<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="de">
	<id>https://wiki.goedeke.de/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=202.71.144.207</id>
	<title>AQUAPOOL - Benutzerbeiträge [de]</title>
	<link rel="self" type="application/atom+xml" href="https://wiki.goedeke.de/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=202.71.144.207"/>
	<link rel="alternate" type="text/html" href="https://wiki.goedeke.de/index.php/Spezial:Beitr%C3%A4ge/202.71.144.207"/>
	<updated>2026-09-01T10:09:02Z</updated>
	<subtitle>Benutzerbeiträge</subtitle>
	<generator>MediaWiki 1.46.0</generator>
	<entry>
		<id>https://wiki.goedeke.de/index.php?title=Router2&amp;diff=281</id>
		<title>Router2</title>
		<link rel="alternate" type="text/html" href="https://wiki.goedeke.de/index.php?title=Router2&amp;diff=281"/>
		<updated>2023-11-03T15:00:47Z</updated>

		<summary type="html">&lt;p&gt;202.71.144.207: /* Netzwerkkonfiguration in /config/config.boot */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
== Server ==&lt;br /&gt;
&lt;br /&gt;
Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;Hipervisor: KVM&lt;br /&gt;
Architecture: x86_64&lt;br /&gt;
CPU: 1&lt;br /&gt;
RAM: 1024&lt;br /&gt;
Virtual Disk: 10.00 GiB&lt;br /&gt;
Source path: /storage/vms/router2.qcow2&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Betriebssystem ==&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;mg@router.aquapool.de:~$ show version&lt;br /&gt;
Version:          VyOS 1.4-rolling-202303030317&lt;br /&gt;
Release train:    current&lt;br /&gt;
&lt;br /&gt;
Built by:         autobuild@vyos.net&lt;br /&gt;
Built on:         Fri 03 Mar 2023 03:17 UTC&lt;br /&gt;
Build UUID:       0ce89af1-6db9-4940-9ee6-6be3f1d7a079&lt;br /&gt;
Build commit ID:  afdaac1012d7b1&lt;br /&gt;
&lt;br /&gt;
Architecture:     x86_64&lt;br /&gt;
Boot via:         installed image&lt;br /&gt;
System type:       guest&lt;br /&gt;
&lt;br /&gt;
Hardware vendor:  QEMU&lt;br /&gt;
Hardware model:   Standard PC (Q35 + ICH9, 2009)&lt;br /&gt;
Hardware S/N:     &lt;br /&gt;
Hardware UUID:    f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54&lt;br /&gt;
&lt;br /&gt;
Copyright:        VyOS maintainers and contributors&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== Netzwerkkonfiguration in /config/config.boot ===&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
firewall {&lt;br /&gt;
    all-ping enable&lt;br /&gt;
    broadcast-ping disable&lt;br /&gt;
    config-trap disable&lt;br /&gt;
    interface tun2 {&lt;br /&gt;
        in {&lt;br /&gt;
            ipv6-name tun2_in&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    ipv6-name tun2_in {&lt;br /&gt;
        default-action reject&lt;br /&gt;
        rule 1 {&lt;br /&gt;
            action accept&lt;br /&gt;
            protocol ipv6-icmp&lt;br /&gt;
        }&lt;br /&gt;
        rule 2 {&lt;br /&gt;
            action accept&lt;br /&gt;
            protocol all&lt;br /&gt;
            state {&lt;br /&gt;
                established enable&lt;br /&gt;
                related enable&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 3 {&lt;br /&gt;
            action accept&lt;br /&gt;
            destination {&lt;br /&gt;
                address 2001:470:1f0b:563::15&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            state {&lt;br /&gt;
                new enable&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 4 {&lt;br /&gt;
            action accept&lt;br /&gt;
            destination {&lt;br /&gt;
                address 2001:470:1f0b:563::15&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            state {&lt;br /&gt;
                new enable&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    ipv6-receive-redirects disable&lt;br /&gt;
    ipv6-src-route disable&lt;br /&gt;
    ip-src-route disable&lt;br /&gt;
    log-martians enable&lt;br /&gt;
    receive-redirects disable&lt;br /&gt;
    send-redirects enable&lt;br /&gt;
    source-validation disable&lt;br /&gt;
    syn-cookies enable&lt;br /&gt;
    twa-hazards-protection disable&lt;br /&gt;
}&lt;br /&gt;
interfaces {&lt;br /&gt;
    ethernet eth0 {&lt;br /&gt;
        address 10.12.3.1/29&lt;br /&gt;
        duplex auto&lt;br /&gt;
        hw-id 52:54:00:64:19:ea&lt;br /&gt;
        offload {&lt;br /&gt;
            gro&lt;br /&gt;
            gso&lt;br /&gt;
            sg&lt;br /&gt;
            tso&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    ethernet eth1 {&lt;br /&gt;
        address 172.16.10.1/24&lt;br /&gt;
        address 2001:470:1f0b:563::1/64&lt;br /&gt;
        hw-id 52:54:00:c1:6f:c2&lt;br /&gt;
        ipv6 {&lt;br /&gt;
            dup-addr-detect-transmits 1&lt;br /&gt;
        }&lt;br /&gt;
        offload {&lt;br /&gt;
            gro&lt;br /&gt;
            gso&lt;br /&gt;
            sg&lt;br /&gt;
            tso&lt;br /&gt;
        }&lt;br /&gt;
        speed auto&lt;br /&gt;
    }&lt;br /&gt;
    loopback lo {&lt;br /&gt;
        address 78.47.239.0/32&lt;br /&gt;
        address 78.47.239.1/32&lt;br /&gt;
        address 78.47.239.2/32&lt;br /&gt;
        address 78.47.239.3/32&lt;br /&gt;
        address 78.47.239.4/32&lt;br /&gt;
        address 78.47.239.5/32&lt;br /&gt;
        address 78.47.239.6/32&lt;br /&gt;
        address 78.47.239.7/32&lt;br /&gt;
    }&lt;br /&gt;
    openvpn vtun0 {&lt;br /&gt;
        mode server&lt;br /&gt;
        openvpn-option duplicate-cn&lt;br /&gt;
        protocol tcp-passive&lt;br /&gt;
        server {&lt;br /&gt;
            push-route 172.16.10.0/24 {&lt;br /&gt;
            }&lt;br /&gt;
            subnet 172.16.11.0/25&lt;br /&gt;
        }&lt;br /&gt;
        tls {&lt;br /&gt;
            ca-certificate openvpn_vtun0_1&lt;br /&gt;
            certificate openvpn_vtun0&lt;br /&gt;
            dh-params openvpn_vtun0&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    tunnel tun0 {&lt;br /&gt;
        address 172.16.43.8/32&lt;br /&gt;
        address 172.16.43.8/31&lt;br /&gt;
        encapsulation gre&lt;br /&gt;
        remote 188.40.111.111&lt;br /&gt;
        source-address 78.47.239.0&lt;br /&gt;
    }&lt;br /&gt;
    tunnel tun1 {&lt;br /&gt;
        address 172.16.91.1/30&lt;br /&gt;
        encapsulation gre&lt;br /&gt;
        remote 78.46.79.155&lt;br /&gt;
        source-address 78.47.239.0&lt;br /&gt;
    }&lt;br /&gt;
    tunnel tun2 {&lt;br /&gt;
        address 2001:470:1f0a:563::2/64&lt;br /&gt;
        description &amp;quot;HE.NET IPv6 Tunnel&amp;quot;&lt;br /&gt;
        encapsulation sit&lt;br /&gt;
        remote 216.66.80.30&lt;br /&gt;
        source-address 78.47.239.0&lt;br /&gt;
    }&lt;br /&gt;
    wireguard wg0 {&lt;br /&gt;
        address 172.16.12.1/24&lt;br /&gt;
        peer michael {&lt;br /&gt;
            allowed-ips 192.168.178.0/24&lt;br /&gt;
            allowed-ips 192.168.188.0/24&lt;br /&gt;
            allowed-ips 172.16.12.2/32&lt;br /&gt;
            allowed-ips 192.168.198.0/24&lt;br /&gt;
            public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=&lt;br /&gt;
        }&lt;br /&gt;
        peer njk {&lt;br /&gt;
            allowed-ips 192.168.0.0/24&lt;br /&gt;
            allowed-ips 172.16.12.3/32&lt;br /&gt;
            public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=&lt;br /&gt;
        }&lt;br /&gt;
        port 51280&lt;br /&gt;
        private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=&lt;br /&gt;
    }&lt;br /&gt;
}&lt;br /&gt;
nat {&lt;br /&gt;
    destination {&lt;br /&gt;
        rule 2 {&lt;br /&gt;
            description mail2&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 3 {&lt;br /&gt;
            description &amp;quot;owncloud http&amp;quot;&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.1&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.3&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 4 {&lt;br /&gt;
            description &amp;quot;owncloud https&amp;quot;&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.1&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.3&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 5 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 6 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 22222&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 22&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 7 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 8 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 9443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 9443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 9 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 8443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 8443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 10 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 20&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 20&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 11 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 21&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 21&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 12 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.5&lt;br /&gt;
                port 12000-13000&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.6&lt;br /&gt;
                port 12000-13000&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 13 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.2&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.5&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 14 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.2&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.5&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 15 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.2&lt;br /&gt;
                port 6922&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.5&lt;br /&gt;
                port 22&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 16 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 993&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 993&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 17 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 587&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 587&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 25 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.7&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.11&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 26 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 7080&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 27 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.6&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.20&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 28 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.6&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.20&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 29 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.0&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.13&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 30 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.0&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.13&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 31 {&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.0&lt;br /&gt;
                port 2223&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.13&lt;br /&gt;
                port 22&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 32 {&lt;br /&gt;
            description mail2&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 33 {&lt;br /&gt;
            description &amp;quot;crm http&amp;quot;&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.7&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.11&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 34 {&lt;br /&gt;
            description mail2&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 25&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 25&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 35 {&lt;br /&gt;
            description mail2&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 143&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 143&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 36 {&lt;br /&gt;
            description mail2&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
                port 465&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.22&lt;br /&gt;
                port 465&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 40 {&lt;br /&gt;
            description swimflow&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.4&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.14&lt;br /&gt;
                port 443&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 41 {&lt;br /&gt;
            description swimflow&lt;br /&gt;
            destination {&lt;br /&gt;
                address 78.47.239.4&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
            inbound-interface eth0&lt;br /&gt;
            protocol tcp&lt;br /&gt;
            translation {&lt;br /&gt;
                address 172.16.10.14&lt;br /&gt;
                port 80&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    source {&lt;br /&gt;
        rule 100 {&lt;br /&gt;
            outbound-interface eth0&lt;br /&gt;
            source {&lt;br /&gt;
                address 172.16.10.22/32&lt;br /&gt;
            }&lt;br /&gt;
            translation {&lt;br /&gt;
                address 78.47.239.3&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 200 {&lt;br /&gt;
            outbound-interface eth0&lt;br /&gt;
            source {&lt;br /&gt;
                address 172.16.10.0/24&lt;br /&gt;
            }&lt;br /&gt;
            translation {&lt;br /&gt;
                address 78.47.239.1&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        rule 201 {&lt;br /&gt;
            outbound-interface eth0&lt;br /&gt;
            source {&lt;br /&gt;
                address 172.16.11.128/25&lt;br /&gt;
            }&lt;br /&gt;
            translation {&lt;br /&gt;
                address 78.47.239.1&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
}&lt;br /&gt;
pki {&lt;br /&gt;
    ca openvpn_vtun0_1 {&lt;br /&gt;
        certificate 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&lt;br /&gt;
    }&lt;br /&gt;
    certificate openvpn_vtun0 {&lt;br /&gt;
        certificate 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&lt;br /&gt;
        private {&lt;br /&gt;
            key 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&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    dh openvpn_vtun0 {&lt;br /&gt;
        parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==&lt;br /&gt;
    }&lt;br /&gt;
}&lt;br /&gt;
protocols {&lt;br /&gt;
    static {&lt;br /&gt;
        route 0.0.0.0/0 {&lt;br /&gt;
            next-hop 10.12.3.2 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        route 172.16.41.0/24 {&lt;br /&gt;
            next-hop 172.16.91.2 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        route 172.16.42.0/24 {&lt;br /&gt;
            next-hop 172.16.43.9 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        route 192.168.0.0/16 {&lt;br /&gt;
            interface wg0 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        route6 ::/0 {&lt;br /&gt;
            next-hop 2001:470:1f0a:563::1 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
}&lt;br /&gt;
service {&lt;br /&gt;
    dns {&lt;br /&gt;
        forwarding {&lt;br /&gt;
            allow-from 172.16.0.0/12&lt;br /&gt;
            cache-size 150&lt;br /&gt;
            listen-address 172.16.10.1&lt;br /&gt;
            name-server 8.8.8.8&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    ntp {&lt;br /&gt;
        allow-client {&lt;br /&gt;
            address 0.0.0.0/0&lt;br /&gt;
            address ::/0&lt;br /&gt;
        }&lt;br /&gt;
        server 0.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
        server 0.vyatta.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
        server 1.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
        server 1.vyatta.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
        server 2.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
        server 2.vyatta.pool.ntp.org {&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    router-advert {&lt;br /&gt;
        interface eth1 {&lt;br /&gt;
            prefix 2001:470:1f0b:563::/64 {&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    snmp {&lt;br /&gt;
        community aquapool {&lt;br /&gt;
            authorization ro&lt;br /&gt;
            network 172.16.10.0/24&lt;br /&gt;
        }&lt;br /&gt;
        listen-address 172.16.10.1 {&lt;br /&gt;
            port 161&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    ssh {&lt;br /&gt;
        disable-password-authentication&lt;br /&gt;
        listen-address 78.47.239.0&lt;br /&gt;
        port 22&lt;br /&gt;
    }&lt;br /&gt;
}&lt;br /&gt;
system {&lt;br /&gt;
    config-management {&lt;br /&gt;
        commit-revisions 20&lt;br /&gt;
    }&lt;br /&gt;
    conntrack {&lt;br /&gt;
        modules {&lt;br /&gt;
            ftp&lt;br /&gt;
            h323&lt;br /&gt;
            nfs&lt;br /&gt;
            pptp&lt;br /&gt;
            sip&lt;br /&gt;
            sqlnet&lt;br /&gt;
            tftp&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    console {&lt;br /&gt;
        device ttyS0 {&lt;br /&gt;
            speed 9600&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    host-name router.aquapool.de&lt;br /&gt;
    login {&lt;br /&gt;
        user falk {&lt;br /&gt;
            authentication {&lt;br /&gt;
                encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/&lt;br /&gt;
                plaintext-password &amp;quot;&amp;quot;&lt;br /&gt;
                public-keys fstern@nb-stern {&lt;br /&gt;
                    key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==&lt;br /&gt;
                    type ssh-rsa&lt;br /&gt;
                }&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        user mg {&lt;br /&gt;
            authentication {&lt;br /&gt;
                public-keys mg {&lt;br /&gt;
                    key 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&lt;br /&gt;
                    type ssh-rsa&lt;br /&gt;
                }&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
        user njk {&lt;br /&gt;
            authentication {&lt;br /&gt;
                encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/&lt;br /&gt;
                plaintext-password &amp;quot;&amp;quot;&lt;br /&gt;
                public-keys me@njk {&lt;br /&gt;
                    key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==&lt;br /&gt;
                    type ssh-rsa&lt;br /&gt;
                }&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    name-server 213.133.100.100&lt;br /&gt;
    static-host-mapping {&lt;br /&gt;
        host-name crm.aquapool.de {&lt;br /&gt;
            alias wiki.aquapool.de&lt;br /&gt;
            alias vtiger.aquapool.de&lt;br /&gt;
            inet 172.16.10.11&lt;br /&gt;
        }&lt;br /&gt;
        host-name db1.aquapool.de {&lt;br /&gt;
            inet 172.16.10.8&lt;br /&gt;
        }&lt;br /&gt;
        host-name mail.aquapool.de {&lt;br /&gt;
            inet 172.16.10.22&lt;br /&gt;
        }&lt;br /&gt;
        host-name owncloud.aquapool.de {&lt;br /&gt;
            alias cloud.aquapool.de&lt;br /&gt;
            inet 172.16.10.3&lt;br /&gt;
        }&lt;br /&gt;
        host-name service.aquapool.de {&lt;br /&gt;
            alias backup.aquapool.de&lt;br /&gt;
            inet 172.16.10.12&lt;br /&gt;
        }&lt;br /&gt;
        host-name swimflow.de {&lt;br /&gt;
            alias trainigpool.de&lt;br /&gt;
            inet 172.16.10.14&lt;br /&gt;
        }&lt;br /&gt;
        host-name web3.aquapool.de {&lt;br /&gt;
            alias aquacaetum.aquapool.de&lt;br /&gt;
            inet 172.16.10.6&lt;br /&gt;
        }&lt;br /&gt;
        host-name web4.aquapool.de {&lt;br /&gt;
            alias www.aquapool.de&lt;br /&gt;
            inet 172.16.10.5&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    syslog {&lt;br /&gt;
        global {&lt;br /&gt;
            facility all {&lt;br /&gt;
                level notice&lt;br /&gt;
            }&lt;br /&gt;
            facility protocols {&lt;br /&gt;
                level debug&lt;br /&gt;
            }&lt;br /&gt;
        }&lt;br /&gt;
    }&lt;br /&gt;
    time-zone GMT&lt;br /&gt;
}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
// Warning: Do not remove the following line.&lt;br /&gt;
// vyos-config-version: &amp;quot;bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2&amp;quot;&lt;br /&gt;
// Release version: 1.4-rolling-202303030317&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;/div&gt;</summary>
		<author><name>202.71.144.207</name></author>
	</entry>
</feed>