't want to type the two characters for CC, you can use S to do the exact same thing. S also works with visual selection. So if we start a visual selection with V, do E a couple of times to make that selection, we can hit S. And now we have substituted this for the text that was in our visual selection. That's pretty much all there is that you need to know about S. If you need more help, do colon H, S, and that will take you to this. And it talks pretty much about everything that we covered. One thing that you'll notice is that these do go into the register so they are puttable with P. You want to substitute that and then put the text that you deleted somewhere else. So that's it. S is kind of like a weird combination of R and C in some weird ways. And I find it incredibly useful. I really like S a lot. I think you will too. If you have any ways that you particularly like using S, throw those down in the comments. I'll include a playlist in the description for the other letters if you're just coming to this video. And that's it for today. Tomorrow we'll be covering T, which is actually connected to F. So widespread in those letters, but it's a really good one.