Router2

Server

Virtuelle Maschine auf KVM

Hipervisor: KVM
Architecture: x86_64
CPU: 1
RAM: 1024
Virtual Disk: 10.00 GiB
Source path: /storage/vms/router2.qcow2

Betriebssystem

mg@router.aquapool.de:~$ show version
Version:          VyOS 1.4-rolling-202303030317
Release train:    current

Built by:         autobuild@vyos.net
Built on:         Fri 03 Mar 2023 03:17 UTC
Build UUID:       0ce89af1-6db9-4940-9ee6-6be3f1d7a079
Build commit ID:  afdaac1012d7b1

Architecture:     x86_64
Boot via:         installed image
System type:       guest

Hardware vendor:  QEMU
Hardware model:   Standard PC (Q35 + ICH9, 2009)
Hardware S/N:     
Hardware UUID:    f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54

Copyright:        VyOS maintainers and contributors

Netzwerkkonfiguration in /config/config.boot vom 11.Mai 2024

firewall {
    all-ping enable
    broadcast-ping disable
    config-trap disable
    interface tun2 {
        in {
            ipv6-name tun2_in
        }
    }
    ipv6-name tun2_in {
        default-action reject
        rule 1 {
            action accept
            protocol ipv6-icmp
        }
        rule 2 {
            action accept
            protocol all
            state {
                established enable
                related enable
            }
        }
        rule 3 {
            action accept
            destination {
                address 2001:470:1f0b:563::15
                port 80
            }
            protocol tcp
            state {
                new enable
            }
        }
        rule 4 {
            action accept
            destination {
                address 2001:470:1f0b:563::15
                port 443
            }
            protocol tcp
            state {
                new enable
            }
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
    twa-hazards-protection disable
}
interfaces {
    ethernet eth0 {
        address 10.12.3.1/29
        duplex auto
        hw-id 52:54:00:64:19:ea
        offload {
            gro
            gso
            sg
            tso
        }
    }
    ethernet eth1 {
        address 172.16.10.1/24
        address 2001:470:1f0b:563::1/64
        hw-id 52:54:00:c1:6f:c2
        ipv6 {
            dup-addr-detect-transmits 1
        }
        offload {
            gro
            gso
            sg
            tso
        }
        speed auto
    }
    loopback lo {
        address 78.47.239.0/32
        address 78.47.239.1/32
        address 78.47.239.2/32
        address 78.47.239.3/32
        address 78.47.239.4/32
        address 78.47.239.5/32
        address 78.47.239.6/32
        address 78.47.239.7/32
    }
    openvpn vtun0 {
        mode server
        openvpn-option duplicate-cn
        protocol tcp-passive
        server {
            push-route 172.16.10.0/24 {
            }
            subnet 172.16.11.0/25
        }
        tls {
            ca-certificate openvpn_vtun0_1
            certificate openvpn_vtun0
            dh-params openvpn_vtun0
        }
    }
    tunnel tun0 {
        address 172.16.43.8/32
        address 172.16.43.8/31
        encapsulation gre
        remote 188.40.111.111
        source-address 78.47.239.0
    }
    tunnel tun1 {
        address 172.16.91.1/30
        encapsulation gre
        remote 78.46.79.155
        source-address 78.47.239.0
    }
    tunnel tun2 {
        address 2001:470:1f0a:563::2/64
        description "HE.NET IPv6 Tunnel"
        encapsulation sit
        remote 216.66.80.30
        source-address 78.47.239.0
    }
    wireguard wg0 {
        address 172.16.12.1/24
        peer michael {
            allowed-ips 192.168.178.0/24
            allowed-ips 192.168.188.0/24
            allowed-ips 172.16.12.2/32
            allowed-ips 192.168.198.0/24
            public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=
        }
        peer njk {
            allowed-ips 192.168.0.0/24
            allowed-ips 172.16.12.3/32
            public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=
        }
        port 51280
        private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=
    }
}
nat {
    destination {
        rule 2 {
            description mail2
            destination {
                address 78.47.239.3
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 443
            }
        }
        rule 3 {
            description "owncloud http"
            destination {
                address 78.47.239.1
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.3
                port 80
            }
        }
        rule 4 {
            description "owncloud https"
            destination {
                address 78.47.239.1
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.3
                port 443
            }
        }
        rule 5 {
            destination {
                address 78.47.239.5
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 80
            }
        }
        rule 6 {
            destination {
                address 78.47.239.5
                port 22222
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 22
            }
        }
        rule 7 {
            destination {
                address 78.47.239.5
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 443
            }
        }
        rule 8 {
            destination {
                address 78.47.239.5
                port 9443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 9443
            }
        }
        rule 9 {
            destination {
                address 78.47.239.5
                port 8443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 8443
            }
        }
        rule 10 {
            destination {
                address 78.47.239.5
                port 20
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 20
            }
        }
        rule 11 {
            destination {
                address 78.47.239.5
                port 21
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 21
            }
        }
        rule 12 {
            destination {
                address 78.47.239.5
                port 12000-13000
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.6
                port 12000-13000
            }
        }
        rule 13 {
            destination {
                address 78.47.239.2
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.5
                port 80
            }
        }
        rule 14 {
            destination {
                address 78.47.239.2
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.5
                port 443
            }
        }
        rule 15 {
            destination {
                address 78.47.239.2
                port 6922
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.5
                port 22
            }
        }
        rule 16 {
            destination {
                address 78.47.239.3
                port 993
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 993
            }
        }
        rule 17 {
            destination {
                address 78.47.239.3
                port 587
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 587
            }
        }
        rule 25 {
            destination {
                address 78.47.239.7
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.7
                port 443
            }
        }
        rule 26 {
            destination {
                address 78.47.239.3
                port 7080
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 80
            }
        }
        rule 27 {
            destination {
                address 78.47.239.6
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.20
                port 80
            }
        }
        rule 28 {
            destination {
                address 78.47.239.6
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.20
                port 443
            }
        }
        rule 29 {
            destination {
                address 78.47.239.0
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.13
                port 80
            }
        }
        rule 30 {
            destination {
                address 78.47.239.0
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.13
                port 443
            }
        }
        rule 31 {
            destination {
                address 78.47.239.0
                port 2223
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.13
                port 22
            }
        }
        rule 32 {
            description mail2
            destination {
                address 78.47.239.3
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 80
            }
        }
        rule 33 {
            description "crm http"
            destination {
                address 78.47.239.7
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.7
                port 80
            }
        }
        rule 34 {
            description mail2
            destination {
                address 78.47.239.3
                port 25
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 25
            }
        }
        rule 35 {
            description mail2
            destination {
                address 78.47.239.3
                port 143
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 143
            }
        }
        rule 36 {
            description mail2
            destination {
                address 78.47.239.3
                port 465
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.22
                port 465
            }
        }
        rule 40 {
            description swimflow
            destination {
                address 78.47.239.4
                port 443
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.14
                port 443
            }
        }
        rule 41 {
            description swimflow
            destination {
                address 78.47.239.4
                port 80
            }
            inbound-interface eth0
            protocol tcp
            translation {
                address 172.16.10.14
                port 80
            }
        }
    }
    source {
        rule 100 {
            outbound-interface eth0
            source {
                address 172.16.10.22/32
            }
            translation {
                address 78.47.239.3
            }
        }
        rule 200 {
            outbound-interface eth0
            source {
                address 172.16.10.0/24
            }
            translation {
                address 78.47.239.1
            }
        }
        rule 201 {
            outbound-interface eth0
            source {
                address 172.16.11.128/25
            }
            translation {
                address 78.47.239.1
            }
        }
    }
}
pki {
    ca openvpn_vtun0_1 {
        certificate MIIDYDCCAsmgAwIBAgIJANFwx+7jP2doMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAkRFMQswCQYDVQQIEwJTSDERMA8GA1UEBxMIRWxtc2hvcm4xETAPBgNVBAoTCGFxdWFwb29sMRswGQYDVQQDExJyb3V0ZXIuYXF1YXBvb2wuZGUxHzAdBgkqhkiG9w0BCQEWEGZhbGtAZm91cmVja3MuZGUwHhcNMTEwODA0MDgwMDQyWhcNMjEwODAxMDgwMDQyWjB+MQswCQYDVQQGEwJERTELMAkGA1UECBMCU0gxETAPBgNVBAcTCEVsbXNob3JuMREwDwYDVQQKEwhhcXVhcG9vbDEbMBkGA1UEAxMScm91dGVyLmFxdWFwb29sLmRlMR8wHQYJKoZIhvcNAQkBFhBmYWxrQGZvdXJlY2tzLmRlMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx52zkiVRaBRqawfbTVbVdsduBObBrBHlHw2h6ENrGRRDQpQXP95U5kEY1mVn7MDSQYoYWjzQful8OBL3i1QO008m5v9LXIVDxnU5j8X3bUEaAdE8dnlVZYFSVVwNY7w4hinh1EreE6GCyintv2qMzX2YjquNZntsukGG+QbyFiwIDAQABo4HlMIHiMB0GA1UdDgQWBBTFXub/aXLY892FOvOtxozD6mcbJjCBsgYDVR0jBIGqMIGngBTFXub/aXLY892FOvOtxozD6mcbJqGBg6SBgDB+MQswCQYDVQQGEwJERTELMAkGA1UECBMCU0gxETAPBgNVBAcTCEVsbXNob3JuMREwDwYDVQQKEwhhcXVhcG9vbDEbMBkGA1UEAxMScm91dGVyLmFxdWFwb29sLmRlMR8wHQYJKoZIhvcNAQkBFhBmYWxrQGZvdXJlY2tzLmRlggkA0XDH7uM/Z2gwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOBgQBi40YawPHXwB3SdJ4X+N1nNI8TSRX2l71qDDfN2M+9UnUtkgPQv9sNrklwfLAbQIBZPj5AqNVLyhjlI6FxQPqDy6AXxQH0HRFaka7puVnOXDJFZEL3t8maHhjtrV3W2vdhi8XHS8hcco06q4sKA6xXd7e059IUuA0a1cRPmYUUwQ==
    }
    certificate openvpn_vtun0 {
        certificate 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
        private {
            key MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAL5C1EmLZe0W6ZU3QtwosMz5Ekle6Nn5ByICVmxTWZvMjAFUKgpUqL//DMrofH5SwhgbbFi+UIQmcoFDNDaCB8r4XCUA09Cu1juQzlbs6CyUXfqXmfQz9s43ki6ztcLuAfyw+0pBsqUsOi9zAxoj8gOUlxjwEbS/GoYUEi4dbfTJAgMBAAECgYBUh6KDjlBZls1ugx/MarOqTZqnSGiRt0dI/9rfw+RTCPzG9lq7PkO/EZTgbYwqH6CmT0DC6MMjA2XqMi53bSwCZsnvzYav34qwc54cp+Zf6SMskbpFyqP4WvFRucUSMwQEyZQ1woKmVbHrPlEHte2n4QCFq2THvVpP6s5+77XvAQJBAPp3jtStdwSbQnIi+mEbsFksMixim2SoRnRGoNHW2k1MKyTjxZ3SEyCop7KjyHcj58tb+tuVS8fpqYcpqJgdyuECQQDCdstVlS4dmHWxTJ/C/tJhcr3Z/4wu0U3k2US46zoKwABlKRBv7ghXDir3WNbJulq219S+6IsGaxkeRgKoOA7pAkEA9Khuw77CAKTsjfMu4kaaxzBNvl9/7R4W3CPVmcQmr9TUXA+GDLiU6JT2YqBsBDz1ggbSD0ZRpPDRIW+G+Tg44QJAFvUhUiw3coUCN/k8zy94NMrwAOF7cjeBg6fmxhH3GzfJlCfB6gTm9SgWCHdzfANFHFrkodkgOJTCNWG8hJGBqQJAWi9QO+NBeXQHnUSmb+vRGSj+Hn9wh7B6phYQJ24vL8SLJaoyGBK+gB0Uqc17WNdGhdC4xhxx9AN2hCn5WkEkAw==
        }
    }
    dh openvpn_vtun0 {
        parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==
    }
}
protocols {
    static {
        route 0.0.0.0/0 {
            next-hop 10.12.3.2 {
            }
        }
        route 172.16.41.0/24 {
            next-hop 172.16.91.2 {
            }
        }
        route 172.16.42.0/24 {
            next-hop 172.16.43.9 {
            }
        }
        route 192.168.0.0/16 {
            interface wg0 {
            }
        }
        route6 ::/0 {
            next-hop 2001:470:1f0a:563::1 {
            }
        }
    }
}
service {
    dns {
        forwarding {
            allow-from 172.16.0.0/12
            cache-size 150
            listen-address 172.16.10.1
            name-server 8.8.8.8
        }
    }
    ntp {
        allow-client {
            address 0.0.0.0/0
            address ::/0
        }
        server 0.pool.ntp.org {
        }
        server 0.vyatta.pool.ntp.org {
        }
        server 1.pool.ntp.org {
        }
        server 1.vyatta.pool.ntp.org {
        }
        server 2.pool.ntp.org {
        }
        server 2.vyatta.pool.ntp.org {
        }
    }
    router-advert {
        interface eth1 {
            prefix 2001:470:1f0b:563::/64 {
            }
        }
    }
    snmp {
        community aquapool {
            authorization ro
            network 172.16.10.0/24
        }
        listen-address 172.16.10.1 {
            port 161
        }
    }
    ssh {
        disable-password-authentication
        listen-address 78.47.239.0
        port 22
    }
}
system {
    config-management {
        commit-revisions 20
    }
    conntrack {
        modules {
            ftp
            h323
            nfs
            pptp
            sip
            sqlnet
            tftp
        }
    }
    console {
        device ttyS0 {
            speed 9600
        }
    }
    host-name router.aquapool.de
    login {
        user falk {
            authentication {
                encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/
                plaintext-password ""
                public-keys fstern@nb-stern {
                    key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==
                    type ssh-rsa
                }
            }
        }
        user mg {
            authentication {
                public-keys mg {
                    key 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
                    type ssh-rsa
                }
            }
        }
        user njk {
            authentication {
                encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/
                plaintext-password ""
                public-keys me@njk {
                    key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==
                    type ssh-rsa
                }
            }
        }
    }
    name-server 1.1.1.1
    static-host-mapping {
        host-name crm1.aquapool.de {
            inet 172.16.10.11
        }
        host-name crm.aquapool.de {
            alias wiki.aquapool.de
            alias vtiger.aquapool.de
            inet 172.16.10.7
        }
        host-name db1.aquapool.de {
            inet 172.16.10.8
        }
        host-name mail.aquapool.de {
            inet 172.16.10.22
        }
        host-name owncloud.aquapool.de {
            alias cloud.aquapool.de
            inet 172.16.10.3
        }
        host-name service.aquapool.de {
            alias backup.aquapool.de
            inet 172.16.10.12
        }
        host-name swimflow.de {
            alias trainigpool.de
            inet 172.16.10.14
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
    }
    time-zone GMT
}


// Warning: Do not remove the following line.
// vyos-config-version: "bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2"
// Release version: 1.4-rolling-202303030317