Search
You can find the results of your search below.
Matching pagenames:
Fulltext results:
- NFTables Configuration @linux_router
- rpin_nat|hairpin nat]].</color>++\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$http_server</color> tcp dport {... at <color red>$router_ip4</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$mail_server</color> tcp dport {... th dynamic wan ip address</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color>\\ <tab9> ip saddr <color red>$vpn_ip</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color
- KPTree Torrent VM Setup @home_server
- required to setup the tunnel. * ''wget http://ipinfo.io/ip -qO -'' to check my current external ip address. * Unfortunately PrivatVPN changes thei... service -b 0 -xe'' *__To check current external IP address: ''%%wget http://ipinfo.io/ip -qO -%%''__ *To list current tables in nftables: ''sudo nft list table ip firewall'', not inet, specifically ip, as ip6 is disabled. *To start nftables: ''sudo system... IP address are not the same. To check end point IP use: ''wget http://ipinfo.io/ip -qO -'' ====Sample NFTables configuration script
- Wireguard VPN access from WAN to LAN @linux_router
- rect to Wireguard server: - sudo nft add rule ip nat prerouting ip daddr $wan_ip4 udp dport $vpn_port counter dnat to $vpn_ip4 - sudo nft add rule inet firewall input iifn... angle or SNAT to internet - sudo nft add rule ip nat postrouting ip saddr $vpn_ip4 oifname $wan counter snat $wan_ip4 (not necessary is already have masquerade on oif... 4</color>\\ <tab9><color #000060/#F0F0FF> #ip saddr { </color><color #060000/#FFF0F0>$lan_ip4, $vpn_ip4 </color><color #000060/#F0F0FF>}oifname </color>... counter snat </color><color #060000/#FFF0F0>$wan_ip4 #with ip set</color>\\ <tab9><color #000060/#F0F0FF>
- IPMI CLI Tools @home_server:home_server_setup:other_services
- OS shutdown, (if supported). * Retrieving ILOM IP address with ipmitool: ''sudo ipmitool lan print'' * Retrieving Sensor Data: ''s... aged system : system which is to be managed using IPMI. The IPMI card is installed on this machine. IPMI v2.0 supports both local and remote access to t... [https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool|Configuring IPMI under Linux using ipmitool]] * [[https://www.thomas-krenn.com/en/wiki/IPMI_Basics|IPMI Basics]] * [[https://www.thomas-krenn.com
- turn server @docker_notes
- y if it is started with more than one # listening IP address of the same family (IPv4 or IPv6). # RFC 5780 is supported only by UDP protocol,... tening. #listening-ip= # # If you specify '::' as IP, then all IPv6 system IPs will be used for # listening. #listening-ip=:: #... Multiple relay addresses may be used. # The same IP(s) can be used as both listening IP(s) and relay IP(s). # # If no relay IP(s) specified, then the tur... , and it # will always be using the client socket IP address as the relay IP address # of the TURN session (if the requested r
- Router Miscellaneous @linux_router
- geek.com/215730/how-to-connect-to-a-vpn-from-your-iphone-or-ipad/|VPN from your iPhone]] ---- =====Reserved Ports and IPv4 Reserved... y used commands and scripts:===== *Get external IP address ''wget http://ipinfo.io/ip -qO -'' *To check the current network hardware ... TO/x2561.html|Firewalling using nftables]] *www.iptables.info [[http://www.iptables.info/en/tcp-ip.html#TCPIPLAYERS|TCP/IP repetition]], [[http://www.iptables.info/en/conne... ?]] *Wikipedia [[https://en.wikipedia.org/wiki/IPv6|IPv6]], [[https://en.wikipedia.org/wiki/IPsec|IPsec]], [[https://en.wikipedia.org/wiki/Domain_Name
- Docker @docker_notes
- Docker and can be checked with ''sudo sysctl net.ipv4.ip_forward'' and ''sudo sysctl net.ipv6.conf.all.forwarding'' It would also adversely ... configuration I could have created a file called iptables-docker.rules in /etc/iptables/rules.v4 and then used command ''iptables-restore -nv < /etc/iptables/rules.v4'' or s... ker Networking: Macvlan vs. Ipvlan]] *[[https://ipwithease.com/macvlan-vs-ipvlan-understand-the-difference/|MacVLAN vs IPvlan: Understand the difference]] *[[https://medium.com/@dyavanapellisujal7/docker-macvlan-and-ipvlan-explained-advanced-networking-guide-b3ba20bc22e4|Docker MacVLAN and IPVLAN Explained: Advanced Networking Guide]] *[[h
- Basic Netfilter Function Block Diagram @linux_router
- nux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time.\\ {{:linu... talocean.com/community/tutorials/a-deep-dive-into-iptables-and-netfilter-architecture|A Deep Dive into Iptables and Netfilter Architecture]]. While it it ... le the packets]] *[[https://linux.die.net/man/8/iptables|iptables(8) - Linux man page]] *[[http://www.oocit... *Nixcraft [[https://www.cyberciti.biz/tips/linux-iptables-9-allow-icmp-ping.html|IPTables allow or block ICMP ping request]] *[[htt
- NFTables IP Control @linux_router
- ctly see external address "hairpin dnat" ip daddr $wan_ip4 tcp dport {http, https} counter dnat $http_server ip daddr $wan_ip4 tcp dport {pop3s, imaps, smtp} counter dnat $mai... tly see external address "hairpin dnat" ip saddr 192.168.1.0/24 ip daddr $http_server tcp dport {http, https} counter snat $router_ip4 ip saddr 192.168.1.0/24 ip daddr $mail_server tcp dport {http, https, pop3s,
- IPMI Console Setup @home_server:home_server_setup:other_services
- p?id=home_server:home_server_setup:other_services:ipmi#ipmi_cli_tools|ipmitools ]] and imptitools manual [[https://linux.d... PMI interface to use; options seem to be: lan for IPMI 1.5 and lanplus for IPMI 2.0. (All my interfaces are IPMI 2.0) * -H : remote server address IP or hostn... PMI interface to use; options seem to be: lan for IPMI 1.5 and lanplus for IPMI 2.0. (All my interfaces are IPMI 2.0) * -H : remote server address IP or hostn... p?id=home_server:home_server_setup:other_services:ipmi#ipmi_cli_tools|ipmitools ]] *Arch Linux [[https://wiki.archlinux.
- DHCP / DNS Setup @linux_router
- {{tag>linux router dns dhcp bind ip ipv6 radvd host dig nslookup}} ======DHCP / DNS Setup====== =====Out... ng OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have stop using these. IP 9.9.9.9, Quadnine provides some protection bad we... ee.net'' for the forward zone file. If not using IPv6 bind may still look for IPv6 unnecessarily filling up log files. To prevent ... pin NAT or similar occurring. Think about it, the IP address on the local server does not match the domain certificate IP address. [[linux_router:nftables#hairpin_nat]] i
- Debian Server Network Setup @linux_router
- bian Ubuntu router network netplan interface vlan ipv6 ip}} ======Debian Server Network Setup====== ====De... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. The units 4 main port will be setup to look... ed in special cases? </code> ++++ Note: *Use ''ip a'' and ''ip r'' to analyse current network configuration *U... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. [[https://netplan.io/|Netplan references]]
- Docker - DNS Server @docker_notes
- s and their current setting, or ''sudo sysctl net.ipv4.ip_forward'' to list a specific one. ++++sudo vim /etc/sysctl.d/ip_forward.conf| <code>net.ipv4.ip_forward = 1 net.ipv4.conf.all.proxy_arp = 1 net.i... eferences==== *[[https://thequickadvisor.com/is-ip-forwarding-required-for-docker/|Is IP forwarding required for Docker?]] (It would seem ... ttps://askubuntu.com/questions/311053/how-to-make-ip-forwarding-permanent|How to make IP forwarding permanent?]] *[[http://linux-ip.net/
- Web Server setup @home_server
- -address/testphp.php%%'' *To label list current IPTABLES configuration, verbose ''sudo iptables -L -v'' or simple ''sudo iptables -S'' *To check running process with sql (... ====ipv6====== *[[https://www.cyberciti.biz/faq/ipv6-apache-configuration-tutorial/|Apache IPv6 Configuration: Dual Stacked IPv4 & IPv6 Virtual Hosts]] *[[https://fedingo.com/how-to-enable-ipv6-in-apache-web-server/|How To Enable IPv6 in Apache Web Server]] <- home_server:media_vm
- IPTables Configuration @linux_router
- eeling. I would preferentially use NFTables over IPtables where I have a choice. Unfortunately some software still uses IPtables, e.g. Docker. So it is good to be able to ... //** ====Sample IPTables configuration==== Edit iptables configuration file: ''sudo vim /etc/network/iptables'': <code> *nat :PREROUTING ACCEPT [0:0] :IN... Add the following: <code> #!/bin/sh /sbin/iptables-restore < /etc/network/iptables </code> *Change the file permissions: ''sudo chown root /etc/network/if-pre-up.d/iptables'', and ''sudo chmod 755 /etc/network/if-pre-up.d/iptable''. Note that if /etc/network/if-pre-up.d/ip