Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| projects:howtos:artemis [2014/08/26 18:19] – prometheus | projects:howtos:artemis [2014/08/27 22:58] (current) – removed prometheus | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Artemis ====== | ||
| - | As all projects, this one needed to have a name as well. //Artemis// originates from the old Greek and means - amongst others - unharmful or safe. And exactly this Artemis should deliver to you: safety for your data and no harm to your communications. | ||
| - | |||
| - | ===== Requirements ===== | ||
| - | |||
| - | ^ Hardware ^ Quantity ^ | ||
| - | | RaspberryPi + MicroUSB / Power Adapter | 1 | | ||
| - | | MicroSD Card | 1 | | ||
| - | | USB Thumbdrive | 1 | | ||
| - | | RJ45 | 1 | | ||
| - | |||
| - | ===== Retrieving the Software ===== | ||
| - | |||
| - | Get the latest ArchLinux ISO. Check hashsum. Write to USB. | ||
| - | |||
| - | ===== Configuration ===== | ||
| - | |||
| - | <note important> | ||
| - | |||
| - | ==== Firewall ==== | ||
| - | |||
| - | In order to network-secure Artemis tight as possible, we are just going to drop every input and output traffic by default, and whitelist whatever services we need. | ||
| - | |||
| - | === Purging iptables === | ||
| - | |||
| - | Safe the following commands in / | ||
| - | |||
| - | <sxh bash; | ||
| - | iptables -F | ||
| - | iptables -X | ||
| - | iptables -t nat -F | ||
| - | iptables -t nat -X | ||
| - | iptables -t mangle -F | ||
| - | iptables -t mangle -X | ||
| - | iptables -t raw -F | ||
| - | iptables -t raw -X | ||
| - | iptables -t security -F | ||
| - | iptables -t security -X | ||
| - | iptables -P INPUT ACCEPT | ||
| - | iptables -P FORWARD ACCEPT | ||
| - | iptables -P OUTPUT ACCEPT | ||
| - | </ | ||
| - | |||
| - | <sxh bash; | ||
| - | # iptables -N TCP | ||
| - | # iptables -N UDP | ||
| - | </ | ||
| - | |||
| - | ===== References ===== | ||
| - | |||
| - | [0] [[http:// | ||
| - | \\ [1] [[https:// | ||