Free winrar setup software for linux

Example netfilter setup contains a simple example on how to setup netfilter.

Warning this is experimental, I dont garantee this is 100% secure, it just does the work fine for me and i thought it could be a good jumpstart for people new to netfilter.

Now I am waiting for your corrections, suggestions and critics. Also I am gonna write a small addon for setting up dynamic rules cause i am tired of all these programs with dynamics port like bind, xdm and rpc.

Btw nmap -sU will still report udp dropping port as open.

nmap -sU -p 111 192.168.1.1

Packet filtering setup script by Anthony C. Zboralski. Adapted by Didi Damian for iptables version 1.0.0

Sample:

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# Set up variables
EXT_IF="eth0"
INT_IF="eth1"
EXT_IP=24.x.x.x/32
INT_IP=192.168.0.1/32
EXT_NET=24.x.x.0/24
INT_NET=192.168.0.0/24
MASQ_NETS="192.168.0.0/24"
LOCAL_ADDRS="127.0.0.0/8 192.168.0.1/32 24.x.x.x/32"
MAIL_RELAY=24.x.x.x/32
SMB_ACCESS="192.168.0.2/32"
SMB_BCAST="192.168.0.255/32"

# Turn on IP forwarding
echo Turning on IP forwarding.
echo 1 > /proc/sys/net/ipv4/ip_forward

# Load the ip_tables module
echo Loading ip_tables module.
/sbin/modprobe ip_tables || exit 1
# I let the kernel dynamically load the other modules

echo Flush standard tables.
iptables --flush INPUT
iptables --flush OUTPUT
iptables --flush FORWARD
echo Deny everything until firewall setup is completed.
iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP

CHAINS=`iptables -n -L |perl -n -e /Chains+(S+)/ && !($1 =~ /^(INPUT|FORWARD|OUTPUT)$/) && print "$1 "`
echo Remove remaining chains:
echo $CHAINS
for chain in $CHAINS; do
iptables --flush $chain
done
# 2nd step cause of dependencies
for chain in $CHAINS; do
iptables --delete-chain $chain
done

for net in $MASQ_NETS; do
# I delete all the rules so you can rerun the scripts without bloating
# your nat entries.
iptables -D POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE 2>/dev/null
iptables -A POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE || exit 1
done
iptables --policy FORWARD ACCEPT

# Create a target for logging and dropping packets
iptables --new LDROP 2>/dev/null
iptables -A LDROP --proto tcp -j LOG --log-level info
--log-prefix "TCP Drop "
iptables -A LDROP --proto udp -j LOG --log-level info
--log-prefix "UDP Drop "
iptables -A LDROP --proto icmp -j LOG --log-level info
--log-prefix "ICMP Drop "
iptables -A LDROP --proto gre -j LOG --log-level info
--log-prefix "GRE Drop "

iptables -A LDROP -f -j LOG --log-level emerg
--log-prefix "FRAG Drop "
iptables -A LDROP -j DROP

# Create a table for watching some accepting rules
iptables --new WATCH 2>/dev/null
iptables -A WATCH -m limit -j LOG --log-level warn --log-prefix "ACCEPT "
iptables -A WATCH -j ACCEPT


echo Special target for local addresses:
iptables --new LOCAL 2>/dev/null
echo $LOCAL_ADDRS
for ip in $LOCAL_ADDRS; do
iptables -A INPUT --dst $ip -j LOCAL
# iptables -A INPUT --src $ip -i ! lo -j LDROP # lame spoof protect
done
echo Authorize mail from mail relay.
iptables -A LOCAL --proto tcp --syn --src $MAIL_RELAY --dst $EXT_IP --dport 25 -j ACCEPT


echo Authorizing samba access to:
echo $SMB_ACCESS
iptables --new SMB 2>/dev/null
for ip in $SMB_ACCESS; do
iptables -A SMB -s $ip -j ACCEPT
done
iptables -A LOCAL --proto udp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 445 -j SMB
iptables -A INPUT -i ! $EXT_IF --dst $SMB_BCAST -j ACCEPT #lame samba broadcast

echo Drop and log every other incoming tcp connection attempts.
iptables -A LOCAL -i ! lo --proto tcp --syn --j LDROP

echo Authorize dns access for local nets.
for net in $MASQ_NETS 127.0.0.0/8; do
iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
done


echo Enforcing up ICMP policies, use iptables -L ICMP to check.
# If you deny all ICMP messages you head for trouble since it would
# break lots of tcp/ip algorythm (acz)
iptables --new ICMP 2>/dev/null
iptables -A INPUT --proto icmp -j ICMP
iptables -A ICMP -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A ICMP -p icmp --icmp-type destination-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type protocol-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type port-unreachable -j ACCEPT
iptables -A ICMP -p icmp --icmp-type fragmentation-needed -j LDROP
iptables -A ICMP -p icmp --icmp-type source-route-failed -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type network-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type communication-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-precedence-violation -j LDROP
iptables -A ICMP -p icmp --icmp-type precedence-cutoff -j LDROP
iptables -A ICMP -p icmp --icmp-type source-quench -j LDROP
iptables -A ICMP -p icmp --icmp-type redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type echo-request -j WATCH
iptables -A ICMP -p icmp --icmp-type router-advertisement -j LDROP
iptables -A ICMP -p icmp --icmp-type router-solicitation -j LDROP
iptables -A ICMP -p icmp --icmp-type time-exceeded -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-transit -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-reassembly -j WATCH
iptables -A ICMP -p icmp --icmp-type parameter-problem -j WATCH
iptables -A ICMP -p icmp --icmp-type ip-header-bad -j WATCH
iptables -A ICMP -p icmp --icmp-type required-option-missing -j WATCH
iptables -A ICMP -p icmp --icmp-type timestamp-request -j LDROP
iptables -A ICMP -p icmp --icmp-type timestamp-reply -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-request -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-reply -j LDROP
iptables -A ICMP -p icmp -j LDROP

echo Authorize tcp traffic.
iptables -A INPUT --proto tcp -j ACCEPT

echo Authorize packet output.
iptables --policy OUTPUT ACCEPT

#echo reject ident if you drop em you gotta wait for timeout
#iptables -I LOCAL --proto tcp --syn --dst $EXT_IP --dport 113 -j REJECT

echo Drop and log all udp below 1024.
iptables -A INPUT -i ! lo --proto udp --dport :1023 -j LDROP

echo Drop rpc dynamic udp port:
RPC_UDP=`rpcinfo -p localhost|perl -n -e /.*udps+(d+)s+/ && print $1,"n"|sort -u`
echo $RPC_UDP
for port in $RPC_UDP; do
iptables -A LOCAL -i ! lo --proto udp --dport $port -j LDROP
done

echo Authorize udp above 1024.
iptables -A INPUT --proto udp --dport 1024: -j ACCEPT

Mailing List project is a Web-based, full-featured mailing list and newsletter system. Users can subscribe and unsubscribe themselves.
Email confirmation is used for new subscriptions. The list of subscribers to a list can be imported and exported.
Installation:
- copy all files to your web host
- use phpmyadmin or your mysql interface to run site.sql against your database.
- open site.xml and edit the database section with your database details.
- go to index.php and login with username of admin with a password of test.
Setup the site.xml file with your database settings as follows.
< database type="mysql" >
< server >database server address< /server >
< login >database login< /login >
< password >database password< /password >
< default >mysql database name< /default >
< /database >
Add this to your ".htaccess" file to prevent viewing of the xml config file.
< Files ~ ".xml" >
Order allow,deny
Deny from all
Satisfy All
< /Files >
Enhancements:
- A problem with the SQL setup file which caused the setup to fail on some systems was fixed.

Webmin is a web-based interface for system administration for Unix.

Using any browser that supports tables and forms, you can setup user accounts, internet services, DNS, file sharing and so on.

Minipup is a linux distribution useful for 128MB-RAM devices.

Use the base ISO for file management, media playing and browsing - uses the Opera browser/email/chat suite.

Note: To use this software in CD-ROM-less devices, burn the ISO to a CD and boot it in a regular PC. Start "Setup - Universal Installer" and install it either to "Compact Flash (CF) to be used as IDE" or to USB flash. Use the CF/USB flash to boot the device.

pyXLWriter is a Python library for generating Excel spreadsheets. Its a port of John McNamaras Spreadsheet::WriteExcel Perl module.
To install run python setup.py install in the root of the distribution.
Enhancements:
- Simple Worksheet.write correction (thanks to Frank Tobin)
- Corrected authors e-mail: fufff@users.sourceforge.net

Ruby/Finance allows access to changing financial data, such as stock quotes and currency conversion rates.

For the foreseeable future, it is intended to be a port of Perls Finance::Quote module.

Examples:

Currency conversion

require finance/currency

Display the US Dollar ($) to Euro () conversion rate.

puts Finance::Currency::convert( EUR, USD )

Display the British Pounds Sterling () to Icelandic Kronur conversion
rate for the amount of 32.50.

puts Finance::Currency::convert( ISK, GBP, 32.50 )

Stock quotes

require finance/quote

q = Finance::Quote.new Answers will be given in the native
currency of the exchange on which
they are listed.

q = Finance::Quote.new( EUR ) Answers will be given in Euros.

q.currency = VND Switch to using Vietnamese Dong.

info = q.fetch( usa, CRM ) Fetch a single quote, namely CRM.

info = q.fetch( :usa, EBAY, AMZN ) Fetch EBAY and AMZN. Note that
a Symbol can be used instead of a
String for the exchange name.

info = q.fetch( usa, %w[ EBAY AMZN ] ) An Array of ticker symbols is
OK, too.
puts info[EBAY][:price]

A block can be passed, too:

q.fetch( :usa, RHAT ) { |info| puts info[RHAT][:high] }

You can also bypass #fetch and call the exchange as a method:

q.usa( RHAT ) { |info| puts info[RHAT][:high] }

Installation:

Minero Aokis setup.rb script is included. Extensive documentation for this script can be found at the end of this document.

Basically, however, the following should be enough to install the package:

$ ruby setup.rb config
$ ruby setup.rb setup
# ruby setup.rb install

("#" line may require root privilege)

NullPop is a POP3 server that allows logins, but never returns any email.
NullPop is useful for certain setups where the user needs an account setup in their mail client, but no real mail will ever be received.
Installation:
A basic install procedure looks like this.
# cd nullpop-0.x
# ./configure
# make
# make install
By default nullpop will install to the /usr/local/libexec/ path. You may want to specify a different prefix with the --prefix argument to ./configure.
Execute the following command for more options:
./configure --help
Enhancements:
- Added documentation