vimagick

VirtualBox NIC Settings:

• NIC 1: NAT (ether1 - WAN) DHCP

vimagick

Create a system env var

vimagick

Important

China cannot access github.com, so https_proxy is needed!

vimagick

Free Netify Application Domains Data Feeds

Free Download (2097 items)

[Catalog][3] (2593 items)

[Paid][4]

vimagick

Server

apk update
apk install mosquitto-ssl mosquitto-client-ssl
cd /etc/mosquitto
touch acl passwd
mosquitto_passwd -b passwd admin secret
touch /etc/config/mosquitto
chown mosquitto:mosquitto /etc/mosquitto/*

vimagick

📦 Step 1: Install wpad-openssl

OpenWrt's default wpad-basic doesn't support EAP enterprise authentication. You must replace it with the full version.

opkg update
opkg list-installed | grep wpad
opkg remove wpad-basic-mbedtls
opkg install wpad-openssl
reboot

vimagick

"TDTS" stands for Trend Micro Deep Threat Security. Ubiquiti utilizes an embedded Trend Micro SDK to categorize network traffic and identify potential malicious behavior.

$ tree /etc/ubnt/tdts/
|-- cats.xml
|-- rule.tar.md5sum
|-- rule.trf
`-- rule.xml

vimagick

Important

Pre-commit checks:

Check	Command
DHCP range vs VPN pool overlap	show service dhcp-server (in configure mode)
WAN interface is eth0	show interfaces

vimagick

iptables-persistent

$ sudo apt install iptables-persistent ipset-persistent
$ dpkg -L iptables-persistent
$ sudo systemctl cat netfilter-persistent
$ cat /etc/default/netfilter-persistent
# IPTABLES_SKIP_SAVE=yes
# IP6TABLES_SKIP_SAVE=yes
# IPSET_SKIP_SAVE=yes

vimagick

macOS Requirements

• macOS 11: v1.0.2
• macOS 12+: v1.2.5+

Note

Set devname = lo0 when networksetup -getdnsservers Wi-Fi => 127.0.0.1
But capturing lo0 is not working FenkoHQ/dnsmonster#187 😢