diff options
author | Silvino Silva <silvino@bk.ru> | 2020-01-05 21:55:09 +0000 |
---|---|---|
committer | Silvino Silva <silvino@bk.ru> | 2020-01-05 21:56:17 +0000 |
commit | 2699bee925ca6ce95bf14bc95249b22952aaf478 (patch) | |
tree | 2ec98bf4f1a7954750822cfd49641c8987585a91 /core | |
parent | 627cd2d2e99c1bb9fce293375198da5e66c0ed4b (diff) | |
parent | 9a72a6e5cc23d29d510625c0c1677fb7ae465032 (diff) | |
download | doc-2699bee925ca6ce95bf14bc95249b22952aaf478.tar.gz |
doc release 0.6.0
Diffstat (limited to 'core')
-rw-r--r-- | core/conf/iptables/bridge.v4 | 33 | ||||
-rw-r--r-- | core/conf/iptables/server.v4 | 60 | ||||
-rw-r--r-- | core/index.html | 8 | ||||
-rw-r--r-- | core/install.html | 18 |
4 files changed, 62 insertions, 57 deletions
diff --git a/core/conf/iptables/bridge.v4 b/core/conf/iptables/bridge.v4 index 4930262..bea9be0 100644 --- a/core/conf/iptables/bridge.v4 +++ b/core/conf/iptables/bridge.v4 @@ -1,34 +1,34 @@ -# Generated by iptables-save v1.8.2 on Fri Jun 28 01:22:10 2019 +# Generated by iptables-save v1.8.2 on Sun Jul 7 23:48:36 2019 *security :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] COMMIT -# Completed on Fri Jun 28 01:22:10 2019 -# Generated by iptables-save v1.8.2 on Fri Jun 28 01:22:10 2019 +# Completed on Sun Jul 7 23:48:36 2019 +# Generated by iptables-save v1.8.2 on Sun Jul 7 23:48:36 2019 *raw -:PREROUTING ACCEPT [2:80] -:OUTPUT ACCEPT [3:4544] +:PREROUTING ACCEPT [0:0] +:OUTPUT ACCEPT [1:2468] COMMIT -# Completed on Fri Jun 28 01:22:10 2019 -# Generated by iptables-save v1.8.2 on Fri Jun 28 01:22:10 2019 +# Completed on Sun Jul 7 23:48:36 2019 +# Generated by iptables-save v1.8.2 on Sun Jul 7 23:48:36 2019 *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT -# Completed on Fri Jun 28 01:22:10 2019 -# Generated by iptables-save v1.8.2 on Fri Jun 28 01:22:10 2019 +# Completed on Sun Jul 7 23:48:36 2019 +# Generated by iptables-save v1.8.2 on Sun Jul 7 23:48:36 2019 *mangle -:PREROUTING ACCEPT [2:80] -:INPUT ACCEPT [2:80] +:PREROUTING ACCEPT [0:0] +:INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [3:4544] -:POSTROUTING ACCEPT [2:2292] +:OUTPUT ACCEPT [1:2468] +:POSTROUTING ACCEPT [0:0] COMMIT -# Completed on Fri Jun 28 01:22:10 2019 -# Generated by iptables-save v1.8.2 on Fri Jun 28 01:22:10 2019 +# Completed on Sun Jul 7 23:48:36 2019 +# Generated by iptables-save v1.8.2 on Sun Jul 7 23:48:36 2019 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] @@ -92,6 +92,7 @@ COMMIT -A FORWARD -d 10.0.0.4/32 -i br0 -o br0 -m physdev --physdev-in enp8s0 -j srv_git_in -A FORWARD -i br0 -o br0 -p tcp -m physdev --physdev-in enp8s0 -m tcp --sport 443 --dport 1024:65535 -j ACCEPT -A FORWARD -d 10.0.0.3/32 -i br0 -o br0 -m physdev --physdev-in enp8s0 -j cli_http_in +-A FORWARD -d 10.0.0.4/32 -i br0 -o br0 -m physdev --physdev-in enp8s0 -j cli_http_in -A FORWARD -i br0 -o br0 -p udp -m udp --sport 520 --dport 519 -j DROP -A FORWARD -i br0 -o br0 -p udp -m udp --sport 520 --dport 520 -j DROP -A FORWARD -j LOG --log-prefix "iptables: FORWARD: " --log-level 7 @@ -220,4 +221,4 @@ COMMIT -A srv_ssh_out -p tcp -m tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -A srv_ssh_out -j RETURN COMMIT -# Completed on Fri Jun 28 01:22:10 2019 +# Completed on Sun Jul 7 23:48:36 2019 diff --git a/core/conf/iptables/server.v4 b/core/conf/iptables/server.v4 index ed202ee..678800b 100644 --- a/core/conf/iptables/server.v4 +++ b/core/conf/iptables/server.v4 @@ -1,34 +1,34 @@ -# Generated by iptables-save v1.8.2 on Sat Jun 8 19:50:25 2019 +# Generated by iptables-save v1.8.3 on Mon Jul 8 00:42:39 2019 *security :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] COMMIT -# Completed on Sat Jun 8 19:50:25 2019 -# Generated by iptables-save v1.8.2 on Sat Jun 8 19:50:25 2019 +# Completed on Mon Jul 8 00:42:39 2019 +# Generated by iptables-save v1.8.3 on Mon Jul 8 00:42:39 2019 *raw :PREROUTING ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] +:OUTPUT ACCEPT [1:132] COMMIT -# Completed on Sat Jun 8 19:50:25 2019 -# Generated by iptables-save v1.8.2 on Sat Jun 8 19:50:25 2019 +# Completed on Mon Jul 8 00:42:39 2019 +# Generated by iptables-save v1.8.3 on Mon Jul 8 00:42:39 2019 *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT -# Completed on Sat Jun 8 19:50:25 2019 -# Generated by iptables-save v1.8.2 on Sat Jun 8 19:50:25 2019 +# Completed on Mon Jul 8 00:42:39 2019 +# Generated by iptables-save v1.8.3 on Mon Jul 8 00:42:39 2019 *mangle :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] +:OUTPUT ACCEPT [1:132] :POSTROUTING ACCEPT [0:0] COMMIT -# Completed on Sat Jun 8 19:50:25 2019 -# Generated by iptables-save v1.8.2 on Sat Jun 8 19:50:25 2019 +# Completed on Mon Jul 8 00:42:39 2019 +# Generated by iptables-save v1.8.3 on Mon Jul 8 00:42:39 2019 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] @@ -71,26 +71,30 @@ COMMIT :srv_ssh_out - [0:0] -A INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -i lo -j ACCEPT -A INPUT -j blocker --A INPUT -s 212.55.154.174/32 -d 10.0.0.254/32 -i enp8s0 -j cli_dns_in --A INPUT -s 10.0.0.0/8 -d 10.0.0.254/32 -i enp8s0 -j srv_https_in --A INPUT -s 10.0.0.0/8 -d 10.0.0.254/32 -i enp8s0 -j srv_ssh_in --A INPUT -s 10.0.0.0/8 -d 10.0.0.254/32 -i enp8s0 -j srv_git_in --A INPUT -d 10.0.0.254/32 -i enp8s0 -j srv_https_in --A INPUT -d 10.0.0.254/32 -i enp8s0 -j cli_https_in --A INPUT -d 10.0.0.254/32 -i enp8s0 -j srv_ssh_in --A INPUT -d 10.0.0.254/32 -i enp8s0 -j srv_git_in +-A INPUT -s 10.0.0.254/32 -d 10.0.0.4/32 -i ens3 -j cli_dns_in +-A INPUT -s 10.0.0.0/8 -d 10.0.0.4/32 -i ens3 -j srv_https_in +-A INPUT -s 10.0.0.0/8 -d 10.0.0.4/32 -i ens3 -j srv_ssh_in +-A INPUT -s 10.0.0.0/8 -d 10.0.0.4/32 -i ens3 -j srv_git_in +-A INPUT -s 10.0.0.0/8 -d 10.0.0.4/32 -i ens3 -j cli_http_in +-A INPUT -d 10.0.0.4/32 -i ens3 -j srv_https_in +-A INPUT -d 10.0.0.4/32 -i ens3 -j cli_https_in +-A INPUT -d 10.0.0.4/32 -i ens3 -j cli_http_in +-A INPUT -d 10.0.0.4/32 -i ens3 -j srv_ssh_in +-A INPUT -d 10.0.0.4/32 -i ens3 -j srv_git_in -A INPUT -j LOG --log-prefix "iptables: INPUT: " --log-level 7 -A FORWARD -j LOG --log-prefix "iptables: FORWARD: " --log-level 7 -A OUTPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -o lo -j ACCEPT -A OUTPUT -j blocker --A OUTPUT -s 10.0.0.254/32 -d 212.55.154.174/32 -o enp8s0 -j cli_dns_out --A OUTPUT -s 10.0.0.254/32 -d 10.0.0.0/8 -o enp8s0 -j srv_https_out --A OUTPUT -s 10.0.0.254/32 -d 10.0.0.0/8 -o enp8s0 -j srv_ssh_out --A OUTPUT -s 10.0.0.254/32 -d 10.0.0.0/8 -o enp8s0 -j srv_git_out --A OUTPUT -s 10.0.0.254/32 -o enp8s0 -j cli_https_out --A OUTPUT -s 10.0.0.254/32 -o enp8s0 -j srv_https_out --A OUTPUT -d 10.0.0.0/8 -o enp8s0 -j srv_ssh_out --A OUTPUT -d 10.0.0.0/8 -o enp8s0 -j srv_git_out +-A OUTPUT -s 10.0.0.4/32 -d 10.0.0.254/32 -o ens3 -j cli_dns_out +-A OUTPUT -s 10.0.0.4/32 -d 10.0.0.0/8 -o ens3 -j cli_http_out +-A OUTPUT -s 10.0.0.4/32 -d 10.0.0.0/8 -o ens3 -j srv_https_out +-A OUTPUT -s 10.0.0.4/32 -d 10.0.0.0/8 -o ens3 -j srv_ssh_out +-A OUTPUT -s 10.0.0.4/32 -d 10.0.0.0/8 -o ens3 -j srv_git_out +-A OUTPUT -s 10.0.0.4/32 -o ens3 -j cli_https_out +-A OUTPUT -s 10.0.0.4/32 -o ens3 -j cli_http_out +-A OUTPUT -s 10.0.0.4/32 -o ens3 -j srv_https_out +-A OUTPUT -d 10.0.0.0/8 -o ens3 -j srv_ssh_out +-A OUTPUT -d 10.0.0.0/8 -o ens3 -j srv_git_out -A OUTPUT -j LOG --log-prefix "iptables: OUTPUT: " --log-level 7 -A blocker -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -m limit --limit 5/min --limit-burst 7 -j LOG --log-prefix "iptables: drop sync: " --log-level 7 -A blocker -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP @@ -201,4 +205,4 @@ COMMIT -A srv_ssh_out -p tcp -m tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -A srv_ssh_out -j RETURN COMMIT -# Completed on Sat Jun 8 19:50:25 2019 +# Completed on Mon Jul 8 00:42:39 2019 diff --git a/core/index.html b/core/index.html index 0900939..72af003 100644 --- a/core/index.html +++ b/core/index.html @@ -11,20 +11,20 @@ <h1>Core OS</h1> <p>Core OS covers installation and configuration of - basic functionality of Crux 3.4 Gnu\Linux operating system. + basic functionality of Crux 3.5 Gnu\Linux operating system. This documentation try's to follow Crux HandBook installation method diverges, for example, by only installing and documenting gpt and grub2.<p> - <p>Read <a href="https://crux.nu/Main/Handbook3-4">Crux HandBook</a>, + <p>Read <a href="https://crux.nu/Main/Handbook3-5">Crux HandBook</a>, you can ask for help on freenode #crux. Check <a href="scripts/">scripts</a> folder the install process is automated and <a href="ports/">ports</a> for extra ports used during the installation.</p> - <h2>1. Install Crux 3.4 Gnu/Linux</h2> + <h2>1. Install Crux 3.5 Gnu/Linux</h2> <ul> - <li><a href="install.html">1.1. Install Crux 3.4</a> + <li><a href="install.html">1.1. Install Crux 3.5</a> <ul> <li><a href="install.html#step1">1.1.1. Download</a></li> <li><a href="install.html#step2">1.1.2. Prepare target</a></li> diff --git a/core/install.html b/core/install.html index 1526c12..6ee381b 100644 --- a/core/install.html +++ b/core/install.html @@ -2,20 +2,20 @@ <html dir="ltr" lang="en"> <head> <meta charset='utf-8'> - <title>1.1. Install Crux 3.4</title> + <title>1.1. Install Crux 3.5</title> </head> <body> <a href="index.html">Core OS Index</a> - <h1>1.1. Install Crux 3.4</h1> + <h1>1.1. Install Crux 3.5</h1> - <p>Installation of minimal Crux 3.4 Gnu\Linux system, + <p>Installation of minimal Crux 3.5 Gnu\Linux system, with selected packages from core, opt and contrib ports. Process of installation documented can be executed from iso or from existing gnu\linux installation. Read - <a href="http://crux.nu/Main/Handbook3-4">Hand book 3.4</a>, + <a href="http://crux.nu/Main/Handbook3-5">Hand book 3.4</a>, .</p> <p>If you are booting from crux iso and is not your keyboard @@ -34,10 +34,10 @@ iso from master repo and checks md5sum.</p> <pre> - $ curl -k -O https://serverop.de/crux/crux-3.4/iso/crux-3.4.iso - $ curl -k -O https://serverop.de/crux/crux-3.4/iso/crux-3.4.md5 - $ md5sum crux-3.4.iso - 73bf4d301e2dcfb0636cb7fc2a9e8fde crux-3.4.iso + $ curl -k -O https://serverop.de/crux/crux-3.5/iso/crux-3.5.iso + $ curl -k -O https://serverop.de/crux/crux-3.5/iso/crux-3.5.md5 + $ md5sum crux-3.5.iso + 73bf4d301e2dcfb0636cb7fc2a9e8fde crux-3.5.iso </pre> <h2 id="step2">1.1.2. Prepare target</h2> @@ -240,7 +240,7 @@ <pre> # modprobe isofs # modprobe loop - # mount -o loop crux-3.4.iso $CHROOT/media + # mount -o loop crux-3.5.iso $CHROOT/media </pre> <h2 id="step4">1.1.4. Install Crux</h2> |