matthias/panda_linux
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

- Setup for actual network environment

Browse Source
This commit is contained in:
Matthias Blankertz
2014-05-09 14:36:21 +02:00
parent cee854e238
commit 8a0995f809
3 changed files with 20 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
overlay/etc/firewall.sh
View File

@@ -118,8 +118,8 @@ echo "1" > /proc/sys/net/ipv4/ip_forward
## Setup IPv6
IP6PRIVATE=2001:7c0:409:8001::/64
IP6LANIP=2001:7c0:409:8001::2
IP6PRIVATE=2001:7c0:409:8e78::/64
IP6LANIP=2001:7c0:409:8e78::117:221
# Delete old iptables rules
# and temporarily block all traffic.
@@ -150,13 +150,13 @@ ip6tables -A INPUT -i lo -j ACCEPT
ip6tables -A OUTPUT -o lo -j ACCEPT
# Source spoof filtering from us
ip6tables -N SSOutFilterLAN
ip6tables -A OUTPUT -o $LANIF -j SSOutFilterLAN
ip6tables -A FORWARD -o $LANIF -j SSOutFilterLAN
ip6tables -A SSOutFilterLAN -s $IP6LANIP -j RETURN
ip6tables -A SSOutFilterLAN -s fe80::/10 -j RETURN
ip6tables -A SSOutFilterLAN -j LOG --log-prefix "SOURCESPOOFOUT6 "
ip6tables -A SSOutFilterLAN -j DROP
#ip6tables -N SSOutFilterLAN
#ip6tables -A OUTPUT -o $LANIF -j SSOutFilterLAN
#ip6tables -A FORWARD -o $LANIF -j SSOutFilterLAN
#ip6tables -A SSOutFilterLAN -s $IP6LANIP -j RETURN
#ip6tables -A SSOutFilterLAN -s fe80::/10 -j RETURN
#ip6tables -A SSOutFilterLAN -j LOG --log-prefix "SOURCESPOOFOUT6 "
#ip6tables -A SSOutFilterLAN -j DROP
# Source spoof filtering to us
ip6tables -N SSInFilterLAN

14
overlay/etc/network/interfaces
View File

@@ -3,7 +3,13 @@ auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 172.20.117.221
netmask 255.255.255.240
gateway 172.20.117.209
iface eth0 inet dhcp
iface eth0 inet6 static
address 2001:7c0:409:8e78::117:221
netmask 64
#auto eth0
#iface eth0 inet static
# address 172.20.117.221
# netmask 255.255.255.240
# gateway 172.20.117.209

1
overlay/home/matthias/.ssh/authorized_keys
View File

@@ -1 +1,2 @@
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgvPpPNe3SxVtXWeyWE/cB+ME+8q8goWQLDnGfjtEFdStL/2d39yyiqEvE1ystjfrdrhd6xcwYntAAiX/8LsV9kGOGx2QMxiAaKNboEJKFwPqeOQLYY69DDq3n4VQaNlMMNzsqSTDuaS/Gl4WZqvpYQ4wJaS3Ln95ec0zFLyUWyyh3uaw7iv/iJUX9NLlCTbuEtrhswnHyYK7x1g9LWBAtBER0QLAIU1CO/VCeRmfgKf0OIzdKiBw2lgVAwpme/LPh7SAQhQoRcQdkBCZH/Wl9K0Bp/it6BwSYaHVChEaN7BIOrD2kGNAfQn+KSfmCua1OP3OAQvtsZyCSeor1Y05/ matthias@pc
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+2WqFF4b5iIl/zM5uzm4Y+oBmWW4vnlZ7z8D1gdzTB17fE+GlFAYBqLTRkgcCHK6spzxrVEiAm47RmrP/d7wud/EVHy6n9QPC9b9Ov2/Huo4e7K1OHN/FAWkfjTC8AKc7RiBvdb8apgpkWRWZbrqKqGaD8gRPjMFz+m/pg4Nq7P4NQLCJnlknVSi0JIwLmJc86ZBPqPbeZT7WQgIvsrhwcn956oYM95SxMU5xEMLHKGyGBh+8o8PWIpv6Vt7S+JN6kssKkduEqd75mDBjbVCVQ2ng2sqhZsbrqc9AD2K/o3EBpgwTwOxCYKx3bs6ILW3tXsltJDF0pnCBZwydJncf matthias@matthias-tp