diff options
| author | arf20 <aruizfernandez05@gmail.com> | 2024-03-03 00:56:57 +0100 |
|---|---|---|
| committer | arf20 <aruizfernandez05@gmail.com> | 2024-03-03 00:56:57 +0100 |
| commit | 4f0557b7756d91a2e4b593d17d6f95b1a4bcbaec (patch) | |
| tree | f66d9c229587e6ab672629e2ad3d672b2831a828 /arfnet2.md | |
| parent | 3d09ef577f8bb2ff6287130f57b22b7762d8f765 (diff) | |
| download | arfnet2-4f0557b7756d91a2e4b593d17d6f95b1a4bcbaec.tar.gz arfnet2-4f0557b7756d91a2e4b593d17d6f95b1a4bcbaec.zip | |
Fix wg net, dual stack wg, fix fw rules, pw manager server
Diffstat (limited to 'arfnet2.md')
| -rw-r--r-- | arfnet2.md | 32 |
1 files changed, 20 insertions, 12 deletions
@@ -105,25 +105,32 @@ Management | WAN | 2 | | | | DMZ | 4 | 192.168.4.0/24 <br> 2600:70ff:f039:4::/64 | Services | | LAN | 5 | 192.168.5.0/24 <br> 2600:70ff:f039:5::/64 | Clients | -| VPN | | 10.5.0.0/24 | Wireguard clients | +| VPN | | 192.168.6.0/24 <br> 2600:70ff:f039:5::/64 | Wireguard clients | ## Firewall ### Interface Rules - - WAN_CGNAT in + - WAN\_CGNAT in - deny * - - WAN_STATIC in - - allow from * to {services} --> NAT rules + - WAN\_STATIC in + - allow v4 from * to {services} --> NAT rules - DMZ in - - deny from DMZ net to LAN net - - allow from DMZ net to firewall - - allow from DMZ net to * gw WAN_STATIC + - deny v4 to LAN net + - allow v4 to firewall + - allow v4 to * gw WAN\_STATIC + - allow v6 to * gw HE_TUNNELV6 - LAN in - - allow ICMP from LAN net to firewall - - allow IP DNS from LAN net to firewall - - allow from LAN net to DMZ net - - allow from LAN net to * gw WAN_CGNAT + - allow v4 ICMP to firewall + - allow v4 IP DNS to firewall + - allow v4 to DMZ net + - allow v4 to * gw WAN\_CGNAT + - allow v6 to * gw HE_TUNNELV6 + - Wireguard in + - allow v4+6 to DMZ net + - allow v4 to * gw WAN\_CGNAT + - allow v6 to * gw HE_TUNNELV6 + ### IPv4 NAT Rules @@ -260,10 +267,11 @@ RAID attached here (with the grey stuff) (local only) | | | | | status.yero.dev | http://yerovps.lan:3001 | | -### wazuh DMZ.10 +### wazuh DMZ.10 -> secure* - SSH - wazuh + - password manager server* ### game DMZ.11 |