Admins Handbook

The Synology NAS have three network cables connected to the switch.
(post 1, 2 and 3).

On the HP ProCureve Switch:
trunk 1,2,3 trk2 lacp
vlan 3 untag trk2

show vlans
show trunks

Write memory

How du you configure and allow FTPS and RPD from a specific public IP on a linksys wrt54g router with the dd-wrt firmware?

iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 3389 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 3389 -j ACCEPT
iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 60000:61000 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 60000:61000 -j ACCEPT
iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 990 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 990 -j ACCEPT

By default all clients on the LAN can act as a mail server. Maybe you have a “real” mail server. Now a hacker steals one of your client pc’s and uses it to send out SPAM.

How do you configure the firewall so only the “real” mail server can send out emails?

You do it with an access-list on the inside interface. This way you can control the outgoing smtp traffic and only allow one LAN IP to send out emails.

access-list acl_out permit tcp host 10.0.0.2 any eq 25
access-list acl_out deny tcp any any eq 25
access-list acl_out permit ip any any
access-list acl_out permit icmp any any
access-group acl_out in interface inside

You can test your network speed with the program iperf. It runs under all most used operating systems. The windows binary file can be found here:
https://nocweboldcst.ucf.edu/files/iperf.exe
or
https://nocweboldcst.ucf.edu/files/iperf.exe

The file iperf.exe is used as client AND server.
The basic idea is that the client UPLOADES an amount of data to the server.
The speed of the transfer is then calculated.

For a deeper introduction watch this Flash guide.

An example:
Server: iperf.exe -s
Client: iperf.exe -c <server-ip>
(Speed is now uploaded to the server)

Use: iperf.exe –help to see options

—–

Test up and then down:

C:\>iperf.exe -c 192.168.0.199 -r
————————————————————
Server listening on TCP port 5001
TCP window size: 8.00 KByte (default)
————————————————————
————————————————————
Client connecting to 192.168.0.199, TCP port 5001
TCP window size: 63.0 KByte (default)
————————————————————
[1876] local 192.168.0.90 port 3975 connected with 192.168.0.199 port 5001
[ ID] Interval       Transfer     Bandwidth
[1876]  0.0-42.9 sec  1.13 MBytes   221 Kbits/sec
[1944] local 192.168.0.90 port 5001 connected with 192.168.0.199 port 4442
[ ID] Interval       Transfer     Bandwidth
[1944]  0.0-10.0 sec  41.5 MBytes  34.9 Mbits/sec

C:\>

Show your IP and network information.

Example 1 – Static IP

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 10.0.0.40
netmask 255.255.255.0
gateway 10.0.0.1

Example 2 – DHCP
auto eth0 iface eth0 inet dhcp

Remember the DNS configuration in /etc/resolv.conf
nameserver 195.184.96.2
nameserver 213.173.225.86

Tips
Change (spoof) the MAC
ifconfig eth0 hw ether 01:23:45:67:89:AB

TDC
194.239.134.83
193.162.153.164

Open DNS
208.67.222.222
208.67.220.220
—
asmtp.mail.dk
smtp.mail.dk
pasmtp.tele.dk

Cybercity
212.242.40.3
212.242.40.51
—
vip.cybercity.dk
smtp.cybercity.dk

Tiscali
212.54.64.170
212.54.64.171
—
smtp.tiscali.dk

Ventelo/Webpartner
195.184.96.2
213.173.225.86
—
smtp.ventelo.dk

Ever tested network speed by downloading a big file?

It could be nice to have a fast FTP server containing files in many different sizes.
On this FTP server ftptest1.tele.dk files from 0 b to 100 MB