I have a computer running Ubuntu Server (14.04 but I want to upgrade to 16.04 when it becomes available) with two Ethernet interfaces and one WiFi interface.
The interfaces are:
Ethernet towards WAN:
Ethernet towards LAN:
WiFi towards LAN:
wlan0(Intel Corporation Wireless 7260, driver:
I'd like to do the following:
wlan0in the access point mode with WPA2 encryption in the 802.11 b/g/n mode. (I don't mind enabling 802.11a, too, but I don't need it. I need 802.11n and b/g legacy.)
Use DHCP to configure an IPv4 address for
Set up a DHCP server to assign private IPv4 addresses to hosts connected to
Set up NAT between
p2p1for IPv4 traffic.
Use DHCPv6 to fetch an IPv6 prefix for
Set up router advertisement to assign IPv6 addresses under the prefix to hosts connected to
Route IPv6 traffic between
Set up a caching DNS server and advertise it as the DNS server to hosts on
br0(but block queries from
Set up firewall rules that block all CIFS/SMB, possibily other insecure Windows traffic and CUPS printing between the
br0LAN and the
Set up whatever other firewall rules are considered best practice while not preventing efficient Skype, WebRTC and push notification traffic between WAN and the hosts on the
This should be a basic "turn an Ubuntu box into an IPv4+IPv6 home router" kind of thing. I've done a lot of searching already, but I've failed to find a guide that matches my needs. In particular, I have trouble finding guidance for setting up
wlan0 with WPA2 in the AP mode and then using that as part of a brige interface. (I found guides that talk about WEP or of using
wlan0 as the WAN interface that connects to an AP as a client or explicitly using Atheros drivers as opposed to
iwlwifi.) Also, I have trouble finding guidance for the IPv6 part. Superficially, it looks like some combination of
dnsmasq could address all of the above. Maybe.
Any pointers to a guide that already covers this or other advice on how to proceed?