VCN - Revision history

Cesco at 22:34, 8 June 2016

2016-06-08T22:34:32Z

← Older revision		Revision as of 00:34, 9 June 2016
Line 12:		Line 12:
	installa [http://www.tinc-vpn.org/ Tinc]		installa [http://www.tinc-vpn.org/ Tinc]

	lancia '''tinc''' e fagli creare una chiave:		lancia '''tinc''' (se non lo trovi prova con tincd) e fagli creare una chiave:

	<source lang="bash">tinc -n vcn -K 2048</source>		<source lang="bash">tinc -n vcn -K 2048</source>

2016-06-08T22:33:16Z

Sicurezza

← Older revision		Revision as of 00:33, 9 June 2016
Line 36:		Line 36:
	puoi proteggerlo con un muro di fuoco!		puoi proteggerlo con un muro di fuoco!

	~~su linux:~~		=== Linux ===

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	# fai vedere a tutti la tua ''webapp''		# fai vedere a tutti la tua ''webapp''
Line 48:		Line 49:
	</syntaxhighlight>		</syntaxhighlight>

	su NetBSD con NPF:		=== NetBSD con NPF ===

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">

2016-06-08T22:31:53Z

Sicurezza

@@ Line 46: / Line 46: @@
 # blocca gli altri
 iptables -A INPUT -i vcn -p tcp -j DROP
 </syntaxhighlight>

2016-06-08T22:29:33Z

Gateway

← Older revision		Revision as of 00:29, 9 June 2016
Line 57:		Line 57:
	iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE		iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

	iptables -A FORWARD -i vcn -s ''ip.del.client'' -j ACCEPT		iptables -A FORWARD -i vcn -s ip.del.client -j ACCEPT
	iptables -A FORWARD -i vcn -j DROP		iptables -A FORWARD -i vcn -j DROP
	</syntaxhighlight>		</syntaxhighlight>
Line 65:		Line 65:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	ORIGINAL_GATEWAY=`ip route show \| grep ^default \| cut -d ' ' -f 2-5`		ORIGINAL_GATEWAY=`ip route show \| grep ^default \| cut -d ' ' -f 2-5`
	route add default gw ''ip.del.gateway''		route add default gw ip.del.gateway
	ip route del default $ORIGINAL_GATEWAY		ip route del default $ORIGINAL_GATEWAY
	</syntaxhighlight>		</syntaxhighlight>

2016-06-08T22:28:35Z

Gateway

← Older revision		Revision as of 00:28, 9 June 2016
Line 57:		Line 57:
	iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE		iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

	iptables -A FORWARD -i vcn -s ~~172~~.20.~~0.2 -j ACCEPT~~		iptables -A FORWARD -i vcn -s ''ip.del.client'' -j ACCEPT
	~~iptables -A FORWARD -i vcn -s 172.20.0.3 -j ACCEPT~~
	~~iptables -A FORWARD -i vcn -s 172.20.0.131~~ -j ACCEPT
	iptables -A FORWARD -i vcn -j DROP		iptables -A FORWARD -i vcn -j DROP
	</syntaxhighlight>		</syntaxhighlight>
Line 67:		Line 65:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	ORIGINAL_GATEWAY=`ip route show \| grep ^default \| cut -d ' ' -f 2-5`		ORIGINAL_GATEWAY=`ip route show \| grep ^default \| cut -d ' ' -f 2-5`
	route add default gw ~~172~~.20.~~0.231~~		route add default gw ''ip.del.gateway''
	ip route del default $ORIGINAL_GATEWAY		ip route del default $ORIGINAL_GATEWAY
	</syntaxhighlight>		</syntaxhighlight>

2016-06-08T22:27:18Z

Gateway

← Older revision		Revision as of 00:27, 9 June 2016
Line 50:		Line 50:
	== Gateway ==		== Gateway ==

	<~~code~~>		sul gateway di uscita:

			<syntaxhighlight lang="bash">
	echo 1 >/proc/sys/net/ipv4/ip_forward		echo 1 >/proc/sys/net/ipv4/ip_forward

Line 59:		Line 61:
	iptables -A FORWARD -i vcn -s 172.20.0.131 -j ACCEPT		iptables -A FORWARD -i vcn -s 172.20.0.131 -j ACCEPT
	iptables -A FORWARD -i vcn -j DROP		iptables -A FORWARD -i vcn -j DROP
	</~~code~~>		</syntaxhighlight>

			sul client:

			<syntaxhighlight lang="bash">
			ORIGINAL_GATEWAY=`ip route show \| grep ^default \| cut -d ' ' -f 2-5`
			route add default gw 172.20.0.231
			ip route del default $ORIGINAL_GATEWAY
			</syntaxhighlight>

	== DNS ==		== DNS ==

2016-06-08T22:24:35Z

Gateway

← Older revision		Revision as of 00:24, 9 June 2016
Line 51:		Line 51:

	<code>		<code>
	~~cho~~ 1 >/proc/sys/net/ipv4/ip_forward		echo 1 >/proc/sys/net/ipv4/ip_forward

	iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE		iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

2016-06-08T22:24:00Z

Sicurezza

@@ Line 47: / Line 47: @@
 iptables -A INPUT -i vcn -p tcp -j DROP
 </syntaxhighlight>
 == DNS ==

2016-05-03T10:56:29Z

← Older revision		Revision as of 12:56, 3 May 2016
Line 14:		Line 14:
	lancia '''tinc''' e fagli creare una chiave:		lancia '''tinc''' e fagli creare una chiave:

	<source lang="bash">tinc -n vcn -K</source>		<source lang="bash">tinc -n vcn -K 2048</source>

	se si arrabbia, crea la directory /etc/tinc/vcn		se si arrabbia, crea la directory /etc/tinc/vcn

2016-04-15T16:27:14Z

← Older revision		Revision as of 18:27, 15 April 2016
Line 38:		Line 38:
	su linux:		su linux:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
			# fai vedere a tutti la tua ''webapp''
			iptables -A INPUT -i vcn -p tcp --dport 80 -j ACCEPT
	# fai passare i tuoi amici (172.20.0.31) sulle porte giuste (ssh)		# fai passare i tuoi amici (172.20.0.31) sulle porte giuste (ssh)
	iptables -A INPUT -i vcn -p tcp --dport ssh -s 172.20.0.31 -j ACCEPT		iptables -A INPUT -i vcn -p tcp --dport ssh -s 172.20.0.31 -j ACCEPT