47 lines
1.2 KiB
Markdown
47 lines
1.2 KiB
Markdown
---
|
|
title: "[borodino] fix(ak47): scan direct sans VPN + patch wg-gateway up/down scripts"
|
|
date: 2026-07-06T23:22:46+02:00
|
|
draft: false
|
|
tags: ["commit", "borodino", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit df7eedf par Claude Code dans borodino"
|
|
author: "Claude Code"
|
|
---
|
|
|
|
## Commit `df7eedf`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | borodino |
|
|
| **Branch** | `main` |
|
|
| **Author** | Claude Code |
|
|
| **Hash** | `df7eedf761a4efa8b8f3487e6b0dcd14a316fae1` |
|
|
|
|
|
|
### Description
|
|
|
|
- ak47: retire SCAN_GATEWAY_HOST et route-setup.sh wrapper
|
|
nmap -sS (raw socket) incompatible avec NAT ProtonVPN — les SYN-ACK
|
|
retournent sur l'IP VPN sans session établie → 0 hosts up permanent
|
|
Solution: scan direct depuis l'IP du lab, VPN reste pour bm12/uzi
|
|
|
|
- wg-gateway: filtre directives 'up' et 'down' du profil ovpn
|
|
Le profil NL référençait /etc/openvpn/update-resolv-conf absent
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M stack/40-service-borodino.yml
|
|
M wg-gateway-start.sh
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
stack/40-service-borodino.yml | 3 +--
|
|
wg-gateway-start.sh | 2 +-
|
|
2 files changed, 2 insertions(+), 3 deletions(-)
|
|
```
|