Search
You can find the results of your search below.
Matching pagenames:
Fulltext results:
- NFTables Configuration @linux_router
- rpin_nat|hairpin nat]].</color>++\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$http_server</color> tcp dport {... at <color red>$router_ip4</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$mail_server</color> tcp dport {... th dynamic wan ip address</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color>\\ <tab9> ip saddr <color red>$vpn_ip</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color
- KPTree Torrent VM Setup @home_server
- required to setup the tunnel. * ''wget http://ipinfo.io/ip -qO -'' to check my current external ip address. * Unfortunately PrivatVPN changes thei... service -b 0 -xe'' *__To check current external IP address: ''%%wget http://ipinfo.io/ip -qO -%%''__ *To list current tables in nftables: ''sudo nft list table ip firewall'', not inet, specifically ip, as ip6 is disabled. *To start nftables: ''sudo system... IP address are not the same. To check end point IP use: ''wget http://ipinfo.io/ip -qO -'' ====Sample NFTables configuration script
- Wireguard VPN access from WAN to LAN @linux_router
- rect to Wireguard server: - sudo nft add rule ip nat prerouting ip daddr $wan_ip4 udp dport $vpn_port counter dnat to $vpn_ip4 - sudo nft add rule inet firewall input iifn... angle or SNAT to internet - sudo nft add rule ip nat postrouting ip saddr $vpn_ip4 oifname $wan counter snat $wan_ip4 (not necessary is already have masquerade on oif... 4</color>\\ <tab9><color #000060/#F0F0FF> #ip saddr { </color><color #060000/#FFF0F0>$lan_ip4, $vpn_ip4 </color><color #000060/#F0F0FF>}oifname </color>... counter snat </color><color #060000/#FFF0F0>$wan_ip4 #with ip set</color>\\ <tab9><color #000060/#F0F0FF>
- IPMI CLI Tools @home_server:home_server_setup:other_services
- OS shutdown, (if supported). * Retrieving ILOM IP address with ipmitool: ''sudo ipmitool lan print'' * Retrieving Sensor Data: ''s... aged system : system which is to be managed using IPMI. The IPMI card is installed on this machine. IPMI v2.0 supports both local and remote access to t... [https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool|Configuring IPMI under Linux using ipmitool]] * [[https://www.thomas-krenn.com/en... * [[https://www.thomas-krenn.com/en/wiki/FreeIPMI_ipmimonitoring|FreeIPMI ipmimonitoring]] * Adam Sweet's Wiki: [[https://wi
- Router Miscellaneous @linux_router
- px]] for more information * ''sudo apt install pipx'' ([[https://pypa.github.io/pipx/|pipx]] — Install and Run Python Applications in Isola... geek.com/215730/how-to-connect-to-a-vpn-from-your-iphone-or-ipad/|VPN from your iPhone]] ---- =====Reserved Ports and IPv4 Reserved... y used commands and scripts:===== *Get external IP address ''wget http://ipinfo.io/ip -qO -'' *To check the current network hardware ... TO/x2561.html|Firewalling using nftables]] *www.iptables.info [[http://www.iptables.info/en/tcp-ip.html#TCPIPLAYERS|TCP/IP repetition]], [[http://www.iptables.info/en/conne
- Docker nginx / php notes @docker_notes
- /etc/nginx/fastcgi.conf| <code> fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param QUERY_STRING $query_s... NT_LENGTH $content_length; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param REQUEST_URI $request... NT_LENGTH $content_length; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param REQUEST_URI $request... s for historical reasons where ''fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;'' has to be separately configured in the l
- turn server @docker_notes
- y if it is started with more than one # listening IP address of the same family (IPv4 or IPv6). # RFC 5780 is supported only by UDP protocol,... tening. #listening-ip= # # If you specify '::' as IP, then all IPv6 system IPs will be used for # listening. #listening-ip=:: #... Multiple relay addresses may be used. # The same IP(s) can be used as both listening IP(s) and relay IP(s). # # If no relay IP(s) specified, then the tur... , and it # will always be using the client socket IP address as the relay IP address # of the TURN session (if the requested r
- Basic Netfilter Function Block Diagram @linux_router
- Module]] *Nixcraft [[https://www.cyberciti.biz/tips/linux-iptables-9-allow-icmp-ping.html|IPTables allow or block ICMP ping request]] *[[htt... PTables]] *[[https://www.thegeekstuff.com/scripts/iptables-rules|iptables script]] *[[http://www.epicvoyage.org/blog/geek-stuff... -p/2363074|Understanding MTU for ADSL]], and **Wikipedia** [[https://en.wikipedia.org/wiki/IPv4#IHL|IPv4]], [[https://en.wikipedia.org/wiki/EtherType|Ethertype]], [[https://en.... o-point protocol over Ethernet]], [[https://en.wikipedia.org/wiki/IPv6_packet|IPv6 packet]], [[https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol_ve
- Docker @docker_notes
- Docker and can be checked with ''sudo sysctl net.ipv4.ip_forward'' and ''sudo sysctl net.ipv6.conf.all.forwarding'' It would also adversely ... configuration I could have created a file called iptables-docker.rules in /etc/iptables/rules.v4 and then used command ''iptables-restore -nv < /etc/iptables/rules.v4'' or s... ker Networking: Macvlan vs. Ipvlan]] *[[https://ipwithease.com/macvlan-vs-ipvlan-understand-the-difference/|MacVLAN vs IPvlan: Understand the difference]] *[[https://medium.com/@dyavanapellisujal7/docker-macvlan-and-ipvlan-explained-advanced-networking-guide-b3ba20bc22e4|Docker MacVLAN and IPVLAN Explained: Advanced Networking Guide]] *[[h
- Back-up Server Old Setup @home_server:home_server_setup:other_services
- p?id=home_server:home_server_setup:other_services:ipmi#ipmi_start_script|IPMI startup script]] for description of this script. - Mount the back-up drives to the back-up ser... p?id=home_server:home_server_setup:other_services:ipmi#ipmi_stop_script|IPMI Stop script]] - ''sudo bash ~/Myscripts/ipmi_stop_05_40.sh ; echo $?'' To use: ''sudo bash ~/Myscripts/server_b... ackup.log' str0='/home/baumkp' str1='/Myscripts/' ipmi_start='ipmi_start_05_40.sh' ipmi_stop='ipmi_stop_05_40.sh'
- NFTables IP Control @linux_router
- ctly see external address "hairpin dnat" ip daddr $wan_ip4 tcp dport {http, https} counter dnat $http_server ip daddr $wan_ip4 tcp dport {pop3s, imaps, smtp} counter dnat $mai... tly see external address "hairpin dnat" ip saddr 192.168.1.0/24 ip daddr $http_server tcp dport {http, https} counter snat $router_ip4 ip saddr 192.168.1.0/24 ip daddr $mail_server tcp dport {http, https, pop3s,
- IPMI Console Setup @home_server:home_server_setup:other_services
- p?id=home_server:home_server_setup:other_services:ipmi#ipmi_cli_tools|ipmitools ]] and imptitools manual [[https://linux.d... PMI interface to use; options seem to be: lan for IPMI 1.5 and lanplus for IPMI 2.0. (All my interfaces are IPMI 2.0) * -H : remote server address IP or hostn... loader setup. (The client setup is based upon BMC IPMI so the client software setup description is also not relevant.) The BMC IPMI client setup is described below. On Debian 10 ... PMI interface to use; options seem to be: lan for IPMI 1.5 and lanplus for IPMI 2.0. (All my interfaces are IPMI 2.0) * -H : remote server address IP or hostn
- Rsync @home_server:home_server_setup:other_services
- nef/oga/ogg/ogv/opus/orf/pef/png/qt/rar/rpm/rw2/rzip/s7z/sfx/sr2/srf/svgz/t[gb]z/tlz/txz/vob/wim/wma/wmv/xz/zip'' ''rsync %%--%%skip-compress=$RSYNC_SKIP_COMPRESS .....'' ''sudo rsync %%--%%dry-run -av -u --delete /media/Disk1/ bau... o rsync %%--%%dry-run -avz -u %%--%%delete ~/Myscripts/ /home/shared/Myscripts'' ''sudo rsync x %%--%%dry-run -avz -u /home/s... ==My web page copy bash batch==== ''sudo vim Myscripts/rsync_shared.sh'' or to run ''sudo bash Myscripts/rsync_shared.sh'' #Note this is a local only s
- Docker mailserver @docker_notes
- 82'' *All the /php82/ paths in the pre_start_script.sh, ''.config_php/scripts/pre_start_script.sh'' *The php-fpm82 reference in ''.config_php... 37225/how-to-setup-a-single-nginx-server-with-multiple-php-fpm-docker-containers|how to setup a single nginx server with multiple php-fpm docker containers]] *[[https://stac... [https://stackoverflow.com/questions/49754286/multiple-images-one-dockerfile|Multiple images, one Dockerfile]] *[[https://medium.co... e ''ARG PHP_VERSION=82'' *Main configuration script ''pre_start_script.sh'', ''PHP_VERSION=82'' *s6-rc.d php-fpm long
- DHCP / DNS Setup @linux_router
- {{tag>linux router dns dhcp bind ip ipv6 radvd host dig nslookup}} ======DHCP / DNS Setup====== =====Out... ng OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have stop using these. IP 9.9.9.9, Quadnine provides some protection bad we... ee.net'' for the forward zone file. If not using IPv6 bind may still look for IPv6 unnecessarily filling up log files. To prevent ... pin NAT or similar occurring. Think about it, the IP address on the local server does not match the domain certificate IP address. [[linux_router:nftables#hairpin_nat]] i