Prepare the system

Contenu

Prepare the system#

Introduction#

Voici la documentation pour preparer le system ou sera executer l’agent.

apt-get install -y \
    vim \
    htop \
    socat \
    ebtables \
    qemu-system qemu-utils qemu-kvm \
    genisoimage \
    curl \
    whois \
    tcpdump \
    bridge-utils

sysctl -w net.ipv4.ip_forward=1
iptables -A OUTPUT -p icmp --icmp-type time-exceeded -j DROP

iptables -N ACCEPT_BOGON

iptables -A ACCEPT_BOGON -s 10.0.0.0/8 -j ACCEPT
iptables -A ACCEPT_BOGON -s 192.168.0.0/16 -j ACCEPT
iptables -A ACCEPT_BOGON -s 192.168.15.0/24 -j DROP
iptables -A ACCEPT_BOGON -s 172.16.0.0/12 -j ACCEPT
iptables -A ACCEPT_BOGON -s 127.0.0.0/8 -j ACCEPT
iptables -A ACCEPT_BOGON -s 169.254.0.0/16 -j ACCEPT
iptables -A ACCEPT_BOGON -s 0.0.0.0/8 -j ACCEPT
iptables -A ACCEPT_BOGON -s 240.0.0.0/4 -j ACCEPT
iptables -A ACCEPT_BOGON -s 224.0.0.0/4 -j ACCEPT
iptables -A ACCEPT_BOGON -j DROP

iptables -A INPUT -j ACCEPT_BOGON

brctl addbr br-public
brctl stp   "br-public" off
ip link set up dev "br-public"

ip link add name "br-000000" type bridge
ip link set dev "br-000000" type bridge stp_state 0
ip link set up dev "br-000000"

ip link  set "eno1" master "br-000000"
ip a add 192.168.14.101/24 dev "br-000000"
ip route replace default via 192.168.14.1 dev "br-000000"
ip a del 192.168.14.101/24 dev eno1
pkill dhclient

systemctl daemon-reload
Contenu