Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #230705 > unrolled thread

sharing a network connection from debian to non-debian

Back to article view | Back to linux.debian.user

Contents

  sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-16 06:10 +0100
    Re: sharing a network connection from debian to non-debian john doe <johndoe65534@mail.com> - 2021-01-16 07:30 +0100
      Re: sharing a network connection from debian to non-debian Doug McGarrett <dmcgarrett@optonline.net> - 2021-01-16 07:50 +0100
    Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-16 09:00 +0100
      Re: sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-16 19:30 +0100
        Re: sharing a network connection from debian to non-debian rhkramer@gmail.com - 2021-01-16 20:50 +0100
        Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-17 08:30 +0100
          Re: sharing a network connection from debian to non-debian john doe <johndoe65534@mail.com> - 2021-01-17 10:30 +0100
          Re: sharing a network connection from debian to non-debian Celejar <celejar@gmail.com> - 2021-01-17 16:00 +0100
        Re: sharing a network connection from debian to non-debian David Christensen <dpchrist@holgerdanske.com> - 2021-01-18 08:50 +0100
          Re: sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-19 01:50 +0100
            Re: sharing a network connection from debian to non-debian john doe <johndoe65534@mail.com> - 2021-01-19 07:10 +0100
            Re: sharing a network connection from debian to non-debian David Christensen <dpchrist@holgerdanske.com> - 2021-01-19 20:50 +0100
        Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-24 18:20 +0100
          Re: sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-24 23:10 +0100
            Re: sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-25 04:00 +0100
              Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-25 07:20 +0100
                Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-25 07:20 +0100
            Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-25 07:10 +0100
              Re: sharing a network connection from debian to non-debian Joe <joe@jretrading.com> - 2021-01-25 10:40 +0100
                Re: sharing a network connection from debian to non-debian Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-25 20:10 +0100
              Re: sharing a network connection from debian to non-debian Dan Hitt <dan.hitt@gmail.com> - 2021-01-26 03:50 +0100
    Re: sharing a network connection from debian to non-debian David Christensen <dpchrist@holgerdanske.com> - 2021-01-16 11:10 +0100
      Re: sharing a network connection from debian to non-debian rhkramer@gmail.com - 2021-01-16 15:30 +0100
    Re: sharing a network connection from debian to non-debian Michael Howard <mike@dewberryfields.co.uk> - 2021-01-16 16:00 +0100
    Re: sharing a network connection from debian to non-debian elvis <elvis@dogonfire.com> - 2021-01-19 09:20 +0100

Page 2 of 2 — ← Prev page 1 [2]

#231125

[Multipart message — attachments visible in raw view] — view raw

On Lu, 25 ian 21, 09:32:01, Joe wrote:
> On Mon, 25 Jan 2021 08:08:40 +0200
> Andrei POPESCU <andreimpopescu@gmail.com> wrote:
> 
> > On Du, 24 ian 21, 14:05:07, Dan Hitt wrote:
> > > 
> > > Now, i do not have a command 'nft', or at least, no place that i
> > > can find a path to it.   The man page for iptables-nft however
> > > lists your very command as an example, 'nft list ruleset'.  But i
> > > cannot find 'nft' anywhere in the filesystem (except as a directory
> > > in linux-headers-xxxx).  
> > 
> > It's part of package 'nftables' and should be installed in
> > /usr/sbin/. The package 'nftables' is a Recommends of 'iptables'.
> > 
> > 
> > What is the output of?
> > 
> >     apt-config dump | grep -i recommends
> > 
> Many people don't install recommends automatically.

Sure, I do that myself for really, really small installs, with the 
understanding that I have to deal myself with any issues that might 
arise due to missing recommends.

> It doesn't get installed by default in anything before buster, so if
> you're running anything earlier (or sid), you need to install it
> manually. Also, an upgrade will not automatically switch to it from
> iptables, even when it is installed.

Quoting from APT's changelog:

    apt (0.7.0) experimental; urgency=low

      [...]
      * merged "install-recommends" branch (ABI break): 
        - new "--install-recommends"
        - install new recommends on "upgrade" if --install-recommends is 
          given
        - new "--fix-policy" option to install all packages with unmet
          important dependencies (useful with --install-recommends to
          see what not-installed recommends are on the system)
        - fix of recommended packages display (only show CandidateVersion
          fix or-group handling)
      [...]

     -- Michael Vogt <mvo@debian.org>  Fri, 12 Jan 2007 20:48:07 +0100

This change was documented in the Release Notes for squeeze (Debian 
GNU/Linux 6.0, released in 2011), though it seems like it was already 
included in lenny (released in 2009).

https://www.debian.org/releases/squeeze/amd64/release-notes/ch-whats-new.en.html#pkgmgmt

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

[toc] | [prev] | [next] | [standalone]

#231162

[Multipart message — attachments visible in raw view] — view raw

On Sun, Jan 24, 2021 at 10:09 PM Andrei POPESCU <andreimpopescu@gmail.com>
wrote:

> On Du, 24 ian 21, 14:05:07, Dan Hitt wrote:
> >
> > Now, i do not have a command 'nft', or at least, no place that i can
> find a
> > path to it.   The man page for iptables-nft however lists your very
> command
> > as an example, 'nft list ruleset'.  But i cannot find 'nft' anywhere in
> the
> > filesystem (except as a directory in linux-headers-xxxx).
>
> It's part of package 'nftables' and should be installed in /usr/sbin/.
> The package 'nftables' is a Recommends of 'iptables'.
>
>
> What is the output of?
>
>     apt-config dump | grep -i recommends
>
>
> Kind regards,
> Andrei
> --
> http://wiki.debian.org/FAQsFromDebianUser


Thanks Andrei for your message.

I installed nftables and now i have nft, and it gives me  more details.

And just for reference, the command 'apt-config dump | grep -i recommends'
gives me
    APT::Install-Recommends "1";

dan

[toc] | [prev] | [next] | [standalone]

#230710

On 2021-01-15 21:02, Dan Hitt wrote:
> In 2016, i had a computer with mint on it (which is a form of ubuntu), and
> it was connected to an internet modem.  There was a super simple gui on it
> that i could use to share that connection with some older hardware that
> were not directly connected to the internet modem.  (They were not
> connected to the internet modem because for whatever reason, directly
> connecting them made them very unstable and prone to crash.)  But,
> nevertheless, the old hardware could use the mint box with no configuration
> on my part, and get out to the internet through it.
> 
> Now, as it happens, i'm planning on upgrading that mint box to debian.
> 
> In preparation for that, i'm trying to share the internet with them using
> another box, which has debian on it, and which is connected to the internet
> modem.  The debian box has some address like 192.168.*.* on the internet
> modem network, and an address like 10.*.*.* connected to the old hardware,
> and the two networks have no direct connection, they just both hook up to
> my debian machine (one on the motherboard's ethernet, and one on a
> usb/ethernet device).
> 
> For the old hardware, i can specify the address, a gateway, and a host for
> dns (all done by ip).  I would choose the ip of the debian box for both the
> gateway and the dns, and i'd take the ip address of the old hardware to
> just be something unused (no need to run dhcpd on the debian box, i think).
> 
> So i just need to know what to do on the debian box so that it can field
> requests to get ips from host names on the internet, and forward packets to
> the internet modem.  Hopefully, it will be some simple tool like
> nm-connection-editor, but maybe it has to be a series of commands.  If it
> is a series of commands, what are they?
> 
> TIA for any info!

I set up a personal computer (PC) as a firewall/ router using a 
general-purpose FOSS OS distribution (Red Hat Linux?) many years ago. 
It was a lot a work, but I learned a lot about networking and Linux.  If 
you choose this path, you will need to learn "netfilter":

https://www.debian.org/doc/manuals/debian-reference/ch05.en.html#_netfilter_infrastructure


Some years later, purpose-built firewall/ router FOSS distributions with 
WWW control panels became available.  These were easier to configure and 
manage than a general-purpose OS, and more secure.  IP Cop was my favorite:

http://www.ipcop.org/


But an old PC running 24x7 is bulky, requires a keyboard and monitor, 
consumes electricity, makes noise, and generates heat.  I wanted a 
small, silent, low-power box with a WWW control panel.  I tried various 
consumer firewall/ router/ WiFi/ switch appliances, and FOSS firmware 
for some, but they were all lacking and I bricked at least one device.


After more searching, I found UniFi:

https://www.ui.com/unifi-routing/usg/

https://www.ui.com/unifi/unifi-ap-ac-lite/


The killer feature is the UniFi Controller server software, which is 
available as a Debian package (I run it on a Debian VPS in the cloud). 
Using the WWW interface, you assemble individual devices into networks 
and use the controller to manage everything in a coordinated fashion:

https://help.ui.com/hc/en-us/articles/220066768-UniFi-How-to-Install-Update-via-APT-on-Debian-or-Ubuntu


David

[toc] | [prev] | [next] | [standalone]

#230711

On Saturday, January 16, 2021 05:01:23 AM David Christensen wrote:
> On 2021-01-15 21:02, Dan Hitt wrote:
> > In 2016, i had a computer with mint on it (which is a form of ubuntu),
> > and it was connected to an internet modem.  There was a super simple gui
> > on it that i could use to share that connection with some older hardware
> > that were not directly connected to the internet modem.  (They were not
> > connected to the internet modem because for whatever reason, directly
> > connecting them made them very unstable and prone to crash.)  But,
> > nevertheless, the old hardware could use the mint box with no
> > configuration on my part, and get out to the internet through it.

Just to suggest an alternate solution, you could put a (hardware) router after 
the Internet modem and use that to provide access to multiple computers / 
devices.

I have a Ubiquiti edge router with 4 Ethernet ports and some nice features 
(among them QOS that lets me limit the bandwidth used by some devices so that 
other devices can get sufficient bandwidth when the need it (e.g., VOIP 
telephones)).  (Also, usage monitoring, firewall capability, Nat capability 
(well, I'll say all the things you normally need.  I think the list price of 
the Edge router today is around $100 -- I bought it several (5?) years ago on 
sale for ~$50.

My son and I each have a desk with multiple devices which need Internet 
access, so we ran one cable from the Edge router to each desk, then put an 
Ethernet switch at each desk to allow multiple devices to connect.

[toc] | [prev] | [next] | [standalone]

#230712

On 16/01/2021 05:02, Dan Hitt wrote:
> In 2016, i had a computer with mint on it (which is a form of ubuntu), 
> and it was connected to an internet modem.  There was a super simple 
> gui on it that i could use to share that connection with some older 
> hardware that were not directly connected to the internet modem.  
> (They were not connected to the internet modem because for whatever 
> reason, directly connecting them made them very unstable and prone to 
> crash.) But, nevertheless, the old hardware could use the mint box 
> with no configuration on my part, and get out to the internet through it.
>
Not sure about how much config you want to do or are capable of doing 
but if your 'modem' truly is just a modem then a simple-ish way to go, 
without added expense, is to install 'Shorewall' onto your new debian 
installation.

This gives you routing and firewall protection.

It's likely though that your 'modem' is not just a modem as your other 
hardware will need to be getting dhcp and dns from somewhere and if you 
haven't configured it, it must be from what you think is just a 'modem'.

Mike.
-- 

[toc] | [prev] | [next] | [standalone]

#230828

On 16/1/21 3:02 pm, Dan Hitt wrote:
> In 2016, i had a computer with mint on it (which is a form of ubuntu), 
> and it was connected to an internet modem.  There was a super simple 
> gui on it that i could use to share that connection with some older 
> hardware that were not directly connected to the internet modem.  
> (They were not connected to the internet modem because for whatever 
> reason, directly connecting them made them very unstable and prone to 
> crash.) But, nevertheless, the old hardware could use the mint box 
> with no configuration on my part, and get out to the internet through it.
>
>
Hi Dan, what you want to do, used to be called IP masquerading and 
pretty much everyone did it on their linux box to share their dial up 
connection to other computers on their lan. Now it seems to be called 
NAT network address translation and the possibilities of what you can do 
have multiplied tremendously, but the simple use case is still there.

 From memory I used shorewall to configure iptables but it is pretty 
simple to do manually. And has the advantage of not having layers of 
complexity on top of it to debug if something goes wrong.

Here's a howto I found, old but it looks like it should still work


https://tldp.org/HOWTO/html_single/Masquerading-Simple-HOWTO/






> dan

-- 
The Founding Fathers knew a government can't control the economy without controlling people. And they knew when a government sets out to do that, it must use force and coercion to achieve its purpose. So we have come to a time for choosing

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | linux.debian.user

csiph-web