Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
projects:howtos:artemis [2014/08/26 18:19] – prometheus | projects:howtos:artemis [2014/08/27 22:58] (current) – removed prometheus | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Artemis ====== | ||
- | As all projects, this one needed to have a name as well. //Artemis// originates from the old Greek and means - amongst others - unharmful or safe. And exactly this Artemis should deliver to you: safety for your data and no harm to your communications. | ||
- | |||
- | ===== Requirements ===== | ||
- | |||
- | ^ Hardware ^ Quantity ^ | ||
- | | RaspberryPi + MicroUSB / Power Adapter | 1 | | ||
- | | MicroSD Card | 1 | | ||
- | | USB Thumbdrive | 1 | | ||
- | | RJ45 | 1 | | ||
- | |||
- | ===== Retrieving the Software ===== | ||
- | |||
- | Get the latest ArchLinux ISO. Check hashsum. Write to USB. | ||
- | |||
- | ===== Configuration ===== | ||
- | |||
- | <note important> | ||
- | |||
- | ==== Firewall ==== | ||
- | |||
- | In order to network-secure Artemis tight as possible, we are just going to drop every input and output traffic by default, and whitelist whatever services we need. | ||
- | |||
- | === Purging iptables === | ||
- | |||
- | Safe the following commands in / | ||
- | |||
- | <sxh bash; | ||
- | iptables -F | ||
- | iptables -X | ||
- | iptables -t nat -F | ||
- | iptables -t nat -X | ||
- | iptables -t mangle -F | ||
- | iptables -t mangle -X | ||
- | iptables -t raw -F | ||
- | iptables -t raw -X | ||
- | iptables -t security -F | ||
- | iptables -t security -X | ||
- | iptables -P INPUT ACCEPT | ||
- | iptables -P FORWARD ACCEPT | ||
- | iptables -P OUTPUT ACCEPT | ||
- | </ | ||
- | |||
- | <sxh bash; | ||
- | # iptables -N TCP | ||
- | # iptables -N UDP | ||
- | </ | ||
- | |||
- | ===== References ===== | ||
- | |||
- | [0] [[http:// | ||
- | \\ [1] [[https:// |