/etc/network/interfaces routeru land 

# LOOPBACK
auto lo
iface lo inet loopback
	pre-up				iptables-restore < /etc/network/iptables
	pre-up				sysctl -w net.netfilter.nf_conntrack_max=262144
	pre-up				modprobe nf_nat_ftp
	pre-up				modprobe nf_nat_tftp
	pre-up				modprobe nf_nat_irc
	pre-up				modprobe nf_nat_sip
	pre-up				modprobe nf_nat_h323
	#up				ip route add throw 10.0.0.0/8
	#down				ip route del throw 10.0.0.0/8
	up				ip route add throw 172.16.0.0/12
	down				ip route del throw 172.16.0.0/12
	up				ip route add throw 192.168.0.0/16
	down				ip route del throw 192.168.0.0/16


# DUMMY (interface-independent IP adress)
auto dummy0
iface dummy0 inet static
	address				10.28.0.2
	netmask				255.255.255.255
	dns-domain			vypal.czf


# LAN (Kovanecka CKD sidliste)
allow-hotplug lan
iface lan inet static
	address				10.28.2.1
	netmask				255.255.255.192
	broadcast			10.28.2.63
	up				sysctl -q -w net.ipv4.conf.$IFACE.proxy_arp=1
	up				ip address add 10.28.130.1/26 brd + dev $IFACE
	down				ip address del 10.28.130.1/26 brd + dev $IFACE
	up				ip address add 89.176.254.1/27 brd + dev $IFACE
	down				ip address del 89.176.254.1/27 brd + dev $IFACE


# OPTIKA (Internet)
allow-hotplug upc
iface upc inet static
	address				78.102.13.7
	netmask				255.255.255.0
	broadcast			78.102.13.255
	dns-nameservers			213.46.172.36 213.46.172.37
	#dns-nameservers		62.24.64.2 62.24.64.3
	up				ip route add default via 78.102.13.1 metric 10 dev $IFACE


# LINK: KRYNN (5G)
allow-hotplug krynn
iface krynn inet static
	address				10.28.1.130
	netmask				255.255.255.248
	broadcast			10.28.1.135

	#wireless-mode			Managed
	#wireless-essid			CZFree.Net.L2K
	##MadWifi se nechyta, nevim proc
	##wireless-txpower		19
	#wireless-rate			36Mbit fixed
	##wireless-rate			auto
	#wireless-key            	111222333444555
	##pre-up				iwpriv $IFACE mode 1
	##pre-up				athctrl -i $IFACE -d 3000
	#pre-up				sysctl -w dev.$IFACE-raw.ctstimeout=180
	#pre-up				sysctl -w dev.$IFACE-raw.acktimeout=180
        #up				iwconfig $IFACE txpower 17
	up				ip route add 10.0.0.0/8 via 10.28.1.133
	up				ip route add 10.28.0.1/32 via 10.28.1.133
	up				ip route add 10.28.1.0/24 via 10.28.1.133
	up				ip route add 10.28.65.0/24 via 10.28.1.133
	up				ip route add 10.28.129.0/24 via 10.28.1.133
	up				ip route add 10.28.64.0/29 via 10.28.1.133
	

# AP (2.4G vsesmerovka vertikalni)
allow-hotplug vsesmer
iface vsesmer inet static
	address				10.28.2.65
	netmask				255.255.255.192
	broadcast			10.28.2.127

	wireless-mode			Master
	wireless-essid			CZFree.Net.land
	wireless-channel		11
	# dirty fix :/
	up				iwconfig $IFACE txpower 128 fixed


# BACKBONE - LINK: PALMOVKA (2.4G sito horizontalni / D-Link DWL-900AP+) + GYMLIT (5G smerovka H / WNC AirCA8-PRO..RDAA-81)
allow-hotplug backbone
iface backbone inet static
	address				10.28.64.33
	netmask				255.255.255.248
	broadcast			10.28.64.39
	up				sysctl -q -w net.ipv4.conf.$IFACE.proxy_arp=1
	up				ip address add 10.28.64.25/29 brd + dev $IFACE
	down				ip address del 10.28.64.25/29 brd + dev $IFACE
	up				ip address add 10.28.64.57/29 brd + dev $IFACE
	down				ip address del 10.28.64.57/29 brd + dev $IFACE
	up				ip address add 10.28.64.49/29 brd + dev $IFACE
	down				ip address del 10.28.64.49/29 brd + dev $IFACE
	up				ip address add 10.28.66.65/27 brd + dev $IFACE
	down				ip address del 10.28.66.65/27 brd + dev $IFACE
	up				ip address add 89.176.254.1/26 brd + dev $IFACE
	down				ip address del 89.176.254.1/26 brd + dev $IFACE
	up				ip route add 10.28.0.3/32 via 10.28.64.36
	up				ip route add 10.28.3.0/24 via 10.28.64.36
	up				ip route add 10.28.67.0/24 via 10.28.64.36
	up				ip route add 10.28.131.0/24 via 10.28.64.36
	up				ip route add 10.28.0.10/32 via 10.28.64.28
	up				ip route add 10.28.10.0/24 via 10.28.64.28
	up				ip route add 10.28.74.0/24 via 10.28.64.28
	up				ip route add 10.28.138.0/24 via 10.28.64.28
	up				ip route add 10.28.0.11/32 via 10.28.64.28
	up				ip route add 10.28.11.0/24 via 10.28.64.28
	up				ip route add 10.28.75.0/24 via 10.28.64.28
	up				ip route add 10.28.139.0/24 via 10.28.64.28
	up				ip route add 10.28.64.40/29 via 10.28.64.28
	up				ip route add 10.28.130.64/27 via 10.28.66.67


# VPN: Connectix
# - started through vtund
iface vpncnx inet static
	address				10.28.64.17
	pointopoint			10.28.64.18
	netmask				255.255.255.255
	up				ip route add 10.28.74.0/25 dev vpncnx