HoerupNet
Description documentation of my personal network
Network diagram
IP Address
The network uses the RFC1918 private IP range 192.168.10.0/24 Theres no local DNS server, all hosts uses upstream ISP dns servers. All hosts get network information from the DHCP server, but some hosts get a fixed address based on MAC address. The dynamic range is 192.168.10.30-100.
Host timon
Timon is the gateway and firewall for the network.
Timon runs the following services
- Firewall
- Homebuild iptables script with source / destination nat and forward filtering
- DHCP Server
- Serves IP addresses as described above
- SSH server
- For remote admininistration (only available from internal network)
- TFTP
- Used For PXE installations.
- SNMP
- (not configured yet)
- cron
- chkrootkit / rkhunter / ntpdate / logrotate / logwatch (logwatch recipient torben@t-hoerup.dk)
- postfix MTA
- only for sending local-generated mail
- listens on 127.0.0.1:25
- Uses 'relayhost rafiki.t-hoerup.dk'
Host Rafiki
Rafiki is the server
(VPN access is regarded as internal network access)
Rafiki runs
- SSH server
- Apache webserver
- With mod_php5, mod_dav_svn, mod_python, mod_proxy
- Hosts all vhosts listed in http://status.t-hoerup.dk/vhosts.php
- Hosts subversion repository
- Is reverse proxy for those webservices that has their own http engine (such as mldonkey)
- MySQL
- PostgreSQL
- Mldonkey for file download
- bittorrent
- donkey
- overnet
- basic HTTP
- Squid http proxy
- port 3128
- Non caching
- available to internal network only
- Proftpd
- File transfer - Only available to internal network (from outside scp/sftp should be used)
- Postfix SMTP MTA
- Dovecot IMAPd
- OpenVPN
- TUN / UDP based
- Listens on port 1494
- Uses subnet 192.168.20.0/24 for tunnels
- Full access to 192.168.10.0/24 available via vpn
- Smokeping
- Apache Tomcat
- smsdaemon
- MRTG(not configured yet)
- cron
- torben's crontab (er ikke sat op endnu)
- 05 */3 * * * /home/torben/bin/getmail-silent
- 05 05 * * * cp /var/spool/mail/torben /home/torben/Mail/inbox-backup
- torben's crontab (er ikke sat op endnu)