Wanted to share a recent project of mine from past few weeks to turn my #nanopi r5s #sbc into a really potent pure debian Linux router that was sane to manage.
I was able to successfully switch over this weekend and retire my edgerouter-6p.
The formula is basically #ansible #systemd stuff #netplan #dnsmasq #frrouting and #foomuuri -- the lynchpin solution for sanely doing robust zone-to-zone firewalls using #nftables
Repo linked below has more details:
#nanopi #sbc #ansible #systemd #netplan #dnsmasq #frrouting #foomuuri #nftables
@JerryMouse @Alonely0 @floppy_bv @mypdns sometimes I wonder why is #pihole using #dnsmasq so popular, when it cannot do incremental transfers. IXFR is much more efficient.
Heute war ein erfolgreicher Tag. Nach langem zögern habe ich meinen #Heimserver auf #RaspberryPi Basis ersetzt durch einen x86 #ThinClient (HP T620) mit #UbuntuServer.
Was macht mein Heimserver? DHCP und DNS mit #dnsmasq, #Samba Server, Webserver #Apache für meine #php Projekte und als #nextcloud zur automatischen Datensicherung von den Familienhandys.
Mit meinen am Raspberry erbastelten #Linux-Kenntnissen habe ich es geschafft sogar die Nextcloud Instanz umzuziehen ohne Datenverlust. (1/2)
#linux #nextcloud #php #apache #samba #dnsmasq #UbuntuServer #ThinClient #raspberrypi #heimserver
I have a couple of dhcp-vendorclass directives in my #DNSMasq config, and a tag_if to condense them into a "this is an IP phone" tag, which is used to assign the IP address:
dhcp-vendorclass=set:phone_cisco,"Cisco Systems, Inc. IP Phone"
dhcp-vendorclass=set:phone_gigaset,"N510_IP_PRO"
tag_if=set:phone,tag:phone_*
dhcp-range=tag:phone,MIN_IP_REDACTED,MAX_IP_REDACTED,12h
If I re-enable the main range for phones, I see this in the dnsmasq log:
tags: phone_cisco, br0
Where's the "phone" tag?
Oh no, it's not a #Cisco bug, it's a #DNSMasq one.
I killed the lease and made the main dhcp-range explicitly invalid if the device has the "phone_cisco" tag (which gets set if it's a Cisco IP phone)
vendor class: Cisco Systems, Inc. IP Phone CP-7940G
client provides name: SEP001E13(redacted)
DHCPDISCOVER(br0) 00:1e:13:redacted no address available
So what the hell is going on here? Well... next post
Every time my work laptop connects to my home network my #pihole throws a #dnsmasq warning about ignoring my work domain for that hostname. I was thinking that maybe setting a domain record in Pi-hole for it might suppress that warning, because I really don't need to get that warning whenever my laptop connects. Does that sound like the right thing to do or is there a more correct way to deal with it?
How to do simple but effective and cross-browser #adblocking with #dnsmasq:
https://blog.tfiu.de/browsing-peace-and-privacy-with-dnsmasq.html
(with a #Debian drift, but the principle and the blocklist should work essentially everywhere)
#zuengeln
#zuengeln #debian #dnsmasq #adblocking
Docker Pi-hole Base Images [ftl-build] v1.27 available on Github:
https://github.com/pi-hole/docker-base-images/releases/tag/v1.27
#pihole #dnsmasq #dns #dhcp #blocker #adblocker #docker
Docker Pi-hole 2023.03.1 available on Github:
https://github.com/pi-hole/docker-pi-hole/releases/tag/2023.03.1
#pihole #dnsmasq #dns #dhcp #blocker #adblocker #docker
Pi-hole v5.16.2 available on Github:
#pihole #dnsmasq #dns #dhcp #blocker #adblocker
Pi-hole v5.16.1 available on Github:
#dhcp #blocker #adblocker #pihole #dnsmasq #dns
Docker Pi-hole 2023.03.0 available on Github:
https://github.com/pi-hole/docker-pi-hole/releases/tag/2023.03.0
#pihole #dnsmasq #dns #dhcp #blocker #adblocker #docker
Pi-hole v5.16.1 available on Github:
#pihole #dnsmasq #dns #dhcp #blocker #adblocker
Pi-hole v5.16 available on Github:
#pihole #dnsmasq #dns #dhcp #blocker #adblocker
Docker Pi-hole Base Images [ftl-build] v1.26 available on Github:
https://github.com/pi-hole/docker-base-images/releases/tag/v1.26
#pihole #dnsmasq #dns #dhcp #blocker #adblocker #docker
I didn't upgrade my home server to Debian 11 until yesterday because I didn't want to break my custom exim4 config. In the end exim4 is fine, but I've no IPv4 DHCP server now...
#debian #exim4 #bind #dnsmasq #dhcp #linux #networking