Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-06-19 | space_server: nftables: colo: use dynamic reverse path filter | Asbjørn Sloth Tønnesen | |
This patch changes the reverse path filtering of the labicolo VLAN to take place in the prerouting hook, using the kernel routing table, and removes the need to maintain a static prefix list. Labicolo routes are exported to the kernel routing table by BIRD, hence it should be sufficient to only have prefix lists there. This change has been tested, and it's only possible to spoof fellow labicolo members address space (same as before). Esmil: prerouting before input/forward makes more sense to me | |||
2021-06-17 | space_server: bird: add bgp peering for Hafnium/AS211153 | Hafnium | |
Commit message and nftables rule fixed up by Esmil | |||
2021-01-19 | space_server: certbot: get space.labitat.dk certificate | Emil Renner Berthing | |
2021-01-19 | space_server: chrony: run chrony ntp server | Emil Renner Berthing | |
2020-10-17 | space_server: nftables: drop spoofed incoming traffic | Emil Renner Berthing | |
Discovered by IMAAL Research Lab, Brigham Young University, thank you. | |||
2020-08-13 | space_server: add labicolo ipv6 range for Esmil | Emil Renner Berthing | |
2020-03-20 | space_server: nftables: remove traffic stats rules | Emil Renner Berthing | |
This used to open up for polling our old switch for traffic data, but it died and it doesn't work with the new switch so let's plug the hole. | |||
2020-03-14 | space_server: nftables: add graffens prefixes to nftables | Jesper Hess Nielsen | |
2020-03-07 | space_server: nftables: forward space.labitat.dk:17380 to jumbotron | Emil Renner Berthing | |
2019-05-02 | space_server: renumber Fiberby link | Asbjørn Sloth Tønnesen | |
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk> | |||
2018-12-05 | space_server: enable NAT64/DNS64 network | Emil Renner Berthing | |
2018-12-05 | space_server: avahi: ask myhostname 2nd | Emil Renner Berthing | |
2018-11-28 | space_server: nat Labitat free from 185.38.175.1 | Emil Renner Berthing | |
2018-11-28 | space_server: add Asbjorn's colo addresses and net | Asbjørn Sloth Tønnesen | |
2018-11-28 | space_server: nftables: accept all traffic to colo nets | Emil Renner Berthing | |
..but don't let colo servers connect to internal addresses. | |||
2018-11-10 | space_server: drop uneccessary subdirs | Emil Renner Berthing | |