Re: Protecting my network from rogue IoT devices.

[Pete Travis]

On Feb 29, 2016 11:24 AM, "Javier Perez" <pepebuho(a)gmail.com&gt; wrote:
>  Probably Off Topic, but maybe tangentially related to Fedora.
>
>  I read with interest this forum piece about IoT devices phoning home.
>
>  
https://isc.sans.edu/forums/diary/IoT+The+Rise+of+the+Machines+Guest+Diar...
>  What caught my attention is the following phrase: " My home network 
is
hardened and any new (unknown) device connected to it receives an IP
address from a specific range which has no connectivity with other hosts or
the Internet but its packets are logged"
>  I imagine it is done through the Gateway Router at home. Is there any 
tutorial
somewhere to learn how to do this? Also, what program could one
use on FedoraServer or FedoraWorkstation to host the log created by the
router ( I imagine some sort of dd-wrt machine). Given that journalctl took
over syslog duties, could I still use syslogd to receive the data from an
external router or do I have to look somewhere else for that?
>  I wonder.
>
>  --
>  ------------------------------
>   /\_/\
>   |O O|  pepebuho(a)gmail.com
>   ~~~~     Javier Perez
>   ~~~~          While the night runs
>   ~~~~          toward the day...
>    m m       Pepebuho watches
>                  from his high perch.
>
>  -- 
I took a simpler approach to this; have two access points, and create 1:1
NAT mappings so that devices on the untrusted segment can access required
services (smb and dns, in my case) from the trusted segment.  It does
require a spare host or VM on both segments, though.

--Pete