1

README.md

@@ -1493,10 +1493,14 @@ htpasswd –c /etc/nginx/.htpasswd WEB
 
 >chmod 700 /etc/pki/CA/private
 
+<p align="center">
+  <img src="picture для варинта 2\mkdir pki.png" width="600" />
+</p>
+
 Создайте корневой ключ и сертификат (RSA 4096, SHA256):
 
- openssl req -x509 -new -nodes \ 
-   -keyout /etc/pki/CA/private/ca.key \ 
+ openssl req -x509 -new -nodes \
+   -keyout /etc/pki/CA/private/ca.key \
    -out /etc/pki/CA/certs/ca.crt \
    -days 3650 \
    -sha256 \

files/br-rtr/nftables.conf

@@ -8,8 +8,8 @@ table inet filter {
 		log prefix "Dropped Input: " level debug
 		iif lo accept
 		ct state established,related accept
-		tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
-		udp dport { 53,123,500,4500,88,137 } accept
+		tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
+		udp dport { 53,123,500,4500,88,137,8080 } accept
 		ip protocol icmp accept
 		ip protocol esp accept
 		ip protocol gre accept
@@ -20,8 +20,8 @@ table inet filter {
 		log prefix "Dropped forward: " level debug
 		iif lo accept
 		ct state established,related accept
-		tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
-		udp dport { 53,123,500,4500,88,137 } accept
+		tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
+		udp dport { 53,123,500,4500,88,137,8080 } accept
 		ip protocol icmp accept
 		ip protocol esp accept
 		ip protocol gre accept

files/hq-rtr/nftables.conf

@@ -8,8 +8,8 @@ table inet filter {
 		log prefix "Dropped Input: " level debug
 		iif lo accept
 		ct state established,related accept
-		tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
-		udp dport { 53,123,500,4500,88,137 } accept
+		tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
+		udp dport { 53,123,500,4500,88,137,8080 } accept
 		ip protocol icmp accept
 		ip protocol esp accept
 		ip protocol gre accept
@@ -20,8 +20,8 @@ table inet filter {
 		log prefix "Dropped forward: " level debug
 		iif lo accept
 		ct state established,related accept
-		tcp dport { 22,514,53,80,443,3015,445,139,88 } accept
-		udp dport { 53,123,500,4500,88,137 } accept
+		tcp dport { 22,514,53,80,443,3015,445,139,88,2026,8080 } accept
+		udp dport { 53,123,500,4500,88,137,8080 } accept
 		ip protocol icmp accept
 		ip protocol esp accept
 		ip protocol gre accept