#networking | Linus Tech Tips | Page 297

dense furnace Mar 11, 2021, 1:59 PM

#

you mean you don't know what reverse ssh tunneling is?

tame carbon Mar 11, 2021, 1:59 PM

#

this maps a port on the remote, to a local port

dense furnace Mar 11, 2021, 1:59 PM

#

y

tame carbon Mar 11, 2021, 1:59 PM

#

but you can do it the other way around too

peak cloak Mar 11, 2021, 2:00 PM

#

tame carbon but you can do it the other way around too

not really

tame carbon Mar 11, 2021, 2:00 PM

#

You can

#

You can tunnel a local port to the remote system

dense furnace Mar 11, 2021, 2:00 PM

#

peak cloak not really

e.g. you know you can use ssh to login to linux right?

peak cloak Mar 11, 2021, 2:00 PM

#

dense furnace e.g. you know you can use ssh to login to linux right?

yes, I'm very familiar with it

#

I know how this works

dense furnace Mar 11, 2021, 2:00 PM

#

OK

peak cloak Mar 11, 2021, 2:00 PM

#

never used tunneling though

dense furnace Mar 11, 2021, 2:00 PM

#

:D

tame carbon Mar 11, 2021, 2:00 PM

#

ssh -R 25565:localhost:25565 user@server

peak cloak Mar 11, 2021, 2:00 PM

#

actually just setup remote access to my home network via wireguard 2 days ago

tame carbon Mar 11, 2021, 2:01 PM

#

this exposes your local 25565 to the remote server

dense furnace Mar 11, 2021, 2:01 PM

#

mostly used by ppl who have dynip but want their network to go

peak cloak Mar 11, 2021, 2:01 PM

#

so I can turn on my pc and remote into it

peak cloak Mar 11, 2021, 2:01 PM

#

dense furnace mostly used by ppl who have dynip but want their network to go

wdym by network to go?

tame carbon Mar 11, 2021, 2:02 PM

#

https://i.imgur.com/1vv89ir.png

Imgur

dense furnace Mar 11, 2021, 2:02 PM

#

peak cloak wdym by `network to go`?

expose network to public (yet it isn't recommended lol)

peak cloak Mar 11, 2021, 2:02 PM

#

I have a dynamic IP myself, although it basically never changes

tame carbon Mar 11, 2021, 2:03 PM

#

@slate sonnet This is what we're suggesting. Your gameserver initiates a tunnel to your VPS

peak cloak Mar 11, 2021, 2:03 PM

#

dense furnace expose network to public (yet it isn't recommended lol)

I don't get what you are trying to say

#

port forward?

tame carbon Mar 11, 2021, 2:03 PM

#

@slate sonnet the 'local machine' in this context, is your minecraft server host

slate sonnet Mar 11, 2021, 2:03 PM

#

tame carbon https://i.imgur.com/1vv89ir.png

Can my friends connect using the ip of the vps?

dense furnace Mar 11, 2021, 2:03 PM

#

yes

peak cloak Mar 11, 2021, 2:04 PM

#

yep

tame carbon Mar 11, 2021, 2:04 PM

#

Yeah, all you then have to do is configure your host, to tunnel data from its public IP on port 25565, through the tunnel that was established

#

I think that is done with iptables

slate sonnet Mar 11, 2021, 2:04 PM

#

But how would I do that since I have a cgnat?

dense furnace Mar 11, 2021, 2:04 PM

#

You don't need a local ip

slate sonnet Mar 11, 2021, 2:04 PM

#

Oh, okay

peak cloak Mar 11, 2021, 2:05 PM

#

slate sonnet But how would I do that since I have a cgnat?

start the tunnel from your end to the vps

tame carbon Mar 11, 2021, 2:05 PM

#

@slate sonnet your gameserver host (local) establishes a tunnel to the server. After this the server can directly reach your gameserver

dense furnace Mar 11, 2021, 2:05 PM

#

You connect to your vps

tame carbon Mar 11, 2021, 2:05 PM

#

@slate sonnet then you just have to make sure your VPS routes traffic through the tunnel

dense furnace Mar 11, 2021, 2:05 PM

#

and the vps is able to redirect traffic trough this connection of yours

tame carbon Mar 11, 2021, 2:05 PM

#

for the tunnel, you can either use VPN, or use ssh (hackiest and simplest way)

#

@slate sonnet CG-NAT prevents connections from being established from the WAN side (listening on a port on your IP)

#

but we can still establish a tunnel in the reverse direction

slate sonnet Mar 11, 2021, 2:06 PM

#

Ah, I see

#

Make sense

dense furnace Mar 11, 2021, 2:07 PM

#

You know how to do it?

tame carbon Mar 11, 2021, 2:07 PM

#

NAT breaks the end-to-end principle

#

https://en.wikipedia.org/wiki/End-to-end_principle

End-to-end principle

The end-to-end principle is a design framework in computer networking. In networks designed according to this principle, application-specific features reside in the communicating end nodes of the network, rather than in intermediary nodes, such as gateways and routers, that exist to establish the network.
The essence of what would later be calle...

#

https://i.imgur.com/8kooDc6.png

Imgur

slate sonnet Mar 11, 2021, 2:07 PM

#

dense furnace You know how to do it?

Connect to the vps?

tame carbon Mar 11, 2021, 2:07 PM

#

NAT breaks this ^

slate sonnet Mar 11, 2021, 2:07 PM

#

I know the general idea I think

dense furnace Mar 11, 2021, 2:07 PM

#

slate sonnet Connect to the vps?

y basically everything we talked about

slate sonnet Mar 11, 2021, 2:08 PM

#

Not really😅

dense furnace Mar 11, 2021, 2:08 PM

#

your first step is to get a cheap vps

slate sonnet Mar 11, 2021, 2:08 PM

#

Yeah

#

Does it matter what cpu and stuff?

tame carbon Mar 11, 2021, 2:08 PM

#

no

dense furnace Mar 11, 2021, 2:08 PM

#

No

tame carbon Mar 11, 2021, 2:08 PM

#

you dont need lot of CPU for this

dense furnace Mar 11, 2021, 2:08 PM

#

since it's not computing anything

#

you need 1 core

tame carbon Mar 11, 2021, 2:08 PM

#

as a tip

slate sonnet Mar 11, 2021, 2:08 PM

#

Just like a 1 core cpu and stuff

#

Okay

tame carbon Mar 11, 2021, 2:08 PM

#

@slate sonnet get a VPS that is close to you

dense furnace Mar 11, 2021, 2:09 PM

#

but not ovh france

#

lol

tame carbon Mar 11, 2021, 2:09 PM

#

otherwise you get a lot of latency

#

KEKW

slate sonnet Mar 11, 2021, 2:09 PM

#

tame carbon otherwise you get a lot of latency

xD

dense furnace Mar 11, 2021, 2:09 PM

#

dense furnace but not ovh france

burned down yesterday

tame carbon Mar 11, 2021, 2:09 PM

#

dense furnace Mar 11, 2021, 2:09 PM

#

for those who don't know

tame carbon Mar 11, 2021, 2:09 PM

#

part-of-the-ovh-data-center-in-strasbourg-one-of-the-main-in-europe-destroyed-in-a-fire-9d39cab.png

dense furnace Mar 11, 2021, 2:09 PM

#

I laughed a lot on twitter

#

"what's an emergency plan"

#

"what backup?"

tame carbon Mar 11, 2021, 2:09 PM

#

I laughed at the poor fucks who didnt have an emergency plan

#

and were looking on the OVH web panel for the button to activate their emergency plan

dense furnace Mar 11, 2021, 2:10 PM

#

y

#

xD

#

"I loose money mimimimi"

#

fantastic

tame carbon Mar 11, 2021, 2:10 PM

#

#

Cloud to ashes

#

special kind of uplink

#

#

Before the fire ^

slate sonnet Mar 11, 2021, 2:12 PM

#

1gb of ram is alright?

tame carbon Mar 11, 2021, 2:12 PM

#

more than enough for your purposes yes

slate sonnet Mar 11, 2021, 2:12 PM

#

Okay

#

Also I have an option of windows server, ubuntu, debian and centos

tame carbon Mar 11, 2021, 2:12 PM

#

ubuntu

#

thats the easiest one you'll find lots of support for

#

Debian would be the 2nd choice, if you prefer a cleaner system

#

Ubuntu is based on debian

#

@slate sonnet the article that @peak cloak posted: https://github.com/mochman/Bypass_CGNAT
Assumes ubuntu as well

GitHub

mochman/Bypass_CGNAT

Wireguard setup to bypass CGNAT with a VPS. Contribute to mochman/Bypass_CGNAT development by creating an account on GitHub.

#

We can just try to do it with Wireguard, that's the cleanest solution

#

and probably more reliable than any ssh-equivalent

slate sonnet Mar 11, 2021, 2:16 PM

#

Okay

#

That's what I'm gonna do then

#

All the stuff that I need to do is on the github page?

tame carbon Mar 11, 2021, 2:18 PM

#

https://i.imgur.com/yZ2cmSb.png

Imgur

#

this is in essence what we need to set up

#

The big red arrow points to the machine on your LAN with the gameserver on it

#

as you can see, the VPS has two IP addresses

#

a public one, and a private tunnel IP

#

The gameserver host (the nginx proxy in the image) also has an IP on that tunnel network

#

this is how the VPS and gameserver can then directly talk to eachother

slate sonnet Mar 11, 2021, 2:21 PM

#

tame carbon a public one, and a private tunnel IP

So do I keep the private one to myself and give my friends the public one?

tame carbon Mar 11, 2021, 2:21 PM

#

@slate sonnet yeah the idea is that the public IP of your VPS will route its traffic to your gameserver behind your CG-NAT

lean pebble Mar 11, 2021, 2:21 PM

#

Someone can help me understand how to make my integrated graphics work again ?
Asus sabertooth z87 mboard with i7 4770 no Nvidia / amd gpu only the the cpu gpu that not giving any output

slate sonnet Mar 11, 2021, 2:22 PM

#

lean pebble Someone can help me understand how to make my integrated graphics work again ? ...

#tech-support

tame carbon Mar 11, 2021, 2:22 PM

#

@slate sonnet so Internet -> VPS -> Wireguard -> Game Server

#

Wireguard is also over the internet

slate sonnet Mar 11, 2021, 2:22 PM

#

tame carbon <@!289451427011756032> so Internet -> VPS -> Wireguard -> Game Server

Got it

dense furnace Mar 11, 2021, 2:22 PM

#

so you want use wireguard or ssh-tunnel?

tame carbon Mar 11, 2021, 2:22 PM

#

I'd use wireguard

dense furnace Mar 11, 2021, 2:22 PM

#

kk

slate sonnet Mar 11, 2021, 2:22 PM

#

I think I should use wireguard

tame carbon Mar 11, 2021, 2:22 PM

#

Wireguard would automatically keep the tunnel up, ssh is a bit hacky :P

dense furnace Mar 11, 2021, 2:22 PM

#

then I'm out :D no idea of wireguard honestly

tame carbon Mar 11, 2021, 2:22 PM

#

I use ssh tunneling for on-the-fly

#

@dense furnace neither do I

dense furnace Mar 11, 2021, 2:23 PM

#

lol

tame carbon Mar 11, 2021, 2:23 PM

#

but we have a tutorial

dense furnace Mar 11, 2021, 2:23 PM

#

:D

#

oh

#

okay

tame carbon Mar 11, 2021, 2:23 PM

#

https://github.com/mochman/Bypass_CGNAT

GitHub

mochman/Bypass_CGNAT

Wireguard setup to bypass CGNAT with a VPS. Contribute to mochman/Bypass_CGNAT development by creating an account on GitHub.

#

This assumes wireguard on a VPS

#

@dense furnace I'm still using layer 2 tunnels over here :3

lean pebble Mar 11, 2021, 2:24 PM

#

Cgnat block port forwarding right ?

tame carbon Mar 11, 2021, 2:25 PM

#

@lean pebble its a shared public IP

#

so you cannot port forward

lean pebble Mar 11, 2021, 2:25 PM

#

Ya I hate it

tame carbon Mar 11, 2021, 2:25 PM

#

CG-NATs are the bane of ipv4

#

@dense furnace thanks to my ISP, I have a public /29 xD

lean pebble Mar 11, 2021, 2:25 PM

#

This is so dam option to use

#

I have /32

#

😆

#

1 IP

tame carbon Mar 11, 2021, 2:26 PM

#

I have 9 in total, if you count the /32 WAN

lean pebble Mar 11, 2021, 2:26 PM

#

But /29 on my dedicated server

#

I think.

dense furnace Mar 11, 2021, 2:26 PM

#

tame carbon <@!223850412317474826> thanks to my ISP, I have a public /29 xD

oof

lean pebble Mar 11, 2021, 2:27 PM

#

Well IPs are pretty cheap in europe

dense furnace Mar 11, 2021, 2:27 PM

#

But I think I don't like static ip

#

ppl always know who/where you are once exposed

lean pebble Mar 11, 2021, 2:27 PM

#

Nah

#

My external IP address always changing his location

#

😆

tame carbon Mar 11, 2021, 2:27 PM

#

My ISP routes the /29 through their internal network

#

So I can even share this publicly, without you guys doxing me ;P

dense furnace Mar 11, 2021, 2:28 PM

#

kek

lean pebble Mar 11, 2021, 2:28 PM

#

Lol

#

Now we have your internal network

tame carbon Mar 11, 2021, 2:28 PM

#

lol

slate sonnet Mar 11, 2021, 2:28 PM

#

That interface looked like windows xp lmao

tame carbon Mar 11, 2021, 2:28 PM

#

@slate sonnet winbox

#

@slate sonnet https://i.imgur.com/ejvPGen.png

Imgur

#

management tool for RouterOS

slate sonnet Mar 11, 2021, 2:29 PM

#

Dunno what routeros is but okay

dense furnace Mar 11, 2021, 2:30 PM

#

looks old

#

hehe

slate sonnet Mar 11, 2021, 2:30 PM

#

You must have a whole networking setup

dense furnace Mar 11, 2021, 2:30 PM

#

slate sonnet Dunno what routeros is but okay

unknown software is the best protection

#

lol

tame carbon Mar 11, 2021, 2:30 PM

#

@slate sonnet thats my core router in the attic https://cdn.discordapp.com/attachments/776722183119699988/777646103775674368/IMG-20200922-WA0001.jpg

slate sonnet Mar 11, 2021, 2:30 PM

#

Yeah

dense furnace Mar 11, 2021, 2:30 PM

#

nice one

slate sonnet Mar 11, 2021, 2:30 PM

#

tame carbon <@!289451427011756032> thats my core router in the attic https://cdn.discordapp...

Damn

tame carbon Mar 11, 2021, 2:30 PM

#

RB4011

#

10gbit router

dense furnace Mar 11, 2021, 2:31 PM

#

living the dream

slate sonnet Mar 11, 2021, 2:31 PM

#

I'm soon gonna be living alone hopefully

#

Want to create a whole network for stuff

tame carbon Mar 11, 2021, 2:31 PM

#

@dense furnace RouterOS v7 (in beta right now) will add Wireguard support

slate sonnet Mar 11, 2021, 2:31 PM

#

Like game server

#

File server

#

That I can access anywhere

tame carbon Mar 11, 2021, 2:31 PM

#

@slate sonnet thats what that box underneath is for :)

#

That's a Ryzen 2600

dense furnace Mar 11, 2021, 2:31 PM

#

teamspeak for you and your frien.. oh wait

dense furnace Mar 11, 2021, 2:32 PM

#

tame carbon That's a Ryzen 2600

damn

slate sonnet Mar 11, 2021, 2:32 PM

#

But atm I'm stuck on a network where I can't even port forward lmao

dense furnace Mar 11, 2021, 2:32 PM

#

what specs exactly?

tame carbon Mar 11, 2021, 2:32 PM

#

@dense furnace R2600, 16GB ECC (2400Mhz), 2x 10G SFP+ network

dense furnace Mar 11, 2021, 2:32 PM

#

slate sonnet But atm I'm stuck on a network where I can't even port forward lmao

ayy you don't need to honestly. Just route everything trough external servers lol

tame carbon Mar 11, 2021, 2:32 PM

#

NVMe boot drive, and 4x 4TB storage

#

on a mini ITX board

#

xD

dense furnace Mar 11, 2021, 2:33 PM

#

internally you can do whatever you want

slate sonnet Mar 11, 2021, 2:33 PM

#

dense furnace ayy you don't need to honestly. Just route everything trough external servers lo...

Well yes, but my goal is to be able to host everything myself

dense furnace Mar 11, 2021, 2:33 PM

#

tame carbon NVMe boot drive, and 4x 4TB storage

oof

tame carbon Mar 11, 2021, 2:33 PM

#

@dense furnace the whole thing cost me around 800 bucks

dense furnace Mar 11, 2021, 2:33 PM

#

slate sonnet Well yes, but my goal is to be able to host everything myself

you still can. 3€/m vps is nothing? It's just for the ip honestly

#

it's totally legit

slate sonnet Mar 11, 2021, 2:33 PM

#

Well yeah

dense furnace Mar 11, 2021, 2:33 PM

#

tame carbon <@!223850412317474826> the whole thing cost me around 800 bucks

oof

#

wait what

tame carbon Mar 11, 2021, 2:33 PM

#

@slate sonnet I pay my ISP 16euros/month for extra IP addresses ;P

dense furnace Mar 11, 2021, 2:33 PM

#

Everything? switch etc.?

tame carbon Mar 11, 2021, 2:34 PM

#

@dense furnace nah just the server

dense furnace Mar 11, 2021, 2:34 PM

#

oof

tame carbon Mar 11, 2021, 2:34 PM

#

that router is 190 bucks

#

https://mikrotik.com/product/rb4011igs_rm

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

dense furnace Mar 11, 2021, 2:34 PM

#

800 bucks is too much isnt it?

#

or is it older?

tame carbon Mar 11, 2021, 2:34 PM

#

@dense furnace network card alone was 200 bucks

dense furnace Mar 11, 2021, 2:34 PM

#

like the old new

dense furnace Mar 11, 2021, 2:34 PM

#

tame carbon <@!223850412317474826> network card alone was 200 bucks

OH shit

#

ok

slate sonnet Mar 11, 2021, 2:34 PM

#

I pay the equivalent of 5.65 euros per month for 35mbit up and down

tame carbon Mar 11, 2021, 2:34 PM

#

I built this machine 2 years ago

dense furnace Mar 11, 2021, 2:35 PM

#

slate sonnet I pay the equivalent of 5.65 euros per month for 35mbit up and down

I pay 35€ for 100down 40 up

dense furnace Mar 11, 2021, 2:35 PM

#

tame carbon I built this machine 2 years ago

ok it's legit then

tame carbon Mar 11, 2021, 2:35 PM

#

@slate sonnet I have 250/250mbit, extra /29 subnet and IPTV for a grand total of 140/month

slate sonnet Mar 11, 2021, 2:35 PM

#

Damn

tame carbon Mar 11, 2021, 2:35 PM

#

I resell two IP addresses

dense furnace Mar 11, 2021, 2:35 PM

#

slate sonnet I pay the equivalent of 5.65 euros per month for 35mbit up and down

thats hell cheap

tame carbon Mar 11, 2021, 2:35 PM

#

two companies get their internet from me

slate sonnet Mar 11, 2021, 2:35 PM

#

Russia has really cheap internet

dense furnace Mar 11, 2021, 2:35 PM

#

In my opinion

tame carbon Mar 11, 2021, 2:35 PM

#

each get 50/50 internet, for 50 bucks

slate sonnet Mar 11, 2021, 2:35 PM

#

I get 0ms ping in speedtest lmao

tame carbon Mar 11, 2021, 2:35 PM

#

so I only pay around 40bucks/month

dense furnace Mar 11, 2021, 2:35 PM

#

slate sonnet I get 0ms ping in speedtest lmao

rofl

tame carbon Mar 11, 2021, 2:35 PM

#

5ms

dense furnace Mar 11, 2021, 2:36 PM

#

18ms

#

._.

#

germany

#

¯_(ツ)_/¯

#

the most shitty and expensive internet you can think of

tame carbon Mar 11, 2021, 2:37 PM

#

https://i.imgur.com/SHOLg7f.png

Imgur

dense furnace Mar 11, 2021, 2:37 PM

#

damn

tame carbon Mar 11, 2021, 2:37 PM

#

entire network here is FQDN

#

and my lastname is in the host xD

#

@dense furnace the RB4011 is pretty sweet as a router

#

it has so much headroom in terms of performance

#

if I fully saturate my NAS and internet

#

CPU usage is like 15% at most

#

https://i.imgur.com/bNQsz6F.png

Imgur

dense furnace Mar 11, 2021, 2:40 PM

#

I want a unifi router

#

and switch

tame carbon Mar 11, 2021, 2:40 PM

#

ew

dense furnace Mar 11, 2021, 2:40 PM

#

:D

tame carbon Mar 11, 2021, 2:41 PM

#

unifi overpriced

slate sonnet Mar 11, 2021, 2:41 PM

#

Also, when I setup the vps and setup wireguard and stuff, the only data that's gonna be coming and going between my pc and the vps is minecraft server stuff? (since I want to host a minecraft server)

tame carbon Mar 11, 2021, 2:42 PM

#

@slate sonnet yeah wireguard creates a virtual network on both machines

#

in that screenshot on the github

#

that's the 10.0.0.0/24

#

but those are only reachable on the machines themselves

slate sonnet Mar 11, 2021, 2:43 PM

#

Well what I mean is that if I just use my pc and search stuff on google for example, that data is gonna go through my main network

#

But the minecraft stuff will go through the vps

#

Or will everything on my pc go through the vps?

#

Or can I configure it

dense furnace Mar 11, 2021, 2:44 PM

#

good question, you have to logoff the vpn i guess

tame carbon Mar 11, 2021, 2:44 PM

#

@slate sonnet think of wireguard as a network cable plugged directly between your gameserver and VPS

#

that's all it is

dense furnace Mar 11, 2021, 2:44 PM

#

idk, can you link only the executionable with wireguard?

tame carbon Mar 11, 2021, 2:44 PM

#

@slate sonnet this config rule: https://i.imgur.com/VussQl0.png

Imgur

#

iptables -t nat -A PREROUTING -p tcp -i eth0 '!' --dport 22 -j DNAT --to-destination 10.0.0.2; iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 1.2.3.4

#

this ^

#

is a config rule for the VPS internal network stack

#

It basically transports traffic on a specific port, through that internal network

slate sonnet Mar 11, 2021, 2:45 PM

#

Oh okay

dense furnace Mar 11, 2021, 2:45 PM

#

oh i get it

slate sonnet Mar 11, 2021, 2:46 PM

#

So with that pretty much the only data is gonna be minecraft server data (since its only on 1 port 25565 udp/tcp)

tame carbon Mar 11, 2021, 2:46 PM

#

@slate sonnet specifically

#

@slate sonnet that rule forwards all ports

#

except port 22

dense furnace Mar 11, 2021, 2:46 PM

#

iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 25565 -j DNAT --to-destination 10.0.0.2

tame carbon Mar 11, 2021, 2:46 PM

#

@dense furnace no

#

the !

#

inverts it

#

so its all ports except 22

slate sonnet Mar 11, 2021, 2:47 PM

#

Well I'm gonna do all this later when I buy the vps

dense furnace Mar 11, 2021, 2:47 PM

#

*corrected

tame carbon Mar 11, 2021, 2:47 PM

#

@dense furnace https://i.imgur.com/2bhTrWn.png

Imgur

#

@dense furnace only needs two exceptions

dense furnace Mar 11, 2021, 2:47 PM

#

y I need to learn to read the damn documentation

tame carbon Mar 11, 2021, 2:47 PM

#

SSH and wireguard itself

#

all other traffic is routed through that tunnel

dense furnace Mar 11, 2021, 2:48 PM

#

but he doesn't want that

tame carbon Mar 11, 2021, 2:48 PM

#

@dense furnace he does.

#

He can then augment this, with a regular firewall

#

and then only permit 25565 incoming

thick minnow Mar 11, 2021, 2:48 PM

#

Does anyone here know a VPS provider that has a student plan and does not ask for a flipping credit card from a student who is below the age of 18 (other than microsoft azure)?

dense furnace Mar 11, 2021, 2:48 PM

#

he only want to route 25565 trough the vpn

dense furnace Mar 11, 2021, 2:49 PM

#

thick minnow Does anyone here know a VPS provider that has a student plan and does not ask fo...

do you have paypal?

tame carbon Mar 11, 2021, 2:49 PM

#

@dense furnace yeah, but this tutorial would forward all ports
But we can use a firewall to only permit incoming on 25565

#

so even if all traffic is forwarded, only 25565 will be allowed in

dense furnace Mar 11, 2021, 2:49 PM

#

dense furnace ```iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 25565 -j DNAT --to-desti...

that's why I did this :o

thick minnow Mar 11, 2021, 2:49 PM

#

dense furnace do you have paypal?

Would someone below 18 and without a bank account be able to get a paypal account?

dense furnace Mar 11, 2021, 2:49 PM

#

idk

#

other countrys other laws

slate sonnet Mar 11, 2021, 2:49 PM

#

thick minnow Would someone below 18 and without a bank account be able to get a paypal accoun...

Depends on where you live?

slate sonnet Mar 11, 2021, 2:49 PM

#

dense furnace other countrys other laws

Yes

dense furnace Mar 11, 2021, 2:50 PM

#

wait

#

how do you want to pay

#

without a bank account?

slate sonnet Mar 11, 2021, 2:50 PM

#

For example I know that in Russia you can't make a paypal account under the age of 18

tame carbon Mar 11, 2021, 2:50 PM

#

paypal requires you to set up a bank account or credit card

slate sonnet Mar 11, 2021, 2:50 PM

#

Yet you can get a debit card

dense furnace Mar 11, 2021, 2:50 PM

#

maybe prepaid

#

but there is no legal host I know about offering this

#

since you HAVE TO identify yourself

tame carbon Mar 11, 2021, 2:51 PM

#

paypal has my mugshot

thick minnow Mar 11, 2021, 2:51 PM

#

dense furnace without a bank account?

Well, AWS and DigitalOcean offer a student plan with credit and then there's oracle which gives basically anyone 2 free VMs

tame carbon Mar 11, 2021, 2:51 PM

#

or rather, a photograph of my ID

#

AWS VMs you can get for free even without a student plan

#

you can get a micro vm for 1 year for free, as long as you create a new account with a credit card

dense furnace Mar 11, 2021, 2:52 PM

#

no bank account = no credit card

tame carbon Mar 11, 2021, 2:52 PM

#

git gud.

thick minnow Mar 11, 2021, 2:52 PM

#

tame carbon AWS VMs you can get for free even without a student plan

I know but again the whole credit card thing, they need it for "Verification"

dense furnace Mar 11, 2021, 2:52 PM

#

I'm confused

#

So basically

#

you have nothing?

#

no bank, no credit card

#

etc

tame carbon Mar 11, 2021, 2:52 PM

#

then why do you need paypal lol

#

if you dont have money

dense furnace Mar 11, 2021, 2:53 PM

#

No he needs a vps host

tame carbon Mar 11, 2021, 2:53 PM

#

F

dense furnace Mar 11, 2021, 2:53 PM

#

but for free

#

I guess

thick minnow Mar 11, 2021, 2:53 PM

#

Azure was gracious enough

tame carbon Mar 11, 2021, 2:53 PM

#

time to ask mommy for her creditcard I guess

dense furnace Mar 11, 2021, 2:54 PM

#

google for a hoster which accepts paysafecard or something like this

tame carbon Mar 11, 2021, 2:54 PM

#

only reason I even own a credit card to begin with, was because of my travels to the United states a couple years ago

#

you NEED a creditcard in the US, especially as tourist

slate sonnet Mar 11, 2021, 2:54 PM

#

tame carbon you *NEED* a creditcard in the US, especially as tourist

No debit?

tame carbon Mar 11, 2021, 2:54 PM

#

Debit cards here are Maestro

#

those don't work in US

slate sonnet Mar 11, 2021, 2:55 PM

#

Mine is mastercard

dense furnace Mar 11, 2021, 2:55 PM

#

mine visa

tame carbon Mar 11, 2021, 2:55 PM

#

mastercard = credit card

#

Maestro is a seperate debit system

slate sonnet Mar 11, 2021, 2:55 PM

#

But my card is a debit

#

Huh

tame carbon Mar 11, 2021, 2:55 PM

#

https://en.wikipedia.org/wiki/Maestro_(debit_card)

Maestro (debit card)

Maestro (stylized as maestro) is a brand of debit cards and prepaid cards owned by Mastercard that was introduced in 1991. Maestro debit cards are obtained from associate banks and are linked to the cardholder's current account while prepaid cards do not require a bank account to operate. Maestro cards can be used at point of sale (POS) and ATMs...

dense furnace Mar 11, 2021, 2:55 PM

#

got 2 debit cards from maestro and 1 credit card from mastercard

slate sonnet Mar 11, 2021, 2:55 PM

#

Maestro doesn't exist in russia afaik

dense furnace Mar 11, 2021, 2:56 PM

#

but guys

slate sonnet Mar 11, 2021, 2:56 PM

#

Only mastercard and visa

dense furnace Mar 11, 2021, 2:56 PM

#

this is obviously the wrong channel for plastic payment cards

#

:D

tame carbon Mar 11, 2021, 2:56 PM

#

My creditcard is Mastercard/Visa

slate sonnet Mar 11, 2021, 2:56 PM

#

dense furnace this is obviously the wrong channel for plastic payment cards

Yes lmao

tame carbon Mar 11, 2021, 2:56 PM

#

my debit is maestro

#

I can use my debit card for contactless payment and such

dense furnace Mar 11, 2021, 2:56 PM

#

ping us again later when you bought the vps

slate sonnet Mar 11, 2021, 2:56 PM

#

Me?

tame carbon Mar 11, 2021, 2:56 PM

#

@slate sonnet what host are you planning on using?

dense furnace Mar 11, 2021, 2:56 PM

#

y

#

:D

slate sonnet Mar 11, 2021, 2:57 PM

#

tame carbon <@!289451427011756032> what host are you planning on using?

Some russian one

#

1 sec

tame carbon Mar 11, 2021, 2:57 PM

#

russian internet KEKW

slate sonnet Mar 11, 2021, 2:57 PM

#

tame carbon russian internet <:KEKW:670048864052445204>

I live in russia so its the best for me lmao

#

ruvds.com

thick minnow Mar 11, 2021, 2:57 PM

#

dense furnace ping us again later when you bought the vps

okay

dense furnace Mar 11, 2021, 2:58 PM

#

not you

#

lol

#

woah woah ruvds.com even supports german language

#

I'm impressed

slate sonnet Mar 11, 2021, 2:59 PM

#

They have a few servers in europe I think

#

Datacenters in frankfurt

tame carbon Mar 11, 2021, 2:59 PM

#

@slate sonnet you want as close as possible

slate sonnet Mar 11, 2021, 2:59 PM

#

London

slate sonnet Mar 11, 2021, 2:59 PM

#

tame carbon <@!289451427011756032> you want as close as possible

Yes

#

I know

tame carbon Mar 11, 2021, 2:59 PM

#

as little latency between your internet and the VPS

slate sonnet Mar 11, 2021, 2:59 PM

#

I picked my datacenter

#

Just saying that they seem legit

tame carbon Mar 11, 2021, 2:59 PM

#

 crystal@watomat  ~  ping ldn.services.local.knockturnmc.com
PING ldn.services.local.knockturnmc.com (10.244.174.53) 56(84) bytes of data.
64 bytes from 10.244.174.53: icmp_seq=1 ttl=64 time=45.3 ms
64 bytes from 10.244.174.53: icmp_seq=2 ttl=64 time=15.2 ms
64 bytes from 10.244.174.53: icmp_seq=3 ttl=64 time=15.2 ms

#

My vps is like 15ms...

slate sonnet Mar 11, 2021, 3:00 PM

#

That's good?

tame carbon Mar 11, 2021, 3:00 PM

#

Its in London

slate sonnet Mar 11, 2021, 3:00 PM

#

Well I mean, I don't think it matters too much

tame carbon Mar 11, 2021, 3:00 PM

#

and I'm connected via amsterdam

#

so this is about as good as I can get

#

I get 7ms to the exchange, and 15ms to the VPS

dense furnace Mar 11, 2021, 3:01 PM

#

oh there is a vps for 240₽

slate sonnet Mar 11, 2021, 3:01 PM

#

Well I think I got like 10ms ping while connected to moscow when I was using parsec

dense furnace Mar 11, 2021, 3:01 PM

#

1x2.2GHz
1gb RAM
20gb HDD
ubuntu

slate sonnet Mar 11, 2021, 3:01 PM

#

My pc was home

#

I was in moscow

slate sonnet Mar 11, 2021, 3:01 PM

#

dense furnace oh there is a vps for 240₽

Yes

tame carbon Mar 11, 2021, 3:01 PM

#

@dense furnace those specs are good nuf

dense furnace Mar 11, 2021, 3:01 PM

#

https://prnt.sc/10ixaa4

Lightshot

Screenshot

Captured with Lightshot

slate sonnet Mar 11, 2021, 3:01 PM

#

That's like half a euro I think?

#

lmao

#

per month

dense furnace Mar 11, 2021, 3:02 PM

#

2,73€

slate sonnet Mar 11, 2021, 3:02 PM

#

Oh wait

#

I'm dumb

#

Yeah

dense furnace Mar 11, 2021, 3:02 PM

#

the rubel is stronger than you think

#

hehe

tame carbon Mar 11, 2021, 3:02 PM

#

OVH's cloud VPSes are around 2,50 euro/month

#

same specs

#

but OVH also burns down ocassionally

slate sonnet Mar 11, 2021, 3:02 PM

#

dense furnace https://prnt.sc/10ixaa4

Pretty much the same spec as I did

dense furnace Mar 11, 2021, 3:02 PM

#

y but they also burn down

slate sonnet Mar 11, 2021, 3:02 PM

#

tame carbon but OVH also burns down ocassionally

lmao

#

Saw the pics posted earlier

tame carbon Mar 11, 2021, 3:03 PM

#

@slate sonnet I had a dedicated server in BHS (canada) with OVH

#

and they had a tunnel collapse on their fiber backbone

#

entire datacenter offline for 2 days

#

and they reimbursed me with $5

slate sonnet Mar 11, 2021, 3:03 PM

#

I have a question though, on ruvds there is an option for 1 ip

dense furnace Mar 11, 2021, 3:03 PM

#

tame carbon and they reimbursed me with $5

kek

dense furnace Mar 11, 2021, 3:03 PM

#

slate sonnet I have a question though, on ruvds there is an option for 1 ip

yes

slate sonnet Mar 11, 2021, 3:03 PM

#

That means I'll have 1 private and 1 public, right?

dense furnace Mar 11, 2021, 3:03 PM

#

eh

tame carbon Mar 11, 2021, 3:04 PM

#

You need only a single IP

dense furnace Mar 11, 2021, 3:04 PM

#

1 public

#

the private one is created via wireguard

#

if that's the question

slate sonnet Mar 11, 2021, 3:04 PM

#

Ah

#

Okay

#

Yes, that's pretty much the question

dense furnace Mar 11, 2021, 3:05 PM

#

you can basically create as much private IP's as you want lol

slate sonnet Mar 11, 2021, 3:05 PM

#

Huh, apparently kaspersky use their services

#

I'm buying the vps

#

Okay, so I have to connect to it via ssh, right?

#

@dense furnace @tame carbon

tame carbon Mar 11, 2021, 3:17 PM

#

Exactly

#

@slate sonnet are you on windows?

slate sonnet Mar 11, 2021, 3:17 PM

#

Yes

tame carbon Mar 11, 2021, 3:17 PM

#

https://www.putty.org/

slate sonnet Mar 11, 2021, 3:18 PM

#

I can ssh on my phone though

tame carbon Mar 11, 2021, 3:18 PM

#

Use this ^

#

https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

#

https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe

#

can just grab this one ^

#

standalone putty

slate sonnet Mar 11, 2021, 3:20 PM

#

How do I ssh?

tame carbon Mar 11, 2021, 3:20 PM

#

you enter the IP address of the server in there

#

and press Open

dense furnace Mar 11, 2021, 3:21 PM

#

you should get username + password via mail

#

unless you already set it yourself

tame carbon Mar 11, 2021, 3:21 PM

#

https://i.imgur.com/jfpW0Dt.png

Imgur

#

you type root as the username, and the password they provided to you

#

Don't be confused by the ssh-tunnel stuff we spoke of earlier

#

SSH can be used for a multitude of things

#

but its primarily used for remote login on servers

slate sonnet Mar 11, 2021, 3:22 PM

#

Okay, logged in

tame carbon Mar 11, 2021, 3:22 PM

#

@slate sonnet change the password

slate sonnet Mar 11, 2021, 3:22 PM

#

So now I just basically follow the github guide right?

tame carbon Mar 11, 2021, 3:22 PM

#

run passwd

slate sonnet Mar 11, 2021, 3:23 PM

#

tame carbon <@!289451427011756032> change the password

I can do that from the hosting site

tame carbon Mar 11, 2021, 3:23 PM

#

No

#

you do that from within the system

slate sonnet Mar 11, 2021, 3:23 PM

#

Okay

#

Done

tame carbon Mar 11, 2021, 3:23 PM

#

@slate sonnet now you can follow the guide

#

https://i.imgur.com/uVK4h21.png

Imgur

untold elbow Mar 11, 2021, 3:25 PM

#

worth looking into setting up certificate-based login for ssh if you're leaving port 22 open to the world

tame carbon Mar 11, 2021, 3:25 PM

#

yeah

untold elbow Mar 11, 2021, 3:25 PM

#

at some point

tame carbon Mar 11, 2021, 3:25 PM

#

yep. first I think setting up the wireguard stuff

#

once that works

#

you can harden security

#

password auth is good enough for now

dense furnace Mar 11, 2021, 3:25 PM

#

we can do that later

#

he got some time

#

:D

slate sonnet Mar 11, 2021, 3:25 PM

#

No copy paste in putty? :(

untold elbow Mar 11, 2021, 3:26 PM

#

right click

dense furnace Mar 11, 2021, 3:26 PM

#

yep

tame carbon Mar 11, 2021, 3:26 PM

#

copy is selecting text

#

paste is right click

dense furnace Mar 11, 2021, 3:26 PM

#

^

untold elbow Mar 11, 2021, 3:26 PM

#

ctrl+c sends an important program termination signal in unix systems, so you can't have that conflicting with copy/paste

#

not sure if ctrl+v sends a signal

tame carbon Mar 11, 2021, 3:27 PM

#

^V

#

^C

#

etc

untold elbow Mar 11, 2021, 3:27 PM

#

not sure if it does anything i mean

#

^V

tame carbon Mar 11, 2021, 3:27 PM

#

yeah but that's what the client sends

#

when you do a CTRL V

slate sonnet Mar 11, 2021, 3:28 PM

#

untold elbow ctrl+c sends an important program termination signal in unix systems, so you can...

I thought ctrl+shift+v would work

untold elbow Mar 11, 2021, 3:28 PM

#

it will in some programs

tame carbon Mar 11, 2021, 3:28 PM

#

you can even have mouseclicks on SSH xD

slate sonnet Mar 11, 2021, 3:28 PM

#

btw

untold elbow Mar 11, 2021, 3:28 PM

#

you can probably bind it to paste in the putty config

tame carbon Mar 11, 2021, 3:28 PM

#

@slate sonnet that first command uses nano which is a text editor

slate sonnet Mar 11, 2021, 3:28 PM

#

untold elbow Mar 11, 2021, 3:29 PM

#

but once you get used to it, select to copy and right-click to paste is super fast and way easier

tame carbon Mar 11, 2021, 3:29 PM

#

wat.

untold elbow Mar 11, 2021, 3:29 PM

#

wtf is that host

tame carbon Mar 11, 2021, 3:29 PM

#

@untold elbow its russian

#

VODKA

dense furnace Mar 11, 2021, 3:29 PM

#

ruvds is the hosters name

slate sonnet Mar 11, 2021, 3:29 PM

#

slate sonnet

Did sudo sysctl -p

slate sonnet Mar 11, 2021, 3:29 PM

#

tame carbon VODKA

lmao

dense furnace Mar 11, 2021, 3:29 PM

#

the rest ist dynamic generated i guess

untold elbow Mar 11, 2021, 3:29 PM

#

o

tame carbon Mar 11, 2021, 3:30 PM

#

@slate sonnet did you uncomment the config rule as per that guide?

slate sonnet Mar 11, 2021, 3:30 PM

#

tame carbon <@!289451427011756032> did you uncomment the config rule as per that guide?

yes

tame carbon Mar 11, 2021, 3:30 PM

#

and save ?

#

https://i.imgur.com/OkV6Qb7.png

Imgur

#

CTRL + X, Y <ENTER>

slate sonnet Mar 11, 2021, 3:31 PM

#

tame carbon Mar 11, 2021, 3:31 PM

#

cool

slate sonnet Mar 11, 2021, 3:31 PM

#

Uncommented and saved

tame carbon Mar 11, 2021, 3:31 PM

#

sudo sysctl -p fails?

slate sonnet Mar 11, 2021, 3:31 PM

#

yes

slate sonnet Mar 11, 2021, 3:31 PM

#

slate sonnet

Gives me this

#

Well wait

tame carbon Mar 11, 2021, 3:32 PM

#

@slate sonnet run it without sudo

slate sonnet Mar 11, 2021, 3:32 PM

#

tame carbon Mar 11, 2021, 3:32 PM

#

you're logged in as root

#

so you dont need sudo

#

sudo = super user do

#

or: run as admin

slate sonnet Mar 11, 2021, 3:32 PM

#

Makes sense

#

Ran it

#

No issue

tame carbon Mar 11, 2021, 3:32 PM

#

kk

slate sonnet Mar 11, 2021, 3:33 PM

#

I'm just so used to writing sudo for installing stuff

tame carbon Mar 11, 2021, 3:33 PM

#

now run

#

apt install wireguard

#

@slate sonnet wait

#

before oyu do that

#

update existing packages

#

apt update && apt upgrade -y

#

run that

#

and then apt install wireguard

slate sonnet Mar 11, 2021, 3:33 PM

#

updating rn

tame carbon Mar 11, 2021, 3:34 PM

#

apt update downloads latest definitions from the server
apt upgrade downloads the software and installs it

slate sonnet Mar 11, 2021, 3:35 PM

#

I run kde neon as an only os on my laptop, so I know my way around linux a little bit

tame carbon Mar 11, 2021, 3:35 PM

#

ooohok

#

I was confused

slate sonnet Mar 11, 2021, 3:35 PM

#

Just sometimes I get stuck because of a dumb thing lol

tame carbon Mar 11, 2021, 3:35 PM

#

because you didnt know how to ssh

slate sonnet Mar 11, 2021, 3:35 PM

#

tame carbon because you didnt know how to ssh

Never used it

tame carbon Mar 11, 2021, 3:35 PM

#

so I assumed knowledge: 0

slate sonnet Mar 11, 2021, 3:35 PM

#

No problem

#

I ran a minecraft server off my jailbroken iphone once lmao

tame carbon Mar 11, 2021, 3:36 PM

#

same

#

my old iphone 4

#

with JamVM

slate sonnet Mar 11, 2021, 3:36 PM

#

OOoooooofff

tame carbon Mar 11, 2021, 3:36 PM

#

older versions of minecraft ran off 1.5

slate sonnet Mar 11, 2021, 3:36 PM

#

That must have sucked

tame carbon Mar 11, 2021, 3:36 PM

#

which is what jamvm ran

#

iphone 4 only has 512M ram, so... xD

#

started mc with 256M ram

#

and took like 15 mins for the spawn to generate

slate sonnet Mar 11, 2021, 3:36 PM

#

I have 3gb of ram

#

Pretty much worked okay-ish for 1 person

#

It was actually better than my laptop lmao

#

Laptop has an amd a8-3500m

#

Main pc has a ryzen 3 3100

tame carbon Mar 11, 2021, 3:38 PM

#

@slate sonnet you'll have to start paying attention once you get to step 1c

slate sonnet Mar 11, 2021, 3:38 PM

#

One of my core is like the same performance of my laptop I think lol

slate sonnet Mar 11, 2021, 3:38 PM

#

tame carbon <@!289451427011756032> you'll have to start paying attention once you get to ste...

Okay

#

Still updating

tame carbon Mar 11, 2021, 3:38 PM

#

These fields https://i.imgur.com/fxAMEOn.png

Imgur

#

are different from what you are using

untold elbow Mar 11, 2021, 3:38 PM

#

is wireguard on the main debian/ubuntu repos now? or do you still need to get it from the ppa

tame carbon Mar 11, 2021, 3:38 PM

#

err

slate sonnet Mar 11, 2021, 3:38 PM

#

According to the guide it is

tame carbon Mar 11, 2021, 3:38 PM

#

should be in there

slate sonnet Mar 11, 2021, 3:39 PM

#

Since it doesn't tell you to add the ppas

untold elbow Mar 11, 2021, 3:39 PM

#

neato, glad to see it's getting more mainstream

slate sonnet Mar 11, 2021, 3:39 PM

#

yeah, don't need to add anything

tame carbon Mar 11, 2021, 3:40 PM

#

#

@untold elbow ^

slate sonnet Mar 11, 2021, 3:40 PM

#

wait, how do I paste in putty again?

untold elbow Mar 11, 2021, 3:40 PM

#

nice

tame carbon Mar 11, 2021, 3:40 PM

#

right click

untold elbow Mar 11, 2021, 3:40 PM

#

right click

slate sonnet Mar 11, 2021, 3:40 PM

#

Umm

#

How do I do this

#

tame carbon Mar 11, 2021, 3:41 PM

#

copy them line by line

slate sonnet Mar 11, 2021, 3:41 PM

#

Since I'm in root I don't need sudo

tame carbon Mar 11, 2021, 3:41 PM

#

just remove the sudo in front of it

slate sonnet Mar 11, 2021, 3:41 PM

#

But the second line is a bracket

tame carbon Mar 11, 2021, 3:41 PM

#

and run it

#

doesnt matter, just copy the whole line

#

and run it

#

sudo is cucked for some reason

slate sonnet Mar 11, 2021, 3:41 PM

#

unable to resolve host

tame carbon Mar 11, 2021, 3:41 PM

#

@slate sonnet do cat /etc/hostname

#

and then verify that you have this in /etc/hosts

#

/etc/hosts should contain: 127.0.0.1 localhost

#

put a space at the end, and add the hostname its failing to find

slate sonnet Mar 11, 2021, 3:43 PM

#

tame carbon and then verify that you have this in `/etc/hosts`

How would I do that

tame carbon Mar 11, 2021, 3:43 PM

#

so it has: 127.0.0.1 localhost ruvds-whatever

#

@slate sonnet use nano

#

nano /etc/hosts

#

that's your static DNS file

#

and sudo is looking for the hostname, but its not set

#

so we can just add it

#

https://i.imgur.com/xLM23ho.png

Imgur

slate sonnet Mar 11, 2021, 3:44 PM

#

so add the ruvds whatever

tame carbon Mar 11, 2021, 3:44 PM

#

this is how I have it ^

slate sonnet Mar 11, 2021, 3:44 PM

#

Right?

tame carbon Mar 11, 2021, 3:44 PM

#

@slate sonnet yeah that ruvds is what you have in /etc/hostname

slate sonnet Mar 11, 2021, 3:44 PM

#

tame carbon `/etc/hosts` should contain: `127.0.0.1 localhost`

It does

tame carbon Mar 11, 2021, 3:44 PM

#

yes, but on the line below?

#

does it have that other one?

slate sonnet Mar 11, 2021, 3:45 PM

#

No

tame carbon Mar 11, 2021, 3:45 PM

#

my hostname is private

#

so yours would have to be ruvds-whatever

#

you can just add it

slate sonnet Mar 11, 2021, 3:45 PM

#

On the second line?

#

Or doesn't matter

tame carbon Mar 11, 2021, 3:45 PM

#

@slate sonnet just put it at the end of the localhost line

slate sonnet Mar 11, 2021, 3:45 PM

#

okay

tame carbon Mar 11, 2021, 3:45 PM

#

you can have multiple names for a single IP

#

odd. I'd expect your host to do this for you

#

they just ship a broken sudo install xD

slate sonnet Mar 11, 2021, 3:46 PM

#

Okay

#

Now the command did something I think

#

No error message now

tame carbon Mar 11, 2021, 3:46 PM

#

Cool

slate sonnet Mar 11, 2021, 3:48 PM

#

Okay, I'm confused on what I should do in 1c

#

"use the following config"

tame carbon Mar 11, 2021, 3:49 PM

#

@slate sonnet do you see the block of text underneath the table?

slate sonnet Mar 11, 2021, 3:49 PM

#

Yes

tame carbon Mar 11, 2021, 3:49 PM

#

@slate sonnet starts with [Interface]

#

values in there, referr to the table above

#

and in your case, these have to be set specifically to your environment

#

your public IP is not 1.2.3.4

thick minnow Mar 11, 2021, 3:50 PM

#

Hi, I have a Cisco air-cap2602i-e-k9 which I want to introduce into my house network, can you assist me ?
1: need to talk to the unit, configure the unit and have it working.

2: have a Netgear RAX120 router, 3rd unit as they are useless quality, what the best Wi-fi router with lan support to buy?

tame carbon Mar 11, 2021, 3:50 PM

#

@slate sonnet I recommend opening a textfile, and noting these things down

#

Before you continue

slate sonnet Mar 11, 2021, 3:50 PM

#

So are these commands or do I have to change a configuration file?

tame carbon Mar 11, 2021, 3:51 PM

#

@slate sonnet the config file below is for wireguard
https://i.imgur.com/jxpmFSf.png

Imgur

#

but the information is incorrect, you have to adjust it

untold elbow Mar 11, 2021, 3:51 PM

#

gotta nano into the config file and paste all that

tame carbon Mar 11, 2021, 3:51 PM

#

the table above explains what each bit does

slate sonnet Mar 11, 2021, 3:51 PM

#

How do I access it?

tame carbon Mar 11, 2021, 3:51 PM

#

@slate sonnet start with the first thing

#

VPS IP

#

you have that already.

#

so you copy the config file, and modify 1.2.3.4 to your IP

untold elbow Mar 11, 2021, 3:51 PM

#

nano /etc/wireguard/wg0.conf

slate sonnet Mar 11, 2021, 3:51 PM

#

No like, how do I access the config file in nano

slate sonnet Mar 11, 2021, 3:51 PM

#

untold elbow `nano /etc/wireguard/wg0.conf`

Thanks

tame carbon Mar 11, 2021, 3:51 PM

#

sudo nano /etc/wireguard/wg0.conf

untold elbow Mar 11, 2021, 3:51 PM

#

assuming wg0 is your interface

#

you can copy/paste the whole block of text into nano and edit as needed

tame carbon Mar 11, 2021, 3:52 PM

#

to find your ethernet devices run ip link show

#

that tutorial expects your primary interface to be named eth0

#

https://i.imgur.com/BapHTEv.png

Imgur

#

my system has ens3

#

as default

#

https://i.imgur.com/CJhpMXC.png

Imgur

#

This tutorial is pretty well written.

untold elbow Mar 11, 2021, 3:54 PM

#

can you link to the tutorial? im curious to read it

tame carbon Mar 11, 2021, 3:54 PM

#

https://github.com/mochman/Bypass_CGNAT

GitHub

mochman/Bypass_CGNAT

Wireguard setup to bypass CGNAT with a VPS. Contribute to mochman/Bypass_CGNAT development by creating an account on GitHub.

slate sonnet Mar 11, 2021, 3:54 PM

#

Mine is eth0 too

tame carbon Mar 11, 2021, 3:55 PM

#

@untold elbow https://i.imgur.com/yZ2cmSb.png

Imgur

untold elbow Mar 11, 2021, 3:56 PM

#

neat

slate sonnet Mar 11, 2021, 3:56 PM

#

How do I find out an unused port?

#

Can I just randomly pick one?

tame carbon Mar 11, 2021, 3:56 PM

#

@slate sonnet just use what they have in there

slate sonnet Mar 11, 2021, 3:56 PM

#

Okay

tame carbon Mar 11, 2021, 3:56 PM

#

you dont have to change those

#

@untold elbow this tutorial forwards all ports except 22 and wireguard

untold elbow Mar 11, 2021, 3:57 PM

#

gotcha

#

hope your VPS allows a good amount of traffic through it

slate sonnet Mar 11, 2021, 3:57 PM

#

So how do I find an RFC1918 IP/CIDR

slate sonnet Mar 11, 2021, 3:57 PM

#

untold elbow hope your VPS allows a good amount of traffic through it

Don't really need much

untold elbow Mar 11, 2021, 3:58 PM

#

thats good

tame carbon Mar 11, 2021, 3:58 PM

#

@slate sonnet just use 10.0.0.1/24

#

as long as your home network uses a different subnet

#

you should be fine

slate sonnet Mar 11, 2021, 3:58 PM

#

untold elbow hope your VPS allows a good amount of traffic through it

Hosting a minecraft server for my friends and I want to use this because i have a cgnat

untold elbow Mar 11, 2021, 3:58 PM

#

ahhh

tame carbon Mar 11, 2021, 3:58 PM

#

Classic.

slate sonnet Mar 11, 2021, 3:58 PM

#

tame carbon as long as your home network uses a different subnet

How can I check that?

tame carbon Mar 11, 2021, 3:58 PM

#

@slate sonnet on your local computer, run ipconfig

slate sonnet Mar 11, 2021, 3:58 PM

#

Okay

tame carbon Mar 11, 2021, 3:59 PM

#

@slate sonnet look at the ip address and subnet mask

untold elbow Mar 11, 2021, 3:59 PM

#

too late now, but dynamic dns might have been easier 😮

tame carbon Mar 11, 2021, 3:59 PM

#

255.255.255.0 is equivalent to /24

untold elbow Mar 11, 2021, 3:59 PM

#

but wireguard is fun

tame carbon Mar 11, 2021, 3:59 PM

#

/24 is CIDR notation, its shorthand for a subnet mask

#

Classless Inter Domain Routing

slate sonnet Mar 11, 2021, 4:00 PM

#

tame carbon `255.255.255.0` is equivalent to /24

Mine is this

tame carbon Mar 11, 2021, 4:00 PM

#

Ye, most home networks are /24

untold elbow Mar 11, 2021, 4:00 PM

#

prob on 192.168.something too

tame carbon Mar 11, 2021, 4:00 PM

#

I have 192.168.88.0/24 here :)

slate sonnet Mar 11, 2021, 4:00 PM

#

Yeah

#

192.168

untold elbow Mar 11, 2021, 4:01 PM

#

yeah so you can use that 10. address

slate sonnet Mar 11, 2021, 4:01 PM

#

tame carbon as long as your home network uses a different subnet

So what should I do since its /24?

untold elbow Mar 11, 2021, 4:01 PM

#

you can also use /24

tame carbon Mar 11, 2021, 4:01 PM

#

@slate sonnet nah you're cool.

slate sonnet Mar 11, 2021, 4:01 PM

#

Oh okay

untold elbow Mar 11, 2021, 4:01 PM

#

that's just the size of the network

tame carbon Mar 11, 2021, 4:01 PM

#

just had to make sure your LAN is on a different subnet than wireguard

#

the /24 is just network size

untold elbow Mar 11, 2021, 4:01 PM

#

10.0.0.1/24 just means 10.0.0.0 to 10.0.0.255

tame carbon Mar 11, 2021, 4:02 PM

#

^ yeppers

untold elbow Mar 11, 2021, 4:02 PM

#

as long as that doesn't overlap with your home network, you're good

#

which is 192.168.88.0 - 192.168.88.255

tame carbon Mar 11, 2021, 4:02 PM

#

someone roasted me in #public-chat for talking about networking and routers
dismissing it as: who cares about what their router config panel looks like

#

xD

slate sonnet Mar 11, 2021, 4:03 PM

#

untold elbow which is 192.168.88.0 - 192.168.88.255

Well I can change that in my router so I shouldn't really care TOO much

#

Right?

thick minnow Mar 11, 2021, 4:03 PM

#

Were, you talking about wireguard installation

#

?

tame carbon Mar 11, 2021, 4:03 PM

#

@slate sonnet you can keep the IP stuff for wireguard as is.

untold elbow Mar 11, 2021, 4:03 PM

#

@slate sonnet yeah but that's kind of a pain and you dont really need to

tame carbon Mar 11, 2021, 4:04 PM

#

@slate sonnet https://i.imgur.com/xsxZ7ZE.png

Imgur

slate sonnet Mar 11, 2021, 4:04 PM

#

Also, how do I find out my vps ip?

tame carbon Mar 11, 2021, 4:04 PM

#

@slate sonnet you entered that in putty

#

:P

slate sonnet Mar 11, 2021, 4:04 PM

#

Oh

#

Right

#

lmao

tame carbon Mar 11, 2021, 4:04 PM

#

@slate sonnet it says you can change those wireguard IP settings

#

but for sake of simplicity, leave them as is.

thick minnow Mar 11, 2021, 4:04 PM

#

'cause if you were, there was a one click installation script (well, not one click per se)

slate sonnet Mar 11, 2021, 4:04 PM

#

tame carbon but for sake of simplicity, leave them as is.

That's what I'm doing

tame carbon Mar 11, 2021, 4:05 PM

#

@slate sonnet your wireguard server will sit on 10.0.0.1 and your minecraft server will have a wireguard client on 10.0.0.2

#

We'll get to that, once server is configured

#

I'll be out for 20 mins, gotta make some food

#

I can help you once I return, or nag @untold elbow ;)

slate sonnet Mar 11, 2021, 4:07 PM

#

How do I do undo

#

I replaced my private key by accident

untold elbow Mar 11, 2021, 4:07 PM

#

i just had to hop on a call so im unavailable for a minute too 😮

slate sonnet Mar 11, 2021, 4:07 PM

#

Because I copy pasted

untold elbow Mar 11, 2021, 4:08 PM

#

i think alt+u does undo in nano

slate sonnet Mar 11, 2021, 4:18 PM

#

So I've done the start of the guide, but the second half is written for linux. Is there any way I can do it on windows?

#

Or am I just dumb and missing something

#

@untold elbow

untold elbow Mar 11, 2021, 4:23 PM

#

sorry, give me a minute, wrapping up on a call

slate sonnet Mar 11, 2021, 4:23 PM

#

Np

untold elbow Mar 11, 2021, 4:30 PM

#

slate sonnet Np

windows side is easy, install the windows wireguard client and add a new empty config

#

then just copy the client-side config into that

#

in the wireguard window there will be an "add tunnel" button, you do "add empty tunnel"

#

it'll generate the client key pair for you when you do that

slate sonnet Mar 11, 2021, 4:33 PM

#

untold elbow windows side is easy, install the windows wireguard client and add a new empty c...

Doesn't give me an option to add a new empty config?

untold elbow Mar 11, 2021, 4:34 PM

#

under the add tunnel menu? what's it say?

slate sonnet Mar 11, 2021, 4:34 PM

#

untold elbow Mar 11, 2021, 4:34 PM

#

add empty tunnel

slate sonnet Mar 11, 2021, 4:34 PM

#

Oh

#

Okay

#

I think I can figure it out from here

untold elbow Mar 11, 2021, 4:35 PM

#

cool

tame carbon Mar 11, 2021, 4:35 PM

#

wat

untold elbow Mar 11, 2021, 4:35 PM

#

it's almost certainly going to not work the first time you connect. it'll say "connected" but it won't pass traffic and you'll have to fix something

#

i never get wireguard to work on the first go-round

#

lots of tiny tiny things you can screw up along the way

slate sonnet Mar 11, 2021, 4:36 PM

#

tame carbon wat

Whats up?

#

Should I have block untunneled traffic turned off?

untold elbow Mar 11, 2021, 4:39 PM

#

no

#

your config is not tunneling port 22

#

you don't want that blocked

#

if you want to tunnel port 22, you'll have to make sure ssh is listening on your wireguard interface

slate sonnet Mar 11, 2021, 4:41 PM

#

Sooooooo

untold elbow Mar 11, 2021, 4:42 PM

#

oh on the client side i don't think you need all the PostUp and PostDown stuff

#

those are all linux commands anyway

slate sonnet Mar 11, 2021, 4:42 PM

#

I can remove everything on the postup and postdown?

#

Client side

untold elbow Mar 11, 2021, 4:42 PM

#

client side, yes

#

that may prevent you from connecting to your VPS via SSH while the tunnel is connected (or it might just work, not sure)

#

if it does prevent it, you can either disconnect from the tunnel to SSH or you can reconfigure the SSH service in the VPS to work

#

endpoint won't work, you need your VPS' IP address there

slate sonnet Mar 11, 2021, 4:44 PM

#

Okay

#

I was gonna just aks

untold elbow Mar 11, 2021, 4:44 PM

#

other than that, looks good

slate sonnet Mar 11, 2021, 4:45 PM

#

ask

#

How do I check if it's connected?

#

I guess nvm

untold elbow Mar 11, 2021, 4:47 PM

#

connect and go to like whatismyip.com

slate sonnet Mar 11, 2021, 4:47 PM

#

When I activate the tunnel I pretty much get no internet

untold elbow Mar 11, 2021, 4:47 PM

#

yep

slate sonnet Mar 11, 2021, 4:47 PM

#

On my main pc

untold elbow Mar 11, 2021, 4:47 PM

#

ok so now we troubleshoot

slate sonnet Mar 11, 2021, 4:47 PM

#

So what should I do now

#

Yeah

#

The fun part

untold elbow Mar 11, 2021, 4:48 PM

#

can you ping your wireguard server through the tunnel? in cmd do ping 10.0.0.1

#

run that on your local system

slate sonnet Mar 11, 2021, 4:48 PM

#

Request timed out

#

So no, I cant

#

Oh wait

#

I forgot to do this

untold elbow Mar 11, 2021, 4:49 PM

#

that'll do it 🙂

#

you don't need to do that on the client

#

wireguard should auto-start with your windows computer (i believe)

slate sonnet Mar 11, 2021, 4:50 PM

#

untold elbow Mar 11, 2021, 4:51 PM

#

whats systemctl status wg-quick@wg0.service say?

slate sonnet Mar 11, 2021, 4:52 PM

#

#

Forgot to add the public key

untold elbow Mar 11, 2021, 4:52 PM

#

that'll do it

#

do you know where to find that?

slate sonnet Mar 11, 2021, 4:52 PM

#

Yes

#

I saved it

tame carbon Mar 11, 2021, 4:53 PM

#

never ever ever post your private key.

#

ever.

slate sonnet Mar 11, 2021, 4:53 PM

#

Did I post my private key?

untold elbow Mar 11, 2021, 4:53 PM

#

i dont think so

tame carbon Mar 11, 2021, 4:53 PM

#

no

slate sonnet Mar 11, 2021, 4:53 PM

#

Oh okay

tame carbon Mar 11, 2021, 4:53 PM

#

its just a psa/headsup

slate sonnet Mar 11, 2021, 4:53 PM

#

Because I know not to do that

#

Yeah

#

Okay

untold elbow Mar 11, 2021, 4:54 PM

#

public key is fine to post

#

public key on my vps' wireguard server is BTtKlQ7OEBS5sOjJ1aNjvo018N0Fe4RAA0G6YXzFJl4=

tame carbon Mar 11, 2021, 4:54 PM

#

I see you're almost done

#

neat

slate sonnet Mar 11, 2021, 4:54 PM

#

Gonna test wireguard now

#

Nope, still nothing

untold elbow Mar 11, 2021, 4:54 PM

#

troubleshooting stage

#

did the service start?

#

wg-quick up wg0

tame carbon Mar 11, 2021, 4:55 PM

#

┬─┬ ノ( ゜-゜ノ)

slate sonnet Mar 11, 2021, 4:55 PM

#

untold elbow did the service start?

Already exists

untold elbow Mar 11, 2021, 4:55 PM

#

do wg and post output

#

should not output private key values

slate sonnet Mar 11, 2021, 4:56 PM

#

Gives me my private key

#

as hidden

#

public key

#

and port

untold elbow Mar 11, 2021, 4:56 PM

#

no peers listed below that?

slate sonnet Mar 11, 2021, 4:56 PM

#

I'm not tunneled rn

#

1 sec

untold elbow Mar 11, 2021, 4:57 PM

#

did you add your windows system's public key to the server's wg.conf?

#

wg0.conf

slate sonnet Mar 11, 2021, 4:57 PM

#

untold elbow wg0.conf

Yes

#

Btw when I'm tunneled and ping 10.0.0.1 request timed out

untold elbow Mar 11, 2021, 4:58 PM

#

when you're tunneled, does wg on the server show any peers?

slate sonnet Mar 11, 2021, 4:59 PM

#

gotta ssh on my phone

#

1 sec

#

how do I ssh using a terminal?

untold elbow Mar 11, 2021, 5:00 PM

#

ssh user@ip

#

while you're in the server, ping 10.0.0.2 to see if the server can see your local system

slate sonnet Mar 11, 2021, 5:01 PM

#

so my used would be @ruvds-2xerj

#

User

#

or no

#

root@ip

tame carbon Mar 11, 2021, 5:01 PM

#

@slate sonnet ssh root@<server ip>

slate sonnet Mar 11, 2021, 5:01 PM

#

okay

#

Nope, nothing

untold elbow Mar 11, 2021, 5:03 PM

#

hm ok. do you have ufw installed on the server or any other firewall like that?

tame carbon Mar 11, 2021, 5:03 PM

#

ufw status

slate sonnet Mar 11, 2021, 5:03 PM

#

status inactive

tame carbon Mar 11, 2021, 5:03 PM

#

ufw is not enabled by default on ubuntu

untold elbow Mar 11, 2021, 5:03 PM

#

welp that isn't it

tame carbon Mar 11, 2021, 5:03 PM

#

go over the server config once more

slate sonnet Mar 11, 2021, 5:03 PM

#

Hmm

tame carbon Mar 11, 2021, 5:03 PM

#

is the instance running?

slate sonnet Mar 11, 2021, 5:04 PM

#

1 sec

untold elbow Mar 11, 2021, 5:04 PM

#

oh wonder if you forgot to restart it after adding the key

slate sonnet Mar 11, 2021, 5:04 PM

#

untold elbow Mar 11, 2021, 5:04 PM

#

wg-quick down wg0 && wg-quick up wg0

tame carbon Mar 11, 2021, 5:04 PM

#

You should use systemd.

#

not use wg directly.

untold elbow Mar 11, 2021, 5:05 PM

#

thats fine too

#

i was gonna suggest systemd service config after the tunnel is all working

tame carbon Mar 11, 2021, 5:05 PM

#

systemctl restart wg-quick@wg0.service

#

systemctl status wg-quick@wg0.service

slate sonnet Mar 11, 2021, 5:06 PM

#

says its active

tame carbon Mar 11, 2021, 5:06 PM

#

screenshot?

#

apple would like a word with you: what is this jailbreak

slate sonnet Mar 11, 2021, 5:07 PM

#

tame carbon apple would like a word with you: what is this jailbreak

Uncover

#

lmao

tame carbon Mar 11, 2021, 5:08 PM

#

@slate sonnet also nice masking

#

but I can see your host in the top

#

;)

slate sonnet Mar 11, 2021, 5:08 PM

#

lmao

#

fudge

untold elbow Mar 11, 2021, 5:08 PM

#

lol and you posted it in the error messages way up above

#

no one is going to do anything with your hostname alone

tame carbon Mar 11, 2021, 5:09 PM

#

its public for a reason ;)

slate sonnet Mar 11, 2021, 5:09 PM

#

Still

tame carbon Mar 11, 2021, 5:09 PM

#

wait

#

Im still looking at the screenshot and uh

#

you sure that iptables is correct?

slate sonnet Mar 11, 2021, 5:09 PM

#

No

#

I just copied from the guide

untold elbow Mar 11, 2021, 5:10 PM

#

i closed the screenshot no fair 😦

tame carbon Mar 11, 2021, 5:10 PM

#

@slate sonnet on the server, for sake of sanity

#

run ping 10.0.0.1

#

that should reply with <1ms

slate sonnet Mar 11, 2021, 5:11 PM

#

Yes

tame carbon Mar 11, 2021, 5:12 PM

#

@slate sonnet okay, wg show

#

It should be listening on port 55107

slate sonnet Mar 11, 2021, 5:12 PM

#

correct

tame carbon Mar 11, 2021, 5:12 PM

#

okay, server is configured correctly.

#

So lets take a look at the client now

#

@untold elbow how is auth handled by wg?

#

is it just pubkey auth?

untold elbow Mar 11, 2021, 5:14 PM

#

yes

tame carbon Mar 11, 2021, 5:14 PM

#

has he copied his client key to the server already?

untold elbow Mar 11, 2021, 5:14 PM

#

yes

slate sonnet Mar 11, 2021, 5:14 PM

#

Yes

#

That's the key that wireguard gives you right?

tame carbon Mar 11, 2021, 5:15 PM

#

each peer generates a public/private key

#

you copy the public key of your client to the server

#

but you've done this

slate sonnet Mar 11, 2021, 5:16 PM

#

Into the config?

untold elbow Mar 11, 2021, 5:16 PM

#

yep

tame carbon Mar 11, 2021, 5:16 PM

#

@untold elbow that screenshot above from the windows tunnel

slate sonnet Mar 11, 2021, 5:16 PM

#

If so, then I've copied the wrong thing

tame carbon Mar 11, 2021, 5:16 PM

#

I am missing masquerade rules

untold elbow Mar 11, 2021, 5:16 PM

#

i don't think you need those on windows

#

i don't use them on my windows wg client

slate sonnet Mar 11, 2021, 5:17 PM

#

Whats the command for changing the config for wg?

untold elbow Mar 11, 2021, 5:17 PM

#

you just edit the config file

slate sonnet Mar 11, 2021, 5:17 PM

#