Context Navigation

← Previous Period
Next Period →

Timeline

Jul 7, 2009:

11:52 PM TipAndDoc/network/iptables edited by mitty

(diff)

11:52 PM Changeset in lab [20] by mitty

trunk/iproute/setroute.sh
trunk/iptables/setmasq.sh
trunk/iptables/setnapt.sh

CR+LF -> LF

11:52 PM Changeset in lab.git [b9ae53a]trunk by mitty <mitty@…>

iproute/setroute.sh
iptables/setmasq.sh
iptables/setnapt.sh

CR+LF -> LF

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@20 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

11:48 PM Changeset in lab [19] by mitty

trunk/iptables/setlan2wan.sh

FIX: now the script needs 2nd argument to fix IP address of LAN device
- LAN device can be down before the this script is invoked

11:48 PM Changeset in lab.git [3a5184c]trunk by mitty <mitty@…>

iptables/setlan2wan.sh

FIX: now the script needs 2nd argument to fix IP address of LAN device
- LAN device can be down before the this script is invoked

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@19 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

11:30 PM Changeset in lab [18] by mitty

trunk/iptables/setlan2wan.sh

wait for a while to surely set rules
- sometimes fail to set rules for some unclear reason

11:30 PM Changeset in lab.git [7c270d4]trunk by mitty <mitty@…>

iptables/setlan2wan.sh

wait for a while to surely set rules
- sometimes fail to set rules for some unclear reason

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@18 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

7:47 PM TipAndDoc/network/iptables edited by mitty

(diff)

7:38 PM Changeset in lab [17] by mitty

trunk/iptables/ufw/nat.rules

IP MASQUERADE is now set up with setmasq.sh [16], so delete rules no longer needed

7:38 PM Changeset in lab.git [0d809d3]trunk by mitty <mitty@…>

iptables/ufw/nat.rules

IP MASQUERADE is now set up with setmasq.sh [16], so delete rules no longer needed

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@17 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

7:33 PM Changeset in lab [16] by mitty

trunk/iptables/setlan2wan.sh
trunk/iptables/setmasq.sh

setlan2wan.sh
- see #4
setmasq.sh
- replacement for setnapt.sh

7:33 PM Changeset in lab.git [e829fd8]trunk by mitty <mitty@…>

iptables/setlan2wan.sh
iptables/setmasq.sh

setlan2wan.sh
- see #4
setmasq.sh
- replacement for setnapt.sh

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@16 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

5:48 PM Changeset in lab [15] by mitty

trunk/iptables/ufw/raw.rules

FIX: increase acceptable icmp packet size limit

ping 192.168.100.254 -n 1

PING 1 (0.0.0.1) 56(124) bytes of data.
--- 1 ping statistics ---
23 packets transmitted, 0 received, 100% packet loss, time 22381ms

5:48 PM Changeset in lab.git [c8daa69]trunk by mitty <mitty@…>

iptables/ufw/raw.rules

FIX: increase acceptable icmp packet size limit

ping 192.168.100.254 -n 1

PING 1 (0.0.0.1) 56(124) bytes of data.
--- 1 ping statistics ---
23 packets transmitted, 0 received, 100% packet loss, time 22381ms

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@15 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

5:14 PM TipAndDoc/network/iptables edited by mitty

(diff)

5:09 PM TipAndDoc/network/ufw edited by mitty

(diff)

5:08 PM TipAndDoc/network/ufw edited by mitty

(diff)

5:08 PM TipAndDoc/network/iptables edited by mitty

(diff)

4:34 PM TipAndDoc/network/iptables edited by mitty

(diff)

Jul 6, 2009:

4:33 PM Ticket #4 (ルータPCのLAN側配下のクライアントPCから、ルータPCのWAN側IPを使ってルータPCと通信できない) created by mitty

* …

2:49 PM Changeset in lab [14] by mitty

trunk/iproute/setroute-rhel.sh
trunk/iproute/setroute.sh
trunk/iptables/setnapt.sh

FIX: use 'tr' to replace repeated SPACE with a single SPACE before 'cut' lines

2:49 PM Changeset in lab.git [84d8293]trunk by mitty <mitty@…>

iproute/setroute-rhel.sh
iproute/setroute.sh
iptables/setnapt.sh

FIX: use 'tr' to replace repeated SPACE with a single SPACE before 'cut' lines

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@14 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

Jul 5, 2009:

6:38 PM TipAndDoc/network/iptables edited by mitty

(diff)

6:35 PM TipAndDoc/network/iptables edited by mitty

(diff)

6:07 PM Ticket #3 (違うNIC宛のパケットが全て特定のNICにのみ届く場合がある) created by mitty

* …

12:58 PM Changeset in lab [13] by mitty

trunk/iptables/setfilter
trunk/iptables/ufw/after.rules
trunk/iptables/ufw/nat.rules

NEW setfilter now sets nat table
- this feature clashes with setnapt.sh because both of them reset nat table
- do not use them (setfilter and setnapt.sh) at the same same time
accept connections to local services from WAN
- ACCEPT and REDIRECT examples

12:58 PM Changeset in lab.git [71b798c]trunk by mitty <mitty@…>

iptables/setfilter
iptables/ufw/after.rules
iptables/ufw/nat.rules

NEW setfilter now sets nat table
- this feature clashes with setnapt.sh because both of them reset nat table
- do not use them (setfilter and setnapt.sh) at the same same time
accept connections to local services from WAN
- ACCEPT and REDIRECT examples

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@13 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

10:36 AM TipAndDoc/network/ufw edited by mitty

(diff)

8:46 AM TipAndDoc/network/iptables edited by mitty

(diff)

8:46 AM TipAndDoc/network/iptables edited by mitty

(diff)

8:43 AM TipAndDoc/network/iptables edited by mitty

(diff)

8:42 AM TipAndDoc/network/iproute edited by mitty

(diff)

8:18 AM TipAndDoc/network/iproute edited by mitty

(diff)

8:16 AM TipAndDoc/network/iproute edited by mitty

(diff)

8:10 AM TipAndDoc/network/iproute edited by mitty

(diff)

7:20 AM Changeset in lab [12] by mitty

trunk/iptables/ufw/after.rules
trunk/iptables/ufw/before.rules
trunk/iptables/ufw/mangle.rules
trunk/iptables/ufw/raw.rules

change --log-level to "err"
accept FORWARD from LAN (eth0 with 192.168.100.0/24)
drop CIFS access from/to WAN (eth1)
accept access from LAN
add custom rules for 'setfilter' script
- mangle.rules, raw.rules

7:20 AM Changeset in lab.git [4999639]trunk by mitty <mitty@…>

iptables/ufw/after.rules
iptables/ufw/before.rules
iptables/ufw/mangle.rules
iptables/ufw/raw.rules

change --log-level to "err"
accept FORWARD from LAN (eth0 with 192.168.100.0/24)
drop CIFS access from/to WAN (eth1)
accept access from LAN
add custom rules for 'setfilter' script
- mangle.rules, raw.rules

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@12 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

7:12 AM Changeset in lab [11] by mitty

trunk/iptables/ufw
trunk/iptables/ufw/after.rules
trunk/iptables/ufw/before.rules

original rules from /etc/ufw/*.rules

7:12 AM Changeset in lab.git [ab902ad]trunk by mitty <mitty@…>

iptables/ufw/after.rules
iptables/ufw/before.rules

original rules from /etc/ufw/*.rules

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@11 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

6:09 AM Changeset in lab [10] by mitty

trunk/iproute/setroute-rhel.sh
trunk/iproute/setroute.sh
trunk/iptables/setfilter
trunk/iptables/setnapt.sh

set executable props

6:09 AM Changeset in lab.git [c109418]trunk by mitty <mitty@…>

iproute/setroute-rhel.sh
iproute/setroute.sh
iptables/setfilter
iptables/setnapt.sh

set executable props

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@10 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

6:07 AM Changeset in lab [9] by mitty

trunk/iptables/setfilter
trunk/iptables/setnapt.sh

FIX script aborts if nonexistent devices are in the script argument
setfilter
- set network filters with iptables from custom rule files in /etc/ufw/*

6:07 AM Changeset in lab.git [39eda0b]trunk by mitty <mitty@…>

iptables/setfilter
iptables/setnapt.sh

FIX script aborts if nonexistent devices are in the script argument
setfilter
- set network filters with iptables from custom rule files in /etc/ufw/*

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@9 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

2:35 AM TipAndDoc/network/iptables edited by mitty

(diff)

1:03 AM TipAndDoc/network/iptables edited by mitty

(diff)

Jul 4, 2009:

3:01 AM TipAndDoc/network/defaultgw edited by mitty: (diff)
2:50 AM TipAndDoc/network/iptables edited by mitty: (diff)
2:43 AM TipAndDoc/network/iptables edited by mitty: (diff)
2:23 AM TipAndDoc/network/dhcpd edited by mitty: (diff)

Jul 3, 2009:

10:57 PM TipAndDoc/network/dhcpd edited by mitty: (diff)
1:18 AM TipAndDoc/network/iptables edited by mitty: (diff)
1:04 AM TipAndDoc/network/ufw/default created by mitty
12:23 AM TipAndDoc/network/iptables edited by mitty: (diff)
12:11 AM TipAndDoc/network/iptables edited by mitty: (diff)

Jul 2, 2009:

11:40 PM TipAndDoc edited by mitty: (diff)
11:39 PM TipAndDoc/network/defaultgw edited by mitty: (diff)
11:37 PM TipAndDoc/network/defaultgw edited by mitty: (diff)
10:55 PM TipAndDoc/network/iptables edited by mitty: (diff)
10:52 PM TipAndDoc/network edited by mitty: moved to ./iptables (diff)
10:52 PM TipAndDoc/network/iptables created by mitty
10:51 PM TipAndDoc/network/ufw edited by mitty: (diff)
9:15 PM TipAndDoc/network/dhcpd edited by mitty: (diff)
1:19 AM Ticket #2 (dhclientが頻繁にDHCPREQUESTを送信する問題) created by mitty: = 例 = 1. under Windows' ICS […] * renewalのたびに同じIPが振られるので使用上の問題はない …

Jul 1, 2009:

5:02 PM TipAndDoc/network/dhcpd created by mitty

2:57 PM TipAndDoc/network/defaultgw edited by mitty

(diff)

2:56 PM TipAndDoc/network edited by mitty

(diff)

2:49 PM Changeset in lab [8] by mitty

trunk/iproute/setroute.sh
trunk/iptables
trunk/iptables/setnapt.sh

add a simple explanation to a script
setnapt.sh
- script for setting up IP MASQUERADE

2:49 PM Changeset in lab.git [4a36a1b]trunk by mitty <mitty@…>

iproute/setroute.sh
iptables/setnapt.sh

add a simple explanation to a script
setnapt.sh
- script for setting up IP MASQUERADE

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@8 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

3:51 AM TipAndDoc/network edited by mitty

(diff)

1:57 AM TipAndDoc/network edited by mitty

(diff)

1:34 AM TipAndDoc edited by mitty

(diff)

1:28 AM TipAndDoc/network edited by mitty

(diff)

Jun 30, 2009:

10:50 PM Changeset in lab [7] by mitty

trunk/iproute/setroute.sh

abort if fail to bind IP address to NIC
- no DHCPd, disconnecting cables, etc...

10:50 PM Changeset in lab.git [84c2881]trunk by mitty <mitty@…>

iproute/setroute.sh

abort if fail to bind IP address to NIC
- no DHCPd, disconnecting cables, etc...

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@7 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

10:41 PM TipAndDoc/network/iproute edited by mitty

(diff)

10:37 PM TipAndDoc/network/iproute edited by mitty

(diff)

Jun 29, 2009:

5:56 PM Changeset in lab [6] by mitty

trunk/iproute/setroute-rhel.sh
trunk/iproute/setroute.sh

setroute.sh
- rewrite codes with environment variables given by INTERFACES(5)
setroute-rhel.sh
- RHEL capable version

5:56 PM Changeset in lab.git [8c804d8]trunk by mitty <mitty@…>

iproute/setroute-rhel.sh
iproute/setroute.sh

setroute.sh
- rewrite codes with environment variables given by INTERFACES(5)
setroute-rhel.sh
- RHEL capable version

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@6 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

1:59 AM Changeset in lab [5] by mitty

trunk/iproute
trunk/iproute/setroute.sh

automatically set route tables for each ether device with iproute2
this script should be used with /etc/network/interfaces on Ubuntu(Debian)
- it maybe work on RHEL(CentOS) with some restrictions

1:59 AM Changeset in lab.git [be2a37e]trunk by mitty <mitty@…>

iproute/setroute.sh

automatically set route tables for each ether device with iproute2
this script should be used with /etc/network/interfaces on Ubuntu(Debian)
- it maybe work on RHEL(CentOS) with some restrictions

git-svn-id: https://lab.mitty.jp/svn/lab/trunk@5 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

12:21 AM TipAndDoc/network edited by mitty