mdadm --create --verbose /dev/md0 --level=5 --raid-devices=3 /dev/sdX /dev/sdY /dev/sdZ

NikraloW 8 фев в 11:10
conn ipsec
auto=start
authby=secret
type=tunnel
ike=aes-sha1;modp2048
left=40.0.0.1
leftprotoport=gre
right=40.0.0.2
rightprotoport=gre

NikraloW 8 фев в 11:09
iptables -A INPUT -m state —-state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -p gre -j ACCEPT
iptables -A INPUT -p tcp -m multiport —-dports 53,80,443,2222 -j ACCEPT
iptables -A INPUT -p udp -m multiport —-dports 53,500,4500 -j ACCEPT
iptables -A INPUT ! -i ens192 -j ACCEPT
iptables -A INPUT -m state —-state INVALID -j DROP
iptables -A FORWARD -m state —-state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD ! -i ens192 -j ACCEPT
iptables -A FORWARD -m state —-state INVALID -j DROP
iptables -P INPUT DROP
iptables -P FORWARD DROP

useradd branch_admin
root@debian:~# usermod -c “Branch admin” branch_admin
root@alt:~# usermod -c “Branch admin” branch_admin
apt-get install freeipa-server freeipa-server-dns -y
ipa-server-install —-setup-dns —-allow-zone-overlap
apt-get install freeipa-client task-auth-freeipa -y
ipa-client-install

nano /etc/ssh/sshd_config
Port 2222
PasswordAuthentication no
PermitEmptyPassowrds no
PermitRootLogin no
MaxAuthTries 4
LoginGraceTime 5m
Banner (path to file banner)

mdadm —-create —-verbose /dev/md0 -l 5 —-raid-devices=3 /dev/sd{b,c,d}

vim backup
#!/bin/bash
scp -r root@192.168.0.1:/etc/Network-Manager/system-connection
/backup/hq-r
scp -r root@172.16.0.1:/etc/Network-Manager/system-connection/
/backup/br-r

iptables -t nat -A PREROUTING -p tcp -m tcp --dport 22 -j DNAT --to-destination 192.168.100.100:2222