2026-05-02-01
Signed-off-by: Nicolas Boufidjeline <nicolas.boufidjeline@g3e.fr>
This commit is contained in:
parent
4ea1dda700
commit
1b5c3219b8
1 changed files with 47 additions and 1 deletions
|
|
@ -6,4 +6,50 @@ Introduction
|
||||||
|
|
||||||
Voici la documentation pour preparer le system ou sera executer l'agent.
|
Voici la documentation pour preparer le system ou sera executer l'agent.
|
||||||
|
|
||||||
On commence par installer les packet necessaire comme qemu, etc...
|
.. code-block::
|
||||||
|
|
||||||
|
apt-get install -y \
|
||||||
|
vim \
|
||||||
|
htop \
|
||||||
|
socat \
|
||||||
|
ebtables \
|
||||||
|
qemu-system qemu-utils qemu-kvm \
|
||||||
|
genisoimage \
|
||||||
|
curl \
|
||||||
|
whois \
|
||||||
|
tcpdump \
|
||||||
|
bridge-utils
|
||||||
|
|
||||||
|
sysctl -w net.ipv4.ip_forward=1
|
||||||
|
iptables -A OUTPUT -p icmp --icmp-type time-exceeded -j DROP
|
||||||
|
|
||||||
|
iptables -N ACCEPT_BOGON
|
||||||
|
|
||||||
|
iptables -A ACCEPT_BOGON -s 10.0.0.0/8 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 192.168.0.0/16 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 192.168.15.0/24 -j DROP
|
||||||
|
iptables -A ACCEPT_BOGON -s 172.16.0.0/12 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 127.0.0.0/8 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 169.254.0.0/16 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 0.0.0.0/8 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 240.0.0.0/4 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -s 224.0.0.0/4 -j ACCEPT
|
||||||
|
iptables -A ACCEPT_BOGON -j DROP
|
||||||
|
|
||||||
|
iptables -A INPUT -j ACCEPT_BOGON
|
||||||
|
|
||||||
|
brctl addbr br-public
|
||||||
|
brctl stp "br-public" off
|
||||||
|
ip link set up dev "br-public"
|
||||||
|
|
||||||
|
ip link add name "br-000000" type bridge
|
||||||
|
ip link set dev "br-000000" type bridge stp_state 0
|
||||||
|
ip link set up dev "br-000000"
|
||||||
|
|
||||||
|
ip link set "eno1" master "br-000000"
|
||||||
|
ip a add 192.168.14.101/24 dev "br-000000"
|
||||||
|
ip route replace default via 192.168.14.1 dev "br-000000"
|
||||||
|
ip a del 192.168.14.101/24 dev eno1
|
||||||
|
pkill dhclient
|
||||||
|
|
||||||
|
systemctl daemon-reload
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue