initial commit

etc/dhcpd.conf

@@ -0,0 +1,8 @@
+option  domain-name "taxstudio.gr";
+option  domain-name-servers 9.9.9.9;
+
+subnet 192.168.2.0 netmask 255.255.255.0 {
+    option routers 192.168.2.1;
+    range 192.168.2.11 192.168.2.19;
+}
+

etc/dhcpd.interfaces

@@ -0,0 +1 @@
+stge0

etc/hostname.em0

@@ -0,0 +1 @@
+dhcp

etc/hostname.stge0

@@ -0,0 +1,4 @@
+media 100baseTX
+mediaopt full-duplex
+inet 192.168.2.1 0xffffff00
+

etc/pf.conf

@@ -0,0 +1,41 @@
+wan = em0
+lan = stge0
+
+#----------------------------------
+# Defaults
+#----------------------------------
+pass out keep state
+
+set skip on lo
+set block-policy return
+set reassemble yes
+
+block in all
+block return
+
+match in on $wan scrub (no-df max-mss 1440)
+match out on $wan scrub (random-id)
+
+antispoof quick for { $wan lo0 }
+
+#----------------------------------
+# Input
+#----------------------------------
+pass quick on $lan
+pass in quick proto tcp to $wan port 22 keep state
+pass in quick on $lan
+
+#----------------------------------
+# Output
+#----------------------------------
+pass out on $lan inet keep state
+
+#----------------------------------
+# NAT
+#----------------------------------
+match out on $wan from !($wan) nat-to ($wan)
+
+# Allow outgoing traffic for LAN and the gateway
+pass out quick keep state
+pass in on { $lan } inet
+

etc/rc.d/dhcpd

@@ -0,0 +1,15 @@
+#!/bin/ksh
+#
+# $OpenBSD: dhcpd,v 1.3 2018/01/11 19:52:12 rpe Exp $
+
+daemon="/usr/sbin/dhcpd"
+
+. /etc/rc.d/rc.subr
+
+rc_reload=NO
+
+rc_pre() {
+	touch /var/db/dhcpd.leases
+}
+
+rc_cmd $1

etc/rc.d/sshd

@@ -0,0 +1,15 @@
+#!/bin/ksh
+#
+# $OpenBSD: sshd,v 1.6 2020/01/25 12:05:08 sthen Exp $
+
+daemon="/usr/sbin/sshd"
+
+. /etc/rc.d/rc.subr
+
+pexp="sshd: ${daemon}${daemon_flags:+ ${daemon_flags}} \[listener\].*"
+
+rc_reload() {
+	${daemon} ${daemon_flags} -t && pkill -HUP -xf "${pexp}"
+}
+
+rc_cmd $1

etc/ssh/sshd_config

@@ -0,0 +1,93 @@
+#	$OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $
+
+# This is the sshd server system-wide configuration file.  See
+# sshd_config(5) for more information.
+
+# The strategy used for options in the default sshd_config shipped with
+# OpenSSH is to specify options with their default value where
+# possible, but leave them commented.  Uncommented options override the
+# default value.
+
+#Port 22
+#AddressFamily any
+#ListenAddress 0.0.0.0
+#ListenAddress ::
+
+#HostKey /etc/ssh/ssh_host_rsa_key
+#HostKey /etc/ssh/ssh_host_ecdsa_key
+#HostKey /etc/ssh/ssh_host_ed25519_key
+
+# Ciphers and keying
+#RekeyLimit default none
+
+# Logging
+#SyslogFacility AUTH
+#LogLevel INFO
+
+# Authentication:
+
+#LoginGraceTime 2m
+PermitRootLogin yes
+#StrictModes yes
+#MaxAuthTries 6
+#MaxSessions 10
+
+#PubkeyAuthentication yes
+
+# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
+# but this is overridden so installations will only check .ssh/authorized_keys
+AuthorizedKeysFile	.ssh/authorized_keys
+
+#AuthorizedPrincipalsFile none
+
+#AuthorizedKeysCommand none
+#AuthorizedKeysCommandUser nobody
+
+# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
+#HostbasedAuthentication no
+# Change to yes if you don't trust ~/.ssh/known_hosts for
+# HostbasedAuthentication
+#IgnoreUserKnownHosts no
+# Don't read the user's ~/.rhosts and ~/.shosts files
+#IgnoreRhosts yes
+
+# To disable tunneled clear text passwords, change to no here!
+#PasswordAuthentication yes
+#PermitEmptyPasswords no
+
+# Change to no to disable s/key passwords
+#ChallengeResponseAuthentication yes
+
+#AllowAgentForwarding yes
+#AllowTcpForwarding yes
+#GatewayPorts no
+#X11Forwarding no
+#X11DisplayOffset 10
+#X11UseLocalhost yes
+#PermitTTY yes
+#PrintMotd yes
+#PrintLastLog yes
+#TCPKeepAlive yes
+#PermitUserEnvironment no
+#Compression delayed
+#ClientAliveInterval 0
+#ClientAliveCountMax 3
+#UseDNS no
+#PidFile /var/run/sshd.pid
+#MaxStartups 10:30:100
+#PermitTunnel no
+#ChrootDirectory none
+#VersionAddendum none
+
+# no default banner path
+#Banner none
+
+# override default of no subsystems
+Subsystem	sftp	/usr/libexec/sftp-server
+
+# Example of overriding settings on a per-user basis
+#Match User anoncvs
+#	X11Forwarding no
+#	AllowTcpForwarding no
+#	PermitTTY no
+#	ForceCommand cvs server

etc/sysctl.conf

@@ -0,0 +1 @@
+net.inet.ip.forwarding=1