HoerupNet

Description documentation of my personal network

Network diagram

IP Address

The network uses the RFC1918 private IP range 192.168.10.0/24 Theres no local DNS server, all hosts uses upstream ISP dns servers. All hosts get network information from the DHCP server, but some hosts get a fixed address based on MAC address. The dynamic range is 192.168.10.30-100.

Host timon

Timon is the gateway and firewall for the network.

Timon runs the following services

• Firewall
  • Homebuild iptables script with source / destination nat and forward filtering
• DHCP Server
  • Serves IP addresses as described above
• SSH server
  • For remote admininistration (only available from internal network)
• TFTP
  • Used For PXE installations.
• SNMP
  • (not configured yet)
• cron
  • chkrootkit / rkhunter / ntpdate / logrotate

Host Rafiki

Rafiki is the server

(VPN access is regarded as internal network access)

Rafiki runs

• SSH server
• Apache webserver
  • With mod_php5, mod_dav_svn, mod_python, mod_proxy
  • Hosts all vhosts listed in http://status.t-hoerup.dk/vhosts.php
  • Hosts subversion repository
  • Is reverse proxy for those webservices that has their own http engine (such as mldonkey)
• MySQL
• PostgreSQL
• Mldonkey for file download
  • bittorrent
  • donkey
  • overnet
  • basic HTTP
• Squid http proxy
  • port 3128
  • Non caching
  • available to internal network only
• Proftpd
  • File transfer - Only available to internal network (from outside scp/sftp should be used)
• Postfix SMTP MTA
• Dovecot IMAPd
• OpenVPN
  • TUN / UDP based
  • Listens on port 1494
  • Uses subnet 192.168.20.0/24 for tunnels
  • Full access to 192.168.10.0/24 available via vpn
• Smokeping
• Apache Tomcat
• smsdaemon
• MRTG(not configured yet)