[debian-edu-commits] [Debian Wiki] Update of "DebianEdu/Documentation/Bullseye/Requirements" by WolfgangSchweer
Debian Wiki
wiki at debian.org
Wed Feb 3 21:05:17 GMT 2021
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Debian Wiki" for change notification.
The "DebianEdu/Documentation/Bullseye/Requirements" page has been changed by WolfgangSchweer:
https://wiki.debian.org/DebianEdu/Documentation/Bullseye/Requirements?action=diff&rev1=7&rev2=8
Comment:
mention configure-edu-gateway script, drop previously used script
A simple way is to install Debian Edu on this computer; select 'Minimal' as profile during installation.
- After the installation:
+ After the installation, run {{{/usr/share/debian-edu-config/tools/configure-edu-gateway --firewall <yes|no>}}} to get this done:
* Adjust the /etc/network/interfaces file.
* Change the hostname permanently to 'gateway'.
* Remove superfluous scripts.
* Enable IP forwarding and NAT for the 10.0.0.0/8 network.
+ * Install a firewall (optionally).
- * As an option install a firewall and / or a traffic shaping tool.
-
- {{{
- #!/bin/sh
- # Turn a system with profile 'Minimal' into a gateway/firewall.
- #
- sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces
- sed -i '/eth1/ s/dhcp/static/' /etc/network/interfaces
- sed -i '/post-up/d' /etc/network/interfaces
- echo 'address 10.0.0.1' >> /etc/network/interfaces
- echo 'dns-nameservers 10.0.2.2' >> /etc/network/interfaces
- echo 'dns-domain intern' >> /etc/network/interfaces
- hostname -b gateway
- hostname > /etc/hostname
- rm -f /etc/dhcp/dhclient-exit-hooks.d/hostname
- rm -f /etc/dhcp/dhclient-exit-hooks.d/wpad-proxy-update
- rm -f /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert
- rm -f /etc/network/if-up.d/wpad-proxy-update
- sed -i 's/domain-name,//' /etc/dhcp/dhclient-debian-edu.conf
- sed -i 's/domain-search,//' /etc/dhcp/dhclient-debian-edu.conf
- service networking stop
- service networking start
- sed -i 's#NAT=#NAT="10.0.0.0/8"#' /etc/default/enable-nat
- service enable-nat restart
- # You might want a firewall (shorewall or ufw) and traffic shaping.
- #apt update
- #apt install shorewall
- # or
- #apt install ufw
- #apt install wondershaper
- }}}
If you need something for an embedded router or accesspoint we recommend using [[https://openwrt.org|OpenWRT]], though of course you can also use the original firmware. Using the original firmware is easier; using OpenWRT gives you more choices and control. Check the OpenWRT webpages for a list of [[https://wiki.openwrt.org/toh/start|supported hardware]].
More information about the debian-edu-commits
mailing list