diff --git a/README.md b/README.md index e69de29..d41dd3a 100644 --- a/README.md +++ b/README.md @@ -0,0 +1,6 @@ +# Coisas para leres que sao fixes wowowowowowow !!!!! (Assignment 2) +- Os slides (duh) +- Okay o mais importante é os slides. + +- [X.509 (ssl.com)](https://www.ssl.com/faqs/what-is-an-x-509-certificate/) +- [X.509 (youtube)](https://www.youtube.com/watch?v=kAaIYRJoJkc) diff --git a/VM_APACHE.sh b/VM_APACHE.sh new file mode 100644 index 0000000..2dbbc46 --- /dev/null +++ b/VM_APACHE.sh @@ -0,0 +1,15 @@ +#!/bin/sh +# Configuração para a máquina virtual de CentOS 9 +# que contém o APACHE server. +# Rede interna (enp0s8) + +# --- variaveis aqui pf joao fr fr fr aaaaa ---# +helloworld="print" +if_dentro="enp0s8" +ip_dentro="10.60.0.2" + +# --- instalar packages --- +yum install -y epel-release + +# --- interfaces --- +ifconfig $if_dentro $ip_dentro netmask 255.255.255.0 \ No newline at end of file diff --git a/VM_OPENSSL.sh b/VM_OPENSSL.sh new file mode 100644 index 0000000..9965e36 --- /dev/null +++ b/VM_OPENSSL.sh @@ -0,0 +1,15 @@ +#!/bin/bash +# Configuração para a máquina virtual de CentOS 9 +# que contém o OPENSSL server. +# Rede interna (enp0s8) + +# --- variaveis aqui pf joao fr fr fr aaaaa ---# +helloworld="print" +if_dentro="enp0s8" +ip_dentro="10.60.0.1" + +# --- instalar packages --- +yum install -y openssl + +# --- interfaces --- +ifconfig $if_dentro $ip_dentro netmask 255.255.255.0 \ No newline at end of file diff --git a/VM_ROAD_WARRIOR.sh b/VM_ROAD_WARRIOR.sh new file mode 100644 index 0000000..a660913 --- /dev/null +++ b/VM_ROAD_WARRIOR.sh @@ -0,0 +1,19 @@ +#!/bin/bash + +# O road warrior ou gateway client liga a vpn gateway +# Via a rede externa 193.136.212.0/24 +# Rede externa (enp0s8) + +# --- variaveis aqui pf joao fr fr fr aaaaa ---# +helloworld="print" + +# --- instalar packages --- # +yum install -y epel-release +yum install -y openvpn + +# --- interfaces --- # +ifconfig enp0s8 193.136.212.10 netmask 255.255.255.0 +route add default gw 193.136.212.1 # default gateway LIKE A SHEEP + +# --- copiar certificados da CA --- # +# todo \ No newline at end of file diff --git a/VM_VPN_GATEWAY.sh b/VM_VPN_GATEWAY.sh new file mode 100644 index 0000000..a2b179d --- /dev/null +++ b/VM_VPN_GATEWAY.sh @@ -0,0 +1,50 @@ +#!/bin/bash + +# Temos que configurar a VPN gateway (duh) +# O VPN client é o nosso telemovel, eu suponho +# Ou qualquer dispositivo ligado pela rede externa +# ao VPN. +# +# O gateway client é a pont entre a rede externa 193.136.212.0/24 +# E a rede interna 10.60.0.0/24 + +# NOTE(vasco): +# Ao configurar a maquina virtual em si deixei a rede externa primeiro (enp0s8) +# E a rede interna como a segunda interface (enp0s9). + +# --- variaveis aqui pf joao fr fr fr aaaaa ---# +helloworld="print" +if_fora="enp0s8" +if_dentro="enp0s9" +ip_fora="193.136.212.1" +ip_dentro="10.60.0.3" +mega_tunel="tun0" +ip_mega_tunel="10.8.0.1/24" + +# --- interfaces --- +ifconfig $if_fora $ip_fora netmask 255.255.255.0 +ifconfig $if_dentro $ip_dentro netmask 255.255.255.0 + +# --- instalar packages --- +yum install -y epel-release openvpn iptables-services + + +# --- desativar firewalld --- +systemctl stop firewalld +systemctl disable firewalld +systemctl mask firewalld +systemctl enable iptables +iptables -F +# ativar poen vpn +systemctl enable --now openvpn + +# --- ip forwarding --- # +echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf +sysctl -p /etc/sysctl.conf + +# --- nat forwardin de vpn para clientes --- # +iptables -A INPUT -p udp --dport 1194 -j ACCEPT # :O +iptables -A FORWARD -i $mega_tunel -o $if_dentro -j ACCEPT # :P +iptables -A FORWARD -i $if_dentro -o $mega_tunel -j ACCEPT # ;) +iptables -t nat -A POSTROUTING -s $ip_mega_tunel -o $if_fora -j MASQUERADE # :D +iptables-save > /etc/sysconfig/iptables # :3 \ No newline at end of file