My example XML from within the NIC configurations I setup on the host within QEMU/KVM (the bold line is what to add, with 16 being an example number of cores to utilize for that network interface):
*This article presumes you have IPv6 setup on your BGW-320, prefix delegation setup for your internal network using an internal firewall, or very simply a device setup on the AT&T provided network to open a port to.*
After recently receiving AT&T’s newer modem/router/firewall, the BGW-320 (at least newer than what I’ve had for many years) I struggled with how to open up IPv6 firewall rules to my internal servers and ports. I asked Gemeni and Grok and the same answer came back from users that it wasn’t really possible using this model router.
But after dinking around with the rules, turns out it is possible. First of all, I knew this much, but for others’ info, you don’t set it up in the normal NAT/Gaming area of the firewall tab in the admin console, which only applies to IPv4 NAT port forwarding. Because IPv6 doesn’t need to use NAT, you use the Packet Filter tab instead. Within here, I wound up getting rid of all the default rules that were setup to clear out the junk and just have my rules.
I initially created the rules with only the IP version, protocol, dest port and dest IPv6 address. That didn’t work. And forums (as well as AI) seemed to indicate it wouldn’t work and so I was resigned to just not have it setup anymore.
But then I started dinking more a little at a time and discovered you had to also add ingress and egress rules as well because I could see users were attempting to hit the ports but the AT&T router was still blocking them.
Before deleting the default rules, I noticed some they had ingress and egress rules set. So for the heck of it I threw those in there as well (Ingress WAN, Egress LAN) and low and behold, traffic started passing through.
When we hear the word law, many of us instinctively tense up. We think of rules, judgment, or even failure. The very word can stir up shame for the things we’ve done or left undone—or pride for the things we think we’ve done well. But when John Calvin wrote about the law of God, he invited believers to see something far deeper and more beautiful: that the law, rightly understood, is a gift of grace.
In The Institutes of the Christian Religion (Book II, Chapter 7), Calvin describes three distinct “uses” of the law. Each has a purpose, and each reveals something about God and about us.
There was a time after 9/11 I was all about those actions: the War on Terror, the Patriot Act, and so on, justifying every aspect, annoyingly so I might add. My brother fought in both theatres. In Iraq twice. It had to mean something, in light of 9/11, but also for our soldiers’ sacrifices.
(Banner photo credit: Dark Winter Days by Inge Bovens)
“Or do you presume on the riches of his kindness and forbearance and patience, not knowing that God’s kindness is meant to lead you to repentance?”
Romans 2:4
Why is it that if God’s kindness, patience and forbearance leads us to repentance from our sin to embrace Christ, we don’t assume the same posture and manner when dealing with others with whom we see falling? Whether it’s our own children, a friend who is wandering, or a relative who pains you with their bad choices leading to a ruined life, or for me as an elder, a congregant/parishioner who is straying from the gospel or at least a life centered upon Christ? Why would we think that anything other than grace and kindness and love and a posture of humility will do when dealing with others in these states of wandering from the truth?
Lord God, You have created us in Your image, to reflect You in the world and ultimately bring about Your glory and praise and worth. And yet because of our sin, we have marred and distorted that image so greatly, we fall short of Your glory daily and are subject to Your wise justice and resulting judgment for how we have turned from You and treat our fellow humans. For all the ways we’ve fallen short, have mercy upon us, as we know You are ready and willing to do. Thank You Jesus for Your perfect law keeping in our behalf, Your sacrifice on the cross in our place and Your glorious resurrection for us, that we would behold Your face in glory forever and be satisfied for all eternity.
Using my honeypot server, I’ve been able to capture some examples of Log4J attempts against it. What this is showing is that the ModSecurity rules in place, at least in this subset of anecdotal examples, are able to block the various attempts, up to this point.
A major vulnerability has been discovered in Java web apps basic logging function called Log4J/Log4Shell. The best remedy for this is to update Log4j itself, or update the web app platform running Log4j with a newer version provided by the vendor. But that may take a while in many instances to fully implement.
A major vulnerability has been discovered in Java web apps basic logging function called Log4J/Log4Shell. The best remedy for this is to update Log4j itself, or update the web app platform running Log4j with a newer version provided by the vendor. But that may take a while in many instances to fully implement.
I have a spare EdgeRouter 4 that was bricked but still appears operational, probably just having some sort of a boot error that I can’t see. I’ve been hunting for a more serious level factory reset guide and came across this (something I have yet to try): manual TFTP Recovery. Hope it helps if you’re stuck.
