Re: [Dorset] Query about iptables

2022-03-28 Thread Terry Coles
On Monday, 28 March 2022 21:41:16 BST Patrick Wigmore wrote: > And is this borne out in the testing? Does the Visitor's device get > issued with an address in the expected range under both the working > and non-working scenarios? Does it also get told about the same DNS > server and default

Re: [Dorset] Query about iptables

2022-03-28 Thread Patrick Wigmore
On Sun, 27 Mar 2022 16:13:49 +0100, Terry Coles wrote: > On Sunday, 27 March 2022 16:07:30 BST Patrick Wigmore wrote: > > What is the IP address of the user's device, and how does it get > > allocated to that device? > > The Webserver is also a DHCP Server and a DNS Server. The bottom > 100

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 16:07:30 BST Patrick Wigmore wrote: > What is the IP address of the user's device, and how does it get > allocated to that device? The Webserver is also a DHCP Server and a DNS Server. The bottom 100 addresses are reserved for devices that a permanently connected, eg

Re: [Dorset] Query about iptables

2022-03-27 Thread Patrick Wigmore
On Sun, 27 Mar 2022 10:48:00 +0100, Terry Coles wrote: > Recently, we discovered a problem with the Webserver; it no longer > served up Webpages! I brought the Webserver hardware home and > connected it to a reference model of the VPN Server and a > representative site WiFi Antenna with a couple

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 14:27:31 BST Hamish McIntyre-Bhatty wrote: > There's not much risk messing with iptables settings because unless you > save them, they won't persist over a reboot anyway. If in doubt, just > image the SD card first so you can restore it if anything goes wrong :) Perhaps I

Re: [Dorset] Query about iptables

2022-03-27 Thread Hamish McIntyre-Bhatty
On 27/03/2022 13:16, Terry Coles wrote: On Sunday, 27 March 2022 13:11:31 BST Hamish McIntyre-Bhatty wrote: The VPN server doesn't have any rules defined at all, so I'm struggling to see how it could be interfering with the Webserver. Being pernickety, the VPN Server does have some rules, they

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 13:11:31 BST Hamish McIntyre-Bhatty wrote: > The VPN server doesn't have any rules defined at all, so I'm struggling > to see how it could be interfering with the Webserver. Being pernickety, the VPN Server does have some rules, they just don't filter anything. > What

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 13:00:51 BST Hamish McIntyre-Bhatty wrote: > iptables is a firewall so anything using that is definitely running a > firewall. >From the iptables entry on Wikipedia: iptables is a user-space utility program that allows a system administrator to configure the IP packet

Re: [Dorset] Query about iptables

2022-03-27 Thread Hamish McIntyre-Bhatty
On 27/03/2022 13:07, Terry Coles wrote: On Sunday, 27 March 2022 13:00:51 BST Hamish McIntyre-Bhatty wrote: Can you confirm that the ufw command doesn't return any information? Yes. AIUI, ufw is simply a means to construct a firewall by manipulating iptables rules. I suspect that the authors

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 13:00:51 BST Hamish McIntyre-Bhatty wrote: > Can you confirm that the ufw command doesn't return any information? Yes. AIUI, ufw is simply a means to construct a firewall by manipulating iptables rules. I suspect that the authors of strongSwan and nodogsplash simply

Re: [Dorset] Query about iptables

2022-03-27 Thread Hamish McIntyre-Bhatty
On 27/03/2022 11:21, Terry Coles wrote: On Sunday, 27 March 2022 10:55:55 BST Hamish McIntyre-Bhatty wrote: I find this difficult to understand - these systems should operate independently IIRC, especially seeing as they both have their own independent physical cables to both sides of the

Re: [Dorset] Query about iptables

2022-03-27 Thread Terry Coles
On Sunday, 27 March 2022 10:55:55 BST Hamish McIntyre-Bhatty wrote: > I find this difficult to understand - these systems should operate > independently IIRC, especially seeing as they both have their own > independent physical cables to both sides of the network. I can't understand it either,

Re: [Dorset] Query about iptables

2022-03-27 Thread Hamish McIntyre-Bhatty
Hi Terry, I find this difficult to understand - these systems should operate independently IIRC, especially seeing as they both have their own independent physical cables to both sides of the network. I think it might be useful if you post the rules. There are some tweaks I'm meant to make

[Dorset] Query about iptables

2022-03-27 Thread Terry Coles
Hi, Some of you may remember my earlier queries about setting up a Webserver and more latterly a VPN Server for the Wimborne Model Town. All this has worked fine through last Summer. Over the Winter Maintenance Period, I upgraded the VPN Server to the latest Version of RPi OS and pistrong