The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

  • Twitter Updates

  • My Flickr Stream

  • Pages

  • All categories

  • Email Subscription

    Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 717 other subscribers

Archive for the ‘routers’ Category

GitHub – Benewend/mikrotik-config-templates: A comprehensive collection of MikroTik RouterOS scripts and configurations for various networking scenarios. This repository contains tested and documented scripts for basic configurations, security implementations, and monitoring solutions. · GitHub

Posted by jpluimers on 2026/11/12

[Wayback/Archive] GitHub – Benewend/mikrotik-config-templates: A comprehensive collection of MikroTik RouterOS scripts and configurations for various networking scenarios. This repository contains tested and documented scripts for basic configurations, security implementations, and monitoring solutions. · GitHub

One missing script is the (very simple) switch configuration, for which I published the RB960PGS hEX PoE one at Factory reset a MikroTik hEX PoE RB960PGS using the reset button and a similar one on [Wayback/Archive] How to use Mikrotik router as a “switch”? – General – MikroTik community forum.

I need to dig into the switching anway as one day, I had trouble getting that to work, and I wasn’t sure if the problem was hardware or software related.

So here are some links, including some on centrally managing configurations:

Read the rest of this entry »

Posted in Development, Hardware, MikroTik, Network-and-equipment, Power User, RouterOS, routers, Scripting, Software Development, WinBox | Leave a Comment »

BASE64 Over DNS – SANS Internet Storm Center

Posted by jpluimers on 2026/08/31

Interesting back-channel: [Wayback/Archive] BASE64 Over DNS – SANS Internet Storm Center covered in the blog

It reminds me over other tunneling techniques over DNS like the below VPN over DNS one that have existed for quite a while now (for instance in Captive portal: DNS Tunneling).

Last year, it raised attention because of [Wayback/Archive] MystRodX: The Covert Dual-Mode Backdoor Threat.

Nothing new though, but still interesting (:

Anyway, some links on stuff that has existed for a while:

Read the rest of this entry »

Posted in DNS, Hardware, Internet, Network-and-equipment, Power User, routers, VPN | Leave a Comment »

I didn’t realise there were so many power supply models for MikroTik Routers and Wireless (via their Products page)

Posted by jpluimers on 2026/08/27

Lot’s of power supplies on [Wayback/Archive] MikroTik Routers and Wireless – Products, most (except the internal ones) I listed below grouped by output voltage and amperage (and wattage which I rounded down).

I didn’t realise there were so many and that there basically is no consistent naming scheme.

24V

Read the rest of this entry »

Posted in Development, Hardware, Hardware Development, MikroTik, Network-and-equipment, Power User, routers | Leave a Comment »

freebsd – Expanding the disk size on pfsense under VMWare ESXi – Unix & Linux Stack Exchange

Posted by jpluimers on 2026/01/30

It’s a tricky process, but I might need this in the future:

–jeroen

Posted in Hardware, Network-and-equipment, pfSense, Power User, routers, Virtualization, VMware, VMware ESXi | Leave a Comment »

WireGuard on OpenWRT based GL.iNET: some notes on the `wireguard_watchdog` script

Posted by jpluimers on 2026/01/15

On OpenWRT GL.iNET based devices, the WireGuard client does not restart upon reboot, even if it was started before rebooting.

Hopefully the /usr/bin/wireguard_watchdog script will help with this as others indicates it should.

My first try was no succes, but since it is supposed to run from cron it does no output. The script on GL-SFT1200 firmware version 3.215, script /usr/bin/wireguard_watchdog is different from the one in the OpenWRT repository, so it needs some investigation.

Some links for checking this out:

Read the rest of this entry »

Posted in *nix, *nix-tools, ash/dash, ash/dash development, Development, GL-AR300M, GL.iNet, GL.iNET GL-SFT1200, OpenWRT, Power User, Scripting, Software Development | Leave a Comment »

Some WireGuard console tricks that helped me figure out a GL.iNET “status yellow” connection problem

Posted by jpluimers on 2026/01/14

TL;DR: the connection problem was because of a public key mismatch between the pfSense central location and GL.iNET peer.

Since the pfSense cannot export configuration in either text or QR format (see rcmcdonald91/pfSense-pkg-WireGuard: This is a port of the original WireGuard UI bits as implemented by Netgate in pfSense 2.5.0 to a package suitable for rapid iteration and more frequent updating on future releases of pfSense.), I made a copy paste mistake.

This resulted in the WireGuard client connection indicator on the GL.iNET to turn yellow instead of green. This means that the handshake is only partially completed (there is a WireGuard connection but there is no returning traffic on it).

GL.iNET VPN status explanation:

  • no color: no VPN
  • yellow: VPN not fully established
  • green: VPN established

How I found out

Read the rest of this entry »

Posted in GL.iNet, GL.iNET GL-SFT1200, Hardware, Network-and-equipment, pfSense, Power User, routers | Leave a Comment »

A few pfSense quirks I got used to over the years

Posted by jpluimers on 2026/01/06

Everytime when installing a pfSense router from scratch, I seem to re-learn a few of the below quirks. So it was finally time to document them (:

Quite a few of my pfSense configurations are just doing routing between various networks, should not provide DHCP leases and do not always need or have a WAN connected (i.e. they are LAN-only).

Read the rest of this entry »

Posted in Communications Development, Conference Topics, Conferences, Cyberchef, Development, DHCP, Encoding, Event, Hardware, HTTP, Internet protocol suite, MikroTik, Network-and-equipment, pfSense, Power User, routers, Software Development, SSH, TCP, TLS, UDP | Tagged: | Leave a Comment »

Bufferbloat, The Internet, And How To Fix It | Hackaday

Posted by jpluimers on 2025/12/26

Anxious to see how many routers have improved their algorithms to prevent Bufferfloat.

[Wayback/Archive] Bufferbloat, The Internet, And How To Fix It | Hackaday

The following YouTube videos in it are embedded below the blog signature:

Read the rest of this entry »

Posted in Communications Development, Development, Internet protocol suite, LifeHacker, Network-and-equipment, Power User, routers, TCP, UDP | Tagged: , , , , , | Leave a Comment »

rcmcdonald91/pfSense-pkg-WireGuard: This is a port of the original WireGuard UI bits as implemented by Netgate in pfSense 2.5.0 to a package suitable for rapid iteration and more frequent updating on future releases of pfSense.

Posted by jpluimers on 2025/12/25

This is actually the WireGuard package you can install on pfSense CE 2.5.2 and higher: [Wayback/Archive] rcmcdonald91/pfSense-pkg-WireGuard: This is a port of the original WireGuard UI bits as implemented by Netgate in pfSense 2.5.0 to a package suitable for rapid iteration and more frequent updating on future releases of pfSense.

Note that the source code mentions a lot of web-technologies but that is because the majority of the code is the pfSense plugin. Underneath it pulls the actual build from [Wayback/Archive] git.zx2c4.com/wireguard-freebsd/snapshot which is almost exclusively C code.

Like WireGuardNT on Windows, it uses a high performance kernel mode driver.

Some more links on it:

Read the rest of this entry »

Posted in Conference Topics, Conferences, Development, DVCS - Distributed Version Control, Event, git, GitHub, Hardware, Network-and-equipment, pfSense, Power User, routers, Software Development, Source Code Management, Tailscale | Tagged: , | Leave a Comment »

Some notes on getting OpenVPN LAN2LAN VPN working from a GL.iNET GL-SFT1200 AC1200 Travel Router to a pfSense that is behind a Fritz!Box 7490

Posted by jpluimers on 2025/12/19

TL;DR: it failed

Since GL.iNET does not support site-to-site “Peer to Peer” OpenVPN (only “Remote Access” is supported) which is needed to route to/from the networks on both sides of the connection. the below did fail.

Original idea

Below was what I hoped to function.

Some links that should get me started (though my situation is a tad more difficult, see below):

Read the rest of this entry »

Posted in Ethernet, Firewall, Fritz!, Fritz!Box, GL-AR300M, GL.iNet, GL.iNET GL-SFT1200, Hardware, Infrastructure, Network-and-equipment, pfSense, routers | Leave a Comment »