Category: Tech

Johannes, Executive Chef at the Storm Center has a post on researchers that scan the internet.
It includes 30 different entities, including well known internet census service providers shodan, censys, and shadowserver.
isc.sans.edu/diary/Update%3A%20Researchers%20scanning%20the%20Internet/30102

All the details are here forum.openwrt.org/t/route-each-lan-port-through-a-separate-vpn/166549

In this forum example, it is used for VPN forum.openwrt.org/t/wireguard-vpn-not-working/166385/14
In another forum example a custom gateway is defined for a specific host for testing. forum.openwrt.org/t/conditional-dhcp/70441/8
The main docs has more examples openwrt.org/docs/guide-user/base-system/dhcp_configuration

simple conntrack based monitoring
github.com/jow-/nlbwmon

Use the macchanger command in a script in /etc/init.d
more… forum.openwrt.org/t/how-to-randomize-the-wan-mac-address-on-each-reboot/151791/11

A keen idea. If you lose access to your router. Have a script pre-configured to run on push of button. Script outputs troubleshoot data to local directory for later review. Idea could be expanded. How would you do it?
forum.openwrt.org/t/debug-general-information/164586

Something like this 0 5 * * * [ $(ifstatus wan | jsonfilter -e ‘@.uptime’) -lt 3650 ] || (ubus call network.interface.henet down;ubus call network.interface.wan down;sleep 1;ubus call network.interface.wan up;sleep 15;ubus call network.interface.henet up)
From forum.openwrt.org/t/abuse-warning-on-update-ddns-or-tunnel/163023/13

Here is a smashing trick. Routing problems can arise if Wireguard replace default route when up, then when it is down you may not have a default route.
So, Have your default route for 0.0.0.0/0
And then Wireguard routes split the full IP space in two. You have two routes that are more specific. That way when wireguard is up, the wireguard routes take preferences. When down, default route works.
uci set network.@wireguard_wgclient[0].route_allowed_ips=”0″ uci -q delete network.@wireguard_wgclient[0].allowed_ips uci add_list network.@wireguard_wgclient[0].allowed_ips=”0.0.0.0/1″ uci add_list network.@wireguard_wgclient[0].allowed_ips=”128.0.0.0/1″
Discuss it here forum.openwrt.org/t/help-config-wireguard-client/69132/13