Differences between revisions 10 and 11
Revision 10 as of 2003-10-30 22:23:12
Size: 24016
Editor: dsl-208-151-246-210
Comment:
Revision 11 as of 2003-10-30 22:36:06
Size: 7803
Editor: dsl-208-151-246-210
Comment:
Deletions are marked like this. Additions are marked like this.
Line 80: Line 80:
{{{eth0 Link encap:Ethernet HWaddr 00:C0:F0:17:74:F6 {{{''eth0 Link encap:Ethernet HWaddr 00:C0:F0:17:74:F6
Line 104: Line 104:
           RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)}}}            RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)''}}}
Line 108: Line 108:
''We trust you have received the usual lecture from the local System {{{''We trust you have received the usual lecture from the local System
Line 114: Line 114:
Password:'' Password:''"""
Line 118: Line 118:
"sudo -s"
"clear"
"apt-get install snmpd dnsmasq"
"apt-get install perl make gnupg"
"deborphan -a"
''main/admin sudo
 * "sudo -s"
 * "clear"
 * "apt-get install snmpd dnsmasq"
 * "apt-get install perl make gnupg"
 * "deborphan -a"

{{{
''main/admin sudo
Line 136: Line 137:
main/admin deborphan



root@number-two:~# pwd
>/home/dje
>root@number-two:~# ftp nocat.net
>bash: ftp: command not found
>root@number-two:~# ssh dje@decentric.com
>
>root@number-two:~# ssh dje@decentric.com
>
>root@number-two:~# ssh dje@decentric.com
>The authenticity of host 'decentric.com (216.242.178.113)' can't be
>established.
>RSA key fingerprint is da:75:0b:35:f3:18:82:08:3d:d3:7e:58:20:2a:0c:82.
>Are you sure you want to continue connecting (yes/no)? yes

>list of known hosts.
>dje@decentric.com's password:
>Last login: Tue Oct 28 20:32:22 2003 from 198.107.1.11
>[dje@server1 dje]$ lynx http://www.nocat.net
>[dje@server1 dje]$ ls
>NoCatAuth-nightly.tgz base/ bin/ dev/ musique/ subscriptions.opml

>tmp/ www@
>[dje@server1 dje]$ exit
>logout
>
>Connection to decentric.com closed.
>root@number-two:~# scp dje@decentric.com:NoCat* .
>dje@decentric.com's password:
>NoCatAuth-nightly.tgz 100%

> 89KB 41.3KB/s 00:02
>root@number-two:~# ls
>NoCatAuth-nightly.tgz
>root@number-two:~# tar xvfz NoCatAuth-nightly.tgz
>NoCatAuth-nightly/
>NoCatAuth-nightly/bin/
>NoCatAuth-nightly/bin/detect-fw.sh
>NoCatAuth-nightly/bin/admintool
>NoCatAuth-nightly/bin/gateway
>NoCatAuth-nightly/bin/vtun.sh
>NoCatAuth-nightly/doc/
>NoCatAuth-nightly/doc/nocatrfc.txt
>NoCatAuth-nightly/doc/working.iptables
>NoCatAuth-nightly/doc/Introduction.txt
>NoCatAuth-nightly/doc/nocat-conf.txt
>NoCatAuth-nightly/doc/SameMachine.txt
>NoCatAuth-nightly/doc/AuthService.txt
>NoCatAuth-nightly/etc/
>NoCatAuth-nightly/etc/goodbye.html
>NoCatAuth-nightly/etc/group
>NoCatAuth-nightly/etc/README
>NoCatAuth-nightly/etc/pam.conf
>NoCatAuth-nightly/etc/exception
>NoCatAuth-nightly/etc/nocat.schema
>NoCatAuth-nightly/etc/groupadm
>NoCatAuth-nightly/etc/vtund.conf
>NoCatAuth-nightly/etc/logout.html
>NoCatAuth-nightly/etc/fw-wrap.c
>NoCatAuth-nightly/etc/httpd.conf
>NoCatAuth-nightly/etc/passwd
>NoCatAuth-nightly/etc/portforward.sample
>NoCatAuth-nightly/etc/nocat.rc
>NoCatAuth-nightly/etc/linux-2.4.config
>NoCatAuth-nightly/lib/
>NoCatAuth-nightly/lib/NoCat/
>NoCatAuth-nightly/lib/NoCat/Group.pm
>NoCatAuth-nightly/lib/NoCat/User.pm
>NoCatAuth-nightly/lib/NoCat/Gateway.pm
>NoCatAuth-nightly/lib/NoCat/Peer.pm
>NoCatAuth-nightly/lib/NoCat/Source.pm
>NoCatAuth-nightly/lib/NoCat/Source/
>NoCatAuth-nightly/lib/NoCat/Source/LDAP.pm
>NoCatAuth-nightly/lib/NoCat/Source/NIS.pm
>NoCatAuth-nightly/lib/NoCat/Source/PAM.pm
>NoCatAuth-nightly/lib/NoCat/Source/RADIUS.pm
>NoCatAuth-nightly/lib/NoCat/Source/IMAP.pm
>NoCatAuth-nightly/lib/NoCat/Source/Samba.pm
>NoCatAuth-nightly/lib/NoCat/Source/Passwd.pm
>NoCatAuth-nightly/lib/NoCat/Source/DBI.pm
>NoCatAuth-nightly/lib/NoCat/AuthService.pm
>NoCatAuth-nightly/lib/NoCat/Gateway/
>NoCatAuth-nightly/lib/NoCat/Gateway/Open.pm
>NoCatAuth-nightly/lib/NoCat/Gateway/Passive.pm
>NoCatAuth-nightly/lib/NoCat/Gateway/Captive.pm
>NoCatAuth-nightly/lib/NoCat/Firewall.pm
>NoCatAuth-nightly/lib/NoCat/Message.pm
>NoCatAuth-nightly/lib/NoCat.pm
>NoCatAuth-nightly/pgp/
>NoCatAuth-nightly/pgp/trustedkeys.gpg
>NoCatAuth-nightly/gateway.conf
>NoCatAuth-nightly/BUGS
>NoCatAuth-nightly/NEWS
>NoCatAuth-nightly/TODO
>NoCatAuth-nightly/authserv.conf
>NoCatAuth-nightly/upgrade-0.80-db.pl
>NoCatAuth-nightly/Makefile
>NoCatAuth-nightly/LICENSE
>NoCatAuth-nightly/README
>NoCatAuth-nightly/libexec/
>NoCatAuth-nightly/libexec/pf/
>NoCatAuth-nightly/libexec/pf/reset.fw
>NoCatAuth-nightly/libexec/pf/dump.fw
>NoCatAuth-nightly/libexec/pf/access.fw
>NoCatAuth-nightly/libexec/pf/initialize.fw
>NoCatAuth-nightly/libexec/pf/clear.fw
>NoCatAuth-nightly/libexec/ipchains/
>NoCatAuth-nightly/libexec/ipchains/reset.fw
>NoCatAuth-nightly/libexec/ipchains/dump.fw
>NoCatAuth-nightly/libexec/ipchains/access.fw
>NoCatAuth-nightly/libexec/ipchains/initialize.fw
>NoCatAuth-nightly/libexec/ipchains/clear.fw
>NoCatAuth-nightly/libexec/ipfilter/
>NoCatAuth-nightly/libexec/ipfilter/initialize.fw
>NoCatAuth-nightly/libexec/iptables/
>NoCatAuth-nightly/libexec/iptables/reset.fw
>NoCatAuth-nightly/libexec/iptables/dump.fw
>NoCatAuth-nightly/libexec/iptables/access.fw
>NoCatAuth-nightly/libexec/iptables/initialize.fw
>NoCatAuth-nightly/libexec/iptables/throttle.fw
>NoCatAuth-nightly/libexec/iptables/clear.fw
>NoCatAuth-nightly/libexec/loopback/
>NoCatAuth-nightly/libexec/loopback/dump.fw
>NoCatAuth-nightly/libexec/loopback/initialize.fw
>NoCatAuth-nightly/libexec/loopback/clear.fw
>NoCatAuth-nightly/test.sh
>NoCatAuth-nightly/htdocs/
>NoCatAuth-nightly/htdocs/fatal.html
>NoCatAuth-nightly/htdocs/renew_pasv.html
>NoCatAuth-nightly/htdocs/expired.html
>NoCatAuth-nightly/htdocs/login_ok.html
>NoCatAuth-nightly/htdocs/renew.html
>NoCatAuth-nightly/htdocs/images/
>NoCatAuth-nightly/htdocs/images/auth_logo.gif
>NoCatAuth-nightly/htdocs/images/update.gif
>NoCatAuth-nightly/htdocs/images/login.gif
>NoCatAuth-nightly/htdocs/images/continue.gif
>NoCatAuth-nightly/htdocs/images/skip.gif
>NoCatAuth-nightly/htdocs/images/reset.gif
>NoCatAuth-nightly/htdocs/images/register.gif
>NoCatAuth-nightly/htdocs/images/logout.gif
>NoCatAuth-nightly/htdocs/logout.html
>NoCatAuth-nightly/htdocs/status.html
>NoCatAuth-nightly/htdocs/login-no-skip.html
>NoCatAuth-nightly/htdocs/register_ok.html
>NoCatAuth-nightly/htdocs/register.html
>NoCatAuth-nightly/htdocs/login.html
>NoCatAuth-nightly/htdocs/splash.html
>NoCatAuth-nightly/htdocs/update.html
>NoCatAuth-nightly/INSTALL
>NoCatAuth-nightly/cgi-bin/
>NoCatAuth-nightly/cgi-bin/login
>NoCatAuth-nightly/cgi-bin/admlogin
>NoCatAuth-nightly/cgi-bin/update
>NoCatAuth-nightly/cgi-bin/register
>root@number-two:~# ls
>NoCatAuth-nightly NoCatAuth-nightly.tgz
>root@number-two:~# wget
>bash: wget: command not found
>root@number-two:~# rm NoCatAuth-nightly
>rm: cannot remove `NoCatAuth-nightly': Is a directory
>root@number-two:~# rm NoCatAuth-nightly.tgz
>root@number-two:~# ls
>NoCatAuth-nightly
>root@number-two:~# apt-get install wget
>Reading Package Lists... Done
>Building Dependency Tree... Done
>The following NEW packages will be installed:
> wget
>0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
>Need to get 416kB of archives.
>After unpacking 1487kB of additional disk space will be used.
>Get:1 http://rattler.thebasement.org unstable/main wget 1.9-1 [416kB]
>Fetched 416kB in 1s (250kB/s)
>Selecting previously deselected package wget.
>(Reading database ... 7464 files and directories currently installed.)
>Unpacking wget (from .../archives/wget_1.9-1_i386.deb) ...
>Setting up wget (1.9-1) ...
>
>root@number-two:~# clear
>
>root@number-two:~# wget
>http://rune.thebasement.org/~ice/tmp/stable-01.patch
>--13:24:29-- http://rune.thebasement.org/%7Eice/tmp/stable-01.patch
> => `stable-01.patch'
>Resolving rune.thebasement.org... 209.162.205.200
>Connecting to rune.thebasement.org[209.162.205.200]:80... connected.
>HTTP request sent, awaiting response... 200 OK
>Length: 1,225 [text/plain]
>
>100%[========================================================>] 1,225

> --.--K/s
>
>root@number-two:~# ls
>NoCatAuth-nightly stable-01.patch
>root@number-two:~# cd NoCatAuth-nightly/
>root@number-two:~/NoCatAuth-nightly# ls
>BUGS Makefile TODO cgi-bin gateway.conf libexec
>upgrade-0.80-db.pl
>INSTALL NEWS authserv.conf doc htdocs pgp
>LICENSE README bin etc lib test.sh
>root@number-two:~/NoCatAuth-nightly# patch -p1 < ../stable-01.patch
>bash: patch: command not found
>root@number-two:~/NoCatAuth-nightly# apt-get install patch
>Reading Package Lists... Done
>Building Dependency Tree... Done
>The following NEW packages will be installed:
> patch
>0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
>Need to get 92.3kB of archives.
>After unpacking 184kB of additional disk space will be used.
>Get:1 http://rattler.thebasement.org unstable/main patch 2.5.9-1
>[92.3kB]
>Fetched 92.3kB in 0s (111kB/s)
>Selecting previously deselected package patch.
>(Reading database ... 7509 files and directories currently installed.)
>Unpacking patch (from .../patch_2.5.9-1_i386.deb) ...
>Setting up patch (2.5.9-1) ...
>root@number-two:~/NoCatAuth-nightly# patch -p1 < ../stable-01.patch
>patching file bin/gateway
>patching file lib/NoCat/Gateway.pm
>root@number-two:~/NoCatAuth-nightly# ls
>BUGS Makefile TODO cgi-bin gateway.conf libexec
>upgrade-0.80-db.pl
>INSTALL NEWS authserv.conf doc htdocs pgp
>LICENSE README bin etc lib test.sh
>root@number-two:~/NoCatAuth-nightly# vi /etc/kernel-img.conf
>root@number-two:~/NoCatAuth-nightly# more /etc/kernel-img.conf
>do_symlinks = No
>do_initrd = Yes
>
>postinst_hook = /sbin/update-grub
>postrm_hook = /sbin/update-grub
>do_bootloader = No
>root@number-two:~/NoCatAuth-nightly# apt-get install kernel-image-2.4-K6
>Reading Package Lists... Done
>Building Dependency Tree... Done
>The following extra packages will be installed:
> cpio cramfsprogs dash initrd-tools kernel-image-2.4-k6
>kernel-image-2.4.22-1-k6
> module-init-tools
>Suggested packages:
> kernel-doc-2.4.22 pcmcia-modules-2.4.22-1-k6
>The following NEW packages will be installed:
> cpio cramfsprogs dash initrd-tools kernel-image-2.4-k6
>kernel-image-2.4.22-1-k6
> module-init-tools
>0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded.
>Need to get 11.4MB of archives.
>After unpacking 30.5MB of additional disk space will be used.
>Do you want to continue? [Y/n]
>Get:1 http://rattler.thebasement.org unstable/main dash 0.4.18 [77.4kB]
>Get:2 http://rattler.thebasement.org unstable/main cpio 2.5-1.1 [64.3kB]
>Get:3 http://rattler.thebasement.org unstable/main cramfsprogs 1.1-4
>[19.6kB]
>Get:4 http://rattler.thebasement.org unstable/main module-init-tools
>0.9.15-pre2-2 [66.3kB]
>Get:5 http://rattler.thebasement.org unstable/main initrd-tools 0.1.54

>[21.1kB]
>Get:6 http://rattler.thebasement.org unstable/main
>kernel-image-2.4.22-1-k6 2.4.22-3 [11.1MB]
>Get:7 http://rattler.thebasement.org unstable/main kernel-image-2.4-k6

>2.4.22-3 [6198B]
>Fetched 11.4MB in 29s (386kB/s)
>Preconfiguring packages ...
>Selecting previously deselected package dash.
>(Reading database ... 7518 files and directories currently installed.)
>Unpacking dash (from .../archives/dash_0.4.18_i386.deb) ...
>Selecting previously deselected package cpio.
>Unpacking cpio (from .../archives/cpio_2.5-1.1_i386.deb) ...
>Selecting previously deselected package cramfsprogs.
>Unpacking cramfsprogs (from .../cramfsprogs_1.1-4_i386.deb) ...
>Selecting previously deselected package module-init-tools.
>Unpacking module-init-tools (from
>.../module-init-tools_0.9.15-pre2-2_i386.deb) ...
>Selecting previously deselected package initrd-tools.
>Unpacking initrd-tools (from .../initrd-tools_0.1.54_all.deb) ...
>Selecting previously deselected package kernel-image-2.4.22-1-k6.
>Unpacking kernel-image-2.4.22-1-k6 (from
>.../kernel-image-2.4.22-1-k6_2.4.22-3_i386.deb) ...
>Selecting previously deselected package kernel-image-2.4-k6.
>Unpacking kernel-image-2.4-k6 (from
>.../kernel-image-2.4-k6_2.4.22-3_i386.deb) ...
>Setting up dash (0.4.18) ...
>
>Setting up cpio (2.5-1.1) ...
>
>Setting up cramfsprogs (1.1-4) ...
>
>Setting up module-init-tools (0.9.15-pre2-2) ...
>
>Setting up initrd-tools (0.1.54) ...
>
>Setting up kernel-image-2.4.22-1-k6 (2.4.22-3) ...
>/initrd.img does not exist. Installing from scratch, eh?
>Or maybe you don't want a symbolic link here. Hmm? Lets See.
>
>Setting up kernel-image-2.4-k6 (2.4.22-3) ...
>root@number-two:~/NoCatAuth-nightly# dpkg -P lilo
>(Reading database ... 8834 files and directories currently installed.)
>Removing lilo ...
>Purging configuration files for lilo ...
>root@number-two:~/NoCatAuth-nightly# apt-get install grub
>Reading Package Lists... Done
>Building Dependency Tree... Done
>Suggested packages:
> grub-doc
>The following NEW packages will be installed:
> grub
>0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
>Need to get 282kB of archives.
>After unpacking 635kB of additional disk space will be used.
>Get:1 http://rattler.thebasement.org unstable/main grub
>0.93+cvs20031021-1 [282kB]
>Fetched 282kB in 1s (281kB/s)
>Selecting previously deselected package grub.
>(Reading database ... 8795 files and directories currently installed.)
>Unpacking grub (from .../grub_0.93+cvs20031021-1_i386.deb) ...
>Setting up grub (0.93+cvs20031021-1) ...
>root@number-two:~/NoCatAuth-nightly# grub-install /dev/hda
>Probing devices to guess BIOS drives. This may take a long time.
>Installation finished. No error reported.
>This is the contents of the device map /boot/grub/device.map.
>Check if this is correct or not. If any of the lines is incorrect,
>fix it and re-run the script `grub-install'.
>
>(fd0) /dev/fd0
>(hd0) /dev/hda
>root@number-two:~/NoCatAuth-nightly# update-grub
>Searching for GRUB installation directory ... found: /boot/grub .
>Testing for an existing GRUB menu.list file...
>
>Could not find /boot/grub/menu.lst file. Would you like
>/boot/grub/menu.lst generated for you? (y/N) y
>Found kernel: /boot/vmlinuz-2.4.22-1-k6
>Found kernel: /boot/vmlinuz-2.4.18-bf2.4
>Updating /boot/grub/menu.lst ... done
>
>root@number-two:~/NoCatAuth-nightly# update-grub
>Searching for GRUB installation directory ... found: /boot/grub .
>Testing for an existing GRUB menu.list file... found:
>/boot/grub/menu.lst .
>Found kernel: /boot/vmlinuz-2.4.22-1-k6
>Found kernel: /boot/vmlinuz-2.4.18-bf2.4
>Updating /boot/grub/menu.lst ... done
>
>root@number-two:~/NoCatAuth-nightly# reboot
>
>Broadcast message from root (pts/0) (Tue Oct 28 13:32:52 2003):
>
>The system is going down for reboot NOW!
>root@number-two:~/NoCatAuth-nightly# Connection to 192.168.100.3 closed

>by remote host.
>Connection to 192.168.100.3 closed.
>Darrin-Edens-Computer:~ dje$ ssh dje@192.168.100.3
>^C
>Darrin-Edens-Computer:~ dje$ ssh dje@192.168.100.3
>dje@192.168.100.3's password:
>Linux number-two 2.4.22-1-k6 #5 Sat Oct 4 14:38:05 EST 2003 i586
>GNU/Linux
>
>The programs included with the Debian GNU/Linux system are free
>software;
>the exact distribution terms for each program are described in the
>individual files in /usr/share/doc/*/copyright.
>
>Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
>permitted by applicable law.
>Last login: Tue Oct 28 13:10:21 2003 from 192.168.100.4
>dje@number-two:~$ uname -a
>Linux number-two 2.4.22-1-k6 #5 Sat Oct 4 14:38:05 EST 2003 i586
>GNU/Linux
>dje@number-two:~$ sudo -s
>Password:
>root@number-two:~# apt-get install ssmtp
>Reading Package Lists... Done
>Building Dependency Tree... Done
>The following packages will be REMOVED:
> exim
>The following NEW packages will be installed:
> ssmtp
>0 upgraded, 1 newly installed, 1 to remove and 0 not upgraded.
>Need to get 26.4kB of archives.
>After unpacking 1425kB disk space will be freed.
>Do you want to continue? [Y/n]
>Get:1 http://rattler.thebasement.org unstable/main ssmtp 2.60.4 [26.4kB]
>Fetched 26.4kB in 0s (40.1kB/s)
>Preconfiguring packages ...
>Configuring Ssmtp
>-----------------
>
> The mail configuration file /etc/ssmtp/ssmtp.conf can be automatically
> updated on each upgrade with the information supplied to the debconf
> database. If you do not want this to happen (ie/ you want to maintain
> control of this file yourself) then set this option to have the program
> never touch this file.
>
>:-) Automatically overwrite config files? y
>
>
> Mail sent to a local user whose UID is less than 1000 will instead be
> sent here. This is useful for daemons which mail reports to root and
> other system UIDs.
>
>:-) Who gets mail for userids < 1000? dje
>
>
> This sets the host to which mail is delivered. The actual machine
> name is required; no MX records are consulted. Commonly, mailhosts
> are named "mail.domain.com".
>
>:-) Name of your mailhub? mail.personaltelco.net
>
>
> ssmtp will use "username@REWRITEDOMAIN" as the default From: address
> for outgoing mail which contains only a local username.
>
>:-) What domain to masquerade as? personaltelco.net
>
>
> A "positive" response will permit local users to enter any From: line
> in their messages without it being mangled, and cause ssmtp to rewrite
> the envelope header with that address. A "negative" response will
> disallow this, and use only the default address or addresses set in
> /etc/ssmtp/revaliases.
>
>:-) Allow override of From: line in email header? y
>
>
>dpkg: exim: dependency problems, but removing anyway as you request:
> mailx depends on mail-transport-agent; however:
> Package mail-transport-agent is not installed.
> Package exim which provides mail-transport-agent is to be removed.
>(Reading database ... 8836 files and directories currently installed.)
>Removing exim ...
>Selecting previously deselected package ssmtp.
>(Reading database ... 8773 files and directories currently installed.)
>Unpacking ssmtp (from .../archives/ssmtp_2.60.4_i386.deb) ...
>Setting up ssmtp (2.60.4) ...
>
>root@number-two:~# deborphan
>libident
>libpcre3
>root@number-two:~# dpkg -P libident libpcre3
main/admin deborphan''}}}




 * "lynx http://www.nocat.net"
   * Download the nightly build of '''NoCatAuth'''
   * exit lynx
 * "tar xvfz NoCatAuth-nightly.tgz"


 * apt-get install wget
 * wget http://rune.thebasement.org/~ice/tmp/stable-01.patch
 * apt-get install patch
 * patch -p1 < ../stable-01.patch
 * vi /etc/kernel-img.conf
{{{ ''do_symlinks = No
do_initrd = Yes

postinst_hook = /sbin/update-grub
postrm_hook = /sbin/update-grub
do_bootloader = No''}}}

 * apt-get install kernel-image-2.4-K6
 * dpkg -P lilo
 * apt-get install grub
 * update-grub
{{{''Searching for GRUB installation directory ... found: /boot/grub .
 Testing for an existing GRUB menu.list file...

Could not find /boot/grub/menu.lst file. Would you like
/boot/grub/menu.lst generated for you? (y/N) y
Found kernel: /boot/vmlinuz-2.4.22-1-k6
Found kernel: /boot/vmlinuz-2.4.18-bf2.4
Updating /boot/grub/menu.lst ... done''}}}

 * update-grub
 * reboot


 * uname -a
 * sudo -s
 * apt-get install ssmtp
    * Automatically overwrite config files? y
    * Who gets mail for userids < 1000? dje
    * Name of your mailhub? mail.personaltelco.net
    * What domain to masquerade as? personaltelco.net
    * Allow override of From: line in email header? y

 * deborphan
 * dpkg -P libident libpcre3

Here Is will be the step needed to install a clean, effecient and viable install of Debian, NoCat and related apps to turn a NewCloneArmyBox into a powerfull node on the PTPnet

(These are rough notes taken by JeffWillard and DarrinEden from the actions of KeeganQuinn which will be hammered into a step by step recipe)

The Debian Install

  • at boot prompt: "bf24" (start 2.4 kernel vs. 2.2)
  • select Language and keyboard
  • hard disk (/dev/hda)
    • Create swap partition (128M)
    • Root partition --bootable (128Mb)
    • logic partition (.5 Gig)
    • 2nd logic (.5 Gig)
    • home (whatever is left over)
    • all FS type Linux exect swap which is linux swap

    • Init swap partition
    • init pri (ext3)
    • mount root filesystem
    • repeat above for var,usr,and home

  • kernel install
    • configure device drivers
    • (devices/net)
    • nic (de4x5)
  • configure network
  • make system bootable --mbr
  • reboot
  • set time
  • set root pwd
  • remove pcmcia packages? yes
  • atp configuration ---edit by hand
  • run taskel? --no
  • deselect? --no
  • update configuration file? yes
  • Configuring debconf
    • select Readline
    • select medium
    • don't touch keymap
    • system wide readible directories? yes
    • serial--autosave once
  • upgrade glibc? Y
  • update system? yes
  • mail config? 5
  • mandb? --yes
  • rebuild database? --yes
  • erase any additional .deb files? --yes
  • "apt-get update"
  • "apt-get install deborphan"
  • "deborphan"
  • "dbkp -P <all packages listed ---space in between>"

  • "deborphan -a"
  • "dpkg -P <all packages you don't want>"

  • "deborphan -a"
    • repeat several times to ensure all packages are removed that you don't want

NoCat Setup

Here's the raw capture of the stuff I did to the second box. There's a little fu that didn't get captured in a vi session, but forthe most part...

  • "clear"
  • "/sbin/ifconfig -a"br

{{{eth0 Link encap:Ethernet HWaddr 00:C0:F0:17:74:F6

  • inet addr:192.168.100.3 Bcast:192.168.100.255

    • Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:2092 errors:0 dropped:0 overruns:0 frame:0 TX packets:1102 errors:0 dropped:0 overruns:0 carrier:0 collisions:2 txqueuelen:100 RX bytes:2948521 (2.8 MiB) TX bytes:78364 (76.5 KiB) Interrupt:10 Base address:0xe880

eth1 Link encap:Ethernet HWaddr 00:00:F8:04:F2:9F

  • BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:11 Base address:0xec00

lo Link encap:Local Loopback

  • inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)}}}

  • "sudo su -"

{{{We trust you have received the usual lecture from the local System Administrator. It usually boils down to these two things:

  • #1) Respect the privacy of others. #2) Think before you type.

Password:"""

  • "exit"
  • "logout"
  • "sudo -s"
  • "clear"
  • "apt-get install snmpd dnsmasq"
  • "apt-get install perl make gnupg"
  • "deborphan -a"

{{{main/admin sudo main/net ssh main/admin pciutils main/utils fileutils main/utils shellutils main/utils textutils main/utils gnupg main/net dnsmasq main/net snmpd main/base lilo main/net iptables main/devel make main/editors nvi main/admin deborphan}}}

{{{ do_symlinks = No do_initrd = Yes

postinst_hook = /sbin/update-grub postrm_hook = /sbin/update-grub do_bootloader = No}}}

  • apt-get install kernel-image-2.4-K6
  • dpkg -P lilo
  • apt-get install grub
  • update-grub

{{{Searching for GRUB installation directory ... found: /boot/grub .

  • Testing for an existing GRUB menu.list file...

Could not find /boot/grub/menu.lst file. Would you like /boot/grub/menu.lst generated for you? (y/N) y Found kernel: /boot/vmlinuz-2.4.22-1-k6 Found kernel: /boot/vmlinuz-2.4.18-bf2.4 Updating /boot/grub/menu.lst ... done}}}

  • update-grub
  • reboot
  • uname -a
  • sudo -s
  • apt-get install ssmtp
    • Automatically overwrite config files? y
    • Who gets mail for userids < 1000? dje

    • Name of your mailhub? mail.personaltelco.net
    • What domain to masquerade as? personaltelco.net
    • Allow override of From: line in email header? y
  • deborphan
  • dpkg -P libident libpcre3

>(Reading database ... 8790 files and directories currently installed.) >Removing libident ... >Removing libpcre3 ... >Purging configuration files for libpcre3 ... >root@number-two:~# deborphan >root@number-two:~# pwd >/home/dje >root@number-two:~# ls >NoCatAuth-nightly stable-01.patch >root@number-two:~# cd NoCatAuth-nightly/ >root@number-two:~/NoCatAuth-nightly# ls >BUGS Makefile TODO cgi-bin gateway.conf libexec >upgrade-0.80-db.pl >INSTALL NEWS authserv.conf doc htdocs pgp >LICENSE README bin etc lib test.sh >root@number-two:~/NoCatAuth-nightly# make gateway >Looking for gpgv... >Checking for firewall compatibility: /sbin/iptables found. >libexec/iptables/access.fw -> bin/access.fw >libexec/iptables/clear.fw -> bin/clear.fw >libexec/iptables/clear.fw -> bin/clear.fw >libexec/iptables/dump.fw -> bin/dump.fw >libexec/iptables/initialize.fw -> bin/initialize.fw >libexec/iptables/reset.fw -> bin/reset.fw >libexec/iptables/throttle.fw -> bin/throttle.fw >/sbin/iptables -> bin/iptables >[ -d /usr/local/nocat ] || mkdir -p /usr/local/nocat >chmod 755 /usr/local/nocat >[ -d /usr/local/nocat/htdocs ] || cp -R htdocs /usr/local/nocat >cp -R bin /usr/local/nocat >Installing NoCat to /usr/local/nocat... >cp -R lib pgp /usr/local/nocat >[ -f /usr/local/nocat/nocat.conf ] || \ > perl -pe 's#/usr/local/nocat#/usr/local/nocat#g' gateway.conf \ > > /usr/local/nocat/nocat.conf > >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > Congratulations! > NoCat gateway is installed. To start it, check > /usr/local/nocat/nocat.conf, then run bin/gateway > as root. >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > >root@number-two:~/NoCatAuth-nightly# shutdown -h now > >Broadcast message from root (pts/0) (Tue Oct 28 13:39:32 2003): > >The system is going down for system halt NOW! >root@number-two:~/NoCatAuth-nightly# Connection to 192.168.100.3 closed

>by remote host. >Connection to 192.168.100.3 closed. >Darrin-Edens-Computer:~ dje$

NewCloneArmyInstallMethodology (last edited 2007-11-23 18:01:02 by localhost)