Cyber Security I. Netzplan

Übersicht

[Bearbeiten]

IPv4

• gateway 192.168.Y.254
• route add -net 10.88.0.0/16 192.168.Y.88
• nameserver 1.1.1.1
• externe Domain it2XX.xinmen.de
• interne Domain lab.int

Teilnehmer	Labor	Private Netze	Haupt-IP	Zweite-IP	CLIENTS	SERVER	DMZ
TN01	it201	172.26.0.0/22	192.168.Y.201	192.168.Y.221	172.26.1.0/24	172.26.2.0/24	10.88.201.0/24
TN02	it202	172.26.4.0/22	192.168.Y.202	192.168.Y.222	172.26.5.0/24	172.26.6.0/24	10.88.202.0/24
TN03	it203	172.26.8.0/22	192.168.Y.203	192.168.Y.223	172.26.9.0/24	172.26.10.0/24	10.88.203.0/24
TN04	it204	172.26.12.0/22	192.168.Y.204	192.168.Y.224	172.26.13.0/24	172.26.14.0/24	10.88.204.0/24
TN05	it205	172.26.16.0/22	192.168.Y.205	192.168.Y.225	172.26.17.0/24	172.26.18.0/24	10.88.205.0/24
TN06	it206	172.26.20.0/22	192.168.Y.206	192.168.Y.226	172.26.21.0/24	172.26.22.0/24	10.88.206.0/24
TN07	it207	172.26.24.0/22	192.168.Y.207	192.168.Y.227	172.26.25.0/24	172.26.26.0/24	10.88.207.0/24
TN08	it208	172.26.28.0/22	192.168.Y.208	192.168.Y.228	172.26.29.0/24	172.26.30.0/24	10.88.208.0/24
TN09	it209	172.26.32.0/22	192.168.Y.209	192.168.Y.229	172.26.33.0/24	172.26.34.0/24	10.88.209.0/24
TN10	it210	172.26.36.0/22	192.168.Y.210	192.168.Y.230	172.26.37.0/24	172.26.38.0/24	10.88.210.0/24
TN11	it211	172.26.40.0/22	192.168.Y.211	192.168.Y.231	172.26.41.0/24	172.26.42.0/24	10.88.211.0/24
TN12	it212	172.26.44.0/22	192.168.Y.212	192.168.Y.232	172.26.45.0/24	172.26.46.0/24	10.88.212.0/24
TN13	it213	172.26.48.0/22	192.168.Y.213	192.168.Y.233	172.26.49.0/24	172.26.50.0/24	10.88.213.0/24
TN14	it214	172.26.52.0/22	192.168.Y.214	192.168.Y.234	172.26.53.0/24	172.26.54.0/24	10.88.214.0/24

Weiteres

Offizielle Zertifikate

• https://web.samogo.de/certs/

drawio rpm runterladen und installieren

• https://github.com/jgraph/drawio-desktop/releases/tag/v24.7.17

Netzplan

• wget https://xinux.de/downloads/linuggs.de/cybersec1.drawio.svg

Wie passe ich einen Debian/Ubuntu Rechner an

Beispiel

Resolver

• cat /etc/resolv.conf

nameserver 78.47.133.194
search it2xx.xinmen.de

Netzwerk

• cat /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
 address 10.88.2xx.2/24
 gateway 172.26.55.1

Hostnamen setzen

• hostnamectl set-hostname www.it2xx.xinmen.de

Lokale Hostnamensauflösung

• cat /etc/hosts

127.0.0.1	localhost.localdomain	localhost
::1		localhost6.localdomain6	localhost6
127.0.0.1    www.it2xx.xinmen.de www
# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

Portforwarding

• 192.168.12.34:9923 -> 172.26.55.2:22
• 192.168.12.34:9924 -> 172.26.53.52:22