Sebastian Steiner s7nio

Adding tailscale to an EdgeRouter (and surviving system upgrades)

I suggest you run sudo bash on all of these so you're the root user.

Installing

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your EdgeRouter's processor (ex. ER4 is mips and ERX is mipself)

sudo bash    # if you havent already

Want to configure UPnP on EdgeRouter-4?

Don't do it!

Introduction

As a former sysadmin that once helped ride herd over around 1,000 servers, of which around 10% were Internet-facing, I've never been a fan of autoconfiguation when it comes to punching holes through the firewall. I've seen the tripwire logs, and it's sobering.

The Problem

So enabling UPnP on my EdgeRouter-4 wasn't something I had on the roadmap, but when I ran into difficulty getting DLNA to work on the default VLAN, I thought it was worth looking into (never mind that, as I later learned, having UPnP turned on wasn't going make a bit of difference on my local network: another reason that mastering theory should always come before practice).

Functional Track talks from NDC Oslo 2017

Also, here is the list of all videos from NDC Oslo 2017:

Wednesday 2017-06-14

This is an outdated draft that was used to review the content with FreeBSD contributors. For the latest revision, vist http://shawndebnath.com/articles/2016/03/27/freebsd-jails-with-vlan-howto.html.

FreeBSD Jails with VLAN HOWTO

This article discusses how to set up jails on a FreeBSD 11-CURRENT system utilizing VIMAGE (aka VNET) to provide a virtualized independent network stack for each jail with support for VLAN tagging.

Prerequisites

Project Title

One Paragraph of project description goes here

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

Prerequisites

Remove white background color of an image in ImageMagick

$ convert  your.jpg  -transparent white  your.png

Flatten a transparent image with a white background:

	IoT VLAN: 7

	IGMP Proxy
	- Config Tree
	- Protocols
	- igmp-proxy
	- switch0
	- role: upstream
	- threshold: 1
	- switch0.7

	#
	# This doesn't cover all of the hardening required for setting up an EdgeRouter as
	# a router/firewall. This is more suitable for an Edge-X configured as a VLAN aware
	# switch. There's a lot more to do to harden an L3 configuration, I'm not including it
	# here
	#

	# Bind the management services to a specific IP address on a management VLAN interface
	set service gui listen-address x.x.x.x
	set service gui older-ciphers disable

	1. Opening Event (5604)
	2. Keynote (5056)
	3. Fnord-Jahresrückblick (5036)
	4. Methodisch inkorrekt! (4994)
	5. Ten years after ‚We Lost The War‘ (4820)
	6. (Un)Sicherheit von App-basierten TAN-Verfahren im Onlinebanking (4039)
	7. NSA-Untersuchungsausschuss: Zwischen Aufklärungswillen und Mauern aus Schweigen (4030)
	8. Safe Harbor (3866)
	9. Building and Breaking Wireless Security (3799)
	10. The exhaust emissions scandal („Dieselgate“) (3719)

	#!/bin/bash

	# options:
	# remove stopped containers and untagged images
	# $ dkcleanup
	# remove all stopped\|running containers and untagged images
	# $ dkcleanup --reset
	# remove containers\|images\|tags matching {repository\|image\|repository\image\|tag\|image:tag}
	# pattern and untagged images
	# $ dkcleanup --purge {image}