Minimal (test) NuFW + NuAuth server

  • Get NuFW and NuAuth source code
    • Download last stable release or use SubVersion:
      svn co https://svn.inl.fr/nufw-svn/trunk/nufw/
      
    • Configure and compile differents parts (minimal: nufw, nuauth, clients directories)
      ./autogen.sh   # only needed if you're using subversion
      ./configure --with-system-auth --sysconfdir=/etc/nufw
      
    • Other configure options: --with-ldap, --with-utf8, --with-mysql-log, --with-pgsql-log, etc.
  • Set iptables rules, during tests you can use:
    sudo iptables -F
    sudo iptables -A INPUT -p tcp --dport 22 -i lo --syn -j QUEUE
    sudo iptables -A OUTPUT -p tcp --sport 22  --tcp-flags SYN,ACK SYN,ACK -j QUEUE
    
  • Copy doc/nuauth.conf to /etc/nufw/nuauth.conf
  • Run NuFW with root user
    cd src/nufw
    sudo ./nufw
    
  • Install NuAuth (needed to copy NuAuth modules)
  • Run NuAuth (in normal user, eg. nuauth user)
    cd src/nuauth
    sudo make install
    ./nuauth
    
  • Use nutcpc to log in:
    nutcpc -H localhost -U $USER -d
    
  • Try NuFW using ssh test ;-) (or something else, depends on your iptables rules)
    ssh localhost