sudo lnxrouter -i eth1 -o isp5  --no-dns  --dhcp-dns 1.1.1.1  -6 --dhcp-dns6 [2606:4700:4700::1111]

sudo lnxrouter -n -i eth1

sudo lnxrouter -n --ap wlan0 MyAccessPoint -p MyPassPhrase

sudo brctl addbr lxcbr5

lxc.network.type = vethlxc.network.flags = uplxc.network.link = lxcbr5lxc.network.hwaddr = xx:xx:xx:xx:xx:xx

sudo lnxrouter -i lxcbr5

sudo lnxrouter -i eth1 --tp 9040 --dns 9053 -g 192.168.55.1 -6 --p6 fd00:5:6:7::

TransPort 192.168.55.1:9040 DNSPort 192.168.55.1:9053TransPort [fd00:5:6:7::1]:9040 DNSPort [fd00:5:6:7::1]:9053

sudo lnxrouter -i eth1 \    --tp 9040 --dns 9053 \    --random-mac \    --ban-priv \    --catch-dns --log-dns# optional

sudo brctl addbr lxdbr5

lxc profile create profile5lxc profile edit profile5### profile content ###config: {}description:""devices:  eth0:    name: eth0    nictype: bridged    parent: lxdbr5    type: nicname: profile5lxc profile add<container> profile5

sudo lnxrouter -i lxdbr5 --tp 9040 --dns 9053

lxc profile remove<container> profile5

To not use profile

lxc config device add<container> eth0 nic name=eth0 nictype=bridged parent=lxdbr5

lxc config device remove<container> eth0

sudo lnxrouter -i vboxnet5 --tp 9040 --dns 9053

sudo brctl addbr firejail5

sudo lnxrouter -i firejail5 -g 192.168.55.1 --tp 9040 --dns 9053 firejail --net=firejail5 --dns=192.168.55.1 --blacklist=/var/run/nscd

Usage: lnxrouter <options>Options:    -h, --help              Show this help    --version               Print version number    -i <interface>          Interface to make NATed sub-network,                            and to provide Internet to                            (To create WiFi hotspot use '--ap' instead)    -o <interface>          Specify an inteface to provide Internet from.                            (Note using this with default DNS option may leak                            queries to other interfaces)    -n                      Do not provide Internet    --ban-priv              Disallow clients to access my private network    -g <ip>                 This host's IPv4 address in subnet (mask is /24)                            (example: '192.168.5.1' or '5' shortly)    -6                      Enable IPv6 (NAT)    --no4                   Disable IPv4 Internet (not forwarding IPv4).                            Usually used with '-6'    --p6 <prefix>           Set IPv6 LAN address prefix (length 64)                            (example: 'fd00:0:0:5::' or '5' shortly)                            Using this enables '-6'    --dns <ip>|<port>|<ip:port>                            DNS server's upstream DNS.                            Use ',' to seperate multiple servers                            (default: use /etc/resolv.conf)                            (Note IPv6 addresses need '[]' around)    --no-dns                Do not serve DNS    --no-dnsmasq            Disable dnsmasq server (DHCP, DNS, RA)    --catch-dns             Transparent DNS proxy, redirect packets(TCP/UDP)                            whose destination port is 53 to this host    --log-dns               Show DNS query log (dnsmasq)    --dhcp-dns <IP1[,IP2]>|no                            Set IPv4 DNS offered by DHCP (default: this host).    --dhcp-dns6 <IP1[,IP2]>|no                            Set IPv6 DNS offered by DHCP (RA)                            (default: this host)                            (Note IPv6 addresses need '[]' around)                            Using both above two will enable '--no-dns'    --hostname <name>       DNS server associate this name with this host.                            Use '-' to read name from /etc/hostname    -d                      DNS server will take into account /etc/hosts    -e <hosts_file>         DNS server will take into account additional                            hosts file    --dns-nocache           DNS server no cache    --mac <MAC>             Set MAC address    --random-mac            Use random MAC address    --tp <port>             Transparent proxy,                            redirect non-LAN TCP and UDP(not tested) traffic to                            port. (usually used with '--dns')  WiFi hotspot options:    --ap <wifi interface> <SSID>                            Create WiFi access point    -p, --password <password>                            WiFi password    --qr                    Show WiFi QR code in terminal (need qrencode)    --hidden                Hide access point (not broadcast SSID)    --no-virt               Do not create virtual interface                            Using this you can't use same wlan interface                            for both Internet and AP    --virt-name <name>      Set name of virtual interface    -c <channel>            Specify channel (default: use current, or 1 / 36)    --country <code>        Set two-letter country code for regularity                            (example: US)    --freq-band <GHz>       Set frequency band: 2.4 or 5 (default: 2.4)    --driver                Choose your WiFi adapter driver (default: nl80211)    -w <WPA version>        '2' for WPA2, '1' for WPA, '1+2' for both                            (default: 2)    --psk                   Use 64 hex digits pre-shared-key instead of                            passphrase    --mac-filter            Enable WiFi hotspot MAC address filtering    --mac-filter-accept     Location of WiFi hotspot MAC address filter list                            (defaults to /etc/hostapd/hostapd.accept)    --hostapd-debug <level> 1 or 2. Passes -d or -dd to hostapd    --isolate-clients       Disable wifi communication between clients    --sta-timeout <seconds> Timeout to disconnect a no-signal client    --no-haveged            Do not run haveged automatically when needed    --hs20                  Enable Hotspot 2.0  WiFi 4 (802.11n) configs (2.4G/5GHz):  (default: not enable)    --wifi4                 Enable IEEE 802.11n (HT, High Throughput)    --ht-capab <HT caps>    HT capabilities (example: '[HT40+][DSSS_CCK-40]')                            (default: '[HT40+]')    --req-wifi4             Only support Wifi>=4 clients  WiFi 5 (802.11ac) configs (5GHz):  (default: not enable)    --wifi5                 Enable IEEE 802.11ac (VHT, Very High Thoughtput)    --vht-capab <VHT caps>  VHT capabilities (example: '[VHT160][RXLDPC]')    --vht-ch-width <index>  Index of VHT channel width:                                0 for 20MHz or 40MHz (default)                                1 for 80MHz                                2 for 160MHz                                3 for 80+80MHz (Non-contigous 160MHz)    --vht-seg0-ch <channel> Channel index of VHT center frequency for primary                            segment. Use with '--vht-ch-width'    --vht-seg1-ch <channel> Channel index of VHT center frequency for secondary                            (second 80MHz) segment. Use with '--vht-ch-width 3'    --req-wifi5             Only support Wifi>=5 clients  WiFi 6 (802.11ax) configs (2.4G/5GHz):  (default: not enable)    --wifi6                 Enable IEEE 802.11ax (HE, High Efficiency)    --he-ch-width <index>   Index of HE channel width:                                0 for 20MHz or 40MHz (default)                                1 for 80MHz                                2 for 160MHz                                3 for 80+80MHz (Non-contigous 160MHz)    --he-seg0-ch <channel>  Channel index of HE center frequency for primary                            segment. Use with '--he-ch-width'    --he-seg1-ch <channel>  Channel index of HE center frequency for secondary                            (second 80MHz) segment. Use with '--he-ch-width 3'    --he-su-bfe             HE Single User Beamformee support    --he-su-bfr             HE Single User Beamformer support    --he-mu-bfr             HE Multi User Beamformer support    --req-wifi6             Only support Wifi>=6 clients    --p2ptwt                Peer-to-Peer Target Wake Time support    Note: Some cutting-edge Wifi features strongly depends on hostapd built          with specific flags enabled and compatible hardware  Instance managing:    --daemon                Run in background    --keep-confdir          Don't delete the temporary config dir after exit    -l, --list-running      Show running instances    --lc, --list-clients <id|interface>                            List clients of an instance. Or list neighbors of                            an interface, even if it isn't handled by us.                            (passive mode)    --stop <id>             Stop a running instance        For <id> you can use PID or subnet interface name.        You can get them with '--list-running'

linux-routerCopyright (C) 2018  garywillThis library is free software; you can redistribute it and/ormodify it under the terms of the GNU Lesser General PublicLicense as published by the Free Software Foundation; eitherversion 2.1 of the License, or (at your option) any later version.This library is distributed in the hope that it will be useful,but WITHOUT ANY WARRANTY; without even the implied warranty ofMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNULesser General Public License for more details.You should have received a copy of the GNU Lesser General PublicLicense along with this library; if not, write to the Free SoftwareFoundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA

Copyright (c) 2013, obliqueAll rights reserved.Redistribution and use in source and binary forms, with or withoutmodification, are permitted provided that the following conditions are met:* Redistributions of source code must retain the above copyright notice, this  list of conditions and the following disclaimer.* Redistributions in binary form must reproduce the above copyright notice,  this list of conditions and the following disclaimer in the documentation  and/or other materials provided with the distribution.THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THEIMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AREDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLEFOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIALDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS ORSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVERCAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USEOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.