gedankensplitter/networking.md

networking

source based routing

    echo 200 isp2 >> /etc/iproute2/rt_tables
    ip rule add from <interface_IP> table isp2 prio 1
    ip route add default via <gateway_IP> dev <interface> table isp2

CAA desec.io

#!/usr/bin/env bash #get rrset #curl -X GET https://desec.io/api/v1/domains/\[domain}/rrsets/ \

# --header "Authorization: Token {toke}" | jq

#echo '{"subname": "", "type": "CAA", "ttl": 3600, "records": \[ "0 issue "letsencrypt.org"" \]}' | curl -X POST https://desec.io/api/v1/domains/{domain}/rrsets/ --header "Authorization: Token {token}" --header "Content-Type: application/json" --data @- | jq

curl -X GET https://desec.io/api/v1/domains/{domain}/rrsets/?type=CAA  
--header "Authorization: Token {token}" | jq

Stratosphere Linux IDS

src: https://github.com/stratosphereips/StratosphereLinuxIps

usage

sudo docker run -it --rm --net=host --cap-add=NET_ADMIN -v /home/user/dataset:/StratosphereLinuxIPS/dataset stratosphereips/slips:latest /bin/bash

issues:

• ./kalipso.sh not working with tmux
• IPv6 icmp typ 133 RA not implemented