networking

[-]

Nftables experiments: ICMPv6, Hop-by-Hop Options header

I experimented a little with nftables, even though it's not clear whether it will ever completely replace iptables, especially after the news about bpfilter, but it was an interesting exercise anyways.

After converting some iptables rules, I looked at how others were using nftables to write a more idiomatic configuration; I found some ruleset for a host firewall, and I tried to add them to my configuration.

When testing those rules I found that some ICMPv6 packets were not being matched as I would have expected.


[-]

SSH tunneling/port-forwarding tricks

Here are a few tricks about SSH tunnels I don't want to forget.


[-]

ssh tunnelling with Telepathy and ssh-contact

I needed to connect remotely to my brother's computer to help him fix something, in the past I relied on the X Windows protocol for these things: the people I was helping just needed to open a remote xterm on my screen (with $ xterm -display my.public.ip.address:0.0) to let me operate on their system , it was insecure —no encryption in the communication— but it was one simple command for them to copy and paste as I were putting on my end all the boring details about port forwarding and access control, but this time I wanted to try something different.


[-]

out.alice.it Delivery Failed and MX records

I was getting messages like the following form the MTA of my ISP(Alice/Telecom Italia) when sending email to some addresses:


[-]

ao2.it backstage: IPv6 enabled

ao2.it is now IPv6 enabled, in the last two months two things finally happened that made this possible:


[-]

An extremely brief survey of Link-Local XMPP

If you want to communicate on a LAN with your friends/coworkers, there's no need to use a server: a possible solution to the Serverless Messaging problem is Link-Local XMPP.