ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
I used to operate a network with a single firewall (Sophos UTM) that had a foot in multiple VLANs and performed as router in between those where allowed. For more security I added a second firewall with another FW software (Opnsense). WAN - Firewall1 - Main LAN (FW1 as Default GW) - Firewall2 - Shielded VLANs FW1, Main LAN and FW2 all have a foot in the main
Asked · Jun 15
answered · Jun 16
First of all, it seems as if this question is about Linux, but it seems to me that it is about basic routing concepts. I happen to have the following configuration: What I am trying to do is to ensure symmetric routing on the server (CentOS 7), so that incoming and outgoing traffic from it takes the same path for any pair of nodes (using both network interfa
I am attempting a chained/double-hop VPN setup where all client traffic passes through 2 servers before reaching the internet: Client → Server1 → Server2 → Public Internet All peers are on these private address blocks: 10.103.213.0/24 (IPv4) and fd6f:9403:2887:9cd6:10:103:213:0/112 (IPv6). Below are the configurations of the peers and the IPTables rules in p
The ss command seems to distinguish between * and 0.0.0.0 . While the listing of ssh with 0.0.0.0:22 and [::]:22 is clear, *:7946 and *:80 is not quite as much. $ ss -ntl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 0.0.0.0:22 0.0.0.0:* LISTEN 0 128 *:7946 *:* LISTEN 0 128 *:80 *:* LISTEN 0 128 [::]:22 [::]:* Why isn't it 0.0.0.0:794
I have the following setup with FreeBSD jails and VNET which is supposed to grow into a DNS core net lab setup. The jailhost and the jails are running FreeBSD 12.1. The jails are connected by epair interfaces. The BRAS jail which is supposed to act as the network's edge router is connected to the jail host by epair interfaces. The jailhost runs a pf based NA
I always thought that the default gateways has to be on the same network as the server/client trying to connect to the internet. However today I rented a server from Hetzner and the server is able to connect to the internet even though, as it seems to me, the default gateway is definitely not connected to the same network. Also the netmask seems to be set to
linux