https://wiki.kptree.net/ 2026-09-09T09:15:24+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/_media/wiki:dokuwiki.svg text/html 2022-01-16T03:37:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables_control?rev=1642304220&do=diff linux nft nftables nmap NFTables IP Control I primarily set this feature up to act as a form of parental control on my home internet access. Disable Range of IP addresses, with count-down timer The DHCP assigned addresses in the range 100 - 254 were to be disabled (dropped) in the evening. The addresses below 100 were assigned a specific IP address in the DHCP based upon MAC. text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:wireguard?rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2025-03-02T07:31:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables?rev=1740900680&do=diff linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called: text/html 2025-05-22T08:07:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ubuntu?rev=1747901253&do=diff linux router router_configuration setup debian ubuntu snap snaps switch network Router Configuration, Switch & Server Setup Router Configuration [DRAFT] A router performs the following key features: * A gateway between different network areas * Restrict network traffic * Forward Network traffic * Track network traffic, allows traffic incoming only if response to out going (one way traffic) This is primary firewall action and primary security action! This is often confused with NAT… text/html 2025-10-14T05:59:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:misc?rev=1760421555&do=diff linux router monitor links darkstat glances ntopng iftop nethogs Router Miscellaneous Monitoring There are a number of linux monitoring packages available. See these links for more examples see, 13 Linux Performance Monitoring Tools – Part 2, and 30 Linux System Monitoring Tools Every SysAdmin Should Know. Below are a few that I have tried and use. iftop iftop - display bandwidth usage on an interface by host Use text/html 2025-03-08T09:28:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:qemu?rev=1741426130&do=diff linux router vm Router VM I have just decided to play with installing VM (virtual machines) on my Router hardware (2023-01). I have been reluctant to do this for a number of reasons. My separate listing for Router Hardware. Basically the machine is a bit old slow and under powered, but still adequate for what it does. I do not run a desktop on this machine, CLI (Command Line Interface only). The main services I am currently running on this machine are, all bare metal: text/html 2024-12-15T03:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:dns_dhcp?rev=1734233746&do=diff linux router dns dhcp bind ip ipv6 radvd host dig nslookup DHCP / DNS Setup Outdated I have moved my DNS and DHCP servers to Docker, Docker-DNS Server. I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. tl;dr; Further to this I am not looking at backups for both these services on my local area network. Whilst these services worked reliably well, when ever I shutdown the the router with