Free 2 2 2.1a eng setup software for linux

Packet filtering setup script by Anthony C. Zboralski. Adapted by Didi Damian for iptables version 1.0.0

Sample:

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# Set up variables
EXT_IF="eth0"
INT_IF="eth1"
EXT_IP=24.x.x.x/32
INT_IP=192.168.0.1/32
EXT_NET=24.x.x.0/24
INT_NET=192.168.0.0/24
MASQ_NETS="192.168.0.0/24"
LOCAL_ADDRS="127.0.0.0/8 192.168.0.1/32 24.x.x.x/32"
MAIL_RELAY=24.x.x.x/32
SMB_ACCESS="192.168.0.2/32"
SMB_BCAST="192.168.0.255/32"

# Turn on IP forwarding
echo Turning on IP forwarding.
echo 1 > /proc/sys/net/ipv4/ip_forward

# Load the ip_tables module
echo Loading ip_tables module.
/sbin/modprobe ip_tables || exit 1
# I let the kernel dynamically load the other modules

echo Flush standard tables.
iptables --flush INPUT
iptables --flush OUTPUT
iptables --flush FORWARD
echo Deny everything until firewall setup is completed.
iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP

CHAINS=`iptables -n -L |perl -n -e /Chains+(S+)/ && !($1 =~ /^(INPUT|FORWARD|OUTPUT)$/) && print "$1 "`
echo Remove remaining chains:
echo $CHAINS
for chain in $CHAINS; do
iptables --flush $chain
done
# 2nd step cause of dependencies
for chain in $CHAINS; do
iptables --delete-chain $chain
done

for net in $MASQ_NETS; do
# I delete all the rules so you can rerun the scripts without bloating
# your nat entries.
iptables -D POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE 2>/dev/null
iptables -A POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE || exit 1
done
iptables --policy FORWARD ACCEPT

# Create a target for logging and dropping packets
iptables --new LDROP 2>/dev/null
iptables -A LDROP --proto tcp -j LOG --log-level info
--log-prefix "TCP Drop "
iptables -A LDROP --proto udp -j LOG --log-level info
--log-prefix "UDP Drop "
iptables -A LDROP --proto icmp -j LOG --log-level info
--log-prefix "ICMP Drop "
iptables -A LDROP --proto gre -j LOG --log-level info
--log-prefix "GRE Drop "

iptables -A LDROP -f -j LOG --log-level emerg
--log-prefix "FRAG Drop "
iptables -A LDROP -j DROP

# Create a table for watching some accepting rules
iptables --new WATCH 2>/dev/null
iptables -A WATCH -m limit -j LOG --log-level warn --log-prefix "ACCEPT "
iptables -A WATCH -j ACCEPT


echo Special target for local addresses:
iptables --new LOCAL 2>/dev/null
echo $LOCAL_ADDRS
for ip in $LOCAL_ADDRS; do
iptables -A INPUT --dst $ip -j LOCAL
# iptables -A INPUT --src $ip -i ! lo -j LDROP # lame spoof protect
done
echo Authorize mail from mail relay.
iptables -A LOCAL --proto tcp --syn --src $MAIL_RELAY --dst $EXT_IP --dport 25 -j ACCEPT


echo Authorizing samba access to:
echo $SMB_ACCESS
iptables --new SMB 2>/dev/null
for ip in $SMB_ACCESS; do
iptables -A SMB -s $ip -j ACCEPT
done
iptables -A LOCAL --proto udp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 445 -j SMB
iptables -A INPUT -i ! $EXT_IF --dst $SMB_BCAST -j ACCEPT #lame samba broadcast

echo Drop and log every other incoming tcp connection attempts.
iptables -A LOCAL -i ! lo --proto tcp --syn --j LDROP

echo Authorize dns access for local nets.
for net in $MASQ_NETS 127.0.0.0/8; do
iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
done


echo Enforcing up ICMP policies, use iptables -L ICMP to check.
# If you deny all ICMP messages you head for trouble since it would
# break lots of tcp/ip algorythm (acz)
iptables --new ICMP 2>/dev/null
iptables -A INPUT --proto icmp -j ICMP
iptables -A ICMP -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A ICMP -p icmp --icmp-type destination-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type protocol-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type port-unreachable -j ACCEPT
iptables -A ICMP -p icmp --icmp-type fragmentation-needed -j LDROP
iptables -A ICMP -p icmp --icmp-type source-route-failed -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type network-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type communication-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-precedence-violation -j LDROP
iptables -A ICMP -p icmp --icmp-type precedence-cutoff -j LDROP
iptables -A ICMP -p icmp --icmp-type source-quench -j LDROP
iptables -A ICMP -p icmp --icmp-type redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type echo-request -j WATCH
iptables -A ICMP -p icmp --icmp-type router-advertisement -j LDROP
iptables -A ICMP -p icmp --icmp-type router-solicitation -j LDROP
iptables -A ICMP -p icmp --icmp-type time-exceeded -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-transit -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-reassembly -j WATCH
iptables -A ICMP -p icmp --icmp-type parameter-problem -j WATCH
iptables -A ICMP -p icmp --icmp-type ip-header-bad -j WATCH
iptables -A ICMP -p icmp --icmp-type required-option-missing -j WATCH
iptables -A ICMP -p icmp --icmp-type timestamp-request -j LDROP
iptables -A ICMP -p icmp --icmp-type timestamp-reply -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-request -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-reply -j LDROP
iptables -A ICMP -p icmp -j LDROP

echo Authorize tcp traffic.
iptables -A INPUT --proto tcp -j ACCEPT

echo Authorize packet output.
iptables --policy OUTPUT ACCEPT

#echo reject ident if you drop em you gotta wait for timeout
#iptables -I LOCAL --proto tcp --syn --dst $EXT_IP --dport 113 -j REJECT

echo Drop and log all udp below 1024.
iptables -A INPUT -i ! lo --proto udp --dport :1023 -j LDROP

echo Drop rpc dynamic udp port:
RPC_UDP=`rpcinfo -p localhost|perl -n -e /.*udps+(d+)s+/ && print $1,"n"|sort -u`
echo $RPC_UDP
for port in $RPC_UDP; do
iptables -A LOCAL -i ! lo --proto udp --dport $port -j LDROP
done

echo Authorize udp above 1024.
iptables -A INPUT --proto udp --dport 1024: -j ACCEPT

Mail::Toaster::Setup is a Perl module with methods to configure and build all the components of a modern email server.

The meat and potatoes of toaster_setup.pl. This is where the majority of the work gets done. Big chunks of the code and logic for getting all the various applications and scripts installed and configured resides in here.

METHODS

All documented methods in this package (shown below) accept two optional arguments, debug and fatal. Setting debug to zero will supress nearly all informational and debugging output. If you want more output, simply pass along debug=>1 and status messages will print out. Fatal allows you to override the default behaviour of these methods, which is to die upon error. Each sub returns 0 if the action failed and 1 for success.

arguments required:
varies (most require conf)

arguments optional:
debug - print status messages
fatal - die on errors (default)

result:
0 - failure
1 - success

Examples:

1. $setup->apache( debug=>0, fatal=>0 );
Try to build apache, do not print status messages and do not die on error(s).

2. $setup->apache( debug=>1 );
Try to build apache, print status messages, die on error(s).

3. if ( $setup->apache( ) { print "yay!n" };
Test to see if apache installed correctly.

My Calendar is a lightweight, easy-to-use Web calendar that is easily customizable using CSS.
There is also an included email script that you can have cron run every day to remind you of upcoming appointments.
My Calendar can also generate great looking printable calendars in Postscript and Adobe PDF format. Microsoft Outlook schedules can be easily imported.
Main features:
- lightweight and easy to setup
- email scrip to remind you of upcomming events
- email script can be run by cron and/or used to send emails to a mailing list for clugs and organizations
- easily generated pretty printable versiosn in postscript and PDF
- import events from Microsoft Outlook.
- easily customizeable with CSS and templating.

clip2png is a native java utility that easily saves your current clipboard image (or screen image) to a PNG image file on your desktop.

No setup or configuration required - just run the jar!

GlusterFS package contains clustered file storage that can scale to peta bytes. GlusterFS is a programmable system. With little thinking, you can even redesign the GlusterFS file system by re-arranging the GlusterFS components using translator interface. It is all achieved through volume specification file. This allows GlusterFS to be flexible for all kinds of storage needs. Even with all these advanced features, GlusterFS is very easy to setup and manage.

Gluster is a GNU cluster distribution aimed at commoditizing Supercomputing and Superstorage. Core of the Gluster provides a platform for developing clustering applications tailored for a specific tasks such as HPC Clustering, Storage Clustering, Enterprise Provisioning, Database Clustering etc.

Quarantine firewall is yet another firewall that has masquerade, type-of-service, and traffic shaping features.

Simply do make install. It will copy the module files, qconfig, qmodule and a sample configuration file to /etc/quarantine.d. quarantine and netrouter then goes to /etc/init.d.


The configuration file /etc/quarantine.d/rc.quarantine can be edited manually (see README file) or via the configuration utility qconfig.

The thing youll have to do is creating a symlink in /etc/rc.d/rc[whatever].d named S99netrouter and K00netrouter pointing at /etc/init.d/netrouter.

The firewall script (quarantine) is designed to get the hosts IP adress when connecting to the internet. Youll need to put a /etc/init.d/quarantine start in the /etc/ppp/ip-up file - also insert a /etc/init.d/quarantine stop in the /etc/ppp/ip-down script file.

setup-gettext script is intended to be used instead of either gettextize or autopoint. setup-gettext script handles most of the magic of cross-version compatibility.

In mid-August 2002, I got to know the various versions of gettext better than I wanted to. Gaim and GNUpdate were compatible with gettext v0.10.38 through v0.10.40, but not the newer (somewhat annoying) v0.11.x series.

Due to lots of complaints from people trying to compile our code, I hacked up some work-arounds, which evolved into a helper tool for making projects compatible with various versions of gettext.

This is generally not needed nowadays, but is useful for projects that wish to continue supporting older versions of gettext without problems.

Installation:

1. Copy setup-gettext to your projects root directory.
2. Type: ./setup-gettext --install
3. Make sure your project builds.


gettext Quirks / Issues:

* gettext v0.10.38 is incompatible with autoconf v2.53.
* gettext v0.11.x likes to modify ChangeLog, Makefile.am, m4/, configure.in, and configure.ac.
* Starting in either v0.11.3 or v0.11.4 (not sure which), gettextize should no longer be used. autopoint is the new gettextize. This breaks backwards-compatibility within the gettext v0.11.x micro version series.
* gettext 0.12.1 generates a broken po/Makefile, which works for some projects but not others.

PyLUcene SHell (Plush) is an interactive shell to inspect a Lucene store.
Main features:
- View store information.
- View indexes definition.
- Search using the Lucene Query Parser Syntax.
- Sort result list.
- Browse by document number.
- Top term occurences for a field, matching a regex.
- Support PyLucene 1.9.1 and 2.0.0.
- Interactive shell emacs like command history and editing features.
- Command line tool and thus scriptable.
- Easy installation, no java required.
- Can load NXLucene analyzers.
- Plush is free software distributed under the GNU GPL.
- Plush is written in python and can be easily customized.
Installation:
You need python 2.4 (2.3 not tested) with the readline support (--enable-readline)
Plush requires PyLucene which is easy to install using binaries.
Here is an example on how to install the latest PyLucene 2.0.0-3 (Lucene 2.0.0-453447) on ubuntu:
cd /tmp
wget http://downloads.osafoundation.org/PyLucene/linux/ubuntu/PyLucene-2.0.0-3.tar.gz
tar xzvf PyLucene-2.0.0-3.tar.gz
cd PyLucene-2.0.0-3/
sudo cp -r python/* /usr/lib/python2.4/site-packages/
sudo cp -r gcj/* /usr/local/lib
Visit the PyLucene site for other pre-built binaries.
Plush is a pure python package that you can get from the Python Cheese Shop
tar xzvf plush-X.Y.Z.tar.gz
cd plush
Install plush either with:
sudo make install
or using the pythonic way:
python setup.py build
sudo python setup.py install
Thats all no .jar nor java required.