jgfjq3

Banner

@@ -0,0 +1,13 @@
+#!/bin/bash
+# Минимальный баннер - ничего не ломает
+
+echo "Добро пожаловать на HQ-RTR " > /etc/issue
+
+echo "Вы зашли на HQ-RTR " > /etc/motd
+
+# Настройка SSH
+sed -i '/^Banner/d' /etc/ssh/sshd_config
+echo "Banner /etc/issue" >> /etc/ssh/sshd_config
+systemctl restart sshd
+
+echo "Готово"

adm

@@ -1,15 +1,12 @@
 #!/bin/bash
 # Задание 3, Модуль 1 (HQ-RTR / BR-RTR)
-
+read -p "Введите логин: " L
+read -p "Введите пароль: " P
 [ $EUID -ne 0 ] && echo "Требуется root" && exit 1
 
-# Пользователь net_admin (маршрутизаторы)
-USER="net_admin"
-PASS="admin"
-
 # Создание пользователя
 useradd -m -s /bin/bash "$USER" 2>/dev/null
-echo "$USER:$PASS" | chpasswd
+echo "$L:$P" | chpasswd
 
 # Sudo без пароля
 echo "$USER ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers
@@ -17,5 +14,5 @@ chmod 440 /etc/sudoers
 
 echo "Готово"
 echo ""
-echo "Имя: $USER"
+echo "Имя: $L"
-echo "Пароль: $PASS"
+echo "Пароль: $P"

dns

@@ -1,7 +1,26 @@
 #!/bin/bash
+
+read -p "Введите 1 чтобы использовать старыe IP или 2 чтобы использовать новые IP: " Z
+if [[ $Z == 1 ]]; then
+	dns=192.168.3.2
+	hqr=172.16.4.2
+	brr=172.16.5.2
+	brs=192.168.2.2
+	hqc=192.168.4.2
+	doc=172.16.4.1
+	web=172.16.5.1
+else
+	read -p  "Введите Ip-адрес dns сервера: " dns
+	read -p "Введите Ip-адрес HQ-RTR: " hqr
+	read -p "Введите Ip-адрес  BR-RTR: " brr
+	read -p "Введите Ip-адрес BR-SRV: " brs
+	read -p "Введите адрес HQ-CLI: " hqc
+	read -p "Введите адрес docer: " doc
+	read -p "Введите адрес web: " web
+fi
 cat > /etc/named.conf << EOF
 options {
-	listen-on port 53 { 127.0.0.1; 192.168.3.2; };
+	listen-on port 53 { 127.0.0.1; $dns; };
 	listen-on-v6 port 53 { none; };
 	directory	"/var/named";
 	dump-file	"/var/named/data/cache_dump.db";
@@ -11,7 +30,7 @@ options {
 	recursing-file "/var/named/data/named.recursing";
 	allow-query	{ any; };
 	forward first;
-	forwarders { 8.8.8.8; };
+	forwarders { 8.8.8.8; 5.255.255.242; };
 };
 
 logging {
@@ -68,13 +87,13 @@ au-team.irpo.	IN	SOA	ns01.au-team.irpo. root.au-team.irpo. (
 	IN	NS	hq-cli.au-team.irpo.
 	IN	NS	docker.au-team.irpo.
 	IN	NS	web.au-team.irpo.
-br-srv	IN	A	192.168.2.2
+br-srv	IN	A	$brs
-hq-rtr	IN	A	172.16.4.2
+hq-rtr	IN	A	$hqr
-br-rtr	IN	A	172.16.5.2
+br-rtr	IN	A	$brr
-hq-srv	IN	A	192.168.3.2
+hq-srv	IN	A	$dns
-hq-cli	IN	A	192.168.4.2
+hq-cli	IN	A	$hqc
-docker	IN	A	172.16.4.1
+docker	IN	A	$doc
-web	IN	A	172.16.5.1
+web	IN	A	$web
 EOF
 
 # Zone for HQ-SRV

hqs

@@ -0,0 +1,74 @@
+#!/bin/bash
+echo "hostname"
+read -p "enter name" name
+if [[ -n $name ]]; then
+	hostnamectl set-hostname $name
+	exec bash
+fi
+echo "enter enp0s3"
+read enp0s3
+if [[ -n $enp0s3 ]]; then
+	read -p "enter gateway" gat
+	read -p "enter dns" dns
+	cat > /etc/NetworkManager/system-connections/enp0s3.nmconnection << EOF
+[connnection]
+id=enp0s3
+uuid=$(uuidgen)
+tipe=ethernet
+autoconnect-priority=-999
+interface-name=enp0s3
+timestamp=$(date +%s)
+
+[ethernet]
+
+
+[ipv4]
+address1=$enp0s3
+dns=$dns
+gateway=$gat
+method=manual
+
+[ipv6]
+addr-gen-mode=eui64
+method=disabled
+
+[proxy]
+
+EOF
+
+	chmod 600 /etc/NetworkManager/system-connections/enp0s3.nmconnection
+fi
+read -p "Reboot?" o
+if [[ -n $o ]]; then
+	reboot
+fi
+
+echo "enter accaunt"
+read -p "continue: " can
+if [[ -n $can ]]; then
+	useradd -u 2026 remote_user  
+	passwd remote_user
+	cat >> /etc/sudoers << EOF
+remote_user ALL=(ALL)NOPASSWD:ALL
+
+EOF
+
+fi
+
+read -p "ftp?: " ftp
+read -p "enter ip: " ip
+if [[ -n $ftp ]]; then
+	iptables -I INPUT -p tcp --match multiport --dports 21,22,20000:25000 -j ACCEPT
+	iptables -t nat -A POSTROUTING -p tcp -d $ip --dport 21 -j MASQUERADE
+	iptables -t nat -A PREROUTING -i enp0s3 -p tcp --dport 21 -j DNAT --to-destination $ip:21
+	service iptables save
+
+	cat >> /etc/vsftpd/vsftpd.conf << EOF
+pasv_min_port=20000
+pasv_max_port=25000
+pasv_enable=YES
+
+EOF
+	chmod 600 /etc/vsftpd/vsftpd.conf
+fi
+