User Tools

Site Tools


computing:miscadmin

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
computing:miscadmin [2024/04/14 18:54] oemb1905computing:miscadmin [2024/12/07 19:48] (current) oemb1905
Line 313: Line 313:
 Setting ufw to allow connections to only certain subnets. Setting ufw to allow connections to only certain subnets.
  
-  ufw allow from 192.168.1.0/24 to any proto tcp port 8006+  ufw allow from 10.16.16.0/24 to any proto tcp port 8006 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 8006 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 22 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 22 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 80 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 80 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 443 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 443 
 + 
 +Establish NIC name using mac:ID 
 + 
 +  nano /etc/udev/rules.d/70-persistent-net.rules 
 +  SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="00:00:00:00:00:00",ATTR{type}=="1",NAME="eth100"
      
- --- //[[jonathan@haacksnetworking.org|oemb1905]] 2024/01/28 20:31//+Establish Nemo as default, remove desktop icons, verify nemo default 
 + 
 +  xdg-mime default nemo.desktop inode/directory application/x-gnome-saved-search 
 +  gsettings set org.gnome.desktop.background show-desktop-icons false 
 +  xdg-mime query default inode/directory 
 +   
 +Sury php 
 + 
 +  sudo apt install -y apt-transport-https lsb-release ca-certificates wget 
 +  wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg 
 +  echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/php.list  
 +   
 +Static ipv6 in ifupdown 
 + 
 +  iface enp0s3 inet6 static 
 +    address 2001:db8:1000::
 +    netmask 64 
 +    gateway 2001:db8:1000::
 +    autoconf 0 
 +    dns-nameservers 2001:4860:4860::8888 2001:4860:4860::8844 
 +     
 +Assigning an interface a persistent name so that bridging and static ifupdown assignments don't fail on reboot. 
 + 
 +  sudo nano /etc/udev/rules.d/70-persistent-net.rules 
 +  SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="29:af:2c:34:g7:11",ATTR{type}=="1",NAME="eth100" 
 +   
 +Convert pdf to Word 
 + 
 +  libreoffice --infilter="writer_pdf_import" --convert-to docx Terms-Of-Service.pdf 
 +   
 +Instruct a client to ignore the DNS server offers made by the router on Debian.  
 + 
 +  sudo nano /etc/dhcp/dhclient.conf 
 + 
 +In that file, find the section that begins with ''request subnet-mask'' and remove domain-name-servers from it. 
 + 
 +  request subnet-mask, broadcast-address, time-offset, routers, 
 +    domain-name, __domain-name-servers__, domain-search, host-name, 
 +    dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers, 
 +    netbios-name-servers, netbios-scope, interface-mtu, 
 +    rfc3442-classless-static-routes, ntp-servers; 
 + 
 +After that's removed, find the section that begins with ''prepend domain-name-servers 127.0.0.1;'' and change it as you see fit: 
 + 
 +  prepend domain-name-servers 192.168.1.20; 
 +  prepend domain-name-servers 192.168.1.21; 
 +  sudo systemctl restart networking 
 +   
 +After you restart networking, run ''cat /etc/resolv.conf'' and make sure the DNS is what you desired. In order to test whether there are DNS leaks, use tcpdump and adjust port to 53, 5335, 853, etc. 
 + 
 +  tcpdump -vv -x -X -s 1500 -i eth0 'port 853' 
 + 
 +In order to set a policy on Chrome to stop DOT, or DNS over TLS/https, do the following: 
 + 
 +  sudo nano /etc/opt/chrome/policies/managed/policies.json 
 +  { 
 +  "BrowserGuestModeEnabled": false, 
 +  "BrowserAddPersonEnabled": false, 
 +  "IncognitoModeAvailability": 1, 
 +  "DnsOverHttpsMode": false, 
 +  "ExtensionSettings": {"*": {"installation_mode": "blocked"}} 
 +  } 
 + 
 +Running Debian testing/unstable and your zfs modules suddenly won't load after a reboot and upgrade, well do the following: 
 + 
 +  sudo apt-get install linux-headers-$(uname -r) 
 + 
 +Alright .... 
 + 
 + --- //[[webmaster@haacksnetworking.org|oemb1905]] 2024/12/07 19:48//
computing/miscadmin.1713120841.txt.gz · Last modified: 2024/04/14 18:54 by oemb1905