Add excalibur IP and notes for fastd

This commit is contained in:
Alex D. 2021-02-18 13:05:06 +00:00
parent 94c273e368
commit dd3726dd4c
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
3 changed files with 29 additions and 5 deletions

View File

@ -44,12 +44,35 @@ OpenSSH SFTP Chroot (part of seedbox):
Pleroma:
- Migration might be needed between upgrades (/pleroma/bin/pleroma_ctl migrate)
Wireguard:
- Requires the following iptables rules other than the port opening
Wireguard & FastD:
- Require the following forwarding rules
```
*filter
-A FORWARD -i rxmain -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o rxmain -j ACCEPT
-A FORWARD -i rxmain -o crxn0 -j ACCEPT
-A FORWARD -i crxn0 -o rxmain -j ACCEPT
*nat
-A POSTROUTING -o eth0 -j MASQUERADE
-A POSTROUTING -o crxn0 -j MASQUERADE
```
FastD:
- Requires forwarding on router so that nodes can comminicate via the router
```
-A FORWARD -i crxn0 -o crxn0 -j ACCEPT
```
- Router requires this on up
```
ip -6 addr add fd8a:6111:3b1a:X::1/64 scope global dev $INTERFACE
ip -6 route add fd8a:6111:3b1a:X::1/64 dev $INTERFACE protocol static
ip link set $INTERFACE up
```
- Clients require this on up
```
ip -6 addr add fd8a:6111:3b1a:X::Y/64 scope global dev $INTERFACE
ip link set $INTERFACE up
ip -6 route add fd8a:6111:3b1a::/48 via fd8a:6111:3b1a:X::1 dev $INTERFACE
ip -6 route add fd8a:6111:3b1a:X::/64 via fd8a:6111:3b1a:X::1 dev $INTERFACE
ip -6 route del fd8a:6111:3b1a:X::/64 dev $INTERFACE
```

View File

@ -4,8 +4,8 @@ _svcname=unbound
. ../APKBUILD-config.common
pkgver=2021.02.17
pkgrel=4
pkgver=2021.02.18
pkgrel=0
depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root"
makedepends="redxen-secret-opendkim-dns"
checkdepends="bind-tools unbound"
@ -73,4 +73,4 @@ d94ad338e2ea43c3ecdc62c861eddc0bb706807b738dd985309bcdf0b5fb435d7260bf272e2bbe40
28c917fe7f69643887097553312c4f1ffc747dffdbf150430e6c4b2e5833567922810716cb59a27887915664777ac3263be3c826956f504499f0ebdcc0b3aac5 auth-redxen.conf
91847e65c48e585f298bb766b2b20c43f5380686b594233da3b722962b03f2f4c858bf299b745027dadd184408a87b1e85ebf03b027196756455afea69f79cf9 auth-crxn.conf
b82efa5e5c796a5cadf08ac5bf54a79211318662680eb48e4d680655deecd88c5aabc4bd674fd24a402900adeaad3703af2aee5af221a0baec8e422b4e1017d3 redxen.eu
5811c16899b9d3463836ef9f58ae97cb62b32d305ae9e2e9933e76f9463ff33bf47c21e491559fbe4bbd5842c4c164c8bb53f692c9e145206c38f4f576f55cdf crxn"
1e4586b4746d9f154c355cf62131c1f7e3ff49f2deb728b8b4990f034bd3c2c135f2209432b01911dc74fd4f012413b2829a1d3e625456768dccc68ef891221a crxn"

View File

@ -57,6 +57,7 @@ router3.deavmi IN A 10.6.3.1
; Gustav
;
excalibur.gustav IN A 10.6.4.1
excalibur.gustav IN AAAA fd8a:6111:3b1a:ffff::1
arthur.gustav IN A 10.6.4.3
;