I have a range of ipv6 addresses available (native) and want to use them. I 've setup the kernel to support ipv6 and installed the necessary tools (iproute2 etc).  I am having a problem understanding how to actually add the range for the server to use it. Do I have to configure each one separately or is it possible to add the whole range?  Also, after I recompile the programs to support ipv6 (Gentoo), is there an expected strategy on which ip they 'll be using for outgoing connections (assuming the other end is ipv6 enabled)? Is it random, is it the first one, is it something entirely different?
7540
I know that the ip tool lets you bind multiple addresses to an interface (eg, ). Right now, though, I'm trying to build something on top of IPv6, and it would be really useful to have an entire block of addresses (say, a /64) available, so that programs could pick any address from the range and bind to that. Needless to say, attaching every IP from this range to an interface would take a while.  Does Linux support binding a whole block of addresses to an interface?
114948
I know about the "hosts" file that can map ips to static names.  But I want to do the same thing inside the router, so I can access this "hosts" file by any computer on that LAN. I have D LINL router. how can I achive my target?
37347
I'm running Ubuntu server on a computer used as a wireless AP, but this AP should resolve all DNS requests to an internal IP address rather than actually performing the lookup.  I want to do the same thing that paid public WiFi hotspots do - you can connect but if you attempt to load any websites they show a default page. I've noticed that they do this by resolving all domains to an internal IP address.  I've added these lines to /etc/dnsmasq.conf:  # Add domains which you want to force to an IP address here. # The example below send any host in double-click.net to a local # web-server. address=/com/192.168.2.1 address=/uk/192.168.2.1 address=/org/192.168.2.1 address=/gov/192.168.2.1 address=/net/192.168.2.1 address=/us/192.168.2.1   which works fine for those TLD's, but I'd like to be able to do it with all domains so I can sleep at night.
33864
I am trying to use iptables but I am clueless in understanding the documentation even so that I've locked myself out of my server twice already whilst trying to implement it.  These are the simple rules that I want to implement:   Allow ports 80, 6667 and 6697 to everyone Allow port 22 to just my IP for example 10.10.10.10   Please can someone help me implement these simple rules, without locking myself out?
34023
I'm running VirtualBox with 2 network adapters: standard NAT (enp0s3) and a Host-only Adapter (enp0s8). I use the NAT to access the internet and the Host-only Adapter to SSH in from my local machine.  The box boots up with both adapters enabled, both have IP addresses, everything looking good.    I can SSH into this box over the host-only adapter, no issues there. But I can't get on the internet with it. However, if I disable the host-only adapter, then I can access the internet (but obviously I can no longer SSH into it over the local tunnel).    And finally, here is my netplan yaml config:  # This file describes the network interfaces available on your system # For more information, see netplan(5). network:   version: 2   renderer: networkd ethernets:   enp0s3:     dhcp4: yes     dhcp6: yes   enp0s8:       dhcp4: no     dhcp6: no     addresses: [192.168.52.101/24]     gateway4: 192.168.52.101   Any ideas? It seems like maybe all my outbound traffic is routing through the host-only adapter somehow.  Edit: attaching the output of ip route list in case it helps.  default via 192.168.52.101 dev enp0s8 proto static default via 10.0.2.2 dev enp0s3 proto dhcp src 10.0.2.15 metric 100 10.0.2.0/24 dev enp0s3 proto kernel scope link src 10.0.2.15 10.0.2.2 dev enp0s3 proto dhcp scope link src 10.0.2.15 metric 100 192.168.52.0/24 dev enp0s8 proto kernel scope link src 192.168.52.101
101686
How to set static IP address on Ubuntu 16.04 LTS? I need connect router board which have static IP address ((192.168.15.1 address is board ip). I tried set via GUI, Network > Settings > IPv4 Settings > Method (Manual) where tried to specify Address, Netmask, Gateway: but these are not saved for some reason, if I type subnet (2nd step), it appears in place of ip address field, same for gateway. Not sure what's wrong there. For example, I want set   IP 192.168.15.3 subnet mask 255.255.255.0 gateway 192.168.15.254
61561
I have a network containing 20 clients. I assigned IP range 10.0.0.1 to 10.0.0.20 to them. When I do an IP scanning I see someone using 10.0.0.131 in VMware. How can I find out which IP is this IP bridged with? i.e How can I find out which system has 2 IP? (i.e the other IP of this system)  Update:  My system IP in the network is 10.0.0.81:    Output of the IP scanner show someone using 10.0.0.131 in VMware:    And the result of tracert command show nothing between us:  C:\Users&gt;tracert -j 10.0.0.131 10.0.0.81  Tracing route to ghasemi3.it.com [10.0.0.81] over a maximum of 30 hops:    1    &lt;1 ms    &lt;1 ms    &lt;1 ms  ghasemi3.it.com [10.0.0.81]  Trace complete. C:\Users&gt;
69632
My problem is really simple yet it sounds complex, but I have zero to none experience with this.  I have set up a box using gentoo which has its own semi-static WAN-IP and acts as router for my LAN. I have access to a router elsewhere on the web, which has a dynamic IP and is registered to dyndns. My plan is to redirect specific traffic from my gentoo-box to the router to make use of the tunnel and the dynamic IP.  My idea was to install a proxy on my gentoo-box which uses a VPN connection to the router as default. Every computer on the LAN and specific computers on the WAN (that have access right to the proxy) should be allowed to use this proxy, but no traffic should be forced to go through the router. Which rules out the idea of just using iptables.  Example: I want to redirect Firefox traffic through the VPN but not Opera traffic. I setup Firefox to use the local proxy, it gets the dynamic IP of the distant router, Opera still browses with my semistatic-IP.  Is this possible? Which software to use? Any further ideas?  btw: the router supports PPTP, IPSec and L2TP  Edit: If you have better ideas for the title please edit or suggest, I have no idea how to call my problem :(
123706
I am wondering if there is anything (software or hardware) out there that can do something I think I may have made up, Dynamic Static IPs. The idea is that when a new device connects to the local network this device/software acts as a DHCP server, if the device is new then it dynamically assigns it a new address that has never been used before and stores this MAC Address IP Address combination in a database, if the device's MAC is in the database the devices gets the same IP as before.  I am aware this is similar to sticky IP allocation but I don't want the IPs to stick for a while I want them to be superglued on for ever.  Bonus question: Is this possible using a Raspberry Pi running Raspbian on a network with around 100 devices? The RPi is already acting as the DHCP server and the router has this capability but it is turned off.  Many thanks in advance for any and all help offered!
60162
I've created accounts and hostnames within my  account, which is by  far the most commonly used service for my type of server. Can somebody walk me through the configuration process of using ddclient with no-ip, as I'm a command line noob?
75379
From my understanding, all IP addresses of the form 127.x.y.z are loopback addresses. Now that seems to be quite a waste to me; indeed, already more than one address seems like a waste.  Is there any use in having so many loopback addresses?
117126
This is a  about IPv6 and NAT Related:       So our ISP has set up IPv6 recently, and I've been studying what the transition should entail before jumping into the fray. I've noticed three very important issues:  Our office NAT router (an old Linksys BEFSR41) does not support IPv6. Nor does any newer router, AFAICT. The book I'm reading about IPv6 tells me that it makes NAT &quot;unnecessary&quot; anyway.  If we're supposed to just get rid of this router and plug everything directly to the Internet, I start to panic. There's no way in hell I'll put our billing database (With lots of credit card information!) on the internet for everyone to see. Even if I were to propose setting up Windows' firewall on it to allow only 6 addresses to have any access to it at all, I still break out in a cold sweat. I don't trust Windows, Windows' firewall, or the network at large enough to even be remotely comfortable with that.  There's a few old hardware devices (ie, printers) that have absolutely no IPv6 capability at all. And likely a laundry list of security issues that date back to around 1998. And likely no way to actually patch them in any way. And no funding for new printers.   I hear that IPv6 and IPSEC are supposed to make all this secure somehow, but without physically separated networks that make these devices invisible to the Internet, I really can't see how. I can likewise really see how any defences I create will be overrun in short order. I've been running servers on the Internet for years now and I'm quite familiar with the sort of things necessary to secure those, but putting something Private on the network like our billing database has always been completely out of the question. What should I be replacing NAT with, if we don't have physically separate networks?
68256
I have a development environment set up where I have a separate loopback address for multiple websites.  For example, I have the following:  127.0.0.1 www.example.com 127.0.0.2 foo.example.com 127.0.0.3 bar.example.com 127.0.0.4 waffles.example.com   I'd like an equivalent solution for IPv6.  I already know that you can use ::1 as a loopback address, but ::2, ::3, etc don't seem to work.  Are there any other loopback addresses in IPv6?  Is there a way to have multiple unique loopback addresses?
10329
I am running multiple web servers in my house, each of which is plugged into my router.  Server A Server B Server C  I currently can only use one server since my IP (xx.xxx.xx.xx) port 80 is pointing towards server A. However some domains point to server A, some to B, etc.  With my one IP address, how do I point to each server? For example my A(host) records all point to just my IP address.  Sorry if I sound confusing. Let me know if I am not being clear.  Each server is running Ubuntu Server 12.04.02 and is using Apache (if that helps). My router is also a Netgear and my ISP is Time Warner Cable.
42125
Even though I have seen and read quite a few similar Q's I was still unable to understand what is required for me to be able to do this.  I have an internal network. One of the machines is a web server. The router is configured for NAT redirecting a specific port to to that machine.  A public domain name is configured using dynamic DNS to point to my external address.  So incoming communication hits the router from its WAN interface and gets pointed to the internal server on the right port.  But if I try to use my public domain name from another machine within my network if fails to be redirected to the server.    In a way I would like that the same NAT rules would apply not only to incoming traffic but to outgoing (sort-of) traffic and have it sent back to the right server.  Assuming this helps, my router (D-Link DSL-2760U) does support static routing, but I am not sure how to configure it. It has the following parameters:   IP Version DstIP/PrefixLength Gateway Interface Metric
11542
How can I own an IP address like I do with domains?  I have done some research and it seems that you can't buy a single IP, but rather you have to purchase a range of IP addresses.  Update : Important Note I want this IP to use it with my servers. for example I had a VPS, it went bad, I want to be able to use the same IP on another VPS from another company.
102112
On a linux  networked machine,  i would like to restrict the set of addresses on the "public" zone  (firewalld concept), that are allowed to reach it. So the end result would be no other machine can access  any port or protocol, except those explicitly allowed, sort of a mix of     --add-rich-rule='rule family="ipv4" source not  address="192.168.56.120" drop'    --add-rich-rule='rule family="ipv4" source not  address="192.168.56.105" drop'   The problem above is that  this is not a real list, it will block everything since if its one address its blocked by not being the same as the other, generating an accidental "drop all" effect,  how would i  "unblock" a specific non contiguous set? does source accept a list of addresses? i have not see anything in my look at the docs or google result so far.     EDIT: I  just  created this:  # firewall-cmd  --zone=encrypt --list-all encrypt (active)   interfaces: eth1   sources: 192.168.56.120   services: ssh   ports: 6000/tcp   masquerade: no   forward-ports:    icmp-blocks:    rich rules:    But i can still reach port 6000 from  .123   my intention was that   if a source is not listed, it should not be able to reach any service or port