remoteroot.net

I put endlessh on port 22 and moved real SSH somewhere else. A tarpit does not block the bots, it holds them. Setup, the nftables rules, and what a week of logs showed.

SixXS shut down in 2017, so my old WRT54G tunnel guide no longer works. Here is what actually replaced it: native IPv6, Hurricane Electric, and WireGuard to a VPS for when you are stuck behind CGNAT, plus the v6 firewall everyone forgets.

What firewall settings you should actually be running on a home network. SPI, DD-WRT defaults, port forwarding, and common mistakes.

Configuring Paros proxy to spoof User-Agent strings so your scans don't get blocked by WAFs and reverse proxies.

Getting native-ish IPv6 on your LAN through a SixXS tunnel running on DD-WRT. AICCU setup, routing, and ip6tables rules.

Updated 1:1 NAT guide for DD-WRT v24. Full working config with dynamic NAPT fallback and troubleshooting tips.

NVRAM limits, JFFS quirks, VPN overhead, overclocking risks, and other things nobody warns you about.

Configuring 1:1 NAT on a Linksys WRT54G with DD-WRT. Multiple public IPs, DMZ hosts, full iptables rules.

Wardriving around Aberystwyth with a GPS and Kismet. Plotting open, WEP, and WPA networks on Google Maps.

Turn a spare PC into a proper network firewall with Debian and iptables. NAT, port forwarding, and basic drop rules.