diff options
Diffstat (limited to 'config')
| -rw-r--r-- | config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf | 26 | ||||
| -rw-r--r-- | config/includes.chroot/etc/network/interfaces | 44 | ||||
| -rw-r--r-- | config/includes.chroot/etc/resolv.conf | 2 | ||||
| -rw-r--r-- | config/includes.chroot/etc/sysctl.conf | 5 |
4 files changed, 77 insertions, 0 deletions
diff --git a/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf b/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf new file mode 100644 index 0000000..a3c4757 --- /dev/null +++ b/config/includes.chroot/etc/modprobe.d/torouter-blacklist.conf @@ -0,0 +1,26 @@ +# This file lists modules which will not be loaded as the result of +# alias expansion, with the purpose of preventing the hotplug subsystem +# to load them. It does not affect autoloading of modules by the kernel. +# This file is provided by the udev package. + +# evbug is a debug tool and should be loaded explicitly +blacklist evbug + +# these drivers are very simple, the HID drivers are usually preferred +blacklist usbmouse +blacklist usbkbd + +# replaced by e100 +blacklist eepro100 + +# replaced by tulip +blacklist de4x5 + +# replaced by tmscsim +blacklist am53c974 + +# these watchdog drivers break some systems +blacklist iTCO_wdt + +# TBD: We do not need or want ipv6 right now? +#blacklist ipv6 diff --git a/config/includes.chroot/etc/network/interfaces b/config/includes.chroot/etc/network/interfaces new file mode 100644 index 0000000..34b2f35 --- /dev/null +++ b/config/includes.chroot/etc/network/interfaces @@ -0,0 +1,44 @@ +# This file describes the network interfaces available on your system +# and how to activate them. For more information, see interfaces(5). + +# The loopback network interface +auto lo +iface lo inet loopback + +# The primary network interface +auto eth0 +iface eth0 inet dhcp + post-down ifdown uap0 + +auto eth1 +iface eth1 inet static + address 10.23.42.1 + netmask 255.255.255.0 + network 10.23.42.0 + broadcast 10.23.42.255 + pre-up ip addr del 10.23.42.1/24 dev eth1 || true + post-up echo 1 > /proc/sys/net/ipv4/ip_forward + post-up /etc/init.d/dnsmasq_lan start + # this must happen after have brought up uap0 because it clears the nat tables + post-up iptables -t nat -A POSTROUTING -s 10.23.42.0/24 -o eth0 -j MASQUERADE + pre-down /etc/init.d/dnsmasq_lan stop + +# The magic Tor wireless network +auto uap0 +iface uap0 inet static + address 172.16.23.1 + netmask 255.255.255.0 + network 172.16.23.0 + broadcast 172.16.23.255 + pre-up ifconfig uap0 hw ether 00:66:66:66:66:66 + pre-up ip addr del 172.16.23.1/24 dev uap0 || true + post-up /etc/init.d/tor start + post-up /etc/init.d/tor reload + post-up /etc/init.d/dnsmasq_wifi start + post-up /etc/init.d/ttdnsd restart + post-up /usr/bin/uaputl sys_cfg_ssid "torproject" || true + post-up /usr/bin/uaputl bss_start || true + post-up /usr/sbin/tor-wireless-firewall.sh || true + post-up /sbin/iptables -t nat -A OUTPUT -p tcp -d 10.192.0.0/10 -j REDIRECT --to-ports 9040 + pre-down /usr/bin/uaputl bss_stop || true + pre-down /etc/init.d/dnsmasq_wifi stop diff --git a/config/includes.chroot/etc/resolv.conf b/config/includes.chroot/etc/resolv.conf new file mode 100644 index 0000000..af9304d --- /dev/null +++ b/config/includes.chroot/etc/resolv.conf @@ -0,0 +1,2 @@ +nameserver 208.67.222.222 +nameserver 208.67.220.220 diff --git a/config/includes.chroot/etc/sysctl.conf b/config/includes.chroot/etc/sysctl.conf new file mode 100644 index 0000000..916e972 --- /dev/null +++ b/config/includes.chroot/etc/sysctl.conf @@ -0,0 +1,5 @@ +# Reduce writes to flash drives +vm.laptop_mode=5 +vm.swappiness=0 +vm.dirty_writeback_centisecs=1500 +vm.dirty_expire_centisecs=1500 |