altinea
/
install-scripts
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
260 Commits
3 Branches
0 Tags
919 KiB
Tree: 4d46c047a9
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '4d46c047a9'
${ noResults }
install-scripts/routeros/update_mikrotik.rsc

77 lines
4.3 KiB
Raw Normal View History

nouveau fichier : routeros/update_mikrotik.rsc
11 months ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
  1. /interface bridge
  2. add name=bridge-lan
  3. /interface list
  4. add name=WAN
  5. /queue simple
  6. add max-limit=1G/1G name=bridge queue=pcq-upload-default/pcq-download-default \
  7. target=bridge-lan
  8. /snmp community
  9. set [ find default=yes ] addresses=185.123.84.25/32,10.17.24.18/32 name=\
  10. altinea
  11. /ip firewall address-list
  12. add address=185.123.84.200 comment=vpn.altinea.fr list=altinea.safe
  13. add address=185.123.84.50 comment=oxidized.altinea.fr list=altinea.safe
  14. add address=185.123.84.25 comment=icinga2.altinea.fr list=altinea.safe
  15. add address=10.17.24.18 comment=icinga2.altinea.fr list=altinea.safe
  16. add address=158.69.205.82 comment=ext.nagios.altinea.fr list=altinea.safe
  17. add address=10.17.24.0/24 comment=adminvpn.altinea.fr list=altinea.safe
  18. /ip firewall filter
  19. add action=accept chain=forward connection-state=\
  20. established,related,untracked
  21. add action=accept chain=input dst-port=8291 protocol=tcp src-address-list=\
  22. altinea.safe
  23. add action=accept chain=input dst-port=8291 protocol=tcp in-interface=bridge-lan
  24. add action=accept chain=input dst-port=161 protocol=udp src-address-list=\
  25. altinea.safe
  26. add action=accept chain=input dst-port=22 protocol=tcp src-address-list=\
  27. altinea.safe
  28. add action=accept chain=input dst-port=22 in-interface=bridge-lan protocol=\
  29. tcp
  30. add action=accept chain=input protocol=icmp
  31. add action=drop chain=input dst-port=53 in-interface-list=WAN protocol=tcp
  32. add action=drop chain=input dst-port=53 in-interface-list=WAN protocol=udp
  33. add action=drop chain=input connection-state="" dst-port=22 protocol=tcp
  34. add action=drop chain=input dst-port=161 protocol=udp
  35. add action=drop chain=input connection-state="" dst-port=8291 protocol=tcp
  36. add action=drop chain=input connection-state=invalid
  37. /ip firewall mangle
  38. add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
  39. protocol=tcp tcp-flags=syn
  40. /ip firewall nat
  41. add action=masquerade chain=srcnat out-interface-list=WAN
  42. add action=masquerade chain=srcnat comment="Ex src-nat by ip" disabled=yes log-prefix=185.123.87.x
  43. add action=dst-nat chain=dstnat comment="Ex dst-nat " disabled=yes dst-address=185.123.87.173 dst-port=8443 protocol=tcp src-address=\
  44. 185.123.84.200 to-addresses=192.168.88.254 to-ports=443
  45. /ip firewall service-port
  46. set sip disabled=yes
  47. /ip service
  48. set telnet disabled=yes
  49. set ftp disabled=yes
  50. set www disabled=yes
  51. set api disabled=yes
  52. set api-ssl disabled=yes
  53. /snmp
  54. set contact=noc@altinea.fr enabled=yes
  55. /system clock
  56. set time-zone-name=Europe/Paris
  57. /system note
  58. set show-at-login=no
  59. /tool romon
  60. set enabled=yes
  61. /
  62. :delay 5s;
  63. :global oxidizedcpepub "ssh-rsa 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 oxidized-cpe@altinea.fr";
  64. /file print file=oxidized-cpe.txt;
  65. :delay 10;
  66. /file set oxidized-cpe.txt content=$oxidizedcpepub;
  67. :delay 10;
  68. /user add name=oxidized group=read password=azELMAkGA1UEBhMCQ04xETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQKDAh0ZWFt;
  69. :delay 10s;
  70. /user ssh-keys import user=oxidized public-key-file=oxidized-cpe.txt
  71. :delay 10;
  72. :global supportpub "ssh-rsa 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 support@altinea.fr";
  73. :delay 10s;
  74. /file print file=support-pub.txt;
  75. :delay 10;
  76. /file set support-pub.txt content=$supportpub;
  77. /user ssh-keys import user=admin public-key-file=support-pub.txt;