Cyber Security II. Netzplan: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| (4 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 6: | Zeile 6: | ||
=Anpassen der Maschinen= | =Anpassen der Maschinen= | ||
==opnsense== | ==opnsense== | ||
*CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden. | *CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden. | ||
{| class="wikitable" | {| class="wikitable" | ||
| Zeile 24: | Zeile 22: | ||
| System:Settings:General:DNS servers || IPv4 || 1.1.1.1 | | System:Settings:General:DNS servers || IPv4 || 1.1.1.1 | ||
|- | |- | ||
| System:Trust:Certificates || Import || <nowiki> | | System:Trust:Certificates || Import || <nowiki>star.it2XX.xinmen.de</nowiki> | ||
|- | |- | ||
| System:Settings:Administration:SSL Certificate || Auswahl || <nowiki> | | System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>star.it2XX.xinmen.de</nowiki> | ||
|- | |- | ||
| Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3 | | Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3 | ||
|- | |- | ||
| Firewall:Aliases:WWW || Host(s) || 10.88.2XX. | | Firewall:Aliases:WWW || Host(s) || 10.88.2XX.11 | ||
|- | |- | ||
| Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5 | | Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5 | ||
|- | |||
| Firewall:Aliases:DOCKER || Host(s) || 10.88.2XX.9 | |||
|} | |} | ||
Aktuelle Version vom 20. Oktober 2026, 18:05 Uhr
Übersicht
Logischer Netzplan
Anpassen der Maschinen
opnsense
- CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
| Ort | Typ | Wert |
|---|---|---|
| System:Gateways:Configuration:WANGW | Static IPv4 | 192.168.HS.254 |
| System:Gateways:Configuration:DNSGW | Static IPv4 | 192.168.HS.88 |
| Interfaces:WAN:IPv4 address | Static IPv4 | 192.168.HS.2XX/24 |
| Interfaces:DMZ:IPv4 address | Static IPv4 | 10.88.2XX.1/24 |
| System:Settings:General:Domain | Domain | it2XX.xinmen.de |
| System:Settings:General:DNS servers | IPv4 | 1.1.1.1 |
| System:Trust:Certificates | Import | star.it2XX.xinmen.de |
| System:Settings:Administration:SSL Certificate | Auswahl | star.it2XX.xinmen.de |
| Firewall:Aliases:MAIL | Host(s) | 10.88.2XX.3 |
| Firewall:Aliases:WWW | Host(s) | 10.88.2XX.11 |
| Firewall:Aliases:WAF | Host(s) | 10.88.2XX.5 |
| Firewall:Aliases:DOCKER | Host(s) | 10.88.2XX.9 |
ovs
- Port1 : untaged:1 taged:21,22,23
- Port2 : untaged:21 device:client
- Port12: untaged:22 device:sensor
- Port13: untaged:22 device:aktor
- Port14: untaged:22 device:mqtt
- Port16: untaged:22 device:win2022
- Port21: untaged:1 device:ids managment
- Port23: mirror:21,22,23 device:ids suricata
waf
- hostnamectl set-hostname waf.it213.xinmen.de
- get-cert.sh
- reboot
www
- hostnamectl set-hostname www.it213.xinmen.de
- get-cert.sh
- reboot
- hostnamectl set-hostname mail.it213.xinmen.de
- get-cert.sh
- make-mail.sh
- reboot
HA Proxy
SOC
