Search
You can find the results of your search below.
Matching pagenames:
Fulltext results:
- NFTables Configuration
- rpin_nat|hairpin nat]].</color>++\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$http_server</color> tcp dport {... at <color red>$router_ip4</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$mail_server</color> tcp dport {... th dynamic wan ip address</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color>\\ <tab9> ip saddr <color red>$vpn_ip</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color
- Wireguard VPN access from WAN to LAN
- rect to Wireguard server: - sudo nft add rule ip nat prerouting ip daddr $wan_ip4 udp dport $vpn_port counter dnat to $vpn_ip4 - sudo nft add rule inet firewall input iifn... angle or SNAT to internet - sudo nft add rule ip nat postrouting ip saddr $vpn_ip4 oifname $wan counter snat $wan_ip4 (not necessary is already have masquerade on oif... 4</color>\\ <tab9><color #000060/#F0F0FF> #ip saddr { </color><color #060000/#FFF0F0>$lan_ip4, $vpn_ip4 </color><color #000060/#F0F0FF>}oifname </color>... counter snat </color><color #060000/#FFF0F0>$wan_ip4 #with ip set</color>\\ <tab9><color #000060/#F0F0FF>
- Router Miscellaneous
- px]] for more information * ''sudo apt install pipx'' ([[https://pypa.github.io/pipx/|pipx]] — Install and Run Python Applications in Isola... geek.com/215730/how-to-connect-to-a-vpn-from-your-iphone-or-ipad/|VPN from your iPhone]] ---- =====Reserved Ports and IPv4 Reserved... y used commands and scripts:===== *Get external IP address ''wget http://ipinfo.io/ip -qO -'' *To check the current network hardware ... TO/x2561.html|Firewalling using nftables]] *www.iptables.info [[http://www.iptables.info/en/tcp-ip.html#TCPIPLAYERS|TCP/IP repetition]], [[http://www.iptables.info/en/conne
- Basic Netfilter Function Block Diagram
- Module]] *Nixcraft [[https://www.cyberciti.biz/tips/linux-iptables-9-allow-icmp-ping.html|IPTables allow or block ICMP ping request]] *[[htt... PTables]] *[[https://www.thegeekstuff.com/scripts/iptables-rules|iptables script]] *[[http://www.epicvoyage.org/blog/geek-stuff... -p/2363074|Understanding MTU for ADSL]], and **Wikipedia** [[https://en.wikipedia.org/wiki/IPv4#IHL|IPv4]], [[https://en.wikipedia.org/wiki/EtherType|Ethertype]], [[https://en.... o-point protocol over Ethernet]], [[https://en.wikipedia.org/wiki/IPv6_packet|IPv6 packet]], [[https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol_ve
- NFTables IP Control
- ctly see external address "hairpin dnat" ip daddr $wan_ip4 tcp dport {http, https} counter dnat $http_server ip daddr $wan_ip4 tcp dport {pop3s, imaps, smtp} counter dnat $mai... tly see external address "hairpin dnat" ip saddr 192.168.1.0/24 ip daddr $http_server tcp dport {http, https} counter snat $router_ip4 ip saddr 192.168.1.0/24 ip daddr $mail_server tcp dport {http, https, pop3s,
- DHCP / DNS Setup
- {{tag>linux router dns dhcp bind ip ipv6 radvd host dig nslookup}} ======DHCP / DNS Setup====== =====Out... ng OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have stop using these. IP 9.9.9.9, Quadnine provides some protection bad we... ee.net'' for the forward zone file. If not using IPv6 bind may still look for IPv6 unnecessarily filling up log files. To prevent ... pin NAT or similar occurring. Think about it, the IP address on the local server does not match the domain certificate IP address. [[linux_router:nftables#hairpin_nat]] i
- Debian Server Network Setup
- bian Ubuntu router network netplan interface vlan ipv6 ip}} ======Debian Server Network Setup====== ====De... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. The units 4 main port will be setup to look... ed in special cases? </code> ++++ Note: *Use ''ip a'' and ''ip r'' to analyse current network configuration *U... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. [[https://netplan.io/|Netplan references]]
- Router Configuration, Switch & Server Setup
- k Address Translation) is basically mandatory for IPv4 due to limited address space and optional for IPv6 - NAT obfuscates Local IP addresses behind public addressable WAN IP address(es). This obfuscation arguably provides some security. The k... .) - NAT obfuscation wrecks simple end to end IP addressing that is required for some services, e.g. VoIP. This requires additional services to compensate... ===Manual Network Setup====== A lot of network equipment, such as routers and managed switches come with a default access IP address. In most cases this address does not alig
- IPTables Configuration
- eeling. I would preferentially use NFTables over IPtables where I have a choice. Unfortunately some software still uses IPtables, e.g. Docker. So it is good to be able to ... //** ====Sample IPTables configuration==== Edit iptables configuration file: ''sudo vim /etc/network/iptables'': <code> *nat :PREROUTING ACCEPT [0:0] :IN... Add the following: <code> #!/bin/sh /sbin/iptables-restore < /etc/network/iptables </code> *Change the file permissions: ''sudo chown root /etc/network/if-pre-up.d/iptables'', and ''sudo chmod 755 /etc/network/if-pre-up.d/iptable''. Note that if /etc/network/if-pre-up.d/ip
- ISP PPPoE Network Setup
- s is not necessarily a standard option. To check IPv4 forwarding is turned on: ''sysctl net.ipv4.ip_forward''. If equal 1 it is on otherwise if equal... zero it is off. To change to on: ''sysctl -w net.ipv4.ip_forward=1'' To see all system variables concerni... <- linux_router:network|Prev page ^ linux_router:start|Start page ^ linux_router:ipoe|Next page ->
- ISP IPoE DHCP Setup Notes
- works to allow automatic configuration of network IP addresses and most IP traffic is over Ethernet. This needs to be taken... d that can be used to filter against. When using IPoE with dhcp same device reference is shared by the IPoE WAN link and the modem LAN web page link. My m... be made IP range specific. ++++ e.g.| <code> ip saddr 192.168.1.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packets 68 bytes 4080 snat to 192.168.5.2 ip saddr 192.168.6.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packe
- Router Hardware
- Commercial Temperature Grade, RoHS 6/6* network chipset *Storage: 2 x M.2 2242/2280 NVMe SSD, PCIe 2... cker to be on a VM as I do not like the amount of IPtables configuration it does on its host. This wou... . Although better spec'ed machines, e.g. with multiple gigabit NICs, start getting more pricey too. I ... dern ones). This unit also comes with a dedicated IPMI LAN Port, allowing full remote KVM operation on
- TC - Traffic Control
- rameters, additional deeper filters net.core, net.ipv4, net.ipv6, net.mptcp, and net.netfilter. There are a few... ://www.bufferbloat.net/projects/codel/wiki/CakeRecipes/|Cake Recipes]] *[[https://www.bufferbloat.net/projects/c... chmarking CoDel and FQ CoDel]] *[[https://en.wikipedia.org/wiki/Tc_(Linux)|wikipedia TC]] A bit dated, but base references.... *... raffic_Control|Traffic Control]], good basic description. *[[https://www.man7.org/linux/man-pages/ma
- Linux Router Background
- tely. But the new ISP defaulted back to a dynamic IP address, so I needed to arrange a static IP address. After about a month of reliable operatio... blem was the slow pppoe connect. My ISP was using IPoE DHCP, in preference to pppoe. I ended up moving away from pppoe to IPoE DHCP. This also required some minor modificatio... , the fibre install worked immediately. My static IPv4 address took another 4 weeks to get working cor... the hardwired connection. Also I lost my static IP that stopped external Internet access to my vario
- Router VM
- er NFTables setup. Use of a VM isolates Docker's IPTable manipulations from the main system. =====VM Setup=====... nst --no-install-recommends%%'' ====package descriptions==== In most cases details these packages can... *<fs small>''qemu-kvm'' - was made a wrapper script to qemu-system and is now redundant</fs> *''qe... 1) *''qemu-system-x86'' is the actual system peripheral emulator and virtualiser for x86 systems