fli4l – flexible internet router for linux Version 3.10.18 The fli4l-Team email: [email protected] September 15, 2019 Contents 1. Documentation of the base package 10 1.1. Introduction...................................... 10 2. Setup and Configuration 13 2.1. Unpacking the archives................................ 13 2.2. Configuration..................................... 14 2.2.1. Editing the configuration files........................ 14 2.2.2. Configuration via a special configuration file................ 15 2.2.3. Variables................................... 15 2.3. Setup flavours..................................... 15 2.3.1. Router on a USB-Stick............................ 16 2.3.2. Router on a CD, or network boot...................... 16 2.3.3. Type A: Router on hard disk—only one FAT partition.......... 16 2.3.4. Type B: Router on hard disk—one FAT and one ext3 partition..... 16 3. Base configuration 18 3.1. Example file...................................... 19 3.2. General settings.................................... 25 3.3. Console settings.................................... 30 3.4. Hints To Identify Problems And Errors...................... 31 3.5. Usage of a customized /etc/inittab......................... 32 3.6. Localized keyboard layouts............................. 32 3.7. Ethernet network adapter drivers.......................... 33 3.8. Networks....................................... 42 3.9. Additional routes (optional)............................. 44 3.10. The Packet Filter................................... 44 3.10.1. Packet Filter Actions............................. 46 3.10.2. Restrictions For Rules............................ 47 3.10.3. Using Templates With The Packet Filter................. 50 3.10.4. Configuration Of The Packet Filter..................... 54 3.10.5. Example.................................... 60 3.10.6. Default Configurations............................ 64 3.10.7. DMZ – Demilitarized Zone......................... 68 3.10.8. Conntrack-Helpers.............................. 68 3.11. Domain configuration................................ 70 3.12. imond configuration................................. 71 3.13. General circuit configuration............................ 74 2 Contents 4. Packages 75 4.1. Tools In The Package ’Base’............................. 75 4.1.1. OPT_SYSLOGD – Logging system messages............... 75 4.1.2. OPT_KLOGD – Logging kernel messages................. 77 4.1.3. OPT_LOGIP – Logging WAN IP addresses................ 77 4.1.4. OPT_Y2K – Date correction for systems that are not Y2K-safe.... 77 4.1.5. OPT_PNP – Installation of ISAPnP tools................. 78 4.2. Advanced Networking................................ 79 4.2.1. Broadcast Relay - Forwarding of IP Broadcasts.............. 80 4.2.2. Bonding - Combining Several Network Interface Cards In One Link.. 80 4.2.3. VLAN - 802.1Q Support........................... 84 4.2.4. Device MTU - Adjusting MTU Values................... 85 4.2.5. BRIDGE - Ethernet Bridging for fli4l................... 86 4.2.6. Notes..................................... 89 4.2.7. EBTables - EBTables for fli4l........................ 89 4.2.8. ETHTOOL - Settings for Ethernet Network Adapters.......... 90 4.2.9. Example.................................... 91 4.3. CHRONY - Network Time Protocol Server/Client................ 92 4.3.1. Configuration of OPT_CHRONY..................... 93 4.3.2. Support.................................... 94 4.3.3. Literature................................... 94 4.4. DHCP_CLIENT - Dynamic Host Configuration Protocol............ 94 4.4.1. OPT_DHCP_CLIENT........................... 94 4.5. DNS_DHCP - Hostnames, DNS- and DHCP-Server as well as DHCP-Relay.. 95 4.5.1. Hostnames.................................. 95 4.5.2. DNS-Server.................................. 96 4.5.3. DHCP-server................................. 102 4.5.4. DHCP-Relay................................. 105 4.5.5. TFTP-server................................. 105 4.5.6. YADIFA - Slave DNS Server........................ 106 4.6. DSL - DSL over PPPoE, Fritz!DSL and PPTP.................. 107 4.6.1. General Configuration Variables...................... 107 4.6.2. OPT_PPPOE - DSL over PPPoE..................... 110 4.6.3. OPT_FRITZDSL - DSL via Fritz!Card DSL............... 112 4.6.4. OPT_PPTP - DSL over PPTP in Austria/the Netherlands....... 113 4.6.5. OPT_POESTATUS - PPPoE-Status-Monitor On fli4l-Console..... 114 4.7. DYNDNS - Dynamic Update For Domain Name Services............ 114 4.8. EASYCRON - Time-based Job Scheduling..................... 120 4.8.1. Configuration................................. 120 4.8.2. Examples................................... 120 4.8.3. Prerequisites................................. 121 4.8.4. Installation.................................. 121 4.9. HD - Support For Harddisks, Flash-Cards, USB-Sticks, ............... 121 4.9.1. OPT_HDINSTALL - Installation On A Harddisk/CompactFlash.... 121 4.9.2. OPT_MOUNT - Automatic Mounting Of Filesystems.......... 123 4.9.3. OPT_EXTMOUNT - Manual Mounting Of File Systems........ 124 4.9.4. OPT_HDSLEEP – Setting Automatic Sleep Mode For Harddisks.... 124 3 Contents 4.9.5. OPT_RECOVER – Emergency Option.................. 125 4.9.6. OPT_HDDRV - Additional Drivers For Harddisk Controllers...... 125 4.10. HTTPD - Webserver For Status-Display...................... 126 4.10.1. OPT_HTTPD - Mini-Webserver As Status-Display........... 126 4.10.2. User Management.............................. 127 4.10.3. OPT_OAC - Online Access Control.................... 128 4.11. HWSUPP - Hardware support........................... 129 4.11.1. Description.................................. 129 4.11.2. Configuration of the HWSUPP package.................. 130 4.11.3. Expert settings................................ 134 4.11.4. Support for VPN cards........................... 135 4.12. IPv6 - Internet Protocol Version 6......................... 135 4.12.1. Introduction................................. 135 4.12.2. Address Format................................ 136 4.12.3. Configuration................................. 136 4.12.4. Web-GUI................................... 147 4.13. ISDN - Communication Over Active And Passive ISDN-Cards.......... 147 4.13.1. Establishing An ISDN Connection..................... 147 4.13.2. ISDN Card.................................. 148 4.13.3. OPT_ISDN_COMP (EXPERIMENTAL)................. 152 4.13.4. ISDN-Circuits................................. 153 4.13.5. OPT_TELMOND - telmond-Configuration................ 161 4.13.6. OPT_RCAPID - Remote CAPI Daemon................. 163 4.14. OpenVPN - VPN Support.............................. 164 4.14.1. OpenVPN - Introductive Example..................... 165 4.14.2. OpenVPN - Configuration.......................... 166 4.14.3. OpenVPN - Bridge configuration...................... 168 4.14.4. OpenVPN - Tunnel configuration...................... 169 4.14.5. Expert Settings................................ 172 4.14.6. OpenVPN - WebGUI............................. 180 4.14.7. OpenVPN - Collaboration Of Different OpenVPN Versions....... 182 4.14.8. OpenVPN - Examples............................ 183 4.14.9. Additional Links On OpenVPN....................... 186 4.15. PCMCIA - PC-Card Support............................ 187 4.15.1. PCMCIA Drivers............................... 187 4.16. PPP - Connection Of Computers Via Serial Interface............... 188 4.17. PROXY - Several Proxy Servers.......................... 189 4.17.1. OPT_PRIVOXY - A HTTP-Proxy Not Only For Ad Filtering..... 189 4.17.2. OPT_TOR - An Anonymous Communication System For The Internet 192 4.17.3. OPT_SS5 - Ein Socks4/5 Proxy...................... 193 4.17.4. OPT_TRANSPROXY (EXPERIMENTAL) - Transparent HTTP Proxy 193 4.17.5. OPT_SIPPROXY (EXPERIMENTELL) - Proxy for Session Initiation Protocol.................................... 194 4.17.6. OPT_IGMPPROXY - Internet Group Management Protocol Proxy).. 194 4.17.7. OPT_STUNNEL - Tunneling Connections Over SSL/TLS....... 201 4.18. QoS - Quality of Service............................... 207 4.18.1. Configuration................................. 207 4 Contents 4.18.2. Examples................................... 214 4.19. SSHD - Secure Shell, Secure Copy......................... 221 4.19.1. Installation Of The Secure-Shell-Daemon................. 221 4.19.2. Installation Of Dbclient........................... 224 4.19.3. Installation Of A Plink Client........................ 225 4.19.4. Installation Of A Sftp Server........................ 225 4.19.5. Literature................................... 225 4.20. TOOLS - Additional Tools For Debugging..................... 225 4.20.1. Networking-Tools............................... 225 4.20.2. Hardware Identification........................... 229 4.20.3. File Management Tools........................... 230 4.20.4. Developer-Tools............................... 231 4.21. UMTS - Internet Connection Via UMTS...................... 231 4.21.1. Configuration................................. 231 4.22. USB - Support For USB Devices.......................... 234 4.22.1. Problems With USB Devices........................ 235 4.22.2. Hints For Use................................. 235 4.22.3. Mounting Of USB Devices.......................... 235 4.23. WLAN - Support For Wireless-LAN........................ 236 4.23.1. WLAN Configuration............................ 236 4.23.2. Examples................................... 240 4.23.3. Virtual Accesspoint (VAP) (experimental)................. 242 4.23.4. Switching WLAN on and off based on daytime with