Here Is will be the step needed to install a clean, effecient and viable install of Debian, NoCat and related apps to turn a NewCloneArmyBox into a powerfull node on the PTPnet

(These are rough notes taken by JeffWillard and DarrinEden from the actions of KeeganQuinn which will be hammered into a step by step recipe)

The Debian Install

NoCat Setup

Here's the raw capture of the stuff I did to the second box. There's a little fu that didn't get captured in a vi session, but forthe most part...

eth0 Link encap:Ethernet HWaddr 00:C0:F0:17:74:F6

eth1 Link encap:Ethernet HWaddr 00:00:F8:04:F2:9F

lo Link encap:Local Loopback

We trust you have received the usual lecture from the local System Administrator. It usually boils down to these two things:

Password:

"sudo -s" "clear" "apt-get install snmpd dnsmasq" "apt-get install perl make gnupg" "deborphan -a" main/admin sudo main/net ssh main/admin pciutils main/utils fileutils main/utils shellutils main/utils textutils main/utils gnupg main/net dnsmasq main/net snmpd main/base lilo main/net iptables main/devel make main/editors nvi main/admin deborphan

root@number-two:~# pwd >/home/dje >root@number-two:~# ftp nocat.net >bash: ftp: command not found >root@number-two:~# ssh dje@decentric.com > >root@number-two:~# ssh dje@decentric.com > >root@number-two:~# ssh dje@decentric.com >The authenticity of host 'decentric.com (216.242.178.113)' can't be >established. >RSA key fingerprint is da:75:0b:35:f3:18:82:08:3d:d3:7e:58:20:2a:0c:82. >Are you sure you want to continue connecting (yes/no)? yes

>list of known hosts. >dje@decentric.com's password: >Last login: Tue Oct 28 20:32:22 2003 from 198.107.1.11 >[dje@server1 dje]$ lynx http://www.nocat.net >[dje@server1 dje]$ ls >NoCatAuth-nightly.tgz base/ bin/ dev/ musique/ subscriptions.opml

>tmp/ www@ >[dje@server1 dje]$ exit >logout > >Connection to decentric.com closed. >root@number-two:~# scp dje@decentric.com:NoCat* . >dje@decentric.com's password: >NoCatAuth-nightly.tgz 100%

> 89KB 41.3KB/s 00:02 >root@number-two:~# ls >NoCatAuth-nightly.tgz >root@number-two:~# tar xvfz NoCatAuth-nightly.tgz >NoCatAuth-nightly/ >NoCatAuth-nightly/bin/ >NoCatAuth-nightly/bin/detect-fw.sh >NoCatAuth-nightly/bin/admintool >NoCatAuth-nightly/bin/gateway >NoCatAuth-nightly/bin/vtun.sh >NoCatAuth-nightly/doc/ >NoCatAuth-nightly/doc/nocatrfc.txt >NoCatAuth-nightly/doc/working.iptables >NoCatAuth-nightly/doc/Introduction.txt >NoCatAuth-nightly/doc/nocat-conf.txt >NoCatAuth-nightly/doc/SameMachine.txt >NoCatAuth-nightly/doc/AuthService.txt >NoCatAuth-nightly/etc/ >NoCatAuth-nightly/etc/goodbye.html >NoCatAuth-nightly/etc/group >NoCatAuth-nightly/etc/README >NoCatAuth-nightly/etc/pam.conf >NoCatAuth-nightly/etc/exception >NoCatAuth-nightly/etc/nocat.schema >NoCatAuth-nightly/etc/groupadm >NoCatAuth-nightly/etc/vtund.conf >NoCatAuth-nightly/etc/logout.html >NoCatAuth-nightly/etc/fw-wrap.c >NoCatAuth-nightly/etc/httpd.conf >NoCatAuth-nightly/etc/passwd >NoCatAuth-nightly/etc/portforward.sample >NoCatAuth-nightly/etc/nocat.rc >NoCatAuth-nightly/etc/linux-2.4.config >NoCatAuth-nightly/lib/ >NoCatAuth-nightly/lib/NoCat/ >NoCatAuth-nightly/lib/NoCat/Group.pm >NoCatAuth-nightly/lib/NoCat/User.pm >NoCatAuth-nightly/lib/NoCat/Gateway.pm >NoCatAuth-nightly/lib/NoCat/Peer.pm >NoCatAuth-nightly/lib/NoCat/Source.pm >NoCatAuth-nightly/lib/NoCat/Source/ >NoCatAuth-nightly/lib/NoCat/Source/LDAP.pm >NoCatAuth-nightly/lib/NoCat/Source/NIS.pm >NoCatAuth-nightly/lib/NoCat/Source/PAM.pm >NoCatAuth-nightly/lib/NoCat/Source/RADIUS.pm >NoCatAuth-nightly/lib/NoCat/Source/IMAP.pm >NoCatAuth-nightly/lib/NoCat/Source/Samba.pm >NoCatAuth-nightly/lib/NoCat/Source/Passwd.pm >NoCatAuth-nightly/lib/NoCat/Source/DBI.pm >NoCatAuth-nightly/lib/NoCat/AuthService.pm >NoCatAuth-nightly/lib/NoCat/Gateway/ >NoCatAuth-nightly/lib/NoCat/Gateway/Open.pm >NoCatAuth-nightly/lib/NoCat/Gateway/Passive.pm >NoCatAuth-nightly/lib/NoCat/Gateway/Captive.pm >NoCatAuth-nightly/lib/NoCat/Firewall.pm >NoCatAuth-nightly/lib/NoCat/Message.pm >NoCatAuth-nightly/lib/NoCat.pm >NoCatAuth-nightly/pgp/ >NoCatAuth-nightly/pgp/trustedkeys.gpg >NoCatAuth-nightly/gateway.conf >NoCatAuth-nightly/BUGS >NoCatAuth-nightly/NEWS >NoCatAuth-nightly/TODO >NoCatAuth-nightly/authserv.conf >NoCatAuth-nightly/upgrade-0.80-db.pl >NoCatAuth-nightly/Makefile >NoCatAuth-nightly/LICENSE >NoCatAuth-nightly/README >NoCatAuth-nightly/libexec/ >NoCatAuth-nightly/libexec/pf/ >NoCatAuth-nightly/libexec/pf/reset.fw >NoCatAuth-nightly/libexec/pf/dump.fw >NoCatAuth-nightly/libexec/pf/access.fw >NoCatAuth-nightly/libexec/pf/initialize.fw >NoCatAuth-nightly/libexec/pf/clear.fw >NoCatAuth-nightly/libexec/ipchains/ >NoCatAuth-nightly/libexec/ipchains/reset.fw >NoCatAuth-nightly/libexec/ipchains/dump.fw >NoCatAuth-nightly/libexec/ipchains/access.fw >NoCatAuth-nightly/libexec/ipchains/initialize.fw >NoCatAuth-nightly/libexec/ipchains/clear.fw >NoCatAuth-nightly/libexec/ipfilter/ >NoCatAuth-nightly/libexec/ipfilter/initialize.fw >NoCatAuth-nightly/libexec/iptables/ >NoCatAuth-nightly/libexec/iptables/reset.fw >NoCatAuth-nightly/libexec/iptables/dump.fw >NoCatAuth-nightly/libexec/iptables/access.fw >NoCatAuth-nightly/libexec/iptables/initialize.fw >NoCatAuth-nightly/libexec/iptables/throttle.fw >NoCatAuth-nightly/libexec/iptables/clear.fw >NoCatAuth-nightly/libexec/loopback/ >NoCatAuth-nightly/libexec/loopback/dump.fw >NoCatAuth-nightly/libexec/loopback/initialize.fw >NoCatAuth-nightly/libexec/loopback/clear.fw >NoCatAuth-nightly/test.sh >NoCatAuth-nightly/htdocs/ >NoCatAuth-nightly/htdocs/fatal.html >NoCatAuth-nightly/htdocs/renew_pasv.html >NoCatAuth-nightly/htdocs/expired.html >NoCatAuth-nightly/htdocs/login_ok.html >NoCatAuth-nightly/htdocs/renew.html >NoCatAuth-nightly/htdocs/images/ >NoCatAuth-nightly/htdocs/images/auth_logo.gif >NoCatAuth-nightly/htdocs/images/update.gif >NoCatAuth-nightly/htdocs/images/login.gif >NoCatAuth-nightly/htdocs/images/continue.gif >NoCatAuth-nightly/htdocs/images/skip.gif >NoCatAuth-nightly/htdocs/images/reset.gif >NoCatAuth-nightly/htdocs/images/register.gif >NoCatAuth-nightly/htdocs/images/logout.gif >NoCatAuth-nightly/htdocs/logout.html >NoCatAuth-nightly/htdocs/status.html >NoCatAuth-nightly/htdocs/login-no-skip.html >NoCatAuth-nightly/htdocs/register_ok.html >NoCatAuth-nightly/htdocs/register.html >NoCatAuth-nightly/htdocs/login.html >NoCatAuth-nightly/htdocs/splash.html >NoCatAuth-nightly/htdocs/update.html >NoCatAuth-nightly/INSTALL >NoCatAuth-nightly/cgi-bin/ >NoCatAuth-nightly/cgi-bin/login >NoCatAuth-nightly/cgi-bin/admlogin >NoCatAuth-nightly/cgi-bin/update >NoCatAuth-nightly/cgi-bin/register >root@number-two:~# ls >NoCatAuth-nightly NoCatAuth-nightly.tgz >root@number-two:~# wget >bash: wget: command not found >root@number-two:~# rm NoCatAuth-nightly >rm: cannot remove `NoCatAuth-nightly': Is a directory >root@number-two:~# rm NoCatAuth-nightly.tgz >root@number-two:~# ls >NoCatAuth-nightly >root@number-two:~# apt-get install wget >Reading Package Lists... Done >Building Dependency Tree... Done >The following NEW packages will be installed: > wget >0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. >Need to get 416kB of archives. >After unpacking 1487kB of additional disk space will be used. >Get:1 http://rattler.thebasement.org unstable/main wget 1.9-1 [416kB] >Fetched 416kB in 1s (250kB/s) >Selecting previously deselected package wget. >(Reading database ... 7464 files and directories currently installed.) >Unpacking wget (from .../archives/wget_1.9-1_i386.deb) ... >Setting up wget (1.9-1) ... > >root@number-two:~# clear > >root@number-two:~# wget >http://rune.thebasement.org/~ice/tmp/stable-01.patch >--13:24:29-- http://rune.thebasement.org/%7Eice/tmp/stable-01.patch > => `stable-01.patch' >Resolving rune.thebasement.org... 209.162.205.200 >Connecting to rune.thebasement.org[209.162.205.200]:80... connected. >HTTP request sent, awaiting response... 200 OK >Length: 1,225 [text/plain] > >100%[========================================================>] 1,225

> --.--K/s > >root@number-two:~# ls >NoCatAuth-nightly stable-01.patch >root@number-two:~# cd NoCatAuth-nightly/ >root@number-two:~/NoCatAuth-nightly# ls >BUGS Makefile TODO cgi-bin gateway.conf libexec >upgrade-0.80-db.pl >INSTALL NEWS authserv.conf doc htdocs pgp >LICENSE README bin etc lib test.sh >root@number-two:~/NoCatAuth-nightly# patch -p1 < ../stable-01.patch >bash: patch: command not found >root@number-two:~/NoCatAuth-nightly# apt-get install patch >Reading Package Lists... Done >Building Dependency Tree... Done >The following NEW packages will be installed: > patch >0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. >Need to get 92.3kB of archives. >After unpacking 184kB of additional disk space will be used. >Get:1 http://rattler.thebasement.org unstable/main patch 2.5.9-1 >[92.3kB] >Fetched 92.3kB in 0s (111kB/s) >Selecting previously deselected package patch. >(Reading database ... 7509 files and directories currently installed.) >Unpacking patch (from .../patch_2.5.9-1_i386.deb) ... >Setting up patch (2.5.9-1) ... >root@number-two:~/NoCatAuth-nightly# patch -p1 < ../stable-01.patch >patching file bin/gateway >patching file lib/NoCat/Gateway.pm >root@number-two:~/NoCatAuth-nightly# ls >BUGS Makefile TODO cgi-bin gateway.conf libexec >upgrade-0.80-db.pl >INSTALL NEWS authserv.conf doc htdocs pgp >LICENSE README bin etc lib test.sh >root@number-two:~/NoCatAuth-nightly# vi /etc/kernel-img.conf >root@number-two:~/NoCatAuth-nightly# more /etc/kernel-img.conf >do_symlinks = No >do_initrd = Yes > >postinst_hook = /sbin/update-grub >postrm_hook = /sbin/update-grub >do_bootloader = No >root@number-two:~/NoCatAuth-nightly# apt-get install kernel-image-2.4-K6 >Reading Package Lists... Done >Building Dependency Tree... Done >The following extra packages will be installed: > cpio cramfsprogs dash initrd-tools kernel-image-2.4-k6 >kernel-image-2.4.22-1-k6 > module-init-tools >Suggested packages: > kernel-doc-2.4.22 pcmcia-modules-2.4.22-1-k6 >The following NEW packages will be installed: > cpio cramfsprogs dash initrd-tools kernel-image-2.4-k6 >kernel-image-2.4.22-1-k6 > module-init-tools >0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded. >Need to get 11.4MB of archives. >After unpacking 30.5MB of additional disk space will be used. >Do you want to continue? [Y/n] >Get:1 http://rattler.thebasement.org unstable/main dash 0.4.18 [77.4kB] >Get:2 http://rattler.thebasement.org unstable/main cpio 2.5-1.1 [64.3kB] >Get:3 http://rattler.thebasement.org unstable/main cramfsprogs 1.1-4 >[19.6kB] >Get:4 http://rattler.thebasement.org unstable/main module-init-tools >0.9.15-pre2-2 [66.3kB] >Get:5 http://rattler.thebasement.org unstable/main initrd-tools 0.1.54

>[21.1kB] >Get:6 http://rattler.thebasement.org unstable/main >kernel-image-2.4.22-1-k6 2.4.22-3 [11.1MB] >Get:7 http://rattler.thebasement.org unstable/main kernel-image-2.4-k6

>2.4.22-3 [6198B] >Fetched 11.4MB in 29s (386kB/s) >Preconfiguring packages ... >Selecting previously deselected package dash. >(Reading database ... 7518 files and directories currently installed.) >Unpacking dash (from .../archives/dash_0.4.18_i386.deb) ... >Selecting previously deselected package cpio. >Unpacking cpio (from .../archives/cpio_2.5-1.1_i386.deb) ... >Selecting previously deselected package cramfsprogs. >Unpacking cramfsprogs (from .../cramfsprogs_1.1-4_i386.deb) ... >Selecting previously deselected package module-init-tools. >Unpacking module-init-tools (from >.../module-init-tools_0.9.15-pre2-2_i386.deb) ... >Selecting previously deselected package initrd-tools. >Unpacking initrd-tools (from .../initrd-tools_0.1.54_all.deb) ... >Selecting previously deselected package kernel-image-2.4.22-1-k6. >Unpacking kernel-image-2.4.22-1-k6 (from >.../kernel-image-2.4.22-1-k6_2.4.22-3_i386.deb) ... >Selecting previously deselected package kernel-image-2.4-k6. >Unpacking kernel-image-2.4-k6 (from >.../kernel-image-2.4-k6_2.4.22-3_i386.deb) ... >Setting up dash (0.4.18) ... > >Setting up cpio (2.5-1.1) ... > >Setting up cramfsprogs (1.1-4) ... > >Setting up module-init-tools (0.9.15-pre2-2) ... > >Setting up initrd-tools (0.1.54) ... > >Setting up kernel-image-2.4.22-1-k6 (2.4.22-3) ... >/initrd.img does not exist. Installing from scratch, eh? >Or maybe you don't want a symbolic link here. Hmm? Lets See. > >Setting up kernel-image-2.4-k6 (2.4.22-3) ... >root@number-two:~/NoCatAuth-nightly# dpkg -P lilo >(Reading database ... 8834 files and directories currently installed.) >Removing lilo ... >Purging configuration files for lilo ... >root@number-two:~/NoCatAuth-nightly# apt-get install grub >Reading Package Lists... Done >Building Dependency Tree... Done >Suggested packages: > grub-doc >The following NEW packages will be installed: > grub >0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. >Need to get 282kB of archives. >After unpacking 635kB of additional disk space will be used. >Get:1 http://rattler.thebasement.org unstable/main grub >0.93+cvs20031021-1 [282kB] >Fetched 282kB in 1s (281kB/s) >Selecting previously deselected package grub. >(Reading database ... 8795 files and directories currently installed.) >Unpacking grub (from .../grub_0.93+cvs20031021-1_i386.deb) ... >Setting up grub (0.93+cvs20031021-1) ... >root@number-two:~/NoCatAuth-nightly# grub-install /dev/hda >Probing devices to guess BIOS drives. This may take a long time. >Installation finished. No error reported. >This is the contents of the device map /boot/grub/device.map. >Check if this is correct or not. If any of the lines is incorrect, >fix it and re-run the script `grub-install'. > >(fd0) /dev/fd0 >(hd0) /dev/hda >root@number-two:~/NoCatAuth-nightly# update-grub >Searching for GRUB installation directory ... found: /boot/grub . >Testing for an existing GRUB menu.list file... > >Could not find /boot/grub/menu.lst file. Would you like >/boot/grub/menu.lst generated for you? (y/N) y >Found kernel: /boot/vmlinuz-2.4.22-1-k6 >Found kernel: /boot/vmlinuz-2.4.18-bf2.4 >Updating /boot/grub/menu.lst ... done > >root@number-two:~/NoCatAuth-nightly# update-grub >Searching for GRUB installation directory ... found: /boot/grub . >Testing for an existing GRUB menu.list file... found: >/boot/grub/menu.lst . >Found kernel: /boot/vmlinuz-2.4.22-1-k6 >Found kernel: /boot/vmlinuz-2.4.18-bf2.4 >Updating /boot/grub/menu.lst ... done > >root@number-two:~/NoCatAuth-nightly# reboot > >Broadcast message from root (pts/0) (Tue Oct 28 13:32:52 2003): > >The system is going down for reboot NOW! >root@number-two:~/NoCatAuth-nightly# Connection to 192.168.100.3 closed

>by remote host. >Connection to 192.168.100.3 closed. >Darrin-Edens-Computer:~ dje$ ssh dje@192.168.100.3 >^C >Darrin-Edens-Computer:~ dje$ ssh dje@192.168.100.3 >dje@192.168.100.3's password: >Linux number-two 2.4.22-1-k6 #5 Sat Oct 4 14:38:05 EST 2003 i586 >GNU/Linux > >The programs included with the Debian GNU/Linux system are free >software; >the exact distribution terms for each program are described in the >individual files in /usr/share/doc/*/copyright. > >Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent >permitted by applicable law. >Last login: Tue Oct 28 13:10:21 2003 from 192.168.100.4 >dje@number-two:~$ uname -a >Linux number-two 2.4.22-1-k6 #5 Sat Oct 4 14:38:05 EST 2003 i586 >GNU/Linux >dje@number-two:~$ sudo -s >Password: >root@number-two:~# apt-get install ssmtp >Reading Package Lists... Done >Building Dependency Tree... Done >The following packages will be REMOVED: > exim >The following NEW packages will be installed: > ssmtp >0 upgraded, 1 newly installed, 1 to remove and 0 not upgraded. >Need to get 26.4kB of archives. >After unpacking 1425kB disk space will be freed. >Do you want to continue? [Y/n] >Get:1 http://rattler.thebasement.org unstable/main ssmtp 2.60.4 [26.4kB] >Fetched 26.4kB in 0s (40.1kB/s) >Preconfiguring packages ... >Configuring Ssmtp >


> > The mail configuration file /etc/ssmtp/ssmtp.conf can be automatically > updated on each upgrade with the information supplied to the debconf > database. If you do not want this to happen (ie/ you want to maintain > control of this file yourself) then set this option to have the program > never touch this file. > >:-) Automatically overwrite config files? y > > > Mail sent to a local user whose UID is less than 1000 will instead be > sent here. This is useful for daemons which mail reports to root and > other system UIDs. > >:-) Who gets mail for userids < 1000? dje > > > This sets the host to which mail is delivered. The actual machine > name is required; no MX records are consulted. Commonly, mailhosts > are named "mail.domain.com". > >:-) Name of your mailhub? mail.personaltelco.net > > > ssmtp will use "username@REWRITEDOMAIN" as the default From: address > for outgoing mail which contains only a local username. > >:-) What domain to masquerade as? personaltelco.net > > > A "positive" response will permit local users to enter any From: line > in their messages without it being mangled, and cause ssmtp to rewrite > the envelope header with that address. A "negative" response will > disallow this, and use only the default address or addresses set in > /etc/ssmtp/revaliases. > >:-) Allow override of From: line in email header? y > > >dpkg: exim: dependency problems, but removing anyway as you request: > mailx depends on mail-transport-agent; however: > Package mail-transport-agent is not installed. > Package exim which provides mail-transport-agent is to be removed. >(Reading database ... 8836 files and directories currently installed.) >Removing exim ... >Selecting previously deselected package ssmtp. >(Reading database ... 8773 files and directories currently installed.) >Unpacking ssmtp (from .../archives/ssmtp_2.60.4_i386.deb) ... >Setting up ssmtp (2.60.4) ... > >root@number-two:~# deborphan >libident >libpcre3 >root@number-two:~# dpkg -P libident libpcre3 >(Reading database ... 8790 files and directories currently installed.) >Removing libident ... >Removing libpcre3 ... >Purging configuration files for libpcre3 ... >root@number-two:~# deborphan >root@number-two:~# pwd >/home/dje >root@number-two:~# ls >NoCatAuth-nightly stable-01.patch >root@number-two:~# cd NoCatAuth-nightly/ >root@number-two:~/NoCatAuth-nightly# ls >BUGS Makefile TODO cgi-bin gateway.conf libexec >upgrade-0.80-db.pl >INSTALL NEWS authserv.conf doc htdocs pgp >LICENSE README bin etc lib test.sh >root@number-two:~/NoCatAuth-nightly# make gateway >Looking for gpgv... >Checking for firewall compatibility: /sbin/iptables found. >libexec/iptables/access.fw -> bin/access.fw >libexec/iptables/clear.fw -> bin/clear.fw >libexec/iptables/clear.fw -> bin/clear.fw >libexec/iptables/dump.fw -> bin/dump.fw >libexec/iptables/initialize.fw -> bin/initialize.fw >libexec/iptables/reset.fw -> bin/reset.fw >libexec/iptables/throttle.fw -> bin/throttle.fw >/sbin/iptables -> bin/iptables >[ -d /usr/local/nocat ] || mkdir -p /usr/local/nocat >chmod 755 /usr/local/nocat >[ -d /usr/local/nocat/htdocs ] || cp -R htdocs /usr/local/nocat >cp -R bin /usr/local/nocat >Installing NoCat to /usr/local/nocat... >cp -R lib pgp /usr/local/nocat >[ -f /usr/local/nocat/nocat.conf ] || \ > perl -pe 's#/usr/local/nocat#/usr/local/nocat#g' gateway.conf \ > > /usr/local/nocat/nocat.conf > >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > Congratulations! > NoCat gateway is installed. To start it, check > /usr/local/nocat/nocat.conf, then run bin/gateway > as root. >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > >root@number-two:~/NoCatAuth-nightly# shutdown -h now > >Broadcast message from root (pts/0) (Tue Oct 28 13:39:32 2003): > >The system is going down for system halt NOW! >root@number-two:~/NoCatAuth-nightly# Connection to 192.168.100.3 closed

>by remote host. >Connection to 192.168.100.3 closed. >Darrin-Edens-Computer:~ dje$