Hot answers tagged router
6
I'm going to have to be cheap and copy my answer from this question.
ntop is probably the best solution for doing this. It is designed to run long term and capture exactly what youre looking for.
It can show you which clients are receiving/sending the most traffic, where theyre recieving/sending to, what protocols and ports are being used etc.
It then uses ...
5
ntop can give you exactly what you're asking for. It collects data about all the traffic flowing through your network (and can collect data from other networks if they have a device configured to send netfow data to your system).
It will show you every host on the network, with how much bandwidth they've used. It will let you drill down into each host and ...
4
Don't bridge your internal and external interfaces. Your box is a router, not a switch. To make your machine a router you have to tell it to ,,forward'' packets between interfaces. I do so by echo 1>/proc/sys/net/ipv4/ip_forward. IIRC the way(TM) to do it is adding a line net.ipv4.ip_forward=1 to /etc/sysctl.conf and then execute /etc/init.d/procps ...
4
This isn't related to BusyBox. BusyBox is a set of unix utilities designed for low-resource environments such as routers. Your router's root filesystem is mounted read-only because it's stored on SquashFS, a compressed filesystem which cannot be written to. A SquashFS filesystem is compressed in one go when the filesystem is built and cannot be modified ...
4
It could be a missing dependency. Notably you'll get that type of message if the runtime linker ("program interpreter") set in the ELF header does not exist on your system.
To check for that, run:
readelf -l your_executable|grep "program interpreter"
If what it gives you does not exist on your system, or has missing dependencies (check with ldd), you'll ...
4
Assuming you are looking for software, your best choice is probably pfSense. You could also choose m0n0wall.
If you're looking for hardware, see the pfSense list list of hardware vendors. Both m0n0wall and pfSense will run on the ALIX.2D13 board.
3
You don't even need a Linux box if You wan't to try it out.
There are multiple Linux-based solutions available for home router devices allowing You to administer them from the command line (GUI for the less "get Your hands dirty" people) with
https://openwrt.org/
http://www.dd-wrt.com
being just the two most popular.
3
Simple solution create a tunnel between the two servers, e.g:
On server A:
ip tunnel add tunnel mode ipip remote 10.10.60.10
ip addr add 10.1.1.1/24 dev tunnel
sysctl -w net.ipv4.ip_forward=1
The last command is to forward packets from your newly created tunnel device to your virtual ethernet devices.
On Server C
ip tunnel add tunnel mode ipip remote ...
3
For a simple router, there are really only two steps that need to be done.
Enable routing
The first step is to enable routing in the kernel. By default, the kernel drops packets that it doesn't recognize; once you enable routing, it'll forward them. You need to issue either of these two commands when the computer boots:
sysctl -w net.ipv4.ip_forward=1
...
3
First plug in the IPs of the network for which you want to act as router. Either get multiple network interface cards or configure a virtual interface.
You need to enable packet forwarding from /etc/sysctl.conf and then configure iptables for NAT. Here is a brief tutorial for the same.
3
It sounds like there may be an IP address conflict on the local network. If two devices have the same IP address, it'll be down to chance which ARP reply is honoured by other hosts.
To test this, try this:
disconnect the host you're having trouble with
delete its IP address from another host's ARP table (on Linux, arp -d [address])
ping the IP address ...
3
What exactly do you mean by "connect"? What do you want to use the connection for?
You say you prefer terminal commands. In this case simply install an ssh-server on the one box and use ssh on the other box.
Let's take ubuntu/debian as an example OS:
box1$ sudo aptitude install openssh-server openssh-client
box1$ ssh localhost # you should be able to log ...
3
Which of the following situations do you mean?
[RDP client on Windows machine] => [linux server] => [windows Terminal Server]
If #1 is the case, you can use SSH proxy + proxycap on Windows: http://superuser.com/questions/507239/is-there-a-sshuttle-equivalent-for-windows-ssh-tunneling-for-windows
[RDP client on MacOSX/Linux machine] => [linux server] => ...
2
The application you are looking for is macof which is part of the dsniff toolkit. You'll find that ettercap is also quite useful when doing any sort of network auditing on a switched network.
Warning: I'm a firm believer that you need to understand the threat to defend against it, but you best be using these tools in your own lab on your own equipment. If ...
2
Since you are running this on powerful hardware, I'd recommend you just install the distro you are already most familiar with and take it from there.
Setting up any random distro as a router isn't hard, just install iptables and run
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE
Assuming eth0 is the device ...
2
With the addition of your last two requirements, I'd suggest using CentOS and configure everything per your requirements. Those two requirements would require enough modification to any router/appliance distro to make you go crazy. So yeah, install CentOS, then you can use smoothwall or similar package to simplify your routing setup You can use wireless as ...
2
That message is pretty thin; it doesn't even tell you there is actually a problem.
It has something to do with multicast source filtering.
Normally with multicasting, an IPv4 machine joins a multicast group using the IGMP protocol — this is why you see igmp in the log line — which tells all the network equipment around it that it wants to ...
2
Two guesses:
Packet loss. Do not trust the "ping" you ran in parallel since the packet loss may be affecting only those TCP streams, for whatever reason. One simple way to detect it is to run $ netstat -s -p|grep "segments retransmited" frequently on both sides (ssh client and server) during the SSH session. See if the counter increases, in which case you ...
2
With iptables firewall this works (Openwrt also uses iptables):
iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p udp --dport 53 -j DNAT --to 192.168.1.1
iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 53 -j DNAT --to 192.168.1.1
On your router use Opendns servers. 192.168.1.1 is the Openwrt router ip. 192.168.1.0/24 is the LAN network ...
2
A few things to check.
Have you started the SSH server (sshd) on the Ubuntu Virtual Machine?
On the Ubuntu VM, have you disabled the firewall or at least opened the SSH port (port 22)?
What kind of networking do you have set up for the Ubuntu VM in VirtualBox? NAT/Bridge/Host Only? It should be Bridge.
On the router, are you forwarding port 22 to the IP ...
2
This sounds like potentially some arp cache confusion.
One possibility is if the "Nokia firewall" is part of a High Availability (HA) pair, there could be some failover or load balancing events occurring. If there is an HA pair and one of them becomes the active firewall, the linux workstation may continue to send requests to the wrong firewall due to the ...
2
Remove the bridge. It's insecure in this type of arrangement.
Instead, install the arno-iptables-firewall package to easily and securely set up a secure router configuration. It will do the rest for you.
From the Debian package description:
Unlike other lean iptables frontends in Debian, arno-iptables-firewall will setup and load a secure, restrictive ...
2
If I understand what you're afer, you want the following:
You <-> Home systems <-> DDWRT Router <-> Linux Box <-> Internet
If so then you'll need to do a couple of things on your Linux laptop. Depending on what distro you're using the steps will be slightly different. My steps are for a Fedora Redhat distro.
% vim ...
2
They both use my lynksys router wired internet
If by this you mean they are both connected to the router with an ethernet cable, then they are already networked together. Get the local ip address of one computer with ifconfig:
> ifconfig
em1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.2.15 netmask 255.255.255.0 ...
1
Anurat - Try assigning a static IP address instead of getting it from DHCP to your wireless interface and ping the gateway. Your router might be blocking traffic from a certain IP range. In particular, try to use an IP address assigned to another client in your network that has Internet access.
1
This is a clear separation of concerns. The rules for access to and from the WAN should be different from those for the LAN.
The default configuration does not provide accept rules for services not necessarily offered on your network. Typically, most users should offer no services to the Internet. Adding appropriate rules to the appropriate rule sets ...
1
As far as I know, the firewall is generated from some higher-level configuration file on openwrt. As a lot of different possibilities need to be supported, the actually generate rules are not optimized and can contain therefore unnecessary/unused/empty chains. See OpenWRT's wiki article for more details.
To answer some of your questions
why is ...
1
Normally, I would expect you to have VLANs. These are commonly all allocated to eth0 with names like eth0.0 and eth0.1. Starting there would be a good start.
All your LAN acccess is likely on the br_lan (which may be eth0.0). If weren't using pppoe, the the WAN would be accessed over the other VLAN (likely eth0.1). The VLAN assignments may be different ...
1
You have a few options:
Computer C needs a link to the same physical net as A and B are on.
Router Y needs to have an address in 192.168.0.0/16 and router Z needs a route for 192.168.0.0/16 via router Y.
Create an ip-ip (or VPN) tunnel between computer C and computer A; route traffic for 192.168.0.0/16 via the tunnel interface.
Creating the tunnel is ...
1
Are you sure it is doing nothing? If you are changing the IP, when the appliance changes the IP, the URL you have entered is no longer valid, and active AJAX connections will fail calling the same IP. After you make the change, wait about 30 sec, then punch in the IP you assigned into the address bar and reload.
Only top voted, non community-wiki answers of a minimum length are eligible
