Flexible Internet Router for Linux

Total Page:16

File Type:pdf, Size:1020Kb

Flexible Internet Router for Linux fli4l – flexible internet router for linux Version 3.10.18 The fli4l-Team email: [email protected] September 15, 2019 Contents 1. Documentation of the base package 10 1.1. Introduction...................................... 10 2. Setup and Configuration 13 2.1. Unpacking the archives................................ 13 2.2. Configuration..................................... 14 2.2.1. Editing the configuration files........................ 14 2.2.2. Configuration via a special configuration file................ 15 2.2.3. Variables................................... 15 2.3. Setup flavours..................................... 15 2.3.1. Router on a USB-Stick............................ 16 2.3.2. Router on a CD, or network boot...................... 16 2.3.3. Type A: Router on hard disk—only one FAT partition.......... 16 2.3.4. Type B: Router on hard disk—one FAT and one ext3 partition..... 16 3. Base configuration 18 3.1. Example file...................................... 19 3.2. General settings.................................... 25 3.3. Console settings.................................... 30 3.4. Hints To Identify Problems And Errors...................... 31 3.5. Usage of a customized /etc/inittab......................... 32 3.6. Localized keyboard layouts............................. 32 3.7. Ethernet network adapter drivers.......................... 33 3.8. Networks....................................... 42 3.9. Additional routes (optional)............................. 44 3.10. The Packet Filter................................... 44 3.10.1. Packet Filter Actions............................. 46 3.10.2. Restrictions For Rules............................ 47 3.10.3. Using Templates With The Packet Filter................. 50 3.10.4. Configuration Of The Packet Filter..................... 54 3.10.5. Example.................................... 60 3.10.6. Default Configurations............................ 64 3.10.7. DMZ – Demilitarized Zone......................... 68 3.10.8. Conntrack-Helpers.............................. 68 3.11. Domain configuration................................ 70 3.12. imond configuration................................. 71 3.13. General circuit configuration............................ 74 2 Contents 4. Packages 75 4.1. Tools In The Package ’Base’............................. 75 4.1.1. OPT_SYSLOGD – Logging system messages............... 75 4.1.2. OPT_KLOGD – Logging kernel messages................. 77 4.1.3. OPT_LOGIP – Logging WAN IP addresses................ 77 4.1.4. OPT_Y2K – Date correction for systems that are not Y2K-safe.... 77 4.1.5. OPT_PNP – Installation of ISAPnP tools................. 78 4.2. Advanced Networking................................ 79 4.2.1. Broadcast Relay - Forwarding of IP Broadcasts.............. 80 4.2.2. Bonding - Combining Several Network Interface Cards In One Link.. 80 4.2.3. VLAN - 802.1Q Support........................... 84 4.2.4. Device MTU - Adjusting MTU Values................... 85 4.2.5. BRIDGE - Ethernet Bridging for fli4l................... 86 4.2.6. Notes..................................... 89 4.2.7. EBTables - EBTables for fli4l........................ 89 4.2.8. ETHTOOL - Settings for Ethernet Network Adapters.......... 90 4.2.9. Example.................................... 91 4.3. CHRONY - Network Time Protocol Server/Client................ 92 4.3.1. Configuration of OPT_CHRONY..................... 93 4.3.2. Support.................................... 94 4.3.3. Literature................................... 94 4.4. DHCP_CLIENT - Dynamic Host Configuration Protocol............ 94 4.4.1. OPT_DHCP_CLIENT........................... 94 4.5. DNS_DHCP - Hostnames, DNS- and DHCP-Server as well as DHCP-Relay.. 95 4.5.1. Hostnames.................................. 95 4.5.2. DNS-Server.................................. 96 4.5.3. DHCP-server................................. 102 4.5.4. DHCP-Relay................................. 105 4.5.5. TFTP-server................................. 105 4.5.6. YADIFA - Slave DNS Server........................ 106 4.6. DSL - DSL over PPPoE, Fritz!DSL and PPTP.................. 107 4.6.1. General Configuration Variables...................... 107 4.6.2. OPT_PPPOE - DSL over PPPoE..................... 110 4.6.3. OPT_FRITZDSL - DSL via Fritz!Card DSL............... 112 4.6.4. OPT_PPTP - DSL over PPTP in Austria/the Netherlands....... 113 4.6.5. OPT_POESTATUS - PPPoE-Status-Monitor On fli4l-Console..... 114 4.7. DYNDNS - Dynamic Update For Domain Name Services............ 114 4.8. EASYCRON - Time-based Job Scheduling..................... 120 4.8.1. Configuration................................. 120 4.8.2. Examples................................... 120 4.8.3. Prerequisites................................. 121 4.8.4. Installation.................................. 121 4.9. HD - Support For Harddisks, Flash-Cards, USB-Sticks, ............... 121 4.9.1. OPT_HDINSTALL - Installation On A Harddisk/CompactFlash.... 121 4.9.2. OPT_MOUNT - Automatic Mounting Of Filesystems.......... 123 4.9.3. OPT_EXTMOUNT - Manual Mounting Of File Systems........ 124 4.9.4. OPT_HDSLEEP – Setting Automatic Sleep Mode For Harddisks.... 124 3 Contents 4.9.5. OPT_RECOVER – Emergency Option.................. 125 4.9.6. OPT_HDDRV - Additional Drivers For Harddisk Controllers...... 125 4.10. HTTPD - Webserver For Status-Display...................... 126 4.10.1. OPT_HTTPD - Mini-Webserver As Status-Display........... 126 4.10.2. User Management.............................. 127 4.10.3. OPT_OAC - Online Access Control.................... 128 4.11. HWSUPP - Hardware support........................... 129 4.11.1. Description.................................. 129 4.11.2. Configuration of the HWSUPP package.................. 130 4.11.3. Expert settings................................ 134 4.11.4. Support for VPN cards........................... 135 4.12. IPv6 - Internet Protocol Version 6......................... 135 4.12.1. Introduction................................. 135 4.12.2. Address Format................................ 136 4.12.3. Configuration................................. 136 4.12.4. Web-GUI................................... 147 4.13. ISDN - Communication Over Active And Passive ISDN-Cards.......... 147 4.13.1. Establishing An ISDN Connection..................... 147 4.13.2. ISDN Card.................................. 148 4.13.3. OPT_ISDN_COMP (EXPERIMENTAL)................. 152 4.13.4. ISDN-Circuits................................. 153 4.13.5. OPT_TELMOND - telmond-Configuration................ 161 4.13.6. OPT_RCAPID - Remote CAPI Daemon................. 163 4.14. OpenVPN - VPN Support.............................. 164 4.14.1. OpenVPN - Introductive Example..................... 165 4.14.2. OpenVPN - Configuration.......................... 166 4.14.3. OpenVPN - Bridge configuration...................... 168 4.14.4. OpenVPN - Tunnel configuration...................... 169 4.14.5. Expert Settings................................ 172 4.14.6. OpenVPN - WebGUI............................. 180 4.14.7. OpenVPN - Collaboration Of Different OpenVPN Versions....... 182 4.14.8. OpenVPN - Examples............................ 183 4.14.9. Additional Links On OpenVPN....................... 186 4.15. PCMCIA - PC-Card Support............................ 187 4.15.1. PCMCIA Drivers............................... 187 4.16. PPP - Connection Of Computers Via Serial Interface............... 188 4.17. PROXY - Several Proxy Servers.......................... 189 4.17.1. OPT_PRIVOXY - A HTTP-Proxy Not Only For Ad Filtering..... 189 4.17.2. OPT_TOR - An Anonymous Communication System For The Internet 192 4.17.3. OPT_SS5 - Ein Socks4/5 Proxy...................... 193 4.17.4. OPT_TRANSPROXY (EXPERIMENTAL) - Transparent HTTP Proxy 193 4.17.5. OPT_SIPPROXY (EXPERIMENTELL) - Proxy for Session Initiation Protocol.................................... 194 4.17.6. OPT_IGMPPROXY - Internet Group Management Protocol Proxy).. 194 4.17.7. OPT_STUNNEL - Tunneling Connections Over SSL/TLS....... 201 4.18. QoS - Quality of Service............................... 207 4.18.1. Configuration................................. 207 4 Contents 4.18.2. Examples................................... 214 4.19. SSHD - Secure Shell, Secure Copy......................... 221 4.19.1. Installation Of The Secure-Shell-Daemon................. 221 4.19.2. Installation Of Dbclient........................... 224 4.19.3. Installation Of A Plink Client........................ 225 4.19.4. Installation Of A Sftp Server........................ 225 4.19.5. Literature................................... 225 4.20. TOOLS - Additional Tools For Debugging..................... 225 4.20.1. Networking-Tools............................... 225 4.20.2. Hardware Identification........................... 229 4.20.3. File Management Tools........................... 230 4.20.4. Developer-Tools............................... 231 4.21. UMTS - Internet Connection Via UMTS...................... 231 4.21.1. Configuration................................. 231 4.22. USB - Support For USB Devices.......................... 234 4.22.1. Problems With USB Devices........................ 235 4.22.2. Hints For Use................................. 235 4.22.3. Mounting Of USB Devices.......................... 235 4.23. WLAN - Support For Wireless-LAN........................ 236 4.23.1. WLAN Configuration............................ 236 4.23.2. Examples................................... 240 4.23.3. Virtual Accesspoint (VAP) (experimental)................. 242 4.23.4. Switching WLAN on and off based on daytime with
Recommended publications
  • Linux Pocket Guide.Pdf
    3rd Edition Linux Pocket Guide ESSENTIAL COMMANDS Daniel J. Barrett 3RD EDITION Linux Pocket Guide Daniel J. Barrett Linux Pocket Guide by Daniel J. Barrett Copyright © 2016 Daniel Barrett. All rights reserved. Printed in the United States of America. Published by O’Reilly Media, Inc., 1005 Gravenstein Highway North, Sebasto‐ pol, CA 95472. O’Reilly books may be purchased for educational, business, or sales promo‐ tional use. Online editions are also available for most titles (http://safaribook‐ sonline.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or [email protected]. Editor: Nan Barber Production Editor: Nicholas Adams Copyeditor: Jasmine Kwityn Proofreader: Susan Moritz Indexer: Daniel Barrett Interior Designer: David Futato Cover Designer: Karen Montgomery Illustrator: Rebecca Demarest June 2016: Third Edition Revision History for the Third Edition 2016-05-27: First Release See http://oreilly.com/catalog/errata.csp?isbn=9781491927571 for release details. The O’Reilly logo is a registered trademark of O’Reilly Media, Inc. Linux Pocket Guide, the cover image, and related trade dress are trademarks of O’Reilly Media, Inc. While the publisher and the author have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the author disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work. Use of the information and instructions contained in this work is at your own risk. If any code samples or other technology this work contains or describes is subject to open source licenses or the intellec‐ tual property rights of others, it is your responsibility to ensure that your use thereof complies with such licenses and/or rights.
    [Show full text]
  • The Bioinformatics Lab Linux Proficiency Terminal-Based Text Editors Version Control Systems
    The Bioinformatics Lab Linux proficiency terminal-based text editors version control systems Jonas Reeb 30.04.2013 “What makes you proficient on the command line?” - General ideas I Use CLIs in the first place I Use each tool for what it does best I Chain tools for more complex tasks I Use power of shell for small scripting jobs I Automate repeating tasks I Knowledge of regular expression 1 / 22 Standard tools I man I ls/cd/mkdir/rm/touch/cp/mv/chmod/cat... I grep, sort, uniq I find I wget/curl I scp/ssh I top(/htop/iftop/iotop) I bg/fg 2 / 22 Input-Output RedirectionI By default three streams (“files”) open Name Descriptor stdin 0 stdout 1 stderr 2 Any program can check for its file descriptors’ redirection! (isatty) 3 / 22 Input-Output RedirectionII Output I M>f Redirect file descriptor M to file f, e.g. 1>f I Use >> for appending I &>f Redirect stdout and stderr to f I M>&N Redirect fd M to fd N Input I 0<f Read from file f 4 / 22 Pipes I Forward output of one program to input of another I Essential for Unix philosophy of specialized tools I grep -P -v "^>" *.fa | sort -u > seqs I Input and arguments are different things. Use xargs for arguments: ls *.fa | xargs rm 5 / 22 Scripting I Quick way to get basic programs running I Basic layout: #!/bin/bash if test"$1" then count=$1 else count=0 fi for i in {1..10} do echo $((i+count)) let"count +=1" done 6 / 22 Motivation - “What makes a good text editor” I Fast execution, little system load I Little bandwidth needed I Available for all (your) major platforms –> Familiar environment I Fully controllable via keyboard I Extensible and customizable I Auto-indent, Auto-complete, Syntax highlighting, Folding, ..
    [Show full text]
  • Linux Hardware Compatibility HOWTO
    Linux Hardware Compatibility HOWTO Steven Pritchard Southern Illinois Linux Users Group [email protected] 3.1.5 Copyright © 2001−2002 by Steven Pritchard Copyright © 1997−1999 by Patrick Reijnen 2002−03−28 This document attempts to list most of the hardware known to be either supported or unsupported under Linux. Linux Hardware Compatibility HOWTO Table of Contents 1. Introduction.....................................................................................................................................................1 1.1. Notes on binary−only drivers...........................................................................................................1 1.2. Notes on commercial drivers............................................................................................................1 1.3. System architectures.........................................................................................................................1 1.4. Related sources of information.........................................................................................................2 1.5. Known problems with this document...............................................................................................2 1.6. New versions of this document.........................................................................................................2 1.7. Feedback and corrections..................................................................................................................3 1.8. Acknowledgments.............................................................................................................................3
    [Show full text]
  • PC 98 System Design Guide
    APPENDIX B Device Identifiers This appendix lists CompatibleIDs for Plug and Play vendor IDs and device IDs. Note: For non-BIOS enumerated Industry Standard Architecture (ISA) devices, new vendor IDs must be registered by sending e-mail to [email protected]. Contents Plug and Play Vendor and Device IDs....................................................... 372 Generic Windows Device IDs................................................................ 373 Interrupt Controllers ...................................................................... 374 Timers...................................................................................... 374 DMA....................................................................................... 374 Keyboards.................................................................................. 374 Parallel Devices ........................................................................... 375 Serial Devices ............................................................................. 375 Disk Controllers........................................................................... 376 Display Adapters.......................................................................... 376 Peripheral Buses........................................................................... 377 Real-Time Clock, BIOS, and System Board Devices................................... 377 PCMCIA Controller Chip Sets........................................................... 378 Mouse.....................................................................................
    [Show full text]
  • Configuration Parameters
    Good news, everyone! User Documentation Version: 2020-01-01 M. Brutman ([email protected]) http://www.brutman.com/mTCP/ Table of Contents Introduction and Setup Introduction..............................................................................................................................................................8 What is mTCP?...................................................................................................................................................8 Features...............................................................................................................................................................8 Tested machines/environments...........................................................................................................................9 Licensing...........................................................................................................................................................10 Packaging..........................................................................................................................................................10 Binaries.....................................................................................................................................................................10 Documentation..........................................................................................................................................................11 Support and contact information.......................................................................................................................11
    [Show full text]
  • DDOS Detection and Denial Using Third Party Application in SDN
    International Conference on Energy, Communication, Data Analytics and Soft Computing (ICECDS-2017) DDOS Detection and Denial using Third Party Application in SDN Roshni Mary Thomas Divya James Dept. of Information Technology Dept. of Information Technology Rajagiri School of Engineering & Technology Rajagiri School of Engineering & Technology Ernakulam, India Ernakulam, India [email protected] [email protected] Abstract— Software Defined Networking(SDN) is a developing introduced i.e, Software Defined Networking (SDN). Software area where network managers can manage the network behavior Defined Networking (SDN) is a developing area where it programmatically such as modify, control etc. Using this feature extract the limitations of traditional network which make we can empower, facilitate or e network related security networking more uncomplicated. In SDN we can develop or applications due to the its capacity to reprogram the data plane change the network functions or behavior program. To make at any time. DoS/DDoS attacks are attempt to make controller the decision where the traffic needs to send with the updated functions such as online services or web applications unavailable to clients by exhausting computing or memory resources of feature SDN decouple the network planes into two. servers using multiple attackers. A DDoS attacker could produce 1. Control Plane enormous flooding traffic in a short time to a server so that the 2. Data Plane services provided by the server get degraded. This will lose of In control plane we can add update or add new features customer support, brand trust etc. to improve the network programmatically also we can change To detect this DDoS attack we use a traffic monitoring method the traffic according to our decision and in updated traffic are iftop in the server as third party application and check the traffic applied in data plane.
    [Show full text]
  • High Performance Linux Shell Programming Reference 2015 Edition
    Extensive, example-based Linux shell programming reference includes an English-to-shell dictionary, a tutorial and handbook, and many tables of information useful to programmers. Besides listing more than 2000 shell one- liners, it explains the principles and techniques of how to increase performance (execution speed, reliability, and efficiency), which apply to many other programming languages beyond shell. High Performance Linux Shell Programming Reference 2015 Edition Order the complete book from Booklocker.com http://www.booklocker.com/p/books/7831.html?s=pdf or from your favorite neighborhood or online bookstore. Your free excerpt appears below. Enjoy! High Performance Linux Shell Programming Reference 2015 Edition High Performance Linux Shell Programming Reference, 2015 Edition Copyright © 2015 by Edward J. Smeltz ISBN 978-1-63263-401-6 All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, recording or otherwise, without the prior written permission of the author. Printed on acid-free paper All information herein is believed to be accurate and correct, but the author and Booklocker.com, Inc assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained in this book. Manufacturers and sellers often use specific designations for their products to distinguish them in the marketplace. Where such designations appear in this book, and E. J. Smeltz was aware of a trademark claim, the designations have been printed in all caps or in initial caps. All trademarks are the property of their respective owners.
    [Show full text]
  • Ldiddenu.Pdf
    Installation Information File Specification October 12, 1999 Novell Confidential doc_tpl.fm Rev 99a 27 August 99 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. This product may require export authorization from the U.S. Department of Commerce prior to exporting from the U.S. or Canada. Copyright © 1993-1999 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. U.S. Patent Nos 5,553,139; 5,553,143; 5,677,851; 5,758,069; 5,784,560; 5,818,936; 5,864,865; 5,903,650; 5,905,860; 5,910,803 and other Patents Pending. Novell, Inc. 122 East 1700 South Provo, UT 84606 U.S.A. www.novell.com Installation Information File Specification November 1999 104-000190-001 Online Documentation: To access the online documentation for this and other Novell developer products, and to get updates, see developer.novell.com/ndk.
    [Show full text]
  • Blancco Erasure Sw 4.10 Hardware Support
    BLANCCO ERASURE SW 4.10 HARDWARE SUPPORT Blancco Ltd Länsikatu 15 FIN-80110 JOENSUU, FINLAND [email protected] Tel. +358-207-433-850 [email protected] Tel. +358-207-433-860 Fax +358-207-433-859 PAGE 1/74 Blancco Erasure SW v4.10 hardware support 30/06/2009 TABLE OF CONTENTS Mass storage controllers ....................................................................................................10 SCSI ......................................................................................................................................10 Adaptec .......................................................................................................................... 10 Advanced Micro Devices [AMD] ..................................................................................... 12 Advanced System Products, Inc..................................................................................... 12 Areca Technology Corp. .................................................................................................12 Artop Electronic Corp......................................................................................................12 BusLogic......................................................................................................................... 12 DTC Technology Corp. ...................................................................................................12 Digital Equipment Corporation ........................................................................................ 12 Future Domain Corp.
    [Show full text]
  • Linux Hardware Compatibility HOWTO Linux Hardware Compatibility HOWTO
    Linux Hardware Compatibility HOWTO Linux Hardware Compatibility HOWTO Table of Contents Linux Hardware Compatibility HOWTO........................................................................................................1 Patrick Reijnen, <[email protected] (remove both "antispam.")>..1 1.Introduction...........................................................................................................................................1 2.Computers/Motherboards/BIOS...........................................................................................................1 3.Laptops..................................................................................................................................................1 4.CPU/FPU..............................................................................................................................................1 5.Memory.................................................................................................................................................1 6.Video cards...........................................................................................................................................2 7.Controllers (hard drive).........................................................................................................................2 8.Controllers (hard drive RAID)..............................................................................................................2 9.Controllers (SCSI)................................................................................................................................2
    [Show full text]
  • Suse Linux / Installation
    Leah Cunningham, Karl Eichwalder, Stefan Fent, Werner Fink, Peter Findeisen, Dennis Geider, Viviane Glanz, Carsten Groß, Roland Haidl, Björn Jacke, Richard Jelinek, Hubert Mantel, Johannes Meixner, Edith Parzefall, Peter Pöml, Peter Reinhart, Marc Rührschneck, Thomas Schraitle, Klaus G. Wagner, Christian Zoz SuSE Linux 7.2 System and Reference Manual SuSE Inc. 580 2nd Street, #210 Oakland, CA 94607 USA Toll free phone number within the US and Canada: 1-888-UR-LINUX (1-888-875-4689) Phone.: +1-510-628-3380 Fax.: +1-510-628-3381 e-mail: [email protected] [email protected] [email protected] WWW: http://www.suse.com Europe: SuSE Linux Ltd. The Kinetic Centre Theobald Street Borehamwood, WD6 4PJ UK Phone.: +44-20-8387-4088 Fax: +44-20-8387-4010 WWW: http://www.suse.co.uk SuSE GmbH Schanzäckerstr. 10 D-90443 Nürnberg Germany Tel.: +49-911-740-5331 Fax.: +49-911-741 77 55 e-mail: [email protected] WWW: http://www.suse.de Leah Cunningham, Karl Eichwalder, Stefan Fent, Werner Fink, Peter Findeisen, Dennis Geider, Viviane Glanz, Carsten Groß, Roland Haidl, Björn Jacke, Richard Jelinek, Hubert Mantel, Johannes Meixner, Edith Parzefall, Peter Pöml, Peter Reinhart, Marc Rührschneck, Thomas Schraitle, Klaus G. Wagner, Christian Zoz SuSE Linux 7.2 System and Reference Manual 1st edition 2001 SuSE GmbH Copyright This work is copyrighted by SuSE GmbH. You may copy it in whole or in part as long as the copies retain this copyright statement. Layout: LATEX English Translation and Editing: Rebecca Ellis, Marc Rührschneck Cover design based on graphics by Stephan Endraß. Design by Manuela Piotrowski.
    [Show full text]
  • SECUMOBI SERVER Technical Description
    SECUMOBI SERVER Technical Description Contents SIP Server 3 Media Relay 10 Dimensioning of the Hardware 18 SIP server 18 Media Proxy 18 Page 2 of 18 SIP Server Operatingsystem: Debian https://www.debian.org/ Application: openSIPS http://www.opensips.org/ OpenSIPS is built and installed from source code. The operating system is installed with the following packages: Package Description acpi displays information on ACPI devices acpi-support-base scripts for handling base ACPI events such as the power button acpid Advanced Configuration and Power Interface event daemon adduser add and remove users and groups anthy-common input method for Japanese - common files and dictionary apt Advanced front-end for dpkg apt -utils APT utility programs aptitude terminal-based package manager (terminal interface only) autopoint The autopoint program from GNU gettext backup -manager command -line backup tool base-files Debian base system miscellaneous files base-passwd Debian base system master password and group files bash The GNU Bourne Again SHell bc The GNU bc arbitrary precision calculator language binutils The GNU assembler, linker and binary utilities bison A parser generator that is compatible with YACC bsdmainutils collection of more utilities from FreeBSD bsdutils Basic utilities from 4.4BSD-Lite build -essential Informational list of build -essential packages busybox Tiny utilities for small and embedded systems bzip2 high-quality block-sorting file compressor - utilities ca-certificates Common CA certificates console-setup console font and keymap
    [Show full text]