*** Virtual Gateway *** on TinyCore by Aminuxer { Your trusted Net } \ { This VM } \ { Untrusted / Infected VM } Mini-gateway with firewall for firewalling/isolation other VM with suspicious services. * DHCP client on EXT uplink eth0 * DHCP server on INT downlink eth1 * VLAN / QinQ support (example /opt/eth1-vlan69.sh) * DNS / DHCP / TFTP server DNSMasq * SSHd on EXT uplink (pubkey auth) * tc - Traffic Control policing/shaping * brctl - Bridging / STP * Quagga - BGP/RIP/OSPF * Fake SMTPd /opt/other/fake_smtpd.sh for mail catch/debug * tcpdump * nmap port scanner * links, wget, mc, iperf3, htop, sshpass, nc, iproute2 * Firewall iptables /opt/fw.sh : + ipset /opt/fw-pre.sh lists + INT-EXT isolation (prevent access to trusted network) /opt/fw.sh + Firewall bypass /opt/other/fw_bypass.sh + Custom banlist /opt/other/txt2_banlist.sh + Hashlimit - restrict DNS/NTP/SSDP flood from INT LAN + Restrict SSH/Mail mass traffic from INT LAN to Internet + probability - simulate unstable ping - example in VLAN69 Limit packet rate / bandwidth in VLAN69 Packages: ipset.tcz iptables.tcz bash.tcz net-bridging-***-tinycore.tcz bridge-utils.tcz dnsmasq.tcz quagga.tcz openssh.tcz inetutils.tcz iperf3.tcz iproute2.tcz htop.tcz links.tcz mc.tcz nmap.tcz tcpdump.tcz wget.tcz sshpass.tcz