spelled the same forward and backward
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 933
Port forward 1.4
Port forward is a application which gives you the ability to open tunnes between your local computer and a remote ssh server. more>>
Port forward is a java application which gives you the ability to open tunnels between your local computer and a remote ssh server. With Port forward, tunnels can be created both local or remote.
Examples:
1. Open a local tunnel to reach a remote mysql database
- Your application needs to connect to a remote database server (mysql for example), but the database server (remote.server.example) is not configured to expose mysql to internet directly.
- Port forward will open a local port (3306) and redirect the connections to remote.server.example ssh server
- The remote.server.example ssh server will connect to its local mysql server
2. Open a local tunnel to use a remove VNC desktop
- You want to connect to your home computer which has a vnc server but from work, the firewall blocks vnc connections (generally on port 5901)
- If you have a ssh server at home, you could use it as bridge to connect to a client in your home:
Your position internet your linux ssh server ->>
-->> you client with vnc (192.168.0.40)
you office
internet >
3. Open a remote tunnel to pilot a remote linux server non reachable through internet
In this example, you will create a remote tunnel, this will give the remote man to connect to and reach you.
I used this example if I have to pilot a remote pc, but this pc has no static IP or is behind a firewall
The good solution is to activate port forward on the pc to be piloted and to connect it to a server we can access.
PC 1 (to be piloted) --||||-- firewall ----- internet ----- accessible-server
Installation:
Be sure java is in you classpath
tar zxvf portforward.tar.gz
cd portForward
sh run_linux.sh
<<lessExamples:
1. Open a local tunnel to reach a remote mysql database
- Your application needs to connect to a remote database server (mysql for example), but the database server (remote.server.example) is not configured to expose mysql to internet directly.
- Port forward will open a local port (3306) and redirect the connections to remote.server.example ssh server
- The remote.server.example ssh server will connect to its local mysql server
2. Open a local tunnel to use a remove VNC desktop
- You want to connect to your home computer which has a vnc server but from work, the firewall blocks vnc connections (generally on port 5901)
- If you have a ssh server at home, you could use it as bridge to connect to a client in your home:
Your position internet your linux ssh server ->>
-->> you client with vnc (192.168.0.40)
you office
internet >
3. Open a remote tunnel to pilot a remote linux server non reachable through internet
In this example, you will create a remote tunnel, this will give the remote man to connect to and reach you.
I used this example if I have to pilot a remote pc, but this pc has no static IP or is behind a firewall
The good solution is to activate port forward on the pc to be piloted and to connect it to a server we can access.
PC 1 (to be piloted) --||||-- firewall ----- internet ----- accessible-server
Installation:
Be sure java is in you classpath
tar zxvf portforward.tar.gz
cd portForward
sh run_linux.sh
Download (1.0MB)
Added: 2006-05-25 License: LGPL (GNU Lesser General Public License) Price:
1915 downloads
Script for NAT and more 02/02/01
Script for NAT and more is an iptables firewall script. more>>
Script for NAT and more is an iptables firewall script.
Sample:
# Location of IPTables
FW="`whereis -b iptables | cut -d " " -f 2`"
# Interface Configuration
IF0="eth0"
IP0="`ifconfig $IF0 | grep inet | cut -d : -f 2 | cut -d -f 1`"
MASK0="`ifconfig $IF0 | grep Mask | cut -d : -f 4`"
LOCALNET="$IP0"
echo "IP: $LOCALNET/$MASK0"
# Inside Interface (Can be either eth1 or none)
IF1="eth1"
IP1="`ifconfig $IF1 | grep inet | cut -d : -f 2 | cut -d -f 1`"
MASK1="`ifconfig $IF1 | grep Mask | cut -d : -f 4`"
GWIP="$IP1"
echo "LAN Gateway: $GWIP/$MASK1"
if [ $IF1 != none ]; then
LAN="10.0.1.0/24"
HOST0="10.0.1.2"
HOST1="10.0.1.3"
fi
# Everyone
WORLD="0/0"
# Options
TOS=no
ICMP=yes
# Flush
$FW -F INPUT
$FW -F OUTPUT
$FW -F FORWARD
$FW -F -t nat
$FW -F -t mangle
$FW -F LOGDROP
# Policy
$FW -P INPUT DROP
$FW -P OUTPUT ACCEPT
$FW -P FORWARD ACCEPT
# Create Event Logging
if [ -z "`iptables -L | grep LOGDROP`" ]; then
$FW -N LOGDROP 2>/dev/null
fi
$FW -A LOGDROP -p TCP -j LOG --log-level info --log-prefix "TCP Drop "
$FW -A LOGDROP -p UDP -j LOG --log-level info --log-prefix "UDP Drop "
$FW -A LOGDROP -p ICMP -j LOG --log-level info --log-prefix "ICMP Drop "
$FW -A LOGDROP -f -j LOG --log-level emerg --log-prefix "FRAG Drop "
$FW -A LOGDROP -j DROP
echo "Event logging added"
# $FW -A INPUT -i eth0 -j LOG
# Avoid these from being logged (gets annoying)
# $FW -A INPUT -s $WORLD -p TCP --sport 6666:7000 -d $LOCALNET -j ACCEPT
# $FW -A INPUT -s 24.0.0.0/8 -p ALL -d $LOCALNET -j DROP
# LAN Configuration
# Dynamic IP
$FW -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# Static IP
# $FW -t nat -A POSTROUTING -o $IF0 -s $LAN -j SNAT --to $LOCALNET
$FW -A FORWARD -o eth0 -j ACCEPT
$FW -A FORWARD -i eth0 -m state --state ESTABLISHED -j ACCEPT
$FW -A FORWARD -p TCP -s $WORLD --dport 137:139 -j DROP
$FW -A FORWARD -p UDP -s $WORLD --sport 137:139 -j DROP
# $FW -A FORWARD -p TCP --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1
$FW -A INPUT -m state --state ESTABLISHED -j ACCEPT
# $FW -A OUTPUT -p TCP -s $LAN --syn -j ACCEPT
$FW -A INPUT -p TCP --tcp-flags ALL SYN,ACK -j ACCEPT
$FW -P FORWARD DROP
# Port Forwarding
##### Traffic via LAN
# $FW -t nat -A POSTROUTING -p TCP -o eth0 -s $LAN --sport 6667:7000 -j SNAT
# --to $LOCALNET:6666-7000
# FTP
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 20 -j DNAT
--to $HOST0:20
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 21 -j DNAT
--to $HOST0:21
# SSH
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 22 -j DNAT
--to $HOST0:22
# Telnet (seperate system)
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 23 -j DNAT
--to $HOST1:23
# WWW
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 80 -j DNAT
--to $HOST0:80
# Type Of Services (iptables -m tos -h for information)
if [ $TOS = yes ]; then
$FW -t mangle -A OUTPUT -p TCP --dport 20 -j TOS --set-tos 8
$FW -t mangle -A OUTPUT -p TCP --dport 21 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 22 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 23 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 25 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 80 -j TOS --set-tos 8
##
$FW -t mangle -A PREROUTING -p TCP --dport 20 -j TOS --set-tos 8
$FW -t mangle -A PREROUTING -p TCP --dport 21 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 22 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 23 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 25 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 80 -j TOS --set-tos 8
fi
# Permit full access from LAN
$FW -A INPUT -s $LAN -p TCP -d $LOCALNET --dport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p UDP -d $LOCALNET --sport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p TCP -d $GWIP --dport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p UDP -d $GWIP --sport 20: -j ACCEPT
##### Traffic via local system
# Permit Identd (Local machine)
$FW -A INPUT -s $WORLD -d $LOCALNET -p TCP --dport 113 -j ACCEPT
# Permit ICMP response
if [ $ICMP = yes ]; then
$FW -A OUTPUT -s $LOCALNET -d $WORLD -o $IF0 -p ICMP -j ACCEPT
$FW -A INPUT -s $WORLD -d $LOCALNET -i $IF0 -p ICMP -j ACCEPT
fi
<<lessSample:
# Location of IPTables
FW="`whereis -b iptables | cut -d " " -f 2`"
# Interface Configuration
IF0="eth0"
IP0="`ifconfig $IF0 | grep inet | cut -d : -f 2 | cut -d -f 1`"
MASK0="`ifconfig $IF0 | grep Mask | cut -d : -f 4`"
LOCALNET="$IP0"
echo "IP: $LOCALNET/$MASK0"
# Inside Interface (Can be either eth1 or none)
IF1="eth1"
IP1="`ifconfig $IF1 | grep inet | cut -d : -f 2 | cut -d -f 1`"
MASK1="`ifconfig $IF1 | grep Mask | cut -d : -f 4`"
GWIP="$IP1"
echo "LAN Gateway: $GWIP/$MASK1"
if [ $IF1 != none ]; then
LAN="10.0.1.0/24"
HOST0="10.0.1.2"
HOST1="10.0.1.3"
fi
# Everyone
WORLD="0/0"
# Options
TOS=no
ICMP=yes
# Flush
$FW -F INPUT
$FW -F OUTPUT
$FW -F FORWARD
$FW -F -t nat
$FW -F -t mangle
$FW -F LOGDROP
# Policy
$FW -P INPUT DROP
$FW -P OUTPUT ACCEPT
$FW -P FORWARD ACCEPT
# Create Event Logging
if [ -z "`iptables -L | grep LOGDROP`" ]; then
$FW -N LOGDROP 2>/dev/null
fi
$FW -A LOGDROP -p TCP -j LOG --log-level info --log-prefix "TCP Drop "
$FW -A LOGDROP -p UDP -j LOG --log-level info --log-prefix "UDP Drop "
$FW -A LOGDROP -p ICMP -j LOG --log-level info --log-prefix "ICMP Drop "
$FW -A LOGDROP -f -j LOG --log-level emerg --log-prefix "FRAG Drop "
$FW -A LOGDROP -j DROP
echo "Event logging added"
# $FW -A INPUT -i eth0 -j LOG
# Avoid these from being logged (gets annoying)
# $FW -A INPUT -s $WORLD -p TCP --sport 6666:7000 -d $LOCALNET -j ACCEPT
# $FW -A INPUT -s 24.0.0.0/8 -p ALL -d $LOCALNET -j DROP
# LAN Configuration
# Dynamic IP
$FW -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# Static IP
# $FW -t nat -A POSTROUTING -o $IF0 -s $LAN -j SNAT --to $LOCALNET
$FW -A FORWARD -o eth0 -j ACCEPT
$FW -A FORWARD -i eth0 -m state --state ESTABLISHED -j ACCEPT
$FW -A FORWARD -p TCP -s $WORLD --dport 137:139 -j DROP
$FW -A FORWARD -p UDP -s $WORLD --sport 137:139 -j DROP
# $FW -A FORWARD -p TCP --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1
$FW -A INPUT -m state --state ESTABLISHED -j ACCEPT
# $FW -A OUTPUT -p TCP -s $LAN --syn -j ACCEPT
$FW -A INPUT -p TCP --tcp-flags ALL SYN,ACK -j ACCEPT
$FW -P FORWARD DROP
# Port Forwarding
##### Traffic via LAN
# $FW -t nat -A POSTROUTING -p TCP -o eth0 -s $LAN --sport 6667:7000 -j SNAT
# --to $LOCALNET:6666-7000
# FTP
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 20 -j DNAT
--to $HOST0:20
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 21 -j DNAT
--to $HOST0:21
# SSH
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 22 -j DNAT
--to $HOST0:22
# Telnet (seperate system)
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 23 -j DNAT
--to $HOST1:23
# WWW
$FW -t nat -A PREROUTING -d $LOCALNET -p TCP --dport 80 -j DNAT
--to $HOST0:80
# Type Of Services (iptables -m tos -h for information)
if [ $TOS = yes ]; then
$FW -t mangle -A OUTPUT -p TCP --dport 20 -j TOS --set-tos 8
$FW -t mangle -A OUTPUT -p TCP --dport 21 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 22 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 23 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 25 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A OUTPUT -p TCP --dport 80 -j TOS --set-tos 8
##
$FW -t mangle -A PREROUTING -p TCP --dport 20 -j TOS --set-tos 8
$FW -t mangle -A PREROUTING -p TCP --dport 21 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 22 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 23 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 25 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p UDP --dport 53 -j TOS --set-tos 16
$FW -t mangle -A PREROUTING -p TCP --dport 80 -j TOS --set-tos 8
fi
# Permit full access from LAN
$FW -A INPUT -s $LAN -p TCP -d $LOCALNET --dport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p UDP -d $LOCALNET --sport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p TCP -d $GWIP --dport 20: -j ACCEPT
$FW -A INPUT -s $LAN -p UDP -d $GWIP --sport 20: -j ACCEPT
##### Traffic via local system
# Permit Identd (Local machine)
$FW -A INPUT -s $WORLD -d $LOCALNET -p TCP --dport 113 -j ACCEPT
# Permit ICMP response
if [ $ICMP = yes ]; then
$FW -A OUTPUT -s $LOCALNET -d $WORLD -o $IF0 -p ICMP -j ACCEPT
$FW -A INPUT -s $WORLD -d $LOCALNET -i $IF0 -p ICMP -j ACCEPT
fi
Download (MB)
Added: 2007-02-14 License: GPL (GNU General Public License) Price:
982 downloads
spell-karamba 0.2
spell-karamba is a desktop applet for SuperKaramba that spells the typed words - letter by letter. more>>
spell-karamba is a desktop applet for SuperKaramba that spells the typed words - letter by letter.
You can choose from deutsch, english, american, international and NATO spelling.
Installation:
Actually the installation is pretty easy:
Copy all files from the tarball into a new folder. A good choice would be $HOME/kde3/share/apps/superkaramba/themes/dwd. Thats all. You start the theme from a shell by "superkaramba spell.theme". If you have a superkaramba theme running already its even simpler. Right-click the open theme and select superkaramba - manage themes.
From there you can search for the .theme-file. Do not open any other file with the superkaramba application.
<<lessYou can choose from deutsch, english, american, international and NATO spelling.
Installation:
Actually the installation is pretty easy:
Copy all files from the tarball into a new folder. A good choice would be $HOME/kde3/share/apps/superkaramba/themes/dwd. Thats all. You start the theme from a shell by "superkaramba spell.theme". If you have a superkaramba theme running already its even simpler. Right-click the open theme and select superkaramba - manage themes.
From there you can search for the .theme-file. Do not open any other file with the superkaramba application.
Download (0.017MB)
Added: 2006-07-05 License: GPL (GNU General Public License) Price:
1206 downloads
Forwards H3 3.0.1
Forwards is a Horde module for setting user e-mail forwards with support for several popular mailers. more>>
Forwards is a Horde module for setting user e-mail forwards with support for several popular mailers.
While it has been released and is in production use at many sites, Forwards project is also still under development in an effort to expand and improve the module.
Right now, Forwards provides fairly complete support for setting .forward style forwards on Sendmail, Courier, or Qmail mail based systems via an FTP transport. It now also has drivers for Mdaemon, Exim SQL, Exim LDAP, Custom SQL, and SOAP based systems.
Forwards is part of a suite of account management modules for Horde consisting of Accounts, Forwards, Passwd, and Vacation.
Enhancements:
- The license has been switched a BSD-like license.
- A Russian translation was added and the German and Traditional Chinese translations were updated.
<<lessWhile it has been released and is in production use at many sites, Forwards project is also still under development in an effort to expand and improve the module.
Right now, Forwards provides fairly complete support for setting .forward style forwards on Sendmail, Courier, or Qmail mail based systems via an FTP transport. It now also has drivers for Mdaemon, Exim SQL, Exim LDAP, Custom SQL, and SOAP based systems.
Forwards is part of a suite of account management modules for Horde consisting of Accounts, Forwards, Passwd, and Vacation.
Enhancements:
- The license has been switched a BSD-like license.
- A Russian translation was added and the German and Traditional Chinese translations were updated.
Download (0.65MB)
Added: 2007-03-15 License: Artistic License Price:
954 downloads
Faroese Spell Checking Dictionary 0.2.30
Faroese Spell Checking Dictionary is intended to be used with programs like aspell and ispell. more>>
Faroese Spell Checking Dictionary is intended to be used with programs like aspell and ispell.
Installation:
After unpacking this package you can use it at least four ways:
Make and install a Faroese dictionary for aspell:
$ make aspell && su -c "make install-aspell"
Make and install a Faroese dictionary for ispell:
$ make ispell && su -c "make install-ispell"
Make and install Faroese dictionaries for aspell and ispell in a single run:
$ make all && su -c "make install"
Make a plain text list of Faroese words:
$ make words
Enhancements:
- Some words were added and some misspellings were removed.
<<lessInstallation:
After unpacking this package you can use it at least four ways:
Make and install a Faroese dictionary for aspell:
$ make aspell && su -c "make install-aspell"
Make and install a Faroese dictionary for ispell:
$ make ispell && su -c "make install-ispell"
Make and install Faroese dictionaries for aspell and ispell in a single run:
$ make all && su -c "make install"
Make a plain text list of Faroese words:
$ make words
Enhancements:
- Some words were added and some misspellings were removed.
Download (0.23MB)
Added: 2007-08-13 License: GPL (GNU General Public License) Price:
808 downloads
New Driver and Tools 1.3 Beta
New Driver and Tools is a SuperKaramba theme that displays the latest version of drivers and of some tools. more>>
New Driver and Tools is a SuperKaramba theme that displays the latest version of drivers and of some tools.
By clicking on the globe youll get on the homepage of the driver/tool.
(The wine homepage was not reachable at the time I took the screen)
Im looking forward for your feedback.
<<lessBy clicking on the globe youll get on the homepage of the driver/tool.
(The wine homepage was not reachable at the time I took the screen)
Im looking forward for your feedback.
Download (0.029MB)
Added: 2007-04-04 License: GPL (GNU General Public License) Price:
942 downloads
Nebula Cards 0.7
Nebula Cards project is a card game engine. more>>
Nebula Cards project is a card game engine.
Nebula Cards is a networked, modular card game engine written in pure Java.
The game rules, user interfaces, and computer players all take the form of pluggable Java classes, and most four-player, trick-taking games can be implemented.
It currently includes Spades and Hearts, with a computer player for Spades.
Enhancements:
- last release before a major restructuring.
- added Game class in a backward-compatible way.
- added util.proc to house the new GameProcedure library.
- added util.ui.GraphicalCardSelector (untested).
<<lessNebula Cards is a networked, modular card game engine written in pure Java.
The game rules, user interfaces, and computer players all take the form of pluggable Java classes, and most four-player, trick-taking games can be implemented.
It currently includes Spades and Hearts, with a computer player for Spades.
Enhancements:
- last release before a major restructuring.
- added Game class in a backward-compatible way.
- added util.proc to house the new GameProcedure library.
- added util.ui.GraphicalCardSelector (untested).
Download (MB)
Added: 2006-11-15 License: GPL (GNU General Public License) Price:
1075 downloads
NAT and blocking all but Port 22 1.0
NAT and blocking all but Port 22 is a simple iptables firewall script. more>>
NAT and blocking all but Port 22 is a simple iptables firewall script.
Sample:
# Internal and External Devices
dev_world=ppp0
dev_int=eth0
# Firewall IP
addr_int=192.168.1.1
# Internal Net
net_int=192.168.1.0/24
###################################################
# Load Modules
insmod ip_tables
insmod ip_conntrack
insmod ip_conntrack_ftp
insmod ipt_state
insmod iptable_nat
insmod ipt_MASQUERADE
###################################################
# Delete all Rules in Filtertable
iptables -F
###################################################
# Define new chains
iptables -N BLOCK
iptables -N EXT-INT
iptables -N INT-EXT
iptables -N ICMP-DENY
iptables -N INT-IF
iptables -N EXT-IF
###################################################
iptables -A BLOCK -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A BLOCK -m state --state NEW -i ! $dev_world -j ACCEPT
iptables -A BLOCK -j DROP
iptables -A INPUT -j BLOCK
iptables -A FORWARD -j BLOCK
###################################################
# Point to chains
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i $dev_int -s $net_int -j INT-IF
iptables -A INPUT -d ! $addr_int -i $dev_world -s ! $net_int -j EXT-IF
iptables -A INPUT -j DROP
iptables -A FORWARD -d ! $net_int -i $dev_world -s $net_int -j INT-EXT
iptables -A FORWARD -d $net_int -i $dev_int -s ! $net_int -j EXT-INT
iptables -A FORWARD -j DROP
iptables -A OUTPUT -j ACCEPT
###################################################
# Chain Rules
iptables -A EXT-INT -j DROP
iptables -A EXT-IF -i ! $dev_world -j DROP
iptables -A EXT-IF -p tcp --dport 22 -j ACCEPT
iptables -A EXT-IF -p tcp --dport 5901 -j ACCEPT
iptables -A EXT-IF -p tcp --dport 1024: -j ACCEPT
iptables -A EXT-IF -p udp --dport 1024: -j ACCEPT
iptables -A EXT-IF -j DROP
iptables -A INT-IF -j ACCEPT
###################################################
# NAT Rules
# Standard Routing
iptables -A POSTROUTING -t nat -o $dev_world -j MASQUERADE -s $net_int
# Port Forwarding
#iptables -A PREROUTING -t nat -p tcp -d 192.168.1.1 --dport 5901 --to 192.168.1.2:5901 -j DNAT
##################################################
# Enable IP-Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward)
<<lessSample:
# Internal and External Devices
dev_world=ppp0
dev_int=eth0
# Firewall IP
addr_int=192.168.1.1
# Internal Net
net_int=192.168.1.0/24
###################################################
# Load Modules
insmod ip_tables
insmod ip_conntrack
insmod ip_conntrack_ftp
insmod ipt_state
insmod iptable_nat
insmod ipt_MASQUERADE
###################################################
# Delete all Rules in Filtertable
iptables -F
###################################################
# Define new chains
iptables -N BLOCK
iptables -N EXT-INT
iptables -N INT-EXT
iptables -N ICMP-DENY
iptables -N INT-IF
iptables -N EXT-IF
###################################################
iptables -A BLOCK -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A BLOCK -m state --state NEW -i ! $dev_world -j ACCEPT
iptables -A BLOCK -j DROP
iptables -A INPUT -j BLOCK
iptables -A FORWARD -j BLOCK
###################################################
# Point to chains
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i $dev_int -s $net_int -j INT-IF
iptables -A INPUT -d ! $addr_int -i $dev_world -s ! $net_int -j EXT-IF
iptables -A INPUT -j DROP
iptables -A FORWARD -d ! $net_int -i $dev_world -s $net_int -j INT-EXT
iptables -A FORWARD -d $net_int -i $dev_int -s ! $net_int -j EXT-INT
iptables -A FORWARD -j DROP
iptables -A OUTPUT -j ACCEPT
###################################################
# Chain Rules
iptables -A EXT-INT -j DROP
iptables -A EXT-IF -i ! $dev_world -j DROP
iptables -A EXT-IF -p tcp --dport 22 -j ACCEPT
iptables -A EXT-IF -p tcp --dport 5901 -j ACCEPT
iptables -A EXT-IF -p tcp --dport 1024: -j ACCEPT
iptables -A EXT-IF -p udp --dport 1024: -j ACCEPT
iptables -A EXT-IF -j DROP
iptables -A INT-IF -j ACCEPT
###################################################
# NAT Rules
# Standard Routing
iptables -A POSTROUTING -t nat -o $dev_world -j MASQUERADE -s $net_int
# Port Forwarding
#iptables -A PREROUTING -t nat -p tcp -d 192.168.1.1 --dport 5901 --to 192.168.1.2:5901 -j DNAT
##################################################
# Enable IP-Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward)
Download (MB)
Added: 2007-02-14 License: GPL (GNU General Public License) Price:
985 downloads
Off-the-Record Messaging 3.1.0
Off-the-Record Messaging is a Pidgin plugin that allows you to have private conversations over instant messaging. more>>
Off-the-Record Messaging is a Pidgin plugin that allows you to have private conversations over instant messaging by providing:
Encryption
No one else can read your instant messages.
Authentication
You are assured the correspondent is who you think it is.
Deniability
The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured
the messages he sees are authentic and unmodified.
Perfect forward secrecy
If you lose control of your private keys, no previous conversation is compromised.
Enhancements:
- Translations for English, Dutch, Spanish, French, Slovak
- Added option to not log OTR conversations
- Large messages are now fragmented transparently instead of failing
- Removed "view secure session id" and "verify fingerprint" options from the OTR button menu. Added "authenticate buddy" option in its place. This new option allows you to authenticate your buddies by entering some secret that only the two of you know, rather than by using a long user-unfriendly sequence of hex characters. [The old "verify fingerprint" dialog is still available via an "Advanced..." button from the new "authenticate buddy" dialog.]
<<lessEncryption
No one else can read your instant messages.
Authentication
You are assured the correspondent is who you think it is.
Deniability
The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured
the messages he sees are authentic and unmodified.
Perfect forward secrecy
If you lose control of your private keys, no previous conversation is compromised.
Enhancements:
- Translations for English, Dutch, Spanish, French, Slovak
- Added option to not log OTR conversations
- Large messages are now fragmented transparently instead of failing
- Removed "view secure session id" and "verify fingerprint" options from the OTR button menu. Added "authenticate buddy" option in its place. This new option allows you to authenticate your buddies by entering some secret that only the two of you know, rather than by using a long user-unfriendly sequence of hex characters. [The old "verify fingerprint" dialog is still available via an "Advanced..." button from the new "authenticate buddy" dialog.]
Download (0.39MB)
Added: 2007-08-10 License: GPL (GNU General Public License) Price:
807 downloads
NATting SOHO firewall
NATting SOHO firewall is a firewall script for iptables. more>>
NATting SOHO firewall is a firewall script for iptables.
# Model NATting SOHO firewall for SP article
# by Jay Beale (jay@bastille-linux.org)
#
# Warning: youre going to have to hack this for your own purposes.
#
# Assumptions:
# your internal network is 192.168.1.0/24 on eth1
# your internet IP is 10.0.0.1 on eth0
# your internal network IP on eth1 is 192.168.1.1
#
# Additonally:
# you have another internal network, a DMZ: 192.168.2.0/24 on eth2
$INTERNAL_IP = 192.168.1.1
$INTERNAL_NET = 192.168.1.0/24
$INTERNET = 10.0.0.1
$DMZ = 192.168.2.0/24
# Insert the required kernel modules
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# Set default policies for packets going through this firewall box
iptables -t nat -P PREROUTING DROP
iptables -t nat -P POSTROUTING DROP
iptables -P FORWARD DROP
# Set default policies for packet entering this box
iptables -P OUTPUT ALLOW
iptables -P INPUT ALLOW
# Kill spoofed packets
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done
# Anything coming from our internal network should have only our addresses!
iptables -A FORWARD -i eth1 -s ! $INTERNAL_NET -j DROP
# Anything coming from the Internet should have a real Internet address
iptables -A FORWARD -i eth0 -s 192.168.0.0/16 -j DROP
iptables -A FORWARD -i eth0 -s 172.16.0.0/12 -j DROP
iptables -A FORWARD -i eth0 -s 10.0.0.0/8 -j DROP
# Note:There are more "reserved" networks, but these are the classical ones.
# Block outgoing network filesharing protocols that arent designed
# to leave the LAN
# SMB / Windows filesharing
iptables -A FORWARD -p tcp --sport 137:139 -j DROP
iptables -A FORWARD -p udp --sport 137:139 -j DROP
# NFS Mount Service (TCP/UDP 635)
iptables -A FORWARD -p tcp --sport 635 -j DROP
iptables -A FORWARD -p udp --sport 635 -j DROP
# NFS (TCP/UDP 2049)
iptables -A FORWARD -p tcp --sport 2049 -j DROP
iptables -A FORWARD -p udp --sport 2049 -j DROP
# Portmapper (TCP/UDP 111)
iptables -A FORWARD -p tcp --sport 111 -j DROP
iptables -A FORWARD -p udp --sport 111 -j DROP
# Block incoming syslog, lpr, rsh, rexec...
iptables -A FORWARD -i eth0 -p udp --dport syslog -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 515 -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 514 -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 512 -j DROP
###
# Transparently proxy all web-surfing through Squid box
$SQUID = 192.168.1.2:8080
$SQUIDSSL = 192.168.1.2:443
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 80 -j DNAT --to $SQUID
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 443 -j DNAT --to $SQUIDSSL
# Transparently forward all outgoing mail to a relay host
$SMTP = 192.168.1.3
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 25 -j DNAT --to $SMTP
# Transparently redirect web connections from outside to the DMZ web
# server
$DMZ_WEB = 192.168.2.2
iptables -t nat -A PREROUTING -i eth0 -d 192.168.1.1 -dport 80 -j DNAT --to $DMZ_WEB
# Source NAT to get Internet traffic through
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to $INTERNET
# Activate the forwarding!
echo 1 >/proc/sys/net/ipv4/ip_forward
<<less# Model NATting SOHO firewall for SP article
# by Jay Beale (jay@bastille-linux.org)
#
# Warning: youre going to have to hack this for your own purposes.
#
# Assumptions:
# your internal network is 192.168.1.0/24 on eth1
# your internet IP is 10.0.0.1 on eth0
# your internal network IP on eth1 is 192.168.1.1
#
# Additonally:
# you have another internal network, a DMZ: 192.168.2.0/24 on eth2
$INTERNAL_IP = 192.168.1.1
$INTERNAL_NET = 192.168.1.0/24
$INTERNET = 10.0.0.1
$DMZ = 192.168.2.0/24
# Insert the required kernel modules
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# Set default policies for packets going through this firewall box
iptables -t nat -P PREROUTING DROP
iptables -t nat -P POSTROUTING DROP
iptables -P FORWARD DROP
# Set default policies for packet entering this box
iptables -P OUTPUT ALLOW
iptables -P INPUT ALLOW
# Kill spoofed packets
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done
# Anything coming from our internal network should have only our addresses!
iptables -A FORWARD -i eth1 -s ! $INTERNAL_NET -j DROP
# Anything coming from the Internet should have a real Internet address
iptables -A FORWARD -i eth0 -s 192.168.0.0/16 -j DROP
iptables -A FORWARD -i eth0 -s 172.16.0.0/12 -j DROP
iptables -A FORWARD -i eth0 -s 10.0.0.0/8 -j DROP
# Note:There are more "reserved" networks, but these are the classical ones.
# Block outgoing network filesharing protocols that arent designed
# to leave the LAN
# SMB / Windows filesharing
iptables -A FORWARD -p tcp --sport 137:139 -j DROP
iptables -A FORWARD -p udp --sport 137:139 -j DROP
# NFS Mount Service (TCP/UDP 635)
iptables -A FORWARD -p tcp --sport 635 -j DROP
iptables -A FORWARD -p udp --sport 635 -j DROP
# NFS (TCP/UDP 2049)
iptables -A FORWARD -p tcp --sport 2049 -j DROP
iptables -A FORWARD -p udp --sport 2049 -j DROP
# Portmapper (TCP/UDP 111)
iptables -A FORWARD -p tcp --sport 111 -j DROP
iptables -A FORWARD -p udp --sport 111 -j DROP
# Block incoming syslog, lpr, rsh, rexec...
iptables -A FORWARD -i eth0 -p udp --dport syslog -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 515 -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 514 -j DROP
iptables -A FORWARD -i eth0 -p tcp --dport 512 -j DROP
###
# Transparently proxy all web-surfing through Squid box
$SQUID = 192.168.1.2:8080
$SQUIDSSL = 192.168.1.2:443
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 80 -j DNAT --to $SQUID
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 443 -j DNAT --to $SQUIDSSL
# Transparently forward all outgoing mail to a relay host
$SMTP = 192.168.1.3
iptables -t nat -A PREROUTING -i eth1 -tcp --dport 25 -j DNAT --to $SMTP
# Transparently redirect web connections from outside to the DMZ web
# server
$DMZ_WEB = 192.168.2.2
iptables -t nat -A PREROUTING -i eth0 -d 192.168.1.1 -dport 80 -j DNAT --to $DMZ_WEB
# Source NAT to get Internet traffic through
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to $INTERNET
# Activate the forwarding!
echo 1 >/proc/sys/net/ipv4/ip_forward
Download (MB)
Added: 2007-02-13 License: GPL (GNU General Public License) Price:
987 downloads
Time::Warp 0.5
Time::Warp is a Perl module to control over the flow of time. more>>
Time::Warp is a Perl module to control over the flow of time.
SYNOPSIS
use Time::Warp qw(scale to time);
to(time + 5); # 5 seconds ahead
scale(2); # make time flow twice normal
Our external experience unfolds in 3 1/2 dimensions (time has a dimensionality of 1/2). The Time::Warp module offers developers control over the measurement of time.
API
to($desired_time)
The theory of relativity asserts that all physical laws are enforced relative to the observer. Since the starting point of time is arbitrary, it is permissable to change it. This has the effect of making it appear as if time is moving forwards or backward instanteously. For example, on some types of operating systems time starts at Wed Dec 31 19:00:00 1969 (this will likely change as we approach 2030 and with the acceptance of 64-bit CPUs).
to(time + 60*60); # 1 hour ahead
scale($factor)
Changes the speed at which time is progressing.
scale(scale * 2); # double the speed of time
Note that it is not possible to stop time or cause it to reverse since this is forbidden by the second law of thermodynamics.
<<lessSYNOPSIS
use Time::Warp qw(scale to time);
to(time + 5); # 5 seconds ahead
scale(2); # make time flow twice normal
Our external experience unfolds in 3 1/2 dimensions (time has a dimensionality of 1/2). The Time::Warp module offers developers control over the measurement of time.
API
to($desired_time)
The theory of relativity asserts that all physical laws are enforced relative to the observer. Since the starting point of time is arbitrary, it is permissable to change it. This has the effect of making it appear as if time is moving forwards or backward instanteously. For example, on some types of operating systems time starts at Wed Dec 31 19:00:00 1969 (this will likely change as we approach 2030 and with the acceptance of 64-bit CPUs).
to(time + 60*60); # 1 hour ahead
scale($factor)
Changes the speed at which time is progressing.
scale(scale * 2); # double the speed of time
Note that it is not possible to stop time or cause it to reverse since this is forbidden by the second law of thermodynamics.
Download (0.003MB)
Added: 2007-04-10 License: Perl Artistic License Price:
928 downloads
The Linux UPnP Internet Gateway Device Project 0.92
The Linux UPnP Internet Gateway Device Project is an attempt to begin work on a UPnP Forum-compliant Internet Gateway Device. more>>
The Linux UPnP Internet Gateway Device Project is an attempt to begin work on a UPnP Forum-compliant Internet Gateway Device. It allows Windows Messenger or other this kind of programs to use voice/video through a Linux firewall running Iptables.
This program only creates DNAT (portmap) entries in you firewall on the external interface (public ip). Any other firewall code must be set to allow basically all tcp and udp through the FORWARD chain to your client machines, and the client machines must be able to contact the firewall using tcp and udp through the firewalls INPUT chain on it internal interface.
We will be adding some checks to see if FORWARD has a default policy of DROP or REJECT, however placing rules once we determine this is a bit tricky. Theres at the moment no real way to check to see if a packet matchin this rule will pass through any additional rules that may be located above it. Also, we will probably need to check for any rules below as well. Hopefully we can get this implemented soon.
In the meantime, please be aware of this fact, and if you are seeing Advertisements sent in the /var/log/debug file (or whatever you have syslog set to log DEBUG level messages to), but you are not seeing AddPortMaps, the most likely this is the problem, or it could be the following problem.
UPnP works with the 239.0.0.0/255.0.0.0 multicast addresses. Windows Messenger may also send request to a Unicast address, and thus the reason for the patch to the UPnP source code for this to work. Nevertheless, to add a route in your box for the multicast address, just use the following command, replaceing with the interface name of your inside interface name (i.e., eth0).
Enhancements:
- Fixed issues with Direct Play games not deleting broadcast port mappings So most if not all Direct Play games will now work correctly.
- Added Byte and Packet counter code contributed by giussani
- Changed all the xml and skl files to include our UUID and some other updatet information that needed to be changed.
- Added a CREDITS file to make sure I give thanks to the person who inspired me to write this program, along with everyone else whos contributing.
- Fixed the startup message in messages to report the correct version now.
- Once again, other small changes i cant remember
<<lessThis program only creates DNAT (portmap) entries in you firewall on the external interface (public ip). Any other firewall code must be set to allow basically all tcp and udp through the FORWARD chain to your client machines, and the client machines must be able to contact the firewall using tcp and udp through the firewalls INPUT chain on it internal interface.
We will be adding some checks to see if FORWARD has a default policy of DROP or REJECT, however placing rules once we determine this is a bit tricky. Theres at the moment no real way to check to see if a packet matchin this rule will pass through any additional rules that may be located above it. Also, we will probably need to check for any rules below as well. Hopefully we can get this implemented soon.
In the meantime, please be aware of this fact, and if you are seeing Advertisements sent in the /var/log/debug file (or whatever you have syslog set to log DEBUG level messages to), but you are not seeing AddPortMaps, the most likely this is the problem, or it could be the following problem.
UPnP works with the 239.0.0.0/255.0.0.0 multicast addresses. Windows Messenger may also send request to a Unicast address, and thus the reason for the patch to the UPnP source code for this to work. Nevertheless, to add a route in your box for the multicast address, just use the following command, replaceing with the interface name of your inside interface name (i.e., eth0).
Enhancements:
- Fixed issues with Direct Play games not deleting broadcast port mappings So most if not all Direct Play games will now work correctly.
- Added Byte and Packet counter code contributed by giussani
- Changed all the xml and skl files to include our UUID and some other updatet information that needed to be changed.
- Added a CREDITS file to make sure I give thanks to the person who inspired me to write this program, along with everyone else whos contributing.
- Fixed the startup message in messages to report the correct version now.
- Once again, other small changes i cant remember
Download (0.028MB)
Added: 2006-07-03 License: GPL (GNU General Public License) Price:
1216 downloads
Free eBook Search 2.0.1
Free eBook Search allows you to search with the highlighted text/right click for your favorite Free ebooks in freebookzone site. more>>
Free eBook Search allows you to search with the highlighted text/right click for your favorite Free ebooks in freebookzone site.
Search with the highlighted text/right click for your favorite Free ebooks in www.freebookzone.com.
You may search using the Book Title, ISBN (10 Digit), Description, Book Author and even the ebook backward link.
Just have a try and find how useful it is.
<<lessSearch with the highlighted text/right click for your favorite Free ebooks in www.freebookzone.com.
You may search using the Book Title, ISBN (10 Digit), Description, Book Author and even the ebook backward link.
Just have a try and find how useful it is.
Download (0.022MB)
Added: 2007-04-14 License: MPL (Mozilla Public License) Price:
970 downloads
Horde Vacation H3 3.0.1
Vacation is a Horde module for managing user e-mail vacation notices or auto-responders. more>>
Vacation is a Horde module for managing user e-mail "auto-responders" or "vacation notices". It works via a local vacation program which must be installed and functioning on the server. It supports vacation programs using the .forward-style forwarding mechanism supported by several popular mailers.
Right now, Vacation provides fairly complete support for managing .forward style vacation notices on Sendmail or Courier mail based systems via an FTP transport. It also has some support for LDAP, Qmail, and Exim SQL based servers.
Vacation is part of a suite of account management modules for Horde consisting of Accounts, Forwards, Passwd, and Vacation.
<<lessRight now, Vacation provides fairly complete support for managing .forward style vacation notices on Sendmail or Courier mail based systems via an FTP transport. It also has some support for LDAP, Qmail, and Exim SQL based servers.
Vacation is part of a suite of account management modules for Horde consisting of Accounts, Forwards, Passwd, and Vacation.
Download (0.89MB)
Added: 2007-03-15 License: Artistic License Price:
956 downloads
The Sajber Jukebox 1.10
Sajber Jukebox is a mpeg layer 3 player with a graphical user interface. more>>
The Sajber Jukebox is a mpeg layer 3 player with a graphical user interface. Its based on Woo-jae Jungs splay for the audio and has a QT based graphical library for the interface.
Main features:
- Supports mpeg layer 3. The support for mpeg layer 1 & 2 and wav files is still in there, but untested.
- Playing of the net. By using normal http addresses, ie http://whatever.host.on.the.net/~someguy/song.mp3, you can play without having to first download.
- Forward, Rewind, Pause, Seek. The Sajber Jukebox allows for moving backwards and forwards in the song [unless its streaming, then rewind wont work]. By pressing on the progression bar you can make swift jumps to any place in the song of your liking.
- Mixer control. The Sajber Jukebox comes with a mixer control that allows you to change bass, treble, volume and pcm/dsp setting at any time without having to start a second program.
- Three types of browsers:
- File Browser. A local filemanager type of browser, which allows you to click around on your local system and select songs you wish to play.
- Standard Database. A database which allows you to recursively scan the harddisk or a directory structure in search for songs. The database is sorted by group, album and songname and makes it easy to keep track of your songs, unregardless of where on the harddisk they are located. It also supports http references in addition to ordinary files.
- Http Browser. This browser allows for playing songs of the net, and scanning home pages for songs. By giving the Http Browser an URL to a page, it will retrieve it and search it through for any references to playable files.
- Selections. You can select songs from any number of browsers, and play them with repeat and random.
- Configurability. The Sajber Jukebox is easy to configure, and provides a graphical interface instead of having to figure out how various options in the obscure rc files works.
- Saving. Selections, Standard Databases, Http Browsers and configurations can be saved to disk for easy retrieval, or autoloading at startup.
- Realtime threads. If youre a daredevil who believes that everything else on your machine oughta come second to the playing of audio, you can configure your player to use realtime scheduling.
- Bookmarks. You can save and edit bookmarks to various http or local locations for swift jumps around the filesystem or the world.
- Progression bar and timer to keep track of where in the song you are.
- Easily change between different databases and browsers.
- A smaller Players window, with the basic functions which wont cover the entire screen.
<<lessMain features:
- Supports mpeg layer 3. The support for mpeg layer 1 & 2 and wav files is still in there, but untested.
- Playing of the net. By using normal http addresses, ie http://whatever.host.on.the.net/~someguy/song.mp3, you can play without having to first download.
- Forward, Rewind, Pause, Seek. The Sajber Jukebox allows for moving backwards and forwards in the song [unless its streaming, then rewind wont work]. By pressing on the progression bar you can make swift jumps to any place in the song of your liking.
- Mixer control. The Sajber Jukebox comes with a mixer control that allows you to change bass, treble, volume and pcm/dsp setting at any time without having to start a second program.
- Three types of browsers:
- File Browser. A local filemanager type of browser, which allows you to click around on your local system and select songs you wish to play.
- Standard Database. A database which allows you to recursively scan the harddisk or a directory structure in search for songs. The database is sorted by group, album and songname and makes it easy to keep track of your songs, unregardless of where on the harddisk they are located. It also supports http references in addition to ordinary files.
- Http Browser. This browser allows for playing songs of the net, and scanning home pages for songs. By giving the Http Browser an URL to a page, it will retrieve it and search it through for any references to playable files.
- Selections. You can select songs from any number of browsers, and play them with repeat and random.
- Configurability. The Sajber Jukebox is easy to configure, and provides a graphical interface instead of having to figure out how various options in the obscure rc files works.
- Saving. Selections, Standard Databases, Http Browsers and configurations can be saved to disk for easy retrieval, or autoloading at startup.
- Realtime threads. If youre a daredevil who believes that everything else on your machine oughta come second to the playing of audio, you can configure your player to use realtime scheduling.
- Bookmarks. You can save and edit bookmarks to various http or local locations for swift jumps around the filesystem or the world.
- Progression bar and timer to keep track of where in the song you are.
- Easily change between different databases and browsers.
- A smaller Players window, with the basic functions which wont cover the entire screen.
Download (0.60MB)
Added: 2006-07-20 License: GPL (GNU General Public License) Price:
1194 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above spelled the same forward and backward search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed
