Re: [Astlinux-users] astlinux without external interface

[Lonnie A. <li...@lo...>]

> On Apr 27, 2020, at 5:52 PM, Patrick Warichet <pat...@gm...> wrote:
> 
> Hello,
> 
> I had to migrate my Astlinux appliance from being my
> router/firewall/SIP/etc. and hooked it up to a new router/firewall
> that I have to test. I like to keep using Astlinux for several
> services (DNScrypt, DHCP, SIP, etc.) that are not available on the
> firewall but I am facing 2 issues.
> 
> I do not want to use the EXTIF anymore (since the system is only a
> host and connected to my local LAN) and just use the INTIF, but even
> disconnected the EXTIF (eth0 in my case) is used for the default route
> even when I configure "ip route add to 0.0.0.0/0 via 192.168.1.1 dev
> eth1" in rc.elocal.
> 
> Another issue, how to change the default gw parameter from dnsmasq ?
> I added "dhcp-option=lan,option:router,192.168.1.1" in dnsmasq.static
> but it keeps on using the local IP address of the eth1 interface in
> the lease it sends out (confirmed by looking at dnsmasq.conf).
> 
> Thank you for your help
> 
> /Patrick

AstLinux always requires EXTIF to be defined.  Always.

If you don't want to support LAN networks, don't define any LAN networks.

Keep in mind that with a single EXTIF interface configuration, AstLinux may still operate as a router with internal networks if OpenVPN or WireGuard are defined.

Enable the firewall accordingly.

Lonnie