Netfilter-packet-flow.svg.jpg

DNS

sudo cloudflared proxy-dns --address 0.0.0.0

Network Discovery

ping $ip
tcping $ip $port
hping3 -S $ip -p $port
tcptraceroute $ip

SpeedTest Docker

sudo pacman -S docker
sudo usermod -aG docker $USER

sudo systemctl enable --now docker

docker pull adolfintel/speedtest
docker run --restart=always -d -e MODE=standalone -p 80:80 adolfintel/speedtest

Port Scan

nmap -p 22 --open 10.0.0.0/23 --max-rtt-timeout 20ms -oG -

Hostname Resolution

Using dig as a LLMNR or mDNS CLI Lookup utility

# dns
dig 10.0.0.220

# mdns
dig -p 5353 "@224.0.0.251" -x 10.0.0.220
dig -p 5353 "@10.0.0.220" -x 10.0.0.220

# llmnr
# EDNS0 is disabled (+noedns),
# because the Microsoft LLMNR profile does not support EDNS0.
dig +noedns -p 5355 "@224.0.0.252" -x 10.0.0.220

Disable Kernel ICMP echo except root

iptables -A OUTPUT -m owner ! --uid-owner 0 -p icmp --icmp-type echo-reply -o eth0 -j DRO

Disable Kernel ICMP

sysctl net.ipv4.icmp_echo_ignore_all=1 net.ipv6.icmp.echo_ignore_all=1

Refresh IPv6 Solicitation

nano /etc/systemd/network/10-cloud-init-enp1s0.network
systemctl restart systemd-networkd