Categories
Networking Security

VLANs for home networks

Home networks are becoming increasingly complex, and security threats as well. Once they were used mostly for personal communications, and entertainment. Now work at home, home automation, and more and more complex tasks performed online at different security levels make simple flat networks inadequate, especially form a security perspective. Does it really make sense that […]

Categories
Networking Security Software development

Manage your own PKI with XCA

Protecting connections with TLS requires the proper certificate/private key pairs, that need to be issued by a trusted Certificate Authority. You can buy certificates form several public CAs, or obtain free ones form entities like Let’s Encrypt. Sometimes you may need your own private CA and certificates for systems that do not need to be […]

Categories
Networking Photography

Setting up FTP behind NAT for Canon cameras uploads

Recent Canon cameras allow for direct uploads from the camera to different Internet services. Some of them are mediated through the image.canon gateway (i.e. Flickr, Adobe, Google), the camera uploads images to the gateway that in turn transfers them to the end service. Since those services APIs can change over time, it’s not a bad […]

Categories
Networking

Vigor 165 SNMP monitoring

Monitoring network equipment is usually a good way to be notified quickly about issues that could impact operations requiring network connectivity. One way to monitor equipment is using SNMP – Simple Network Management Protocol. “Simple” is a bit an oxymoron, because the underlying settings – just look at MIBs – are far from being simple. […]

Categories
Networking

VoIP behind NAT

More and more phone lines are being switched to VoIP, especially where FTTH is being deployed. When using the ISP modem/router it usually performs the ATA (Analog Telephone Adapter) role too, and it is already configured for VoIP – just plug the telephone in one of its PHONE/TEL ports (technically – FXS ports), or connect […]

Categories
Networking

Scheduling firewall rules on DrayTek Vigor 165

One interesting feature of the DrayTek Vigor 165 is the ability to schedule firewall rules, rules can be enabled and disabled using the router’s scheduler. For examples some clients can be forbidden Internet access at a given time. Combined with other types of filters, like URL filters, it can also be used to let users […]

Categories
Networking

StatProcessor for DrayTek, fix for 35b profiles

Prior to version 1.14, data for 35b and other profiles are not shown correctly because of the way DrayTek packs data into the HLog/QLN/SNR structures returned by telnet commands – upstream and downstream data may use different “group size” – how many point are coalesced into a single entry. Don’t know if they average the […]

Categories
Networking

DrayTek Vigor 165 firewall setup

How to configure DrayTek Vigor 165 firewall with strict security and separate filters for inbound and outbound traffic.

Categories
Networking

Draytek Stat Processor

DrayTek routers have some advanced configuration capabilities, but their web UI is not one of the best ones around. Especially, it doesn’t display many useful data about VDSL connections which are actually available, but only accessible via telnet/ssh. Moreover they are displayed in a text format only, which makes some of them not very useful. […]

Categories
Networking

DrayTek Vigor 165 QoS setup

​ It looks the DrayTek Vigor 165 xDSL modem/router supports some QoS features, despite the fact the datasheet does not mention them. They are available from the CLI, and partially in the web UI via a bug in the firewall filter setup page. The CLI gives access to the qos setup, qos class and qos […]