3
votes
Accepted
403 from Google certificate endpoint when using IPv4
Hetzner resolved the issue. It turned out that the IP of the server was falsify flagged as Iranian. (The server itself was located in Germany) Iran is currently under sanctions and blocked by Google.
...
1
vote
Change netmask subnet on server because of smaller IP range
That depends. To make sure you should ask the datacenter guys, they must know.
If you've got a routed subnet of your own, then you might need to change the mask. Not doing so prevents your servers ...
1
vote
MQ broker in private or public subnet?
My opinion is given you would have a security group the only allows specific IPs access to your MQ, there's little benefit adding a network load balancer.
If it was on the public internet, the ...
1
vote
Accepted
Port unreachable when wireguard is connected
Your routing tables are stateless, they don't have any information about a packet being an answer or your port being bound.
So you can use the connection table to add a mark when a connection is made ...
1
vote
AWS NAT Instance Setup
After many tries, the configuration script which worked perfectly for me on the Amazon Linux 2023 (AMI like "al2023-ami-2023*") NAT instance was:
sudo yum install iptables-services -y
sudo ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
networking × 15659linux × 2681
windows × 1125
routing × 1068
linux-networking × 954
ubuntu × 848
iptables × 821
vpn × 718
ip × 639
domain-name-system × 622
firewall × 583
router × 571
switch × 569
cisco × 528
debian × 419
openvpn × 412
centos × 403
vlan × 400
security × 399
tcp × 395
nat × 375
wifi × 370
dhcp × 356
windows-server-2008 × 349
bridge × 331