From 814f28c2f527e4b5b7b04f17b7cff97bc6b856af Mon Sep 17 00:00:00 2001 From: Rotsipitia Rahaingoharivahitra Date: Mon, 16 Sep 2024 17:35:02 +0200 Subject: [PATCH] =?UTF-8?q?=09nouveau=20fichier=C2=A0:=20sio2/CYBERSECURIT?= =?UTF-8?q?E/02-check/check=20=09nouveau=20fichier=C2=A0:=20sio2/SISR/05-p?= =?UTF-8?q?xe/dhcpd.conf=20=09nouveau=20fichier=C2=A0:=20sio2/SISR/05-pxe/?= =?UTF-8?q?enp0s3=20=09nouveau=20fichier=C2=A0:=20sio2/SISR/05-pxe/enp0s8?= =?UTF-8?q?=20=09nouveau=20fichier=C2=A0:=20sio2/SISR/05-pxe/isc-dhcp-serv?= =?UTF-8?q?er=20=09nouveau=20fichier=C2=A0:=20sio2/SISR/05-pxe/nat.sh?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- sio2/CYBERSECURITE/02-check/check | 4 + sio2/SISR/05-pxe/dhcpd.conf | 127 ++++++++++++++++++++++++++++++ sio2/SISR/05-pxe/enp0s3 | 3 + sio2/SISR/05-pxe/enp0s8 | 6 ++ sio2/SISR/05-pxe/isc-dhcp-server | 18 +++++ sio2/SISR/05-pxe/nat.sh | 5 ++ 6 files changed, 163 insertions(+) create mode 100644 sio2/CYBERSECURITE/02-check/check create mode 100644 sio2/SISR/05-pxe/dhcpd.conf create mode 100644 sio2/SISR/05-pxe/enp0s3 create mode 100644 sio2/SISR/05-pxe/enp0s8 create mode 100644 sio2/SISR/05-pxe/isc-dhcp-server create mode 100755 sio2/SISR/05-pxe/nat.sh diff --git a/sio2/CYBERSECURITE/02-check/check b/sio2/CYBERSECURITE/02-check/check new file mode 100644 index 0000000..4b981e9 --- /dev/null +++ b/sio2/CYBERSECURITE/02-check/check @@ -0,0 +1,4 @@ +#!/bin/bash + +aideinit +aide --check --config /etc/aide/aide.conf \ No newline at end of file diff --git a/sio2/SISR/05-pxe/dhcpd.conf b/sio2/SISR/05-pxe/dhcpd.conf new file mode 100644 index 0000000..e8fcd3b --- /dev/null +++ b/sio2/SISR/05-pxe/dhcpd.conf @@ -0,0 +1,127 @@ +# dhcpd.conf +# +# Sample configuration file for ISC dhcpd +# + +# option definitions common to all supported networks... +option domain-name "sio.lan"; +option domain-name-servers 10.121.38.7, 10.121.38.8; + +option pxe-arch code 93 = unsigned integer 16; + +default-lease-time 7200; +max-lease-time 7200; + +# The ddns-updates-style parameter controls whether or not the server will +# attempt to do a DNS update when a lease is confirmed. We default to the +# behavior of the version 2 packages ('none', since DHCP v2 didn't +# have support for DDNS.) +ddns-update-style none; + +# If this DHCP server is the official DHCP server for the local +# network, the authoritative directive should be uncommented. +#authoritative; + +# Use this to send dhcp log messages to a different log file (you also +# have to hack syslog.conf to complete the redirection). +#log-facility local7; + +# No service will be given on this subnet, but declaring it helps the +# DHCP server to understand the network topology. + +#subnet 10.152.187.0 netmask 255.255.255.0 { +#} + +# This is a very basic subnet declaration. + +subnet 192.168.1.0 netmask 255.255.255.0 { + range 192.168.1.10 192.168.1.20; + option broadcast-address 192.168.1.255; + option routers 192.168.1.1 ; + next-server 192.168.1.1; + if option pxe-arch = 00:07 { + filename "debian-installer/amd/bootnetx64.efi"; + } else { + filename "pxelinux.0"; + } + +} + +#group { + # next-server 192.168.1.1; + #host tftpclient { + # if option architecture-type = 00:07 { + # filename "debian-installer/amd/bootnetx64.efi"; + # } else { + # filename "pxelinux.0"; + # #} +#} + +# This declaration allows BOOTP clients to get dynamic addresses, +# which we don't really recommend. + +#subnet 10.254.239.32 netmask 255.255.255.224 { +# range dynamic-bootp 10.254.239.40 10.254.239.60; +# option broadcast-address 10.254.239.31; +# option routers rtr-239-32-1.example.org; +#} + +# A slightly different configuration for an internal subnet. +#subnet 10.5.5.0 netmask 255.255.255.224 { +# range 10.5.5.26 10.5.5.30; +# option domain-name-servers ns1.internal.example.org; +# option domain-name "internal.example.org"; +# option routers 10.5.5.1; +# option broadcast-address 10.5.5.31; +# default-lease-time 600; +# max-lease-time 7200; +#} + +# Hosts which require special configuration options can be listed in +# host statements. If no address is specified, the address will be +# allocated dynamically (if possible), but the host-specific information +# will still come from the host declaration. + +#host passacaglia { +# hardware ethernet 0:0:c0:5d:bd:95; +# filename "vmunix.passacaglia"; +# server-name "toccata.example.com"; +#} + +# Fixed IP addresses can also be specified for hosts. These addresses +# should not also be listed as being available for dynamic assignment. +# Hosts for which fixed IP addresses have been specified can boot using +# BOOTP or DHCP. Hosts for which no fixed address is specified can only +# be booted with DHCP, unless there is an address range on the subnet +# to which a BOOTP client is connected which has the dynamic-bootp flag +# set. +#host fantasia { +# hardware ethernet 08:00:07:26:c0:a5; +# fixed-address fantasia.example.com; +#} + +# You can declare a class of clients and then do address allocation +# based on that. The example below shows a case where all clients +# in a certain class get addresses on the 10.17.224/24 subnet, and all +# other clients get addresses on the 10.0.29/24 subnet. + +#class "foo" { +# match if substring (option vendor-class-identifier, 0, 4) = "SUNW"; +#} + +#shared-network 224-29 { +# subnet 10.17.224.0 netmask 255.255.255.0 { +# option routers rtr-224.example.org; +# } +# subnet 10.0.29.0 netmask 255.255.255.0 { +# option routers rtr-29.example.org; +# } +# pool { +# allow members of "foo"; +# range 10.17.224.10 10.17.224.250; +# } +# pool { +# deny members of "foo"; +# range 10.0.29.10 10.0.29.230; +# } +#} diff --git a/sio2/SISR/05-pxe/enp0s3 b/sio2/SISR/05-pxe/enp0s3 new file mode 100644 index 0000000..8cfd0e7 --- /dev/null +++ b/sio2/SISR/05-pxe/enp0s3 @@ -0,0 +1,3 @@ +# generated by FAI +auto enp0s3 +iface enp0s3 inet dhcp diff --git a/sio2/SISR/05-pxe/enp0s8 b/sio2/SISR/05-pxe/enp0s8 new file mode 100644 index 0000000..9874b79 --- /dev/null +++ b/sio2/SISR/05-pxe/enp0s8 @@ -0,0 +1,6 @@ +# generated by FAI +auto enp0s8 +iface enp0s8 inet static + address 192.168.1.1/24 + up /bin/bash /root/nat.sh + diff --git a/sio2/SISR/05-pxe/isc-dhcp-server b/sio2/SISR/05-pxe/isc-dhcp-server new file mode 100644 index 0000000..7da11f6 --- /dev/null +++ b/sio2/SISR/05-pxe/isc-dhcp-server @@ -0,0 +1,18 @@ +# Defaults for isc-dhcp-server (sourced by /etc/init.d/isc-dhcp-server) + +# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf). +DHCPDv4_CONF=/etc/dhcp/dhcpd.conf +#DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf + +# Path to dhcpd's PID file (default: /var/run/dhcpd.pid). +DHCPDv4_PID=/var/run/dhcpd.pid +#DHCPDv6_PID=/var/run/dhcpd6.pid + +# Additional options to start dhcpd with. +# Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead +#OPTIONS="" + +# On what interfaces should the DHCP server (dhcpd) serve DHCP requests? +# Separate multiple interfaces with spaces, e.g. "eth0 eth1". +INTERFACESv4="enp0s8" +#INTERFACESv6="" diff --git a/sio2/SISR/05-pxe/nat.sh b/sio2/SISR/05-pxe/nat.sh new file mode 100755 index 0000000..9a9ab6d --- /dev/null +++ b/sio2/SISR/05-pxe/nat.sh @@ -0,0 +1,5 @@ +#!/bin/bash +# +echo 1 > /proc/sys/net/ipv4/ip_forward +sudo iptables -F -t nat +sudo iptables -t nat -A POSTROUTING -o enp0s3 -j MASQUERADE