[debian-edu-commits] [Debian Wiki] Update of "DebianEdu/Documentation/Bullseye/Requirements" by WolfgangSchweer

[Debian Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Debian Wiki" for change notification.

The "DebianEdu/Documentation/Bullseye/Requirements" page has been changed by WolfgangSchweer:
https://wiki.debian.org/DebianEdu/Documentation/Bullseye/Requirements?action=diff&rev1=7&rev2=8

Comment:
mention configure-edu-gateway script, drop previously used script

  
  A simple way is to install Debian Edu on this computer; select 'Minimal' as profile during installation.
  
- After the installation:
+ After the installation, run {{{/usr/share/debian-edu-config/tools/configure-edu-gateway --firewall <yes|no>}}} to get this done:
   * Adjust the /etc/network/interfaces file.
   * Change the hostname permanently to 'gateway'.
   * Remove superfluous scripts.
   * Enable IP forwarding and NAT for the 10.0.0.0/8 network.
+  * Install a firewall (optionally).
-  * As an option install a firewall and / or a traffic shaping tool.
- 
- {{{
-  #!/bin/sh
-  # Turn a system with profile 'Minimal' into a gateway/firewall. 
-  #
-  sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces
-  sed -i '/eth1/ s/dhcp/static/' /etc/network/interfaces
-  sed -i '/post-up/d' /etc/network/interfaces
-  echo 'address 10.0.0.1' >> /etc/network/interfaces
-  echo 'dns-nameservers 10.0.2.2' >> /etc/network/interfaces
-  echo 'dns-domain intern' >> /etc/network/interfaces
-  hostname -b gateway
-  hostname > /etc/hostname
-  rm -f /etc/dhcp/dhclient-exit-hooks.d/hostname
-  rm -f /etc/dhcp/dhclient-exit-hooks.d/wpad-proxy-update
-  rm -f /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert
-  rm -f /etc/network/if-up.d/wpad-proxy-update
-  sed -i 's/domain-name,//' /etc/dhcp/dhclient-debian-edu.conf
-  sed -i 's/domain-search,//' /etc/dhcp/dhclient-debian-edu.conf
-  service networking stop
-  service networking start
-  sed -i 's#NAT=#NAT="10.0.0.0/8"#' /etc/default/enable-nat
-  service enable-nat restart
-  # You might want a firewall (shorewall or ufw) and traffic shaping.
-  #apt update
-  #apt install shorewall
-  # or
-  #apt install ufw
-  #apt install wondershaper  
- }}}
  
  If you need something for an embedded router or accesspoint we recommend using [[https://openwrt.org|OpenWRT]], though of course you can also use the original firmware. Using the original firmware is easier; using OpenWRT gives you more choices and control. Check the OpenWRT webpages for a list of [[https://wiki.openwrt.org/toh/start|supported hardware]].