diff options
| -rw-r--r-- | disposable/Vagrantfile | 50 | ||||
| -rw-r--r-- | kali/Vagrantfile | 2 | ||||
| -rw-r--r-- | vpn/Vagrantfile | 1 | ||||
| -rw-r--r-- | vpn2/Vagrantfile | 1 | ||||
| -rw-r--r-- | vpn3/Vagrantfile | 1 |
5 files changed, 37 insertions, 18 deletions
diff --git a/disposable/Vagrantfile b/disposable/Vagrantfile index 1a0df27..72bd251 100644 --- a/disposable/Vagrantfile +++ b/disposable/Vagrantfile @@ -76,29 +76,45 @@ Vagrant.configure('2') do |config| rc-service openvpn start || true sleep 1 - ufw allow 22 - ufw enable - cp /vagrant/bw_firefox /usr/bin/ SHELL - config.vm.provision 'mullvad-test', type: 'shell', name: 'test', privileged: false, inline: <<-SHELL + config.vm.provision 'kill-switch', communicator_required: false, type: 'shell', name: 'kill-switch', privileged: true, inline: <<-SHELL + # http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en/help/linux-openvpn-installation set -ex - curl --connect-timeout 10 https://am.i.mullvad.net/connected | grep -i "you\ are\ connected" + ufw --force reset + ufw default deny incoming + ufw default deny outgoing + ufw allow in on tun0 + ufw allow out on tun0 + # enable libvirt bridge + ufw allow in on eth0 from 192.168.121.1 + ufw allow out on eth0 to 192.168.121.1 + # server block + ufw allow out on eth0 to 185.204.1.174 port 443 + ufw allow in on eth0 from 185.204.1.174 port 443 + ufw allow out on eth0 to 185.204.1.176 port 443 + ufw allow in on eth0 from 185.204.1.176 port 443 + ufw allow out on eth0 to 185.204.1.172 port 443 + ufw allow in on eth0 from 185.204.1.172 port 443 + ufw allow out on eth0 to 185.204.1.171 port 443 + ufw allow in on eth0 from 185.204.1.171 port 443 + ufw allow out on eth0 to 185.212.149.201 port 443 + ufw allow in on eth0 from 185.212.149.201 port 443 + ufw allow out on eth0 to 185.204.1.173 port 443 + ufw allow in on eth0 from 185.204.1.173 port 443 + ufw allow out on eth0 to 193.138.7.237 port 443 + ufw allow in on eth0 from 193.138.7.237 port 443 + ufw allow out on eth0 to 193.138.7.217 port 443 + ufw allow in on eth0 from 193.138.7.217 port 443 + ufw allow out on eth0 to 185.204.1.175 port 443 + ufw allow in on eth0 from 185.204.1.175 port 443 + + echo y | ufw enable SHELL - config.vm.provision 'kill-switch', communicator_required: false, type: 'shell', name: 'kill-switch', privileged: true, inline: <<-SHELL - # http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en/help/linux-openvpn-installation + config.vm.provision 'mullvad-test', type: 'shell', name: 'test', privileged: false, inline: <<-SHELL set -ex - iptables -P OUTPUT DROP - iptables -A OUTPUT -o tun+ -j ACCEPT - iptables -A INPUT -i lo -j ACCEPT - iptables -A OUTPUT -o lo -j ACCEPT - iptables -A OUTPUT -d 255.255.255.255 -j ACCEPT - iptables -A INPUT -s 255.255.255.255 -j ACCEPT - iptables -A OUTPUT -o eth+ -p udp -m multiport --dports 53,1300:1302,1194:1197 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT - iptables -A OUTPUT -o eth+ -p tcp -m multiport --dports 53,443 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT - ip6tables -P OUTPUT DROP - ip6tables -A OUTPUT -o tun+ -j ACCEPT + curl --connect-timeout 10 https://am.i.mullvad.net/connected | grep -i "you\ are\ connected" SHELL end diff --git a/kali/Vagrantfile b/kali/Vagrantfile index c4647bf..a73ba06 100644 --- a/kali/Vagrantfile +++ b/kali/Vagrantfile @@ -28,7 +28,7 @@ Vagrant.configure('2') do |config| config.vm.provider 'libvirt' do |libvirt| libvirt.default_prefix = 'kali-' libvirt.driver = 'kvm' - libvirt.memory = '4096' + libvirt.memory = '3072' libvirt.cpus = 4 libvirt.sound_type = nil libvirt.qemuargs value: '-nographic' diff --git a/vpn/Vagrantfile b/vpn/Vagrantfile index 67d9551..53dd5d0 100644 --- a/vpn/Vagrantfile +++ b/vpn/Vagrantfile @@ -64,6 +64,7 @@ Vagrant.configure('2') do |config| SHELL config.vm.provision 'killswitch', type: 'shell', name: 'killswitch', privileged: true, inline: <<-SHELL + set -ex ufw --force reset ufw default deny incoming ufw default deny outgoing diff --git a/vpn2/Vagrantfile b/vpn2/Vagrantfile index 46dfc0d..3021bd1 100644 --- a/vpn2/Vagrantfile +++ b/vpn2/Vagrantfile @@ -64,6 +64,7 @@ Vagrant.configure('2') do |config| SHELL config.vm.provision 'killswitch', type: 'shell', name: 'killswitch', privileged: true, inline: <<-SHELL + set -ex ufw --force reset ufw default deny incoming ufw default deny outgoing diff --git a/vpn3/Vagrantfile b/vpn3/Vagrantfile index 1b236ac..f952273 100644 --- a/vpn3/Vagrantfile +++ b/vpn3/Vagrantfile @@ -64,6 +64,7 @@ Vagrant.configure('2') do |config| SHELL config.vm.provision 'killswitch', type: 'shell', name: 'killswitch', privileged: true, inline: <<-SHELL + set -ex ufw --force reset ufw default deny incoming ufw default deny outgoing |