On Feb 29, 2016 11:24 AM, "Javier Perez" <pepebuho@gmail.com> wrote:
>
> Probably Off Topic, but maybe tangentially related to Fedora.
>
> I read with interest this forum piece about IoT devices phoning home.
>
> https://isc.sans.edu/forums/diary/IoT+The+Rise+of+the+Machines+Guest+Diary/19173/
>
> What caught my attention is the following phrase: " My home network is hardened and any new (unknown) device connected to it receives an IP address from a specific range which has no connectivity with other hosts or the Internet but its packets are logged"
>
> I imagine it is done through the Gateway Router at home. Is there any tutorial somewhere to learn how to do this? Also, what program could one use on FedoraServer or FedoraWorkstation to host the log created by the router ( I imagine some sort of dd-wrt machine). Given that journalctl took over syslog duties, could I still use syslogd to receive the data from an external router or do I have to look somewhere else for that?
>
> I wonder.
>
> --
> ------------------------------
>  /\_/\  
>  |O O|  pepebuho@gmail.com
>  ~~~~     Javier Perez
>  ~~~~          While the night runs
>  ~~~~          toward the day...
>   m m       Pepebuho watches
>                 from his high perch.
>
> --
I took a simpler approach to this; have two access points, and create 1:1 NAT mappings so that devices on the untrusted segment can access required services (smb and dns, in my case) from the trusted segment.  It does require a spare host or VM on both segments, though.

--Pete