# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Hive

# Hive Infrastructure Installation and Configuration Guide

11 November, 2012

- 1
- 2
…
- 15
- 16
- 17
- 18

SECRET//NOFORN
Hive Infrastructure Configuration Guide (S//NF) VPS Redirector
(S//NF) To view the iptables rules currently in effect use:
service redirection status
5.3 (S//NF) OpenVPN Configuration
(S//NF) Edit the client.conf file in /etc/openvpn. Keep the defaults, but check the following parameters
and make changes if necessary.
/dev/tun
proto tcp
remote <IP address> <port>
user nobody
group nobody
comp-lzo
cipher BF-CBC
log-append /var/log/openvpn.log
(S//NF) Use the IP address of the server from section 4.3.3 above as the remote IP address.
5.4 (S//NF) Add Redirection and Logging (Optional)
(S//NF) To facilitate monitoring and troubleshooting of redirection, the log entries can be sent to a
separate log file by modifying /etc/rsyslog.conf. Add the following line
kern.warn /var/log/iptables
(S//NF) To control the size and number of these log files, add a logrotate configuration for iptables under
/etc/logrotate.d with the following contents:
/var/log/iptables {
missingok
notifempty
size 5M
compress
rotate 5
create 0600 root root
}
5.5 (U) Configure Routing
(S//NF) Add a line to /etc/rc.local that will create a route for OpenVPN to connect with the Blot proxy.
ip route add <Blot Proxy Address> via <gateway on interface facing Blot proxy>
example:
ip route add 172.16.63.101 via 172.16.60.1
November 2012 SECRET//NOFORN//20371105 11

- 1
- 2
…
- 15
- 16
- 17
- 18