Search
You can find the results of your search below.
Matching pagenames:
Fulltext results:
- NFTables Configuration
- rpin_nat|hairpin nat]].</color>++\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$http_server</color> tcp dport {... at <color red>$router_ip4</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$mail_server</color> tcp dport {... th dynamic wan ip address</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color>\\ <tab9> ip saddr <color red>$vpn_ip</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color
- Wireguard VPN access from WAN to LAN
- rect to Wireguard server: - sudo nft add rule ip nat prerouting ip daddr $wan_ip4 udp dport $vpn_port counter dnat to $vpn_ip4 - sudo nft add rule inet firewall input iifn... angle or SNAT to internet - sudo nft add rule ip nat postrouting ip saddr $vpn_ip4 oifname $wan counter snat $wan_ip4 (not necessary is already have masquerade on oif... 4</color>\\ <tab9><color #000060/#F0F0FF> #ip saddr { </color><color #060000/#FFF0F0>$lan_ip4, $vpn_ip4 </color><color #000060/#F0F0FF>}oifname </color>... counter snat </color><color #060000/#FFF0F0>$wan_ip4 #with ip set</color>\\ <tab9><color #000060/#F0F0FF>
- Router Miscellaneous
- geek.com/215730/how-to-connect-to-a-vpn-from-your-iphone-or-ipad/|VPN from your iPhone]] ---- =====Reserved Ports and IPv4 Reserved... y used commands and scripts:===== *Get external IP address ''wget http://ipinfo.io/ip -qO -'' *To check the current network hardware ... TO/x2561.html|Firewalling using nftables]] *www.iptables.info [[http://www.iptables.info/en/tcp-ip.html#TCPIPLAYERS|TCP/IP repetition]], [[http://www.iptables.info/en/conne... ?]] *Wikipedia [[https://en.wikipedia.org/wiki/IPv6|IPv6]], [[https://en.wikipedia.org/wiki/IPsec|IPsec]], [[https://en.wikipedia.org/wiki/Domain_Name
- Basic Netfilter Function Block Diagram
- nux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time.\\ {{:linu... talocean.com/community/tutorials/a-deep-dive-into-iptables-and-netfilter-architecture|A Deep Dive into Iptables and Netfilter Architecture]]. While it it ... le the packets]] *[[https://linux.die.net/man/8/iptables|iptables(8) - Linux man page]] *[[http://www.oocit... *Nixcraft [[https://www.cyberciti.biz/tips/linux-iptables-9-allow-icmp-ping.html|IPTables allow or block ICMP ping request]] *[[htt
- NFTables IP Control
- ctly see external address "hairpin dnat" ip daddr $wan_ip4 tcp dport {http, https} counter dnat $http_server ip daddr $wan_ip4 tcp dport {pop3s, imaps, smtp} counter dnat $mai... tly see external address "hairpin dnat" ip saddr 192.168.1.0/24 ip daddr $http_server tcp dport {http, https} counter snat $router_ip4 ip saddr 192.168.1.0/24 ip daddr $mail_server tcp dport {http, https, pop3s,
- DHCP / DNS Setup
- {{tag>linux router dns dhcp bind ip ipv6 radvd host dig nslookup}} ======DHCP / DNS Setup====== =====Out... ng OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have stop using these. IP 9.9.9.9, Quadnine provides some protection bad we... ee.net'' for the forward zone file. If not using IPv6 bind may still look for IPv6 unnecessarily filling up log files. To prevent ... pin NAT or similar occurring. Think about it, the IP address on the local server does not match the domain certificate IP address. [[linux_router:nftables#hairpin_nat]] i
- Debian Server Network Setup
- bian Ubuntu router network netplan interface vlan ipv6 ip}} ======Debian Server Network Setup====== ====De... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. The units 4 main port will be setup to look... ed in special cases? </code> ++++ Note: *Use ''ip a'' and ''ip r'' to analyse current network configuration *U... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. [[https://netplan.io/|Netplan references]]
- IPTables Configuration
- eeling. I would preferentially use NFTables over IPtables where I have a choice. Unfortunately some software still uses IPtables, e.g. Docker. So it is good to be able to ... //** ====Sample IPTables configuration==== Edit iptables configuration file: ''sudo vim /etc/network/iptables'': <code> *nat :PREROUTING ACCEPT [0:0] :IN... Add the following: <code> #!/bin/sh /sbin/iptables-restore < /etc/network/iptables </code> *Change the file permissions: ''sudo chown root /etc/network/if-pre-up.d/iptables'', and ''sudo chmod 755 /etc/network/if-pre-up.d/iptable''. Note that if /etc/network/if-pre-up.d/ip
- ISP IPoE DHCP Setup Notes
- works to allow automatic configuration of network IP addresses and most IP traffic is over Ethernet. This needs to be taken... d that can be used to filter against. When using IPoE with dhcp same device reference is shared by the IPoE WAN link and the modem LAN web page link. My m... be made IP range specific. ++++ e.g.| <code> ip saddr 192.168.1.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packets 68 bytes 4080 snat to 192.168.5.2 ip saddr 192.168.6.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packe
- ISP PPPoE Network Setup
- s is not necessarily a standard option. To check IPv4 forwarding is turned on: ''sysctl net.ipv4.ip_forward''. If equal 1 it is on otherwise if equal... zero it is off. To change to on: ''sysctl -w net.ipv4.ip_forward=1'' To see all system variables concerni... <- linux_router:network|Prev page ^ linux_router:start|Start page ^ linux_router:ipoe|Next page ->
- Router Configuration, Switch & Server Setup
- k Address Translation) is basically mandatory for IPv4 due to limited address space and optional for IPv6 - NAT obfuscates Local IP addresses behind public addressable WAN IP address(es). This obfuscation arguably provides some security. The k... ssigned to the equipment to be configured. * ''ip a add 192.168.1.200/24 dev eth0'' to add an IP address to interface eth0 * ''ip a del 192.168.1.200/24 dev eth0'' to add an IP address to interface eth0 Once the computer network has been manu
- Router Hardware
- cker to be on a VM as I do not like the amount of IPtables configuration it does on its host. This wou... dern ones). This unit also comes with a dedicated IPMI LAN Port, allowing full remote KVM operation on the network. A downside of the IPMI is that it uses another 3.5W of power (1W power 24/7 costs $2.29/year @ $0.25/kWhr, so 3.5W IPMI costs $7.67/yr extra for power over the main un
- Linux Router Background
- tely. But the new ISP defaulted back to a dynamic IP address, so I needed to arrange a static IP address. After about a month of reliable operatio... blem was the slow pppoe connect. My ISP was using IPoE DHCP, in preference to pppoe. I ended up moving away from pppoe to IPoE DHCP. This also required some minor modificatio... , the fibre install worked immediately. My static IPv4 address took another 4 weeks to get working cor... the hardwired connection. Also I lost my static IP that stopped external Internet access to my vario
- TC - Traffic Control
- rameters, additional deeper filters net.core, net.ipv4, net.ipv6, net.mptcp, and net.netfilter. There are a few... ffic| <code bash># Create and bring up IFB device ip link add ifb-wan0 type ifb ip link set ifb-wan0 up # Redirect incoming WAN traffic to IFB tc qdisc a... ssive # Download shaping via IFB ExecStart=/sbin/ip link add ifb-wan0 type ifb ExecStart=/sbin/ip lin
- Router VM
- / modem converts the fibre to RJ45 1GB/s ethernet IP connection inside the house. The old ISP supplie... remote public access. * Rate limiting certain IP address ranges to public interface * Parental... me limiting access to public interface on certain IP addresses * Main LAN (Local Area Network) DNS/D... g directly on the bare metal, but Docker's use of IPtables rules on its Host would impair my Router NF