Debian

[NickFRP]

After readin the Linux thread i was intrested in downloading Debian

Now on the Debian website i cant find the bootable CD available liek in Ubuntu.
ftp://ftp.de.debian.org/debian-cd/4.0_r0/i386/

on the website theres 20 CDs. unlike ubuntu which has 1cd debian shows 20!

[NickFRP]

fredf said:

The Debian repository is far larger than most other distributions as it has everything included in it.
But, unless you don't have net access on the computer your installing to, you only need to download the netinst cd to do the initial install.

When you install extra packages they will be downloaded automatically just like Ubuntu (and probably other distros) do.

edit to add
download debian-40r0-i386-netinst.iso from here

Edited by fredf on Monday 23 July 22:34

thanks very much..

-I note down FredF in my book Linux book of help

[NickFRP]

RIGHT TEAM... this includes you Fredf...

Debian is up and running on my old dell poweredge..


i really want to learn my way round the EXT3 system and get an over all feel into building and mainting a Linux enviroment. i have dabbled with Ubuntu but not alot. now i ubuntu server and desktop and that wouldnt install on the poweredge but debian has. maybe that has the magic ubuntu missed.

can any one who works or knows a bit with linux give me some simple ideas what to do and learn on my new toy. like examples of sotfware to install for an office enviroment. and resources on the internet.

I remeber a few months ago trying to get a laptop running on ubuntu to join a MS domain and remeber it didnt work too well.

i have tried Webmin (the gui to intstall specific apps(am i correct)) but thats cheating..

Thanks

[NickFRP]

FREDFFFFFFF

right i have installed Firehol..

i want to completely lock this baby down except for http.. now through Firehol i have either Accept all or deny all. not deny except http on port 80

do you know any other software or know how to configure this puppy to help me

[NickFRP]

MY Config:
[b]

2. $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
4. This configuration file will allow all requests originating from the
5. local machine to be send through all network interfaces.
7. No requests are allowed to come from the network. The host will be
8. completely stealthed! It will not respond to anything, and it will
9. not be pingable, although it will be able to originate anything
10. (even pings to other hosts).
11. [/b]

This is deny all

this is the one off the forum

2. $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
4. This configuration file will allow all requests originating from the
5. local machine to be send through all network interfaces.
7. No requests are allowed to come from the network. The host will be
8. completely stealthed! It will not respond to anything, and it will
9. not be pingable, although it will be able to originate anything
10. (even pings to other hosts).

version 5

1. Accept all client traffic on any interface

interface any world
client all accept

You need to modify this for your needs.I ma having some configuration file as below

Now we need to configure FireHOL, as per the sample below which is distro independant.

1. vi /etc/firehol/firehol.conf

Sample
version 5

1. Use the following to recognise RavenCore

server_ravencore_ports="tcp/8000"
client_ravencore_ports="default"

1. Use the following to recognise RavenCore SSL

server_ravencoressl_ports="tcp/8080"
client_ravencoressl_ports="default"

1. Use the following to recognise tinyproxy

server_tinyproxy_ports="tcp/8888"
client_tinyproxy_ports="default"

1. Use the following to avoid dhcp-client from filling the logs

server_dhcpclient_ports="udp/67"
client_dhcpclient_ports="default"

1. Use the following to blacklist incoming connection from an IP

1. blacklist this "21.22.51.30 21.22.51.31"

1. Use the following to blacklist incoming AND outgoing connection from/to an IP

1. blacklist full 22.43.16.12 65.10.11.25

interface any internet
# Use the following to enable all available protection
protection strong
server "ftp ssh smtp dns http https pop3 imap socks syslog tinyproxy ravencore ravencoressl" accept
client all accept

---

this line here:

Sample
version 5

1. Use the following to recognise RavenCore

server_ravencore_ports="tcp/8000"
client_ravencore_ports="default"

Is Ravencore the server name?
is this the addition to my config to allow http on port 80?
[i]Sample
version 5

1. Use the following to recognise DevianServer

server_DebianServer_ports="tcp/8000"
client_DebianServer_ports="default"[/i]

will that work?

[NickFRP]

fredf said:

I don't know have you tried it?

I think you need something like

interface eth0 internet

         policy drop

         server http accept

         client all accept

taken from here

If i could kiss you i would