<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>simple set of iptables LT2P/IPSEC VPN rules  &amp;amp; flashing traffic LED</title>
        <description> Hi,

I have set up a little LT2P/IPSEC VPN server on a little Kirkwood device (wheezy/linux3.5)

I want to use it to securely use public wifi with my ipad .. so traffic goes from the ipad through the wifi hotspot to my wifi cable router to my wifi interface (wlan0) of the Kirkwood and does the iptables/VPN server stuff out to the net back in to the VPN server and back to the ipad via my cable router and the public hotspot ... ive tested it and it seems to work ok - all seems encrypted

(my router port fwds to the Kirkwood 1701(TCP)/4500(UDP)/500(UDP)

I just need to apply some rules to lock it down a bit (iptables) and get the customary LED flashing when there is network traffic :-)

could anyone suggest a simple set of rules for iptables to suit ?...

and also how do I go about getting the LED to flash on and off with the network traffic (presumably this is an iptables rule as well ?)  .. the following switches the LED on and off

LED ON
echo 255 &amp;gt; /sys/class/leds/power_red_led/brightness

LED OFF
echo 0 &amp;gt; /sys/class/leds/power_red_led/brightness



thanks for your help .. rgds

ian</description>
        <link>https://forum.doozan.com/read.php?2,11956,11956#msg-11956</link>
        <lastBuildDate>Wed, 11 Mar 2026 04:51:30 -0500</lastBuildDate>
        <generator>Phorum 5.2.23</generator>
        <item>
            <guid>https://forum.doozan.com/read.php?2,11956,12542#msg-12542</guid>
            <title>Re: simple set of iptables LT2P/IPSEC VPN rules  &amp; flashing traffic LED</title>
            <link>https://forum.doozan.com/read.php?2,11956,12542#msg-12542</link>
            <description><![CDATA[ Hi  Ian-<br />
<br />
would you mind listing the steps you used to implement L2TP/IPSEC?  I tried this a couple of years ago, and was never able to get something to work with my iPhone/iPad, but I have been using PPTPD with no issues for a while.  Now that i&#039;m running Wheezy on my Dockstar, I think I&#039;m ready to try this again.<br />
<br />
Thanks,<br />
Chris]]></description>
            <dc:creator>ChrisC</dc:creator>
            <category>Debian</category>
            <pubDate>Wed, 22 May 2013 06:29:25 -0500</pubDate>
        </item>
        <item>
            <guid>https://forum.doozan.com/read.php?2,11956,11972#msg-11972</guid>
            <title>Re: simple set of iptables LT2P/IPSEC VPN rules  &amp; flashing traffic LED</title>
            <link>https://forum.doozan.com/read.php?2,11956,11972#msg-11972</link>
            <description><![CDATA[ sorted out the flashing LED&#039;s on traffic ... just need to make sure you have the LED&#039;s and netfilter&#039;s LED module compiled in to the kernel (which fortunately I selected in one of my many iterations to get a working VPN kernel)<br />
<br />
then for example to flash on SSH traffic <br />
<br />
iptables -A INPUT -p tcp --dport 22 -j LED --led-trigger-id ssh --led-delay 1000<br />
echo netfilter-ssh &gt; /sys/class/leds/power_red_led/trigger<br />
<br />
and for me to show traffic on input/fwd/output interfaces :<br />
<br />
eg flash blue on any network traffic on input/fwd/output sides<br />
<br />
<br />
iptables -A INPUT -p all -j LED --led-trigger-id intraf --led-delay 100<br />
echo netfilter-intraf &gt; /sys/class/leds/usb_2_led/trigger<br />
<br />
iptables -A FORWARD -p all -j LED --led-trigger-id fwdtraf --led-delay 100<br />
echo netfilter-fwdtraf &gt; /sys/class/leds/usb_3_led/trigger<br />
<br />
iptables -A OUTPUT -p all -j LED --led-trigger-id outtraf --led-delay 100<br />
echo netfilter-outtraf &gt; /sys/class/leds/usb_4_led/trigger<br />
<br />
<br />
just need to alter the IP tables rule for all traffic etc and select an appropriate LED :-)<br />
(you need to make sure you save the IPtables rules you add and also run the echo command on boot eg by adding to /etc/rc.local?)]]></description>
            <dc:creator>hyena</dc:creator>
            <category>Debian</category>
            <pubDate>Sun, 17 Mar 2013 18:58:29 -0500</pubDate>
        </item>
        <item>
            <guid>https://forum.doozan.com/read.php?2,11956,11956#msg-11956</guid>
            <title>simple set of iptables LT2P/IPSEC VPN rules  &amp; flashing traffic LED</title>
            <link>https://forum.doozan.com/read.php?2,11956,11956#msg-11956</link>
            <description><![CDATA[ Hi,<br />
<br />
I have set up a little LT2P/IPSEC VPN server on a little Kirkwood device (wheezy/linux3.5)<br />
<br />
I want to use it to securely use public wifi with my ipad .. so traffic goes from the ipad through the wifi hotspot to my wifi cable router to my wifi interface (wlan0) of the Kirkwood and does the iptables/VPN server stuff out to the net back in to the VPN server and back to the ipad via my cable router and the public hotspot ... ive tested it and it seems to work ok - all seems encrypted<br />
<br />
(my router port fwds to the Kirkwood 1701(TCP)/4500(UDP)/500(UDP)<br />
<br />
I just need to apply some rules to lock it down a bit (iptables) and get the customary LED flashing when there is network traffic :-)<br />
<br />
could anyone suggest a simple set of rules for iptables to suit ?...<br />
<br />
and also how do I go about getting the LED to flash on and off with the network traffic (presumably this is an iptables rule as well ?)  .. the following switches the LED on and off<br />
<br />
LED ON<br />
echo 255 &gt; /sys/class/leds/power_red_led/brightness<br />
<br />
LED OFF<br />
echo 0 &gt; /sys/class/leds/power_red_led/brightness<br />
<br />
<br />
<br />
thanks for your help .. rgds<br />
<br />
ian]]></description>
            <dc:creator>hyena</dc:creator>
            <category>Debian</category>
            <pubDate>Sat, 16 Mar 2013 21:37:48 -0500</pubDate>
        </item>
    </channel>
</rss>
