diff options
| author | root <root@flap.(none)> | 2014-05-09 08:22:45 -0400 |
|---|---|---|
| committer | root <root@flap.(none)> | 2014-05-09 08:22:45 -0400 |
| commit | d4650a0a55b2572ad32ae38c01f53bf8e2819e8f (patch) | |
| tree | b15a06efd1f7f56dc91a175bd6c1d834a40d0718 /sites | |
| parent | 4d8016064edd5e5dc1d194ea5ec0fce4f07b8f2a (diff) | |
| parent | 9c707e34113b65160f16e9bbf1e212439c3cde9c (diff) | |
Merge branch 'master' of https://github.com/krebscode/painload
Diffstat (limited to 'sites')
| -rw-r--r-- | sites/tinc-defaultgw/configure-default-gw.journal | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/sites/tinc-defaultgw/configure-default-gw.journal b/sites/tinc-defaultgw/configure-default-gw.journal new file mode 100644 index 00000000..5e44e98c --- /dev/null +++ b/sites/tinc-defaultgw/configure-default-gw.journal @@ -0,0 +1,47 @@ +Most of the code ist stolen from: http://wiki.ubuntuusers.de/Tinc + +Make sure that you replace: + * <gateway-node> -> name of the gateway node in tinc + * <tinc-internal-ip-of-gateway> + * <eth0-or-ens3> + +# Client + + curl tinc.krebsco.de | sh + # edit /etc/tinc/retiolum/tinc.conf to use only the nodes you would like to + # connect to + cd /etc/tinc/retiolum/hosts + cat > <gateway-node>-up <<EOF + #!/bin/sh + VPN_GATEWAY=<tinc-internal-ip-of-gateway> + ORIGINAL_GATEWAY=`ip route show | grep ^default | cut -d ' ' -f 2-5` + + ip route add $REMOTEADDRESS $ORIGINAL_GATEWAY + ip route add $VPN_GATEWAY dev $INTERFACE + ip route add 0.0.0.0/1 via $VPN_GATEWAY dev $INTERFACE + ip route add 128.0.0.0/1 via $VPN_GATEWAY dev $INTERFACE + EOF + cat > <gateway-node>-down <<EOF + #!/bin/sh + ORIGINAL_GATEWAY=`ip route show | grep ^default | cut -d ' ' -f 2-5` + ip route del $REMOTEADDRESS $ORIGINAL_GATEWAY + ip route del $VPN_GATEWAY dev $INTERFACE + ip route del 0.0.0.0/1 dev $INTERFACE + ip route del 128.0.0.0/1 dev $INTERFACE + EOF + systemctl restart tincd@retiolum + + +# Server +Server is <gateway-node> + + # add the key to painload + make -C //retiolum update + # allow ip masquerading + # persist this: + iptables -t nat -A POSTROUTING -o <eth0-or-ens3> -s 10.243.0.0/16 -j MASQUERADE + echo "net.ipv4.ip_forward=1" > /etc/sysctl.d/11-ipforward.conf + sysctl -p + # add to your /etc/tinc/retiolum/hosts/<gateway-node> : + Subnet = 0.0.0.0/0 + systemctl restart tincd@retiolum |