ワサビ (Wasabi) 111a5ab1

111a5ab1 / edgeos_cli_mss_wireguard

Last active December 2, 2021 23:28

EdgeOS CLI: TCP MSS clamping to resolve PMTUD black holes (RFC2923) when using Wireguard

	set firewall options mss-clamp interface-type all
	set firewall options mss-clamp mss 1380
	set firewall options mss-clamp6 interface-type all
	set firewall options mss-clamp6 mss 1360

111a5ab1 / EdgeOS_node.def

Created January 17, 2018 10:04

To view what an EdgeOS option does, such as "firewall all-ping enable", cat the coresponding node.def file.

	root@ubnt:~# cd /opt/vyatta/share/vyatta-cfg/templates/firewall/all-ping
	root@ubnt:/opt/vyatta/share/vyatta-cfg/templates/firewall/all-ping# cat node.def

	# icmp_echo_ignore_all
	# default value - 0
	# If set non-zero, then kernel will ignore all ICMP ECHO requests sent to it

	type: txt

	help: Policy for handling of all IPv4 ICMP echo requests

111a5ab1 / edgeos_cli_firewall_group_martians

Last active July 3, 2018 15:11

EdgeOS CLI: "Martian" packet firewall groups

	delete firewall group address-group martians-v4-adr
	delete firewall group network-group martians-v4-net
	delete firewall group ipv6-address-group martians-v6-adr
	delete firewall group ipv6-network-group martians-v6-net
	delete firewall group ipv6-network-group martians6to4-v6-net
	delete firewall group ipv6-network-group martiansTeredo-v6-net

	set firewall group address-group martians-v4-adr description "IPv4 addresses reserved for special-use by IANA that should never appear on the public Internet"
	set firewall group address-group martians-v4-adr address 255.255.255.255
	set firewall group network-group martians-v4-net description "IPv4 networks reserved for special-use by IANA that should never appear on the public Internet"

111a5ab1 / keybase.md

Created July 27, 2017 01:06

Keybase.io verification

I hereby claim:

To claim this, I am signing this object: