Vladimír Mach turris

DNS zone forward on Turris Omnia

Fri, 27 Jan 2017 22:00:55 +0200

DNS zone forward on Turris Omnia Using these steps we will forward DNS zone to DNS server that actually holds the zone. At first we need to create custom configuration file named /etc/kresd/custom.conf that will be then appended to default configuration file with this content:

DNS Forwarding

Wed, 06 Dec 2017 18:09:17 +0200

DNS Forwarding Turris používá jako DNS server unbound, který není konfigurovatelný přes LuCi, ale je třeba měnit konfiguraci ručně. Je potřeba upravit konfiguraci ručně v souboru /etc/config/resolver a přidat do něj na konec (do sekce

Graphs on turris

Mon, 08 May 2017 11:56:45 +0200

Graphs on turris To enable rendering: /etc/init.d/luci_statistics enable /etc/init.d/collectd enable

Tweaking Guest Network

Mon, 11 Sep 2017 23:17:01 +0200

Tweaking Guest Network After upgrade of Turris OS to 3.7 which brings the guest network functionality to Foris I noticed that this guest network is not issuing IPv6 addresses to clients. I achieved this by following these steps. IPv6 for guests In order to advertise IPv6 addresses to guest clients I had to add two firewall rules (in

IPSec

Sat, 25 Oct 2014 19:47:24 +0200

IPSec opkg install strongswan-full /etc/ipsec.conf conn cz-uam type=tunnel auto=start authby=secret left=31.30.56.199 leftsubnet=10.10.2.0/24 right=95.168.217.1 rightsubnet=172.17.0.0/21 keyexchange=ikev1 ike=aes256-sha1-modp1024 esp=aes256-sha1 # leftsourceip=10.10.2.254 # left=%defaultroute # pfs=no

Filter IPv6 records on Turris Omnia

Fri, 09 Jun 2023 21:10:45 +0200

Filter IPv6 records on Turris Omnia Due to the lack of IPv6 connectivity by my local ISP, I am using IPv6 tunnel service from Hurricane Electric. But since Netflix introduced their proxy filtering feature HE’s service is banned. Because of this I needed to force network devices to use good old IPv4 for any Netflix related traffic without giving up on IPv6 completely.

Netflix skrz VPN

Sat, 10 Jun 2023 22:27:51 +0200

Netflix skrz VPN Routování zařízení do VPN Televizi dát DHCP rezervaci, a tuhle IP pak poslat do VPN tunelu: do /etc/config/network config route option interface 'vpn' option target '0.0.0.0' option netmask '0.0.0.0' option metric '200' option gateway '172.17.8.10' option table 'ovpn' config rule option in 'lan' option src '10.10.1.204/32' option lookup 'ovpn'