Debian

[NickFRP]

After readin the Linux thread i was intrested in downloading Debian

Now on the Debian website i cant find the bootable CD available liek in Ubuntu.
ftp://ftp.de.debian.org/debian-cd/4.0_r0/i386/

on the website theres 20 CDs. unlike ubuntu which has 1cd debian shows 20!

[fredf]

The Debian repository is far larger than most other distributions as it has everything included in it.
But, unless you don't have net access on the computer your installing to, you only need to download the netinst cd to do the initial install.

When you install extra packages they will be downloaded automatically just like Ubuntu (and probably other distros) do.

edit to add
download debian-40r0-i386-netinst.iso from here

Edited by fredf on Monday 23 July 22:34

[NickFRP]

fredf said:

The Debian repository is far larger than most other distributions as it has everything included in it.
But, unless you don't have net access on the computer your installing to, you only need to download the netinst cd to do the initial install.

When you install extra packages they will be downloaded automatically just like Ubuntu (and probably other distros) do.

edit to add
download debian-40r0-i386-netinst.iso from here

Edited by fredf on Monday 23 July 22:34

thanks very much..

-I note down FredF in my book Linux book of help

[fredf]

NickFRP said:

thanks very much..

-I note down FredF in my book Linux book of help

Ahhhhh Why did I start this ?!?

[LordGrover]

fredf said:

NickFRP said:

thanks very much..

-I note down FredF in my book Linux book of help

Ahhhhh Why did I start this ?!?

Yes fredf; please post your personal e-mail, home, office & mobile numbers so that I/we can contact you for support 24/7/365.

[fredf]

I've just remembered why I lurk

[onomatopoeia]

In fact if you still have a floppy drive in your PC and a fairly common ethernet card/chipset you can install debian from two 1.44M floppies - at least you always could, not tried with 4.0.

[NickFRP]

RIGHT TEAM... this includes you Fredf...

Debian is up and running on my old dell poweredge..


i really want to learn my way round the EXT3 system and get an over all feel into building and mainting a Linux enviroment. i have dabbled with Ubuntu but not alot. now i ubuntu server and desktop and that wouldnt install on the poweredge but debian has. maybe that has the magic ubuntu missed.

can any one who works or knows a bit with linux give me some simple ideas what to do and learn on my new toy. like examples of sotfware to install for an office enviroment. and resources on the internet.

I remeber a few months ago trying to get a laptop running on ubuntu to join a MS domain and remeber it didnt work too well.

i have tried Webmin (the gui to intstall specific apps(am i correct)) but thats cheating..

Thanks

[fredf]

NickFRP said:

RIGHT TEAM... this includes you Fredf...

Let's try this again... I'm a lurker, that means I don't say stuff

NickFRP said:

Debian is up and running on my old dell poweredge..


i really want to learn my way round the EXT3 system and get an over all feel into building and mainting a Linux enviroment. i have dabbled with Ubuntu but not alot. now i ubuntu server and desktop and that wouldnt install on the poweredge but debian has. maybe that has the magic ubuntu missed.

Unusually for Debian, the current stable distribution is up to date, so may well have some newer stuff that the last time you tried Ubuntu

NickFRP said:

can any one who works or knows a bit with linux give me some simple ideas what to do and learn on my new toy. like examples of sotfware to install for an office enviroment. and resources on the internet.

I remeber a few months ago trying to get a laptop running on ubuntu to join a MS domain and remeber it didnt work too well.

i have tried Webmin (the gui to intstall specific apps(am i correct)) but thats cheating..

Thanks

OK, we'll take the office suite example

sorry if you already know all about dpkg/apt
Quick intro to package management...

Debian used a suite of utilities called dpkg to manage installation and removal of packages (.deb files) but dpkg is a very low level app, and isn't really designed for user interaction. There are a number of command line and graphical/curses front ends to dpkg, the main ones being apt (command line) and aptitude (curses)
Most people use apt as it's always there and works.

There are two main apt programs: apt-get and apt-cache
apt-cache is used to search the locally stored package database
apt-get is used to do stuff

To update your locally stored package database run:
sudo apt-get update
this will go off and download the latest info from debian.org

To upgrade all installed packages run:
sudo apt-get dist-upgrade
this will upgrade all installed packages where there is a newer version, note, this may add or remove dependent packages

To search the database for something run:
apt-cache search office suite
this will list all packages (and one line description) which match your search

To show more details on a package run:
apt-cache show openoffice.org
this will display lots of info about the package, including a nice long description

To install the package (and dependencies) run:
sudo apt-get install openoffice.org
This will download the package and all it's dependencies and install them

Open Office will now appear in your menu

Mozilla Firefox is called iceweasel, Mozilla Thunderbird is called icedove There is a very long and boring reason for this... Go search for it if you want

Getting samba, so you can connect to a windows domain - why?!?, up and running is a whole new topic

[NickFRP]

FREDFFFFFFF

right i have installed Firehol..

i want to completely lock this baby down except for http.. now through Firehol i have either Accept all or deny all. not deny except http on port 80

do you know any other software or know how to configure this puppy to help me

[GHW]

NickFRP said:

FREDFFFFFFF

right i have installed Firehol..

i want to completely lock this baby down except for http.. now through Firehol i have either Accept all or deny all. not deny except http on port 80

do you know any other software or know how to configure this puppy to help me

Set the policy to deny, then do an accept rule for port 80 (and probably port 443 too, if you want https to work). You'll probably want to open UDP port 53 too (for DNS lookups).

Bear in mind with this configuration there'll still be the very occasional website that won't work because it's been put on a completely random port. If you want everything to work, then maybe setup a squid proxy server running under its own UID, then allow that UID full access to the outside world (assuming FireHOL can do that.... I use Shorewall and it can, but it's more complicated to configure!).

[fredf]

NickFRP said:

FREDFFFFFFF

right i have installed Firehol..

i want to completely lock this baby down except for http.. now through Firehol i have either Accept all or deny all. not deny except http on port 80

do you know any other software or know how to configure this puppy to help me

What are you locking down? All incoming except for port 80, or all incoming and all outgoing except for 80

It should be possible with firehol, read this and the support mailing lists and web forums firehol

[NickFRP]

MY Config:
[b]

2. $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
4. This configuration file will allow all requests originating from the
5. local machine to be send through all network interfaces.
7. No requests are allowed to come from the network. The host will be
8. completely stealthed! It will not respond to anything, and it will
9. not be pingable, although it will be able to originate anything
10. (even pings to other hosts).
11. [/b]

This is deny all

this is the one off the forum

2. $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
4. This configuration file will allow all requests originating from the
5. local machine to be send through all network interfaces.
7. No requests are allowed to come from the network. The host will be
8. completely stealthed! It will not respond to anything, and it will
9. not be pingable, although it will be able to originate anything
10. (even pings to other hosts).

version 5

1. Accept all client traffic on any interface

interface any world
client all accept

You need to modify this for your needs.I ma having some configuration file as below

Now we need to configure FireHOL, as per the sample below which is distro independant.

1. vi /etc/firehol/firehol.conf

Sample
version 5

1. Use the following to recognise RavenCore

server_ravencore_ports="tcp/8000"
client_ravencore_ports="default"

1. Use the following to recognise RavenCore SSL

server_ravencoressl_ports="tcp/8080"
client_ravencoressl_ports="default"

1. Use the following to recognise tinyproxy

server_tinyproxy_ports="tcp/8888"
client_tinyproxy_ports="default"

1. Use the following to avoid dhcp-client from filling the logs

server_dhcpclient_ports="udp/67"
client_dhcpclient_ports="default"

1. Use the following to blacklist incoming connection from an IP

1. blacklist this "21.22.51.30 21.22.51.31"

1. Use the following to blacklist incoming AND outgoing connection from/to an IP

1. blacklist full 22.43.16.12 65.10.11.25

interface any internet
# Use the following to enable all available protection
protection strong
server "ftp ssh smtp dns http https pop3 imap socks syslog tinyproxy ravencore ravencoressl" accept
client all accept

---

this line here:

Sample
version 5

1. Use the following to recognise RavenCore

server_ravencore_ports="tcp/8000"
client_ravencore_ports="default"

Is Ravencore the server name?
is this the addition to my config to allow http on port 80?
[i]Sample
version 5

1. Use the following to recognise DevianServer

server_DebianServer_ports="tcp/8000"
client_DebianServer_ports="default"[/i]

will that work?

[fredf]

I don't know have you tried it?

I think you need something like

interface eth0 internet

         policy drop

         server http accept

         client all accept

taken from here

[Wacky Racer]

PIGEON!!

[NickFRP]

fredf said:

I don't know have you tried it?

I think you need something like

interface eth0 internet

         policy drop

         server http accept

         client all accept

taken from here

If i could kiss you i would