https://wiki.kptree.net/ 2026-10-30T06:12:54+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/_media/wiki:dokuwiki.svg text/html 2024-12-15T03:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:dns_dhcp?rev=1734233746&do=diff linux router dns dhcp bind ip ipv6 radvd host dig nslookup DHCP / DNS Setup Outdated I have moved my DNS and DHCP servers to Docker, Docker-DNS Server. I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. tl;dr; Further to this I am not looking at backups for both these services on my local area network. Whilst these services worked reliably well, when ever I shutdown the the router with text/html 2025-03-02T07:31:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables?rev=1740900680&do=diff linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called: text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:wireguard?rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2026-04-26T08:16:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:background?rev=1777191366&do=diff linux router 4g lte mobile Linux Router Background I have had the router hardware for about 7 years now, as of June 2023. It took me nearly 18 months to set up as primary home router on bare metal, with DNS and DHCP. I got Wireguard up and running a year ago. I have some basic monitoring software running, darkstat and glances. I have not bothered to setup VMs or containers, it all runs bare metal. I managed to use text/html 2022-01-16T03:37:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables_control?rev=1642304220&do=diff linux nft nftables nmap NFTables IP Control I primarily set this feature up to act as a form of parental control on my home internet access. Disable Range of IP addresses, with count-down timer The DHCP assigned addresses in the range 100 - 254 were to be disabled (dropped) in the evening. The addresses below 100 were assigned a specific IP address in the DHCP based upon MAC.