aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorficus <ficus@robocracy.org>2012-11-19 23:21:04 +0100
committerficus <ficus@robocracy.org>2012-11-19 23:21:04 +0100
commitfe9f770d641d13cbdfaad685f22ea90fbe5e21e8 (patch)
tree1bf5ff7ea0b6bb050775be840875d84262b963cc
parent44b022acd516c9c1271f0c19f571a4704cf0f2fe (diff)
downloadtorouter-live-fe9f770d641d13cbdfaad685f22ea90fbe5e21e8.tar.gz
torouter-live-fe9f770d641d13cbdfaad685f22ea90fbe5e21e8.zip
re-instate debugged config files
-rw-r--r--config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf26
-rw-r--r--config/includes.chroot/etc/network/interfaces44
-rw-r--r--config/includes.chroot/etc/resolv.conf2
-rw-r--r--config/includes.chroot/etc/sysctl.conf5
4 files changed, 77 insertions, 0 deletions
diff --git a/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf b/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf
new file mode 100644
index 0000000..a3c4757
--- /dev/null
+++ b/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf
@@ -0,0 +1,26 @@
+# This file lists modules which will not be loaded as the result of
+# alias expansion, with the purpose of preventing the hotplug subsystem
+# to load them. It does not affect autoloading of modules by the kernel.
+# This file is provided by the udev package.
+
+# evbug is a debug tool and should be loaded explicitly
+blacklist evbug
+
+# these drivers are very simple, the HID drivers are usually preferred
+blacklist usbmouse
+blacklist usbkbd
+
+# replaced by e100
+blacklist eepro100
+
+# replaced by tulip
+blacklist de4x5
+
+# replaced by tmscsim
+blacklist am53c974
+
+# these watchdog drivers break some systems
+blacklist iTCO_wdt
+
+# TBD: We do not need or want ipv6 right now?
+#blacklist ipv6
diff --git a/config/includes.chroot/etc/network/interfaces b/config/includes.chroot/etc/network/interfaces
new file mode 100644
index 0000000..34b2f35
--- /dev/null
+++ b/config/includes.chroot/etc/network/interfaces
@@ -0,0 +1,44 @@
+# This file describes the network interfaces available on your system
+# and how to activate them. For more information, see interfaces(5).
+
+# The loopback network interface
+auto lo
+iface lo inet loopback
+
+# The primary network interface
+auto eth0
+iface eth0 inet dhcp
+ post-down ifdown uap0
+
+auto eth1
+iface eth1 inet static
+ address 10.23.42.1
+ netmask 255.255.255.0
+ network 10.23.42.0
+ broadcast 10.23.42.255
+ pre-up ip addr del 10.23.42.1/24 dev eth1 || true
+ post-up echo 1 > /proc/sys/net/ipv4/ip_forward
+ post-up /etc/init.d/dnsmasq_lan start
+ # this must happen after have brought up uap0 because it clears the nat tables
+ post-up iptables -t nat -A POSTROUTING -s 10.23.42.0/24 -o eth0 -j MASQUERADE
+ pre-down /etc/init.d/dnsmasq_lan stop
+
+# The magic Tor wireless network
+auto uap0
+iface uap0 inet static
+ address 172.16.23.1
+ netmask 255.255.255.0
+ network 172.16.23.0
+ broadcast 172.16.23.255
+ pre-up ifconfig uap0 hw ether 00:66:66:66:66:66
+ pre-up ip addr del 172.16.23.1/24 dev uap0 || true
+ post-up /etc/init.d/tor start
+ post-up /etc/init.d/tor reload
+ post-up /etc/init.d/dnsmasq_wifi start
+ post-up /etc/init.d/ttdnsd restart
+ post-up /usr/bin/uaputl sys_cfg_ssid "torproject" || true
+ post-up /usr/bin/uaputl bss_start || true
+ post-up /usr/sbin/tor-wireless-firewall.sh || true
+ post-up /sbin/iptables -t nat -A OUTPUT -p tcp -d 10.192.0.0/10 -j REDIRECT --to-ports 9040
+ pre-down /usr/bin/uaputl bss_stop || true
+ pre-down /etc/init.d/dnsmasq_wifi stop
diff --git a/config/includes.chroot/etc/resolv.conf b/config/includes.chroot/etc/resolv.conf
new file mode 100644
index 0000000..af9304d
--- /dev/null
+++ b/config/includes.chroot/etc/resolv.conf
@@ -0,0 +1,2 @@
+nameserver 208.67.222.222
+nameserver 208.67.220.220
diff --git a/config/includes.chroot/etc/sysctl.conf b/config/includes.chroot/etc/sysctl.conf
new file mode 100644
index 0000000..916e972
--- /dev/null
+++ b/config/includes.chroot/etc/sysctl.conf
@@ -0,0 +1,5 @@
+# Reduce writes to flash drives
+vm.laptop_mode=5
+vm.swappiness=0
+vm.dirty_writeback_centisecs=1500
+vm.dirty_expire_centisecs=1500