Search

You can find the results of your search below.

Matching pagenames:

Fulltext results:

NFTables Configuration
109 Hits, Last modified:
rpin_nat|hairpin nat]].</color>++\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$http_server</color> tcp dport {... at <color red>$router_ip4</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$mail_server</color> tcp dport {... th dynamic wan ip address</color>\\ <tab9> ip saddr <color red>$lan_ip4</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color>\\ <tab9> ip saddr <color red>$vpn_ip</color> ip daddr <color red>$modem_ip4</color> counter snat <color red>$modem_ip</color
Wireguard VPN access from WAN to LAN
98 Hits, Last modified:
rect to Wireguard server: - sudo nft add rule ip nat prerouting ip daddr $wan_ip4 udp dport $vpn_port counter dnat to $vpn_ip4 - sudo nft add rule inet firewall input iifn... angle or SNAT to internet - sudo nft add rule ip nat postrouting ip saddr $vpn_ip4 oifname $wan counter snat $wan_ip4 (not necessary is already have masquerade on oif... 4</color>\\ <tab9><color #000060/#F0F0FF> #ip saddr { </color><color #060000/#FFF0F0>$lan_ip4, $vpn_ip4 </color><color #000060/#F0F0FF>}oifname </color>... counter snat </color><color #060000/#FFF0F0>$wan_ip4 #with ip set</color>\\ <tab9><color #000060/#F0F0FF>
NFTables IP Control
37 Hits, Last modified:
ctly see external address "hairpin dnat" ip daddr $wan_ip4 tcp dport {http, https} counter dnat $http_server ip daddr $wan_ip4 tcp dport {pop3s, imaps, smtp} counter dnat $mai... tly see external address "hairpin dnat" ip saddr 192.168.1.0/24 ip daddr $http_server tcp dport {http, https} counter snat $router_ip4 ip saddr 192.168.1.0/24 ip daddr $mail_server tcp dport {http, https, pop3s,
Router Miscellaneous
24 Hits, Last modified:
y used commands and scripts:===== *Get external IP address ''wget http://ipinfo.io/ip -qO -'' *To check the current network hardware ... commands *[https://p5r.uk/blog/2010/ifconfig-ip-comparison.html|[ifconfig vs ip]] *Ubuntu man [[http://manpages.ubuntu.com/manpages/trusty/man8/ip.8.html|ip]], [[http://manpages.ubuntu.com/manpages/trusty/m... *nixCraft [[https://www.cyberciti.biz/faq/linux-ip-command-examples-usage-syntax/|Linux ip Command Examples]] *[[http://www.configserve
Basic Netfilter Function Block Diagram
21 Hits, Last modified:
co** [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html|Resolve IP Fragmentation]], [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipf... U]], [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipf... and [[https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipf
Debian Server Network Setup
15 Hits, Last modified:
" To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. The units 4 main port will be setup to look... ed in special cases? </code> ++++ Note: *Use ''ip a'' and ''ip r'' to analyse current network configuration *U... " To check available interfaces and names use: ''ip link'', or the more verbose ''ip a''. [[https://netplan.io/|Netplan references]] ... low pppoe modem Ethernet access and also assign a IP address on this NIC for modem web page access. As
ISP PPPoE Network Setup
12 Hits, Last modified:
t to manually set up wan/eno1 interface with an ''ip link set'' instruction in the pppoe.service script. The ''ip'' command is compatible with Netplan. I played w... e pppoe.service script: <code> ExecStartPre=/sbin/ip link set up dev eno1 ExecStartPre=/sbin/ip link add link eno1 name eno1.7 type vlan id 7 ExecStartPre=/sbin/ip link set up dev eno1.7 ExecStartPre=/sbin/ip addr
ISP IPoE DHCP Setup Notes
11 Hits, Last modified:
works to allow automatic configuration of network IP addresses and most IP traffic is over Ethernet. This needs to be taken... be made IP range specific. ++++ e.g.| <code> ip saddr 192.168.1.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packets 68 bytes 4080 snat to 192.168.5.2 ip saddr 192.168.6.0/24 ip daddr 192.168.5.0/24 oifname "eno1" counter packe
Router Configuration, Switch & Server Setup
11 Hits, Last modified:
and optional for IPv6 - NAT obfuscates Local IP addresses behind public addressable WAN IP address(es). This obfuscation arguably provides ... ssigned to the equipment to be configured. * ''ip a add 192.168.1.200/24 dev eth0'' to add an IP address to interface eth0 * ''ip a del 192.168.1.200/24 dev eth0'' to add an IP address to interface eth0 Once the computer network has been manu... e following commands can be used to help: * ''%%ip a%%'' will return the computer interface IP address and mask. * ''%%nmap -sn 192.168.56.x/2
Linux Router Background
7 Hits, Last modified:
tely. But the new ISP defaulted back to a dynamic IP address, so I needed to arrange a static IP address. After about a month of reliable operatio... checked their log files and found that my static IP was not uniquely assigned to me. So when my PPPoE connection was lost, the IP address could be assigned elsewhere and when my modem attempted to authenticate the IP address could not be assigned.... They fixed this
TC - Traffic Control
7 Hits, Last modified:
wer network-oriented controls. However, since TCP/IP packets are sent using a slow start the system st... ffic| <code bash># Create and bring up IFB device ip link add ifb-wan0 type ifb ip link set ifb-wan0 up # Redirect incoming WAN traffic to IFB tc qdisc a... ssive # Download shaping via IFB ExecStart=/sbin/ip link add ifb-wan0 type ifb ExecStart=/sbin/ip lin
DHCP / DNS Setup
7 Hits, Last modified:
ng OpenDNS to allow some free security screening, IP 208.67.222.222 and 208.67.220.220. I have stop using these. IP 9.9.9.9, Quadnine provides some protection bad we... pin NAT or similar occurring. Think about it, the IP address on the local server does not match the domain certificate IP address. [[linux_router:nftables#hairpin_nat]] i
Router VM
3 Hits, Last modified:
/ modem converts the fibre to RJ45 1GB/s ethernet IP connection inside the house. The old ISP supplie... remote public access. * Rate limiting certain IP address ranges to public interface * Parental... me limiting access to public interface on certain IP addresses * Main LAN (Local Area Network) DNS/D
Router Hardware
2 Hits, Last modified:
ed for the main server and its VMs with dedicated IP addresses on the LAN. The main NFTables based rou... erformance must NOT limit performance on upstream IP connectivity to greater than 100Mb/s and preferab