From 8a0995f809d25cfe1fc19bdfeb618e5e9f591bf9 Mon Sep 17 00:00:00 2001 From: Matthias Blankertz Date: Fri, 9 May 2014 14:36:21 +0200 Subject: [PATCH] - Setup for actual network environment --- overlay/etc/firewall.sh | 18 +++++++++--------- overlay/etc/network/interfaces | 14 ++++++++++---- overlay/home/matthias/.ssh/authorized_keys | 1 + 3 files changed, 20 insertions(+), 13 deletions(-) diff --git a/overlay/etc/firewall.sh b/overlay/etc/firewall.sh index c275a46..5444ae5 100755 --- a/overlay/etc/firewall.sh +++ b/overlay/etc/firewall.sh @@ -118,8 +118,8 @@ echo "1" > /proc/sys/net/ipv4/ip_forward ## Setup IPv6 -IP6PRIVATE=2001:7c0:409:8001::/64 -IP6LANIP=2001:7c0:409:8001::2 +IP6PRIVATE=2001:7c0:409:8e78::/64 +IP6LANIP=2001:7c0:409:8e78::117:221 # Delete old iptables rules # and temporarily block all traffic. @@ -150,13 +150,13 @@ ip6tables -A INPUT -i lo -j ACCEPT ip6tables -A OUTPUT -o lo -j ACCEPT # Source spoof filtering from us -ip6tables -N SSOutFilterLAN -ip6tables -A OUTPUT -o $LANIF -j SSOutFilterLAN -ip6tables -A FORWARD -o $LANIF -j SSOutFilterLAN -ip6tables -A SSOutFilterLAN -s $IP6LANIP -j RETURN -ip6tables -A SSOutFilterLAN -s fe80::/10 -j RETURN -ip6tables -A SSOutFilterLAN -j LOG --log-prefix "SOURCESPOOFOUT6 " -ip6tables -A SSOutFilterLAN -j DROP +#ip6tables -N SSOutFilterLAN +#ip6tables -A OUTPUT -o $LANIF -j SSOutFilterLAN +#ip6tables -A FORWARD -o $LANIF -j SSOutFilterLAN +#ip6tables -A SSOutFilterLAN -s $IP6LANIP -j RETURN +#ip6tables -A SSOutFilterLAN -s fe80::/10 -j RETURN +#ip6tables -A SSOutFilterLAN -j LOG --log-prefix "SOURCESPOOFOUT6 " +#ip6tables -A SSOutFilterLAN -j DROP # Source spoof filtering to us ip6tables -N SSInFilterLAN diff --git a/overlay/etc/network/interfaces b/overlay/etc/network/interfaces index c0c82ba..c591c17 100644 --- a/overlay/etc/network/interfaces +++ b/overlay/etc/network/interfaces @@ -3,7 +3,13 @@ auto lo iface lo inet loopback auto eth0 -iface eth0 inet static - address 172.20.117.221 - netmask 255.255.255.240 - gateway 172.20.117.209 +iface eth0 inet dhcp +iface eth0 inet6 static + address 2001:7c0:409:8e78::117:221 + netmask 64 + +#auto eth0 +#iface eth0 inet static +# address 172.20.117.221 +# netmask 255.255.255.240 +# gateway 172.20.117.209 diff --git a/overlay/home/matthias/.ssh/authorized_keys b/overlay/home/matthias/.ssh/authorized_keys index fc77d10..59d0822 100644 --- a/overlay/home/matthias/.ssh/authorized_keys +++ b/overlay/home/matthias/.ssh/authorized_keys @@ -1 +1,2 @@ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgvPpPNe3SxVtXWeyWE/cB+ME+8q8goWQLDnGfjtEFdStL/2d39yyiqEvE1ystjfrdrhd6xcwYntAAiX/8LsV9kGOGx2QMxiAaKNboEJKFwPqeOQLYY69DDq3n4VQaNlMMNzsqSTDuaS/Gl4WZqvpYQ4wJaS3Ln95ec0zFLyUWyyh3uaw7iv/iJUX9NLlCTbuEtrhswnHyYK7x1g9LWBAtBER0QLAIU1CO/VCeRmfgKf0OIzdKiBw2lgVAwpme/LPh7SAQhQoRcQdkBCZH/Wl9K0Bp/it6BwSYaHVChEaN7BIOrD2kGNAfQn+KSfmCua1OP3OAQvtsZyCSeor1Y05/ matthias@pc +ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+2WqFF4b5iIl/zM5uzm4Y+oBmWW4vnlZ7z8D1gdzTB17fE+GlFAYBqLTRkgcCHK6spzxrVEiAm47RmrP/d7wud/EVHy6n9QPC9b9Ov2/Huo4e7K1OHN/FAWkfjTC8AKc7RiBvdb8apgpkWRWZbrqKqGaD8gRPjMFz+m/pg4Nq7P4NQLCJnlknVSi0JIwLmJc86ZBPqPbeZT7WQgIvsrhwcn956oYM95SxMU5xEMLHKGyGBh+8o8PWIpv6Vt7S+JN6kssKkduEqd75mDBjbVCVQ2ng2sqhZsbrqc9AD2K/o3EBpgwTwOxCYKx3bs6ILW3tXsltJDF0pnCBZwydJncf matthias@matthias-tp