Tag Info

New answers tagged

0

The manual states: bypass-dhcp -- Add a direct route to the DHCP server (if it is non-local) which bypasses the tunnel (Available on Windows clients, may not be available on non-Windows clients). so there is no certainty at all this exists on iOS. I do not have an iOS device, please let me know whether you find any evidence that this instruction works. ...


0

The finding was that the Fedora 21 and 22 "Server" install does not include the required files to enable fib_rules.c to run, which controls the multiple table rules. The packages that are needed to make Policy Routing with multiple tables are: kernel-headers, kernel-devel, and libnl3-devel Once these were installed the policy routing works correctly.


0

Ahh, I understand, you can only use dotted-decimal format for the PBX address. Usually, in the programming world, a "hardcoded IP" is a specific address written directly into the code, and cannot be changed at all. Sorry for the confusion. In this case that does open up some options, including a VPN or a VPS running a Reverse Proxy, in combination with a ...


0

I have never tried it, however I have read that you can use PTR records to map IP addresses to hostnames : http://www.itworld.com/article/2833006/networking/how-to-setup-reverse-dns-and-ptr-records.html http://help.dnsmadeeasy.com/managed-dns/dns-record-types/ptr-record/ Also, if your home router doesn't support it, maybe you can flash DD-WRT firmware on ...


1

Replace domain-name-servers 192.168.1.1; by the address of the dns server used by the laptop, or configure a dns cache server on your laptop. Use commands like nslookup or host to test the dns access on the client. You need to enable masquerading on the laptop with iptables: iptables -t nat -I POSTROUTING -s 192.168.1.0/24 -o <wifi_interface> ...


0

Your DHCP configuration looks fine. It might be that you do not have a DNS resolver at 192.168.1.1 or it doesn't run dnsmasq service. What sort of device is your gateway?


1

Both of your /etc/network/interfaces files contain one and the same error: the default gateway is specified twice. You can have multiple default gateways, only under a very specific circumstance (neglecting metrics): that you have several routing tables, each specified in the file /etc/iproute2/rt_tables, but each routing table shall have a single default ...


0

I believe that should work, as long as you specify on your VPN client to send all traffic over the tunnel. However, since you mentioned only certain applications need the static IP, you may want to do a PBR that only sends the traffic that needs the static IP over the tunnel, and the rest straight out the Internet, to conserve bandwidth/latency/overhead.


1

In short, yes. In long, the command of For primary network (use default route) is adding the default route to the highest priority in the routing table. So every traffic will route on that route. And the second command For back up network (set admin distance) is adding a route with AD 100, assume you only have this two route on the routing table, basically ...


0

What about simply setting up a W7 VM in VirtualBox, and using the 2nd VPN via that, then using bidirectional folder sharing between the host and guest? Simplicity. :)


0

Simplicity is a beautiful thing. Rather use Mega / dropbox clients on your devices. If you need to print to local printers, install CloudPrint (Android) or a variant for iOS. Otherwise take the easy VPN route and use TeamViewer VPN. Make sure the IP range is different on the client & host network. VPN's can be tricky, just 1 incorrect preference and it ...


1

The main difference between Squeeze and Jessie is that ip command calls ifconfig for the first and iproute2 for the last. ifconfig doesn't known multiple gateway configurations, at least without metrics. That's why you see differences between the two ip route commands (or route -n (deprecated)) iproute2 can track multiple routing tables ip route show all ...


0

If you don't want a default gateway, the best option is to remove it from the interface configuration. Go to the interface properties and choose TCPv4 properties. If this is set to "obtain an ip address automatically" then DHCP is setting the IP address, and defining the default gateway. In which case, the simplest solution is to use a static address.


0

Check that all public IPs are set on the external interface of your physical host, with the correct netmask Check that all the VMs have as default gateway the IP address of the bridge they're connected to (check that the bridges correct have IPs) Check that ip_forwarding is enabled Use SNAT to mask the VMs behind the correct public IPs Use DNAT to forward ...


0

Set up your openvz containers to use bridged networking (using veth interfaces). Create a bridge for each of the internal networks you want to connect your containers to (in your case 2 bridges, one for 192.168.2.0/24 and one for 192.168.3.0/24. Let's call them br2 and br3). Give to each bridge an ip address on the correct network (for example br2 could be ...


1

The outside part is already ok. The following steps are to enable the internal DNS server. Set up dnsmasq on a local linux box. Set it to listen on the interface connected to your LAN. Set some external DNS in /etc/resolv.conf (or configure a custom resolv-file and add the DNS servers there). These DNS servers will be used to resolve anything that dnsmasq ...


0

This should be completely automatic, except for the need of the usual masquerade rule: iptables -t nat -A POSTROUTING -i docker0 -o tun0 -j MASQUERADE Just for the sake of thoroughness, make sure you have the routing rule, on the host, servicing docker0: if you can ping the dockers from the host, no need to read further. Otherwise add ip route add ...


3

Loose Source Routing using ping -j, tracert -j or pathping -g can be used to specify a system through which the packets should pass through before proceeding on to their destination. However, source routing has a great potential for abuse (see later), and therefore most network administrators block all source-routed packets at their border routers. So, ...


0

I do not think this can be done. Here is a similar question. You could use a VM and use specific programs on that, and have all of the traffic be through VPN as suggested here.


3

These days, IP source routes are ignored practically everywhere, due to various security issues that they introduce. While it's not a very good idea to rely on IP routing for security, source routing still makes it unnecessarily easy to bypass firewalls, as well as spoof your IP address, while having practically no good uses. In other words, your packets ...


1

Should this be done with firewall rules or static routes? If, by static routes, you mean iproute2's suite, then you are right, it can be done both ways, and I have been unable so far to perceive a performance difference. A NIC will accept UNICAST traffic only under two circumstances: It has the IP address the UNICAST traffic is directed to; It is in ...


0

The instructions are quite simple, really: sudo ip route del default sudo ip route add default via Ip.Add.OfNew.Gateway Be careful, though. It is possible your sysadmin has implemented a series of checks which make this re-direction impossible. For instance, he could have a firewall (iptables) checking on the MAC address of clients, which refuses ...



Top 50 recent answers are included