New answers tagged

0

Router3 doesn't know Router1 network, thus Router3 is sending traffic to its default gw. Add static route to Router3 to reach Router1 network.


0

You need policy based routing at your router because the client has no direct connection to the next hop. There is a quick introduction to policy based routing and it was also discussed at this question at superuser. In your case it could look like this: ip rule add from 10.0.0.2/32 table viavpn ip route add 0.0.0.0/0 via 10.7.0.6 dev eth4 table viavpn


1

I suffered the same problem with OpenPVN tunnels and finally solved by using tap device instead tun. I think network layer 2 bypasses the problem trying to route every packet independently of the interface state (not really sure about this but it eventually works). If you are using OpenVPN, change dev in every ovpn config file (server and clients): ;dev tun ...


0

Found the problem. Now I run the following command only and it works smoothly. service pptpd restart iptables -I INPUT -p gre -j ACCEPT iptables -A FORWARD -s 10.0.0.0/24 -d 10.0.0.0/24 -j ACCEPT


0

After some trials and effort and some investigations, I could find a simpler method which omits the requirement of using iptables in B. Although most parts are the same. Let's see what has been the problems of ping packets response which were not received by A. By executing the following command in A: route add -net 192.168.2.0/24 gw 192.168.1.1 or as you ...


0

Here's a few suggestions: Use a bridge interface from ESXi for your WAN interface as opposed to PCI passthrough Use a Broadcom NIC, or an older Intel NIC using the em(4) driver. It may sound weird, but Broadcom NICs may be better for PPPoE.


0

Try configuring the nginx vhost to listen to your server's ip address no port 80 and not on all interfaces. And by that I mean that, rather than using: listen 80; in nginx, try using: listen server-ip 80; This way your nginx server only binds to port 80 to that specific ip address and not on all interfaces.


4

The difference lies inside the address family: 0.0.0.0:22 : This is a listen socket which accepts connections on any interface, port 22 for IPv4 connections only. [::]:22 : Same here, but for IPv6 connections. LISTEN 0 128 *:80 *:* And this is a listen sockets which accepts IPv4 as well as IPv6 connection ...


0

I've also got these in mine - would really like to know why they are in there - even thought the next hop is none


1

In order to achieve what you would like to have you need to do: On A, you need to configure the route to 192.168.2.X, that is via 192.168.1.1: ip route add 192.168.2.0/24 via 192.168.1.1 Note: you can specify a device name with dev DEVICE_NAME or you can omit it in this case. On B, you need to make sure that packets can be forwarded e.g. ip_forwaring is ...


2

Yes, in fact it is so common to have such requests forwarded to your application that Django documentation devotes a paragraph just to discussing how to address common seemingly-secure configurations, explicitly warning in many common web servers a configuration that seems to validate the Host header may not in fact do so The simplest most obvious such ...


0

Routing explanation Your router has some WAN-facing IP, let's call it router_wan_ip. The IP on the "other side" of that link let's call isp_gw_ip. If it's a PPP of any kind, chances are, your router gets its IP address router_wan_ip and remote IP address isp_gw_ip via IPCP protocol during session setup and default route is set by the pppd. If it's, ...


1

You are making things way to complicated. In your setup, you are mapping the complete IP range 11.0.0.0/8 to 192.0.0.0/8 in one direction and in the other direction to 10.0.0.0/8. This implies that at site B, none of the 11.0.0.0/8 IPs will be reachable and directly useable. First, 11.0.0.0/8 and 192.0.0.0/8 are public IP ranges which exists inside the ...


2

Since you're using portable version of Proxifier you need to modify something in proxification engine section. Go to Profile > Advanced > Proxification Engine... and there in both 32bit & 64 bit subsystem make sure Intercept network calls at is set to WinSock Library (ws2_32.dll) and Hook type is Function Prologue Copy then reboot your PC/Laptop ...


2

AWS and Azure both have a free tier where you can practice to your heart’s content.


0

Moved this from comment to answer, since I wanted to add a sentence and ran out of characters. Not accessing doesn't necessarily mean fail. Nevertheless, can't you determine which subnets you use when you connect to the VPN? For example, if you access a server with 10.20.30.40 IP, you could add a static route for 10.20.30.0/24 through the vpn gateway and set ...


2

OK, I found solution here. It was necessary to modify routing tables. https://freelinuxtutorials.com/configuring-multiple-interfaces-multiple-default-routes-linux/


0

In theory, no. a DNS record should point to only 1 IP or target host. (or multiple in the case of DNS load balancing but that's another use case) if you want to use the same DNS, both services should reside on the same host. This is technically possible by using a relay (for example, configure your webhost serving https://twoservices.org as an ssh relay host ...


0

I sorted it out eventually. According to: https://openwrt.org/docs/guide-user/base-system/dhcp_configuration#a_and_aaaa_rr Which states: This is an implementation of the --address option. Return 10.10.10.1 on query domain home and subdomain *.home. I was able to login to OpenWRT (using ssh root@192.168.1.1), and running: uci add_list dhcp.@dnsmasq[0]....


0

Adding a "secondary private IP address" through the AWS interface will add the IP Address to the Operating System interface such as "eth0" in Linux effectively only for AMIs from AWS. For private AMIs such as Debian Buster, the "secondary private IP address" added through the AWS interface should also be manually added to the ...


0

The server doesn't have a routing table to 192.168.1-network, so it doesn't know what to do with those packets since. You need to tell the openvpn server where 192.168.1 network is located, by using the "ccd" dir where you create a file named as the client certificate name, nd there you do a iroute to map where the 192.168.1. network should be ...


Top 50 recent answers are included