Tunisia public IP Adresses - updated list (Cisco ASA Object)

If you need to create a standard ASA ACL from/to Tunisian public IPs (for VPN for example), you can use this object group.

object-group network Tunisia-Pool
network-object 102.104.0.0 255.248.0.0
network-object 102.128.0.0 255.255.192.0
network-object 102.141.204.0 255.255.254.0
network-object 102.152.0.0 255.248.0.0
network-object 102.164.112.0 255.255.254.0
network-object 102.168.0.0 255.248.0.0
network-object 102.24.0.0 255.248.0.0
network-object 102.240.0.0 255.252.0.0
network-object host 129.242.25.232
network-object 154.104.0.0 255.248.0.0
network-object 154.72.224.0 255.255.240.0
network-object 157.167.110.0 255.255.255.0
network-object 160.156.0.0 255.252.0.0
network-object 164.160.0.0 255.255.252.0
network-object 165.50.0.0 255.254.0.0
network-object 169.255.68.0 255.255.255.0
network-object 169.255.70.0 255.255.254.0
network-object 192.68.138.0 255.255.255.0
network-object 193.95.0.0 255.255.128.0
network-object 196.176.0.0 255.252.0.0
network-object 196.184.0.0 255.252.0.0
network-object 196.203.0.0 255.255.0.0
network-object 196.216.156.0 255.255.252.0
network-object 196.224.0.0 255.240.0.0
network-object 196.41.95.0 255.255.255.0
network-object 197.0.0.0 255.224.0.0
network-object 197.238.0.0 255.255.0.0
network-object 197.240.0.0 255.255.0.0
network-object 197.244.0.0 255.255.0.0
network-object host 202.232.15.235
network-object host 202.232.15.236
network-object host 212.82.196.210
network-object 213.150.160.0 255.255.224.0
network-object 213.182.196.0 255.255.255.0
network-object host 213.190.93.33
network-object host 213.206.136.218
network-object 41.224.0.0 255.248.0.0
network-object 41.62.0.0 255.255.0.0
network-object 57.82.40.0 255.255.252.0
network-object 57.85.32.0 255.255.240.0
network-object host 65.169.217.101
network-object 80.85.27.200 255.255.255.248
network-object 88.202.107.80 255.255.255.240
network-object 88.202.111.80 255.255.255.240
network-object 88.202.123.0 255.255.255.0
network-object host 92.31.35.108

Commentaires

Posts les plus consultés de ce blog

GNS3: Simulating a 100% opensource site2site VPN using Wireguard, VyOS and OpenVSwitch

This is something I had in mind but didn't find the time to accomplish before. It just took a very cold day to convince me that I have to play with Wireguard on VyOS. I used GNS3 of course, on my personal Linux laptop to create this setup. Of course the performance was not that great since it is just a simulation. In real life, I am using Wireguard on a 10 years old Raspberry Pi Model B and amazingly with just a 700MHz single core ARM CPU and less than 512 MB of RAM I had a decent and stable permanent Wireguard tunnel. (My bandwidth would reach 24 Mbps without issue) Back to my simulation, this is what it looks like : Quick explanation: the VYOS routers labeled IPERF1 and IPERF2 are only used for an iperf3 test, which was able to reach about 50 to 60 Mbps each time. It ain't much but it was honest (and free) secure bandwidth! I won't get into the details of this setup but I will just post the two most important configurations : R-East and R-West : #### VYOS WireGuard Site...

GNS3 on Manjaro/Arch Linux: How to create virbr0 for NAT to work

Problem: You can't add a NAT connection to your GNS3 simulation, and you get the error : "ERROR template_manager:226 Error while creating node from template: NAT interface virbr0 is missing, please install libvirt" Steps to resolve: 1- Create a file named /tmp/default.xml 2- Paste this content and save: <network> <name>default</name> <bridge name="virbr0"/> <forward mode="nat"/> <ip address="192.168.123.1" netmask="255.255.255.0"> <dhcp> <range start="192.168.123.2" end="192.168.123.254"/> </dhcp> </ip> </network> 3- Execute the following commands in your shell : virsh net-define /tmp/default.xml sudo virsh net-start default sudo virsh net-autostart default

AutoWG: a simple Bash script to connect two devices with Wireguard

I made today a quite simple BASH script that allows to connect two devices running Wireguard (tested with Debian Linux 12, but should work with any device) You can check it out (and fork it if you want) in this Gitlab Page This is the source code as of now, but I could modify it later (any suggestions are welcome) : #!/bin/bash # # AUTOWG written by Hamdi KADRI # No copyright in any form or kind # This script is intended to create configurations for # a point-to-point Wireguard connection between a server # and a client (/30 network) # # Step zero: declare configurations as variables servercfg="[Interface] Address = <serverwgIP> SaveConfig = true ListenPort = <port> PrivateKey = <server-privatekey> [Peer] PublicKey = <client-pubkey> AllowedIPs = <clientwgIP> " clientcfg="[Interface] PrivateKey = <client-privatekey> Address = <clientwgIP> [Peer] PublicKey = <server-pubkey> AllowedIPs = 0.0.0.0/0 EndPoint = <serverIP...

HK blog

Rechercher dans ce blog