DHCPv6 Prefix Delegation for IPv6

I recently switched ISP and gained native IPv6 connectivity. Googled for instructions to setup IPv6 on my ER-X. None of the articles and forum discussions that I found helped me complete the mission successfully. DHCPv6-PD is commonly used by ISPs to dispatch IPv6 addresses to users. Here I share my…

Read this article

Let's Encrypt, Kazoo It! and Cloudflare

I've heard of Let's Encrypt for a while but never spent time to try it out until recently. Here is my experience for getting a certificate for this blog. I first went with the official client known as certbot. Ran it on a Debian VPS that hosts this blog. Right…

Read this article

Idling BitTorrent Attracts Malicious Visitors

My firewall has few very ports opened. Unsolicited visitors to these ports are logged and banned. Unsolicited visitors to other ports where I don't have a service running are silently dropped. It's not unusual to log millions of such silently dropped packets in a typical month. For example, in the…

Read this article

Random Bits on OpenVPN 2.4

I upgraded syslog-ng to v3.8 on my RT-AC56U recently. Together I also took the chance to migrate Dnsmasq to 2.76 final and OpenVPN server to 2.4. All packages are from Entware-ng. The migration from built-in Asuswrt-Merlin to Entware-ng is straight forward since originally I already set both…

Read this article

Migration to Syslog-ng v3.8

My Asus AP came with a primitive syslog in its firmware. So I decided to check Entware-ng for a better replacement. Found an ancient version (v2.1) of Syslog-ng. Set it up and everything worked great for years. Recently Entware-ng upgraded Syslog-ng to v3.8. That's a giant leap in…

Read this article