Sunday, March 5, 2017

Installation of indication sticky notes in Ubuntu 16.04.2

Step1: sudo add-apt-repository ppa:umang/indicator-stickynotes
Step2: sudo apt-get update
Step3: sudo apt-get install indicator-stickynotes

Saturday, March 4, 2017

Conkey Manager in Ubuntu 16.04.2 LTS

3 simple steps to install conkey manager

Step1: sudo apt-add-repository -y ppa:teejee2008/ppa
Step2: sudo apt-get update
Step3: sudo apt-get install conky-manager

Uninstall totem player from Ubuntu 16.04.2

4 simple steps to remove totem from Ubuntu 16.04.2 LTS

Step1: sudo apt-get remove totem
Step2: sudo apt-get remove --auto-remove totem
Step3: sudo apt-get purge totem
Step4: sudo apt-get purge --auto-remove totem

VLC works excellent in Ubuntu 16.04.2 LTS @ HP Notebook 15-ac122tu

Step1: sudo add-apt-repository ppa:videolan/master-daily
Step2: sudo apt install vlc

Launch VLC from menu or app launcher

Google chrome works wonderful in Ubuntu 16.04.2 LTS

Step1: sudo wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
Step2: sudo dpkg -i --force-depends google-chrome-stable_current_amd64.deb

Step3: (optional)
In case any dependencies did not install (you would have a warning or failure message for this), you can force them via:

sudo apt-get install -f

Saturday, November 19, 2016

IPv6 Linux firewall script

Q. IPv4 by default protect internal host using RFC 1918 private IP address. But IPv6 offers direct global address which result into exposing all internal hosts as well. How do I create default IPv6 firewall to drop all incoming (except ping6 request) connection and only allow outgoing requests from Linux workstation?
A. You need to use Ip6tables command to create IPv6 firewall scripts. Ip6tables is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel.
A note about IPv6 private ips
IPv6 does not include private network features such as NAT. Because of the very large number of IPv6 addresses. However, FC00::/7 prefix used to identify Local IPv6 unicast addresses. All IPv6 users should be able to obtain IPv6 address space for use at their discretion and without artificial barriers between their network and the Internet.
Sample Restricted IPv6 Linux Firewall Script

#!/bin/bash
IPT6="/sbin/ip6tables"
PUBIF="eth1"
echo "Starting IPv6 firewall..."
$IPT6 -F
$IPT6 -X
$IPT6 -t mangle -F
$IPT6 -t mangle -X
#unlimited
$IPT6 -A INPUT -i lo -j ACCEPT
$IPT6 -A OUTPUT -o lo -j ACCEPT
# DROP all incomming traffic
$IPT6 -P INPUT DROP
$IPT6 -P OUTPUT DROP
$IPT6 -P FORWARD DROP
# Allow full outgoing connection but no incomming stuff
$IPT6 -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT6 -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
# allow incoming ICMP ping pong stuff
$IPT6 -A INPUT -p ipv6-icmp -j ACCEPT
$IPT6 -A OUTPUT -p ipv6-icmp -j ACCEPT
############# add your custom rules below ############
#$IPT6 -A INPUT -p tcp --destination-port 80 -j ACCEPT
#### no need to edit below ###
# log everything else
$IPT6 -A INPUT -j LOG
$IPT6 -A INPUT -j DROP

PXE boot communication flow