17 Apr
2021
17 Apr
'21
2:32 p.m.
I want to host a public server in my local mesh, so I need to forward ports
and assign static ips. What is the best way to do it in lime? If I use
openwrt uci on the gateway, will it replicate to other nodes?
What about DMZ, does it make sense in lime?
Thanks
Bruno
--
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
telegram+twitter: @brunovianna ▀─█▄██▄▀█▀█▄▌██─█▌█▌
18 Apr
18 Apr
6:04 p.m.
On 4/17/21 4:32 PM, bruno vianna wrote:
I want to host a public server in my local mesh, so I
need to forward
ports and assign static ips. What is the best way to do it in lime? If I
use openwrt uci on the gateway, will it replicate to other nodes?
What about DMZ, does it make sense in lime?
Dear Bruno,
thanks for the question, this is clearly useful for most of the networks.
Regarding the DMZ, I never touched one, no idea.
Regarding the static IP, there's an ongoing discussion here:
https://github.com/libremesh/lime-packages/issues/864
please comment there your opinions!
Regarding the port forwarding, what I was doing is to write an iptables
rule in /etc/rc.local on the gateway node, but maybe (hopefully) there's
a better solution?
Ciao!
Ilario
19 Apr
19 Apr
3:20 p.m.
hi Ilario
Thanks for pointing this issue out! I tried the solution but lime-config
gave me an error. I posted it to the issue discussion.
Regarding the port forwarding, iptables rule is the way to go, but I also
don't know what it is the best place to write them down.
I can't even see the current rules when I try iptables -L, is there a
specific command for lime?
Bruno
On Sun, Apr 18, 2021 at 8:04 PM Ilario Gelmetti <iochesonome(a)gmail.com>
wrote:
On 4/17/21 4:32 PM, bruno vianna wrote:
--
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
telegram+twitter: @brunovianna ▀─█▄██▄▀█▀█▄▌██─█▌█▌
I want to host a public server in my local mesh,
so I need to forward
ports and assign static ips. What is the best way to do it in lime? If I
use openwrt uci on the gateway, will it replicate to other nodes?
What about DMZ, does it make sense in lime?
Dear Bruno,
thanks for the question, this is clearly useful for most of the networks.
Regarding the DMZ, I never touched one, no idea.
Regarding the static IP, there's an ongoing discussion here:
https://github.com/libremesh/lime-packages/issues/864
please comment there your opinions!
Regarding the port forwarding, what I was doing is to write an iptables
rule in /etc/rc.local on the gateway node, but maybe (hopefully) there's
a better solution?
Ciao!
Ilario
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
20 Apr
20 Apr
7:44 a.m.
On 4/19/21 5:20 PM, bruno vianna wrote:
I can't even see the current rules when I try
iptables -L, is there a
specific command for lime?
Hi Bruno!
The firewall rules set by LibreMesh are usually set in ebtables instead
than in iptables.
The commands for checking the rules in ebtables are similar to the
iptables ones.
In order to find out the useful commands for LibreMesh debug, have a
look at the content of lime-report script here:
https://github.com/libremesh/lime-packages/blob/master/packages/lime-report…
or execute directly lime-report on your router.
Ciao!
Ilario
12:50 p.m.
thanks ilario!
the lime-report is very useful, I didn't know it.
this command worked to see the rules:
iptables -nvL -t nat
but the forwarding didn't work. i added two rules on the gateway router (by
gui's suggestion)
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT
--to-destination 10.74.135.155
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j DNAT
--to-destination 10.74.135.155
but when I try the public ip of my network, what I get is the lime-app
menu.
Does anyone have other suggestions?
On Tue, Apr 20, 2021 at 9:45 AM Ilario Gelmetti <iochesonome(a)gmail.com>
wrote:
On 4/19/21 5:20 PM, bruno vianna wrote:
--
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
telegram+twitter: @brunovianna ▀─█▄██▄▀█▀█▄▌██─█▌█▌
I can't even see the current rules when I
try iptables -L, is there a
specific command for lime?
Hi Bruno!
The firewall rules set by LibreMesh are usually set in ebtables instead
than in iptables.
The commands for checking the rules in ebtables are similar to the
iptables ones.
In order to find out the useful commands for LibreMesh debug, have a
look at the content of lime-report script here:
https://github.com/libremesh/lime-packages/blob/master/packages/lime-report…
or execute directly lime-report on your router.
Ciao!
Ilario
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users 
29 Apr
29 Apr
5:23 p.m.
Hi Bruno,
I put my iptable rules in this file I created:
/etc/firewall.lime.d/90-myrules
Cheers
bruno vianna:
thanks ilario!
the lime-report is very useful, I didn't know it.
this command worked to see the rules:
iptables -nvL -t nat
but the forwarding didn't work. i added two rules on the gateway router (by
gui's suggestion)
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT
--to-destination 10.74.135.155
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j DNAT
--to-destination 10.74.135.155
but when I try the public ip of my network, what I get is the lime-app
menu.
Does anyone have other suggestions?
On Tue, Apr 20, 2021 at 9:45 AM Ilario Gelmetti <iochesonome(a)gmail.com>
wrote:
On 4/19/21 5:20 PM, bruno vianna wrote:
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
I can't even see the current rules when I
try iptables -L, is there a
specific command for lime?
Hi Bruno!
The firewall rules set by LibreMesh are usually set in ebtables instead
than in iptables.
The commands for checking the rules in ebtables are similar to the
iptables ones.
In order to find out the useful commands for LibreMesh debug, have a
look at the content of lime-report script here:
https://github.com/libremesh/lime-packages/blob/master/packages/lime-report…
or execute directly lime-report on your router.
Ciao!
Ilario
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
1332
days inactive
1344
days old
lime-users@lists.libremesh.org
5 comments
3 participants
participants (3)
-
amuza -
bruno vianna -
Ilario Gelmetti