Mikrotik RouterOS guest VLAN routed over ProtonVPN (2023)
karloGet a wireguard config, it has a private key and peer information Add a new wireguard interface, I called it proton1. Use the private key from the config file. Add…
SSH jump host config
My remote hosts are on srvXX.remote.com. I have a jump host jump.remote.com. I want to be able to type ssh srv42.remote.com and connect, without first having to ssh to jump.remote.com.…
Wireguard site-to-site (proxmox to mikrotik/routeros)
I wanted to connect my dedicated hetzner proxmox box ("remote") to my home IP. Networks: Home has 10.0.40.0/24 and 10.0.60.0/24 Remote has 10.0.101.0/24 At home I created on my mikrotik:…
Masquerade ip forward for Proxmox on hetzner (single IP)
This works for me: Install plain debian 11, install proxmox Screenshot IPs of interface Clear all IP data from existing/default interface Create Linux bridge with IP info Then open SSH…
T-Mobile Thuis werkende SMTP 2023 (Fix Relay access denied)
Ik kreeg de melding: Mar 14 04:21:48 srv14.domein.nl postfix/smtp[61178]: 2E7A92402A4: to=root@domein.nl, orig_to=root@srv14.domein.nl, relay=smtp.t-mobilethuis.nl[37.143.82.162]:25, delay=0.06, delays=0.01/0/0.04/0.01, dsn=5.7.1, status=bounced (host smtp.t-mobilethuis.nl[37.143.82.162] said: 554 5.7.1 root@domein.nl: Relay access denied (in reply to RCPT…
Simple SSH backup of routeros / mikrotik
Prerequisites: A linux host within your network SSH enabled on your router FW routes from host to router Howto: 1. Create ssh keys (without passphrase) on the linux host: ssh-keygen…
Proxmox VLANs ‘on a stick’
Make your bridge interface VLAN aware Add vlans on your bridge Give VMs the bridge interface with tag Example:
T-Mobile thuis (NL) Routeros/Mikrotik-configuratie (met VLANs)
Ik wilde: IP krijgen van T-Mobile (vlan 300 whoo) VLANs tagged op ether2, switch regelt het dan verder Hairpin nat voor load balancer (10.0.60.16) TODO: Firewalling In voorbeeld hieronder is…
Mikrotik routeros various findings
Meaning of service tag Setting use-service-tag=no sets the vlan ethertype to the .q standard of 0x8100Setting use-service-tag=yes sets the vlan ethertype to the .ad standard of 0x88a8 source Set MAC…