Haack's Wiki

User Tools

Site Tools

Trace:
computing:miscadmin

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
computing:miscadmin [2024/04/21 22:01] – oemb1905computing:miscadmin [2025/12/20 21:21] (current) – oemb1905
Line 313: Line 313:
 Setting ufw to allow connections to only certain subnets. Setting ufw to allow connections to only certain subnets.
  
-  ufw allow from 192.168.1.0/24 to any proto tcp port 8006 +  ufw allow from 10.16.16.0/24 to any proto tcp port 8006 
-  +  ufw allow from 10.36.36.0/24 to any proto tcp port 8006 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 22 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 22 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 80 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 80 
 +  ufw allow from 10.16.16.0/24 to any proto tcp port 443 
 +  ufw allow from 10.36.36.0/24 to any proto tcp port 443 
 Establish NIC name using mac:ID Establish NIC name using mac:ID
  
   nano /etc/udev/rules.d/70-persistent-net.rules   nano /etc/udev/rules.d/70-persistent-net.rules
   SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="00:00:00:00:00:00",ATTR{type}=="1",NAME="eth100"   SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="00:00:00:00:00:00",ATTR{type}=="1",NAME="eth100"
 +  
 +Establish Nemo as default, remove desktop icons, verify nemo default
  
 +  xdg-mime default nemo.desktop inode/directory application/x-gnome-saved-search
 +  gsettings set org.gnome.desktop.background show-desktop-icons false
 +  xdg-mime query default inode/directory
      
- --- //[[jonathan@haacksnetworking.org|oemb1905]] 2024/01/28 20:31//+Sury php 
 + 
 +  sudo apt install -y apt-transport-https lsb-release ca-certificates wget 
 +  wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg 
 +  echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/php.list  
 +   
 +Static ipv6 in ifupdown 
 + 
 +  iface enp0s3 inet6 static 
 +    address 2001:db8:1000::1 
 +    netmask 64 
 +    gateway 2001:db8:1000::1 
 +    autoconf 0 
 +    dns-nameservers 2001:4860:4860::8888 2001:4860:4860::8844 
 +     
 +Assigning an interface a persistent name so that bridging and static ifupdown assignments don't fail on reboot. 
 + 
 +  sudo nano /etc/udev/rules.d/70-persistent-net.rules 
 +  SUBSYSTEM=="net",ACTION=="add",ATTR{address}=="29:af:2c:34:g7:11",ATTR{type}=="1",NAME="eth100" 
 +   
 +Convert pdf to Word 
 + 
 +  libreoffice --infilter="writer_pdf_import" --convert-to docx Terms-Of-Service.pdf 
 +   
 +Instruct a client to ignore the DNS server offers made by the router on Debian.  
 + 
 +  sudo nano /etc/dhcp/dhclient.conf 
 + 
 +In that file, find the section that begins with ''request subnet-mask'' and remove domain-name-servers from it. 
 + 
 +  request subnet-mask, broadcast-address, time-offset, routers, 
 +    domain-name, __domain-name-servers__, domain-search, host-name, 
 +    dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers, 
 +    netbios-name-servers, netbios-scope, interface-mtu, 
 +    rfc3442-classless-static-routes, ntp-servers; 
 + 
 +After that's removed, find the section that begins with ''prepend domain-name-servers 127.0.0.1;'' and change it as you see fit: 
 + 
 +  prepend domain-name-servers 192.168.1.20; 
 +  prepend domain-name-servers 192.168.1.21; 
 +  sudo systemctl restart networking 
 +   
 +After you restart networking, run ''cat /etc/resolv.conf'' and make sure the DNS is what you desired. In order to test whether there are DNS leaks, use tcpdump and adjust port to 53, 5335, 853, etc. 
 + 
 +  tcpdump -vv -x -X -s 1500 -i eth0 'port 853' 
 + 
 +In order to set a policy on Chrome to stop DOT, or DNS over TLS/https, open up ''/etc/opt/chrome/policies/managed/policies.json'' and drop in: 
 + 
 +<code bash> 
 +  { 
 +  "BrowserGuestModeEnabled": false, 
 +  "BrowserAddPersonEnabled": false, 
 +  "IncognitoModeAvailability": 1, 
 +  "DnsOverHttpsMode": false, 
 +  "ExtensionSettings": {"*": {"installation_mode": "blocked"}} 
 +  } 
 +</code>   
 + 
 +For firefox, create ''sudo nano /etc/firefox-esr/policies'' and then edit it with: 
 + 
 +<code bash> 
 +{ 
 +  "policies": { 
 +    "DisablePrivateBrowsing": true, 
 +    "DNSOverHTTPS": { 
 +      "Enabled": false, 
 +      "Locked": true 
 +    }, 
 +    "ExtensionSettings": { 
 +      "*": { 
 +        "installation_mode": "blocked" 
 +      } 
 +    } 
 +  } 
 +} 
 +</code> 
 + 
 +Running Debian testing/unstable and your zfs modules suddenly won't load after a reboot and upgrade, well do the following: 
 + 
 +  sudo apt-get install linux-headers-$(uname -r) 
 + 
 +Alright .... Nemo 
 + 
 +  xdg-mime default nemo.desktop inode/directory  
 +  xdg-mime default nemo.desktop x-directory/normal  
 +  xdg-mime default nemo.desktop x-directory/gnome-default-handler 
 +  xdg-mime default nemo.desktop application/x-gnome-saved-search 
 +  sudo update-alternatives --set xdg-desktop-portal-gtk /usr/bin/nemo-desktop  
 +  sudo update-alternatives --install /usr/bin/xdg-open xdg-open /usr/bin/nemo 100 
 +  #gsettings set org.gnome.shell.extensions.desktop-icons file-manager nemo 
 + 
 + --- //[[alerts@haacksnetworking.org|oemb1905]] 2025/12/20 18:44//
computing/miscadmin.1713736913.txt.gz · Last modified: by oemb1905

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
GNU Free Documentation License 1.3 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki