Ambiente:
Matriz Filial
(Debian Squeeze) (IP da SimNet) (GW da SimNet) (Internet) (GW da Speedy) (IP da Speedy) (Cisco RV042)
192.168.0.0/24 <--> 200.148.x.x <--> 200.148.x.1 ------------------ 200.204.x.1 <--> 201.92.x.x <--> 192.168.200.0/24
# apt-get install openswan
Nao é preciso criar a chave x509
Os 2 principais arquivos sao:
/etc/ipsec.conf
/etc/ipsec.secrets
Primeiro faça um backup e depois troque todo o conteudo:
cp /etc/ipsec.conf /etc/ipsec.conf.old
vim /etc/ipsec.conf
-----Inicio------
version 2.0
config setup
nat_traversal=yes
interfaces="ipsec0=eth1"
klipsdebug=none
plutodebug=none
conn cisco
type= tunnel
authby= secret
left=200.148.x.x
leftsubnet=192.168.0.0/24
leftsourceip=192.168.0.1
right=201.92.x.x
rightsubnet=192.168.200.0/24
leftsourceip=192.168.0.1
auto=start
-----Fim------
Editar o ipsec.secrets
vim /etc/ipsec.secrets
e acrescente a seguinte linha:
201.92.x.x 200.148.x.x: PSK "1234567890"
# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.4.6rc3/K2.6.16-1.2115_FC4 (netkey)
Checking for IPsec support in kernel [OK]
NETKEY detected, testing for disabled ICMP send_redirects [FAILED]
Please disable /proc/sys/net/ipv4/conf/*/send_redirects
or NETKEY will cause the sending of bogus ICMP redirects!
NETKEY detected, testing for disabled ICMP accept_redirects [FAILED]
Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
or NETKEY will accept bogus ICMP redirects!
Checking for RSA private key (/etc/ipsec.secrets) [OK]
Checking that pluto is running [OK]
Two or more interfaces found, checking IP forwarding [FAILED]
Checking for 'ip' command [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
# for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do echo 0 > $f; done
# for f in /proc/sys/net/ipv4/conf/*/send_redirects; do echo 0 > $f; done
# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.28/K2.6.32-5-686 (netkey)
Checking for IPsec support in kernel [OK]
NETKEY detected, testing for disabled ICMP send_redirects [OK]
NETKEY detected, testing for disabled ICMP accept_redirects [OK]
Checking that pluto is running [OK]
Pluto listening for IKE on udp 500 [OK]
Pluto listening for NAT-T on udp 4500 [OK]
Two or more interfaces found, checking IP forwarding [OK]
Checking NAT and MASQUERADEing
Checking for 'ip' command [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
Troque de:
iptables -D POSTROUTING -t nat -o eth1 -s 192.168.0.0/24 -j MASQUERADE
iptables -A POSTROUTING -t nat -o eth1 -s 192.168.0.0/24 ! -d 192.168.200.0/24 -j MASQUERADE
Reinicie o serviço:
/etc/init.d/ipsec restart
Subindo a vpn e ja criando a rota:
ipsec auto --up cisco
route add -net 192.168.200.0 netmask 255.255.255.0 dev eth1
terça-feira, 6 de dezembro de 2011
Instalando MSN-PROXY
instalar apache php mysql
#apt-get update
#apt-get install apache2 php5 php5-mysql php5-gd php5-imagick mysql-server g++ libmysqlclient15-dev
vim /etc/php5/apache2/php.ini
altere as propriedades
#safe_mode = On
#safe_mode_gid = On
#register_globals = On
#display_errors = On
instalar libevent
# wget http://monkey.org/~provos/libevent-1.4.12-stable.tar.gz
# tar -vxzf libevent-1.4.12-stable.tar.gz
# cd libevent-1.4.12-stable
# ./configure
# make && make install
# cd /usr/lib/
# ln -s /usr/local/lib/libevent-1.4.so.2
Instalar MSN-Proxy
# wget http://ufpr.dl.sourceforge.net/project/msn-proxy/msn-proxy/msn-proxy-0.7/msn-proxy-0.7.tar.gz
# tar -vxzf msn-proxy-0.7.tar.gz
# cd msn-proxy-0.7
# vim Makefile
Comente as duas linhas referentes ao FreeBSD e descomente as do Linux, como abaixo:
MYSQLINC=/usr/lib/mysql
MYSQLLIB=/var/lib/mysql/mysql
# make && make install
# mkdir /var/www/msn-proxy
# cp -R php/* /var/www/msn-proxy
# vim /var/www/msn-proxy/mysql.inc.php
Altere como abaixo:
$host = "localhost";
$user = "msn-proxy";
$pass = "1234567890";
$db = "msn-proxy";
$port = 3306;
# vim /usr/local/etc/msn-proxy/mysql/conf
localhost|3306|msn-proxy|1234567890|msn-proxy
criar a base de dados
# mysql -u root -p
mysql> CREATE DATABASE `msn-proxy`;
mysql> grant all privileges on `msn-proxy`.* to `msn-proxy`@localhost identified by "1234567890";
mysql> flush privileges;
mysql> exit;
# chmod 600 /usr/local/etc/msn-proxy/mysql/conf
# vim /usr/local/etc/msn-proxy/msn-proxy.conf
Altere como abaixo:
max_clients=200
Vamos iniciar o msn-proxy para que o programa crie as tabelas no banco vazio que criamos:
# msn-proxy
Será apresentado um erro. Vamos inserir um conteúdo na tabela:
# mysql -u root -p
mysql> use msn-proxy;
mysql> show tables;
mysql> insert into `defaults`(`internal_host`) values ("192.168.0.11");
mysql> exit;
# iptables -t nat -I PREROUTING -i eth0 -p tcp --dport 1863 -j REDIRECT --to-port 1863
Para iniciar manualmente o msn-proxy, execute um dos comandos abaixo:
# msn-proxy & (roda em background)
ou
# msn-proxy -d & (-d para ver os logs e & para rodar em background)
* lembrando que vc tem que transferir todo o trafego da sua rede para essa maquina
é so colocar no gw das maquianas o ip 192.168.0.11
e ativar o roteamento no seu servidor
# vim /etc/sysctl.conf
e alterar para:
net.ipv4.ip_forward=1
ou
echo 1 > /proc/sys/net/ipv4/ip_forward
#apt-get update
#apt-get install apache2 php5 php5-mysql php5-gd php5-imagick mysql-server g++ libmysqlclient15-dev
vim /etc/php5/apache2/php.ini
altere as propriedades
#safe_mode = On
#safe_mode_gid = On
#register_globals = On
#display_errors = On
instalar libevent
# wget http://monkey.org/~provos/libevent-1.4.12-stable.tar.gz
# tar -vxzf libevent-1.4.12-stable.tar.gz
# cd libevent-1.4.12-stable
# ./configure
# make && make install
# cd /usr/lib/
# ln -s /usr/local/lib/libevent-1.4.so.2
Instalar MSN-Proxy
# wget http://ufpr.dl.sourceforge.net/project/msn-proxy/msn-proxy/msn-proxy-0.7/msn-proxy-0.7.tar.gz
# tar -vxzf msn-proxy-0.7.tar.gz
# cd msn-proxy-0.7
# vim Makefile
Comente as duas linhas referentes ao FreeBSD e descomente as do Linux, como abaixo:
MYSQLINC=/usr/lib/mysql
MYSQLLIB=/var/lib/mysql/mysql
# make && make install
# mkdir /var/www/msn-proxy
# cp -R php/* /var/www/msn-proxy
# vim /var/www/msn-proxy/mysql.inc.php
Altere como abaixo:
$host = "localhost";
$user = "msn-proxy";
$pass = "1234567890";
$db = "msn-proxy";
$port = 3306;
# vim /usr/local/etc/msn-proxy/mysql/conf
localhost|3306|msn-proxy|1234567890|msn-proxy
criar a base de dados
# mysql -u root -p
mysql> CREATE DATABASE `msn-proxy`;
mysql> grant all privileges on `msn-proxy`.* to `msn-proxy`@localhost identified by "1234567890";
mysql> flush privileges;
mysql> exit;
# chmod 600 /usr/local/etc/msn-proxy/mysql/conf
# vim /usr/local/etc/msn-proxy/msn-proxy.conf
Altere como abaixo:
max_clients=200
Vamos iniciar o msn-proxy para que o programa crie as tabelas no banco vazio que criamos:
# msn-proxy
Será apresentado um erro. Vamos inserir um conteúdo na tabela:
# mysql -u root -p
mysql> use msn-proxy;
mysql> show tables;
mysql> insert into `defaults`(`internal_host`) values ("192.168.0.11");
mysql> exit;
# iptables -t nat -I PREROUTING -i eth0 -p tcp --dport 1863 -j REDIRECT --to-port 1863
Para iniciar manualmente o msn-proxy, execute um dos comandos abaixo:
# msn-proxy & (roda em background)
ou
# msn-proxy -d & (-d para ver os logs e & para rodar em background)
* lembrando que vc tem que transferir todo o trafego da sua rede para essa maquina
é so colocar no gw das maquianas o ip 192.168.0.11
e ativar o roteamento no seu servidor
# vim /etc/sysctl.conf
e alterar para:
net.ipv4.ip_forward=1
ou
echo 1 > /proc/sys/net/ipv4/ip_forward
Gerenciando o VirtualBox pela Web
#Adicione no
/etc/apt/sources.list
deb http://download.virtualbox.org/virtualbox/debian squeeze contrib non-free
wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | apt-key add -
apt-get update
apt-get install virtualbox-4.1
wget http://download.virtualbox.org/virtualbox/4.1.4/Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack
vboxmanage extpack install Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack
adduser vbox
touch /etc/default/virtualbox
vim /etc/default/virtualbox
VBOXWEB_USER=vbox
VBOXWEB_HOST=127.0.0.1
VBOXWEB_PORT=18083
INSTALL_DIR=/usr/bin/virtualbox
/etc/init.d/vboxweb-service start
apt-get install apache2 php5 unzip
a2enmod php5
cd /etc/apache2/sites-available
cp default phpvirtualbox
vim phpvirtualbox
DocumentRoot /var/www/phpvirtualbox
Directory /var/www/phpvirtualbox>
a2ensite phpvirtualbox
wget http://phpvirtualbox.googlecode.com/files/phpvirtualbox-4.1-4.zip
cp phpvirtualbox-4.1-4.zip /var/www
cd /var/www
unzip phpvirtualbox-4.1-4.zip
mv phpvirtualbox-4.1-4 phpvirtualbox
cd phpvirtualbox
cp config.php-example config.php
vim config.php
/* Username / Password for system user that runs VirtualBox */
var $username = 'vbox';
var $password = 'pass';
*/
var $language = 'pt_br';
apachectl restart
http://192.168.0.8/phpvirtualbox/
admin
admin
/etc/apt/sources.list
deb http://download.virtualbox.org/virtualbox/debian squeeze contrib non-free
wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | apt-key add -
apt-get update
apt-get install virtualbox-4.1
wget http://download.virtualbox.org/virtualbox/4.1.4/Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack
vboxmanage extpack install Oracle_VM_VirtualBox_Extension_Pack-4.1.4.vbox-extpack
adduser vbox
touch /etc/default/virtualbox
vim /etc/default/virtualbox
VBOXWEB_USER=vbox
VBOXWEB_HOST=127.0.0.1
VBOXWEB_PORT=18083
INSTALL_DIR=/usr/bin/virtualbox
/etc/init.d/vboxweb-service start
apt-get install apache2 php5 unzip
a2enmod php5
cd /etc/apache2/sites-available
cp default phpvirtualbox
vim phpvirtualbox
DocumentRoot /var/www/phpvirtualbox
Directory /var/www/phpvirtualbox>
a2ensite phpvirtualbox
wget http://phpvirtualbox.googlecode.com/files/phpvirtualbox-4.1-4.zip
cp phpvirtualbox-4.1-4.zip /var/www
cd /var/www
unzip phpvirtualbox-4.1-4.zip
mv phpvirtualbox-4.1-4 phpvirtualbox
cd phpvirtualbox
cp config.php-example config.php
vim config.php
/* Username / Password for system user that runs VirtualBox */
var $username = 'vbox';
var $password = 'pass';
*/
var $language = 'pt_br';
apachectl restart
http://192.168.0.8/phpvirtualbox/
admin
admin
Instalar NO-IP no Debian
apt-get update
apt-get install make gcc
mkdir noip && cd noip
wget http://www.no-ip.com/client/linux/noip-duc-linux.tar.gz
tar -zvxf noip-duc-linux.tar.gz
cd noip-2.1.9-1/
make && make install
# Colocar endereço de email: xxxxxxx@xxxxxxx.com
# Colocar senha: ******
# Colocar tempo de atualização do no-ip: 10
# n
cp debian.noip2.sh /etc/init.d/
chmod +x /etc/init.d/debian.noip2.sh
ln -s /etc/init.d/debian.noip2.sh /etc/rc2.d/S20noip
apt-get install make gcc
mkdir noip && cd noip
wget http://www.no-ip.com/client/linux/noip-duc-linux.tar.gz
tar -zvxf noip-duc-linux.tar.gz
cd noip-2.1.9-1/
make && make install
# Colocar endereço de email: xxxxxxx@xxxxxxx.com
# Colocar senha: ******
# Colocar tempo de atualização do no-ip: 10
# n
cp debian.noip2.sh /etc/init.d/
chmod +x /etc/init.d/debian.noip2.sh
ln -s /etc/init.d/debian.noip2.sh /etc/rc2.d/S20noip
Montando Compartilhamento do Windows no Linux
apt-get install smbfs
mount -t smbfs -o username=Administrador,password=p@ssw0rd //192.168.0.100/Backup/ /Backup/
-t tipo
-o opcoes
username = usuario do windows
password = senha do windows
//192.168.0.100/Backup/ = compartilhamento do windows
/Backup/ = pasta onde vai ser montado o compartilhamento
mount -t smbfs -o username=Administrador,password=p@ssw0rd //192.168.0.100/Backup/ /Backup/
-t tipo
-o opcoes
username = usuario do windows
password = senha do windows
//192.168.0.100/Backup/ = compartilhamento do windows
/Backup/ = pasta onde vai ser montado o compartilhamento
Ingressando um computador com debian em um dominio Windows
#Sincronizar a hora com a do AD
apt-get install ntpdate
ntpdate 192.168.0.1
#Baixar a versao do likewise para o debian
wget http://www.beyondtrust.com/Technical-Support/Downloads/files/PBISO/6.0/8398/LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Deixar ele como executavel
chmod +x LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Instalar
./LikewiseOpen-6.0.0.8398-linux-i386-deb.sh install
#Ingressar no dominio
domainjoin-cli join mk2ks.local administrador
#Reinicie a maquina
apt-get install ntpdate
ntpdate 192.168.0.1
#Baixar a versao do likewise para o debian
wget http://www.beyondtrust.com/Technical-Support/Downloads/files/PBISO/6.0/8398/LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Deixar ele como executavel
chmod +x LikewiseOpen-6.0.0.8398-linux-i386-deb.sh
#Instalar
./LikewiseOpen-6.0.0.8398-linux-i386-deb.sh install
#Ingressar no dominio
domainjoin-cli join mk2ks.local administrador
#Reinicie a maquina
Assinar:
Postagens (Atom)