https://wiki.kptree.net/ 2026-07-27T09:01:43+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/_media/wiki:dokuwiki.svg text/html 2025-03-02T07:31:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables?rev=1740900680&do=diff linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called: text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:wireguard?rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2024-06-23T01:11:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:netfilter?rev=1719105097&do=diff linux router mtu netfilter Basic Netfilter Function Block Diagram Both NFTables and IPTables use the Netfilter framework provided in the Linux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time. The following is a basic block diagram of the Netfilter Filter and NAT (Network Address Translation) functions, which are the basic requirements for router. Incoming Packets | ┌────────────… text/html 2026-06-21T00:26:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:hardware?rev=1782001578&do=diff linux router hardware Router Hardware ikoolcore-r2-max (Dec 2024) The Supermicro SYS-E200-9B has stopped working. It posts bios, but will not boot further. I suspect hardware failure of some sort. The BMC failed a few years ago. I have ordered a replacement ikoolcore-r2-max. The replacement comes with 2.5Gb/s and 10GB/s NICs and a more modern and faster 8 core text/html 2024-12-15T03:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:dns_dhcp?rev=1734233746&do=diff linux router dns dhcp bind ip ipv6 radvd host dig nslookup DHCP / DNS Setup Outdated I have moved my DNS and DHCP servers to Docker, Docker-DNS Server. I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. tl;dr; Further to this I am not looking at backups for both these services on my local area network. Whilst these services worked reliably well, when ever I shutdown the the router with text/html 2026-04-26T08:16:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:background?rev=1777191366&do=diff linux router 4g lte mobile Linux Router Background I have had the router hardware for about 7 years now, as of June 2023. It took me nearly 18 months to set up as primary home router on bare metal, with DNS and DHCP. I got Wireguard up and running a year ago. I have some basic monitoring software running, darkstat and glances. I have not bothered to setup VMs or containers, it all runs bare metal. I managed to use text/html 2025-01-04T10:36:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ipoe?rev=1735987016&do=diff linux router bridged modem isp ipoe mtu dns dhcp ISP IPoE DHCP Setup Notes Notes on Setting up a Linux router for IPoE DHCP. old, tldr; After a few years of reasonable successful use of bridged VDSL modem with Linux Router running pppoe and nftables my ISP informed me that they do not use authentication on the connection with username and password. In fact they mention they used dhcp IPoE as well as PPPoE. I set up my spare modem as they described and it worked straight way. When I tried my… text/html 2025-05-22T08:07:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ubuntu?rev=1747901253&do=diff linux router router_configuration setup debian ubuntu snap snaps switch network Router Configuration, Switch & Server Setup Router Configuration [DRAFT] A router performs the following key features: * A gateway between different network areas * Restrict network traffic * Forward Network traffic * Track network traffic, allows traffic incoming only if response to out going (one way traffic) This is primary firewall action and primary security action! This is often confused with NAT… text/html 2022-01-16T03:37:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables_control?rev=1642304220&do=diff linux nft nftables nmap NFTables IP Control I primarily set this feature up to act as a form of parental control on my home internet access. Disable Range of IP addresses, with count-down timer The DHCP assigned addresses in the range 100 - 254 were to be disabled (dropped) in the evening. The addresses below 100 were assigned a specific IP address in the DHCP based upon MAC. text/html 2024-12-15T02:31:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:iptables?rev=1734229861&do=diff linux router firewall iptables IPTables Configuration Having delved into IPtables and NFtables about the same time, my feelings are that NFTables is generally superior in just about every way, I can not be bothered explaining this, this is just my experience and feeling. I would preferentially use NFTables over IPtables where I have a choice. Unfortunately some software still uses IPtables, e.g. Docker. So it is good to be able to be sufficiently fluent and be able to work in both at this … text/html 2024-09-21T12:10:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ppp?rev=1726920633&do=diff linux router pppoe pppoed isp mtu dns dhcp ISP PPPoE Network Setup A reasonably comprehensive discussion on Ubuntu forums Setup Ubuntu Server as a router using a PPPoE connection, MTU and TCP MSS when using PPPoE. Also from Ubuntu forums How to Optimize your Internet Connection using MTU and RWIN. Ubuntu documentation ADSLPPPoE. PPPD manual page. Another reference is Confirm Blog Using PPPoE on Linux. Some other references: * Connecting to NBN HFC with a linux router] Internode router set…