"Windows - a 32 bit extension and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor, written by a 2 bit company without 1 bit of sense."Any idea of the original author?! I even forgot where I got it.
$sudo apt-get install ipkungfu$sudo gedit /etc/ipkungfu/ipkungfu.conf# Please read the README and FAQ for more information
# Some distros (most notably Redhat) don't have
# everything we need in $PATH so we specify it here.
# Make sure modprobe, iptables, and route are here,
# as well as ordinary items such as echo and grep.
# Default is as shown in the example below.
#PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin
# Your external interface
# This is the one that connects to the internet.
# Ipkungfu will detect this if you don't specify.
#EXT_NET="eth0"
#EXT_NET="eth1"
#EXT_NET="ppp0"
# Your internal interfaces, if any. If you have more
# than 1 internal interface, separate them with
# spaces. If you only have one interface, put "lo"
# here. Default is auto-detected.
#INT_NET="eth0"
#INT_NET="eth1"
#INT_NET="lo"
# IP Range of your internal network. Use "127.0.0.1"
# for a standalone machine. Default is a reasonable
# guess.
LOCAL_NET="192.168.1.0/255.255.255.0"
# Set this to 0 for a standalone machine, or 1 for
# a gateway device to share an Internet connection.
# Default is 1.
GATEWAY=1
# TCP ports you want to allow for incoming traffic
# Don't add ports here that you intend to forward.
# This should be a list of tcp ports that have
# servers listening on them on THIS machine,
# separated by spaces. Default is none.
# ALLOWED_TCP_IN="21 22"
# UDP ports to allow for incoming traffic
# See the comments above for ALLOWED_TCP_IN
#ALLOWED_UDP_IN=""
# Temporarily block future connection attempts from an
# IP that hits these ports (If module is present)
FORBIDDEN_PORTS="135 137 139"
# Drop all ping packets?
# Set to 1 for yes, 0 for no. Default is no.
BLOCK_PINGS=1
# Possible values here are "DROP", "REJECT", or "MIRROR"
#
# "DROP" means your computer will not respond at all. "Stealth mode"
#
# "REJECT" means your computer will respond with a
# message that the packet was rejected.
#
# "MIRROR", if your kernel supports it, will swap the source and
# destination IP addresses, and send the offending packet back
# where it came from. USE WITH EXTREME CAUTION! Only use this if you fully
# understand the consequences.
#
# The safest option, and the default in each case,, is "DROP". Don't change
# unless you fully understand this.
# What to do with 'probably malicious' packets
#SUSPECT="REJECT"
SUSPECT="DROP"
# What to do with obviously invalid traffic
# This is also the action for FORBIDDEN_PORTS
#KNOWN_BAD="REJECT"
KNOWN_BAD="DROP"
# What to do with port scans
#PORT_SCAN="REJECT"
PORT_SCAN="DROP"
# How should ipkungfu determine your IP address? The default
# answer, "NONE", will cause ipkungfu to not use the few
# features that require it to know your external IP address.
# This option is good for dialup users who run ipkungfu on
# bootup, since dialup users rarely use the features that
# require this, and the IP address for a dialup connection
# generally isn't known at bootup. "AUTO" will cause
# ipkungfu to automatically determine the IP address of
# $EXT_NET when it is started. If you have a static IP
# address you can simply enter your IP address here.
# If you do port forwarding and your ISP changes your IP
# address, choose NONE here, or your port forwarding
# will break when your IP address changes. Default is
# "NONE".
#GET_IP="NONE"
#GET_IP="AUTO"
#GET_IP="128.238.244.16"
# If the target for identd (113/tcp) is DROP, it can take
# a long time to connect to some IRC servers. Set this to
# 1 to speed up these connections with a negligible cost
# to security. Identd probes will be rejected with the
# 'reject-with-tcp-reset' option to close the connection
# gracefully. If you want to actually allow ident probes,
# and you're running an identd, and you've allowed port
# 113 in ALLOWED_TCP_IN, set this to 0. Default is 0.
#DONT_DROP_IDENTD=0
# Set this to 0 if you're running ipkungfu on a machine
# inside your LAN. This will cause private IP addresses
# coming in on $EXT_NET to be identified as a spoof,
# which would be inaccurate on intra-LAN traffic
# This will cause private IP addresses coming in on
# $EXT_NET to be identified as a spoof. Default is 1.
#DISALLOW_PRIVATE=1
# For reasons unknown to me, ipkungfu sometimes causes
# kernel panics when run at init time. This is my
# attempt to work around that. Ipkungfu will wait
# the specified number of seconds before starting, to
# let userspace/kernel traffic catch up before executing.
# Default is 0.
#WAIT_SECONDS=5
# This option, if enabled, will cause ipkungfu to set
# the default policy on all builtin chains in the filter
# table to ACCEPT in the event of a failure. This is
# intended for remote administrators who may be locked
# out of the firewall if ipkungfu fails. A warning to
# this effect will be echoed so that the situation can be
# rectified quickly. This is the same as running
# ipkungfu with --failsafe. Default is 0.
#FAILSAFE=0$sudo gedit /etc/ipkungfu/redirect.conf$sudo gedit /etc/default/ipkungfusudo ipkungfu$sudo tail -f /var/log/squid/access.log
But in Linux, it is almost always that there are a number of ways to do things for your PC and this is my way of updating an internet-less Ubuntu box.
On an updated PC where I configured it not to delete the downloaded (and updated) deb packages located at /var/cache/apt/archives, I copy the contents of that folder to a folder on my home directory, thus:
$ sudo cp /var/cache/apt/archives/* ~/Desktop/updeb
I then burned the contents of ~/Desktop/updeb folder to a CD(s) with GnomeBaker or any CD Burning app of your preference.
Now going to the internet-less PC, copy the contents of the CD containing the updated deb packages to a folder at the home directory of the internet-less PC.
$ sudo mkdir ~/deb
$ sudo cp /media/cdrom/* ~/deb
Now go to the directory where you copied the packages
$ cd ~/deb
Do this while in the said directory to create Packages.gz:
$ sudo dpkg-scanpackages . /dev/null | gzip -9c > Packages.gz
Open and edit /etc/apt/sources.list to add the local folder as a repo…
$ sudo gedit /etc/apt/sources.list
Insert the following line at the end of the file…
deb file:/home/username/deb/. /
Save and close the file. Update and upgrade with Synaptic or at CLI!
$ sudo apt-get update
$ sudo apt-get upgrade
P.S.: Make sure you have installed the dpkg-dev package on the internet-less PC from the Ubuntu CD Installer before anything else.
$ sudo apt-get install dpkg-dev
I hope this helps!
I want to share my HP printer (old) to other computers (Ubuntu and Window$ boxes) in a LAN.
There must be some other ways to do it but this is how it worked for me (learned it with Mr. Google):
Backup your /etc/cups/cupsd.conf:
>> sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.backup
Edit /etc/cups/cupsd.conf:
>> sudo gedit /etc/cups/cupsd.conf
Delete everything in the file and replace it with the values below (replace 192.168.0* appropriately with your LAN configuration):
BrowseAddress @LOCAL
SystemGroup lpadmin
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.0.*
</Location>
<Location /jobs>
AuthType Basic
AuthClass User
</Location>
<Location /admin>
AuthType Basic
AuthClass System
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
</Location>
To enable, do a:
>> sudo /etc/init.d/cupsys restart
On the Ubuntu or Linux boxes where you want to share your printer, open to edit /etc/cups/client.conf:
>> sudo gedit /etc/cups/client.conf
And add the following:
ServerName hostname (hostname or IP of the printer server)
Once this is all setup, you should be able to go to: System -> Administration -> Printing and in the top tool bar you'll see: Global Settings You'll want to make sure the following is checked:
Detect Lan Printers
On the Windows boxes, just add the printer server as you normally do.
To make your printer browsesable in a LAN network, edit your /etc/cups/cupsd-browsing.conf:
>> sudo gedit /etc/cups/cupsd-browsing.conf
Simply replace the word "Off" with "On" (without the ""), don't worry...that file has only one line so you won't ever have difficulties finding it. I guess you have to do a "sudo /etc/init.d/cupsys restart" after this. :)
So that's it! Everybody happy printing their stuff on your HP or any other installed printer on your PC!
UPDATE: To share your printer with Windows PCs, in the add printer wizard there is a step there when you'll have to enter the following lines:
>> http://ip_address_of_server:631/printers/share_name_of_printer
Voila! That's it mama!
