Tag Info

New answers tagged

0

In the hope that this may be of assistance, here is a copy of an IPTABLES ruleset that should be reasonably secure but still allow access to standard and some non-standard services: *filter # Reject some specifics (picked up from logs & fail2ban) # -A INPUT -s 213.239.213.102 -j LOG --log-prefix "iptables DROP: " --log-level 7 # -A INPUT -s ...


0

For IoT, the use of IP addresses is generally more of a problem than a help. First a segment only has 253 IP addresses, available. This was OK when a typical home had 2 or 3 computers. But now it may have 50 or 60 devices, and by the time you include phones, tablets, laptops, streaming media boxes etc. When IoT gets traction, and here I mean for real ...


0

On behalf of Gandalf's Beard, solution from comment: I had to forward my secondary's router IP (192.168.1.3).


1

I think this is a routing question. mount_smbfs will let FreeBSD decide which IP and Interface to use. From your question I get that em0 and em2 are both in the same subnet as the target 10.1.1.20? If this is the case you could change the interface metric of em0 to be higher than em2. FreeBSD will then choose em2 for outbound connections to this subnet. This ...


0

After the VPN connects run the following ip rule add from 192.168.1.1 table 10 ip route add default via 192.168.1.254 table 10


0

To connect from outside your own LAN, you need a) The external IP address provided by your ISP, which is NOT 192.168.1.129 - that's a non-routing address, and can only be seen from inside your LAN. Use ipchicken.com or similar sites, and find what your external IP address is. ISPs often change those frequently, so check shortly before you leave. The ...


0

You must share wireless connection in your machine and set dns in 2nd machine as: 192.168.0.1 then try to ping as follows: 192.168.0.1 192.168.1.37 192.168.1.1 then ping the ip you obtained from pinging www.google.com at your machine in the 2nd machine. if you set dns correctly you must get reply in all pings.


0

For those who may benefit from this - my primary issue was that other devices were sending ICMP redirects. After disabling this on my local (OS X) machine, my static routes have been reliable. In OS X this can be achieved on the fly by using sysctl: /usr/sbin/sysctl -w net.inet.icmp.drop_redirect=1 /usr/sbin/sysctl -w net.inet.ip.redirect=0 This can ...


0

I had the same issue and got this working thanks to @mehaase After creating the ~/vpn.sh as answered by @mehaase you can put this into a runnable application automator script using these steps: Using Automator create a new Application Add "Run an AppleScript" under Library > Utilities Enter: do shell script "sudo ~/vpn.sh" with administrator privileges ...


0

Every ISP connects to more than one exchange point. Those exchange points are like crossroads that let the traffic jump from one network to another. Whenever an ISP establish a connection to an exchange point, it means: Infrastructure (routers, point-to-point links, AC Power, backup systems) More employees (24/7 technical support) At last, the ISP will ...


0

You can’t. Well, you could contact the IP owner and ask about it, but they aren’t obliged to answer. Depending on how you and other services in the same country (or even neighborhood) are connected to the internet, traffic may take extensive detours. That’s because it has to travel on your ISP’s network until it reaches an appropriate exchange point. ...


0

This is likely because your router is blocking requests to its admin interface when they don’t originate from the local network, 192.168.3.0/24. It’s a popular (non-)security feature. But you already guessed that. Instead, the question is: Why do you even need multiple subnets? Surely, you won’t ever use more than 253 devices. If it’s about traffic ...


2

Here is a great document on manually configuring a split tunnel on the system's side (if it's possible). You can control where your Windows PC sends it's traffic by creating routing rules on your system, and specifically controlling the interfaces that traffic to certain IP ranges leaves through. This is probably the best way to accomplish your goal without ...


0

Short answer is - probably not. Slightly longer answer - maybe yes. Multipath TCP and SCTP protocols where designed to address this issue, however they are not widely implemented. So until these become widespread a single application would not be able to use multiple links...unless the application itself is specifically designed to use two network ...


1

Do I put my router on the unmanaged network? ie 10.0.0.1 AFAIK, using a dedicated "management" VLAN is a common security measure. What subnet does my router belong to? ie 255.255.255.0 What subnet(s) does each VLAN (10-50) use? …didn't you just write yourself that each VLAN has a /24 subnet? So VLAN 40 would use the 10.0.40.0/24 aka ...


0

In DD-WRT go to Services --> VPN --> OpenVPN Client --> Policy Based Routing, add one line for each client whose traffic you want to route through the VPN tunnel, e.g. 192.168.10.20/32 192.168.10.21/32 ... As a result, the OpenVPN client no longer routes all traffic through the tunnel and hence also opens up the WAN again. I now have the VPN ...


1

BitTorrent Sync (https://www.getsync.com) is an option... (although looks like it has got a commercial "pro" version now). Install it on the PC/device that you have data on, and claim "this is my first sync device", set up the folder you want to copy across, click on "share" and email out (or copy or whatever) the specially crafted link to the destination ...


1

Given that your end result is to get the content the same on 2 machines at different locations, the best option is to use cloud-based synchronisation, such as Google drive, One Drive, Dropbox, etc. The downside of this is that you are limited to a filesize, but this can still be enough. Google Drive offers 15GB nowadays. The upside is that setting up the ...


0

My first thought is that the only way to do this is to set up a Virtual Private Network (VPN) connection between the two computers. VPN provides a conduit through which computers and/or networks behave as though they are connected on the same 'physical' network/subnet. You could then use whatever synch application you prefer across the VPN connection. A ...


0

By default, Linux uses the "weak host" model on IPv4; that is, it answers ARP requests for any address assigned to the system, even if they came through a different interface. So when the router broadcasts an ARP request for .115, your host receives it through both interfaces, sends answers via both, and the router receives the answer over Ethernet first. ...


0

If you're running Windows, check the output of your route print command. You will see an entry for: 0.0.0.0 0.0.0.0 [Gateway IP] [Interface IP] [Metric] It sounds like your traffic is probably going through your VPN tunnel when that is active. Since your VPN client is offloaded to an external device (VPN router), you will have no software options for ...



Top 50 recent answers are included