Networking

Agate on Arch Linux

Requirements Install Arch Install yay Docs are here. You will need DNS set up before proceeding. Install agate. yay -S agate Be root! In my case the domain is 'splint.rs'. DOMAIN1=splint.rs You can set up any number of domain names. DOMAIN2=ttrpgs.com Make a directory to serve the gemini files from: GEMDIR=/srv/gemini …

Check if NAT-blocked

1 min read · networking nat

Trace the route to any domain name. 1traceroute to splint.rs (89.216.117.22), 30 hops max, 60 byte packets 2 1 _gateway (192.168.0.1) 0.265 ms 0.209 ms 0.193 ms 3 2 100.64.0.1 (100.64.0.1) 56.974 ms 60.893 ms 60.911 ms 4 3 172.31.254.2 (172.31.254.2) 61.795 ms 61.610 ms 70.443 ms 5 4 172.31.254.2 (172.31.254.2) 69.929 …

DNS Record List

1 min read · networking host

Record Type Example A Record IPv4 Address "$domain".com AAAA Record IPv4 Address "$domain".com CNAME Alternative Address "$domain".rs, "$subdomain.$domain".com NS Nameserver ns1.fastname.com MX Email server "$domain".com TXT Literally anything "drunk giraffes can't spell" Query a host's IP and email handlers with the …

Download Website

1 min read · networking scraping web

1domain=splint.rs 2mkdir $domain 3cd $domain 4wget --recursive --convert-links --backup-converted \ 5 --page-requisites --level=inf --adjust-extension \ 6 -U "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" \ 7 -p --mirror --html-extension --convert-links \ 8$domain

fail2ban for ssh

1 min read · networking system Setup

Requirements ssh SSH Daemon Jail 1sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.d/ssh.local [sshd] enabled = true ignoreip = 127.0.0.1/8 ::1,192.168.0.0/16 ::1 1sudo systemctl restart fail2ban 1sudo fail2ban-client status 1sudo fail2ban-client status sshd

iptables

2 min read · networking

Intro This is a basic Linux firewall program. Look at your firewalls: 1iptables -L We see the output of input, output and forwarding rules. Forward I don't need any forwarding, so I'm going to drop all forwarding: 1iptables -P FORWARD DROP Input Let's 'A'dd, or 'A'ppend a rule with -A. Let's drop all input from a …

Mapping the Net

1 min read · networking graph fun

Find the path to a domain: 1domain=bad.horse 2max_hops=50 3 4tracepath -m $maximum_hops $domain If you're on Debian, you can use graph-easy and dothost to make an instant diagram: 1domain=dice.camp 2dothost $domain | graph-easy --boxart

nginx

1 min read · networking web

Install nginx: 1sudo apt-get install nginx 1sudo apt-get enable --now nginx Put a website somewhere: 1mkdir /var/www/html/mysite/ Put an index file there: 1vim /var/www/html/mysite/index.html Make the owner www-data 1chown -R www-data:www-data /var/www/html/mysite/ Make a configuration file for nginx: 1vim …

nmap

1 min read · networking

Example: 1nmap 192.168.1.1/24 Flags: Flag Meaning Effect -F Fast First 100 ports only Look for a web server, which has ports 80 and 443 open: 1nmap 192.168.1.1/24 -p 80,443 --open

Port Scan

1 min read · networking

havn scans ports. It's not in many repos, but if you can cargo install havn. 1havn -h 2havn -a 3domain=splint.rs 4havn -p 19-90 ${domain} That last command doesn't work reliably, so increase the number of retries (-r), or decrease concurrent requests (-c). 1havn -p 19-443 -r 6 ${domain} 2havn -p 1-1000 -c 500 -r 5 …