Tag Info

New answers tagged

0

You could add a rule to the Windows Firewall to block those IP ranges. Adding firewall rules is done fairly easily via PowerShell. You could simply run your script before allowing access. However, anything you do client-side is really is only an inconvenience if the support guy has admin privileges and bad intentions.


0

The routing table you displayed clearly does not route all traffic through the VPN, as shown by the very first line. In its present configuration, all it does is allow the client to have access to the LAN. The command to route all client traffic through the OpenVPN, including all traffic to third parties (i.e., not the VPN server's LAN) is push ...


3

The line '89-75-22-81.infra.chello.pl' at the top of the traceroute suggests you are using a cable connection. Chello is a brand formerly used by UPC, a cable internet service provider. The appearance of an IP address in a private range immediately after your local network is normal for cable connections. The address '10.216.128.1' belongs to a cable modem ...


0

A traceroute works by sending packets, each with an increasing TTL (hop limit). Whenever the hop limit is reached the last router will send back an error message telling you about this. The IP addresses you see in a traceroute are what that router uses as its source address in the error message. Although both you and your final destination have public IP ...


2

Machines can reach other machines in their same local subnet thanks to a subnet route. And machines can reach anything their gateway can reach thanks to their default route. But neither of these applies to the access point trying to reach the machine pinging it. So the ping reply has no way to get back to the source machine. You need to add a subnet route. ...


2

Your route statement isn't what you want. The 192.168.1.1 router isn't the gateway for the 192.168.0.0/24 network (which is what your route statement says-- it's flat wrong). You'll want to place a route on the 192.168.1.1 wireless router to give it a route to the 192.168.0.0/24 network via the 192.168.1.37 PC. You'll also need to enable IP routing on the ...


0

The solution is as follows. First, every household gets a separate VLAN. The shared network also gets one. Centrally we will use a switch with VLAN access control. Every household gets a switch that routes known ip addresses to the central switch and all other traffic to the internet modem. We will supply ip addresses from a central DHCP server.


0

This is more a comment but too long so have to put as an Answer. So you have common shared services that have separate entities for each household. A bit like a Datacentre has multiple Servers for different clients but they cannot access each others? I think you need to split the Services apart so rather than throwing them all in one topology you need to ...


0

You should apply rules to the FORWARD chain: iptables -I FORWARD -s 192.168.10.25 -j ACCEPT iptables -I FORWARD -s 192.168.10.14 -j ACCEPT I suspect you would like to accept the response: iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT


2

The systems all updated to the new IP scope because they were set to DHCP, and the printer didn't update since it was set statically. What you probably didn't do when you reset the printer IP, was to change the setting on the printer as well as in windows. Routers connect networks. If the system knows that 192.168.254.x is reachable via it's LAN interface, ...


3

The easiest solution would be setting the DNS server (usually found in configuration settings of the router) to the one which does the needed filtering (one of examples could be OpenDNS, http://www.opendns.com/). You could set up a similar thing on the router itself, but it is not so straightforward. You will need to install an alternate firmware (like ...


0

Use CONNMARK to mark the connections: iptables -t mangle -A INPUT -i ppp+ -j CONNMARK --set-mark 0x1 iptables -t mangle -A OUTPUT -m connmark --mark 0x1 -j MARK --set-mark 0x1



Top 50 recent answers are included