Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #157062

Re: laptop protection in an office network

From rlharris@oplink.net
Newsgroups linux.debian.user
Subject Re: laptop protection in an office network
Date 2015-08-29 21:10 +0200
Message-ID <q2TFM-2lh-1@gated-at.bofh.it> (permalink)
References (3 earlier) <q2IAG-3ek-7@gated-at.bofh.it> <q2JwJ-4yL-5@gated-at.bofh.it> <q2MXE-Td-9@gated-at.bofh.it> <q2T34-1mE-3@gated-at.bofh.it> <q2TcK-1y2-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Sat, August 29, 2015 1:39 pm, Reco wrote:

> Something like this should save you from the most troubles provided
> that you don't plan to use your laptop as a print server or NFS:

I am not sure how "print server" is defined.  I installed CUPS so that I
can print to a laser printer in my home network.  And if my client gives
me a URL which I view on the laptop, it would be nice to be able to
bookmark the URL and, once I am back home, bring up  and print the web
page directly from the laptop.

As to NSF, I had to search with google to find the definition.  No, on the
laptop and in my LAN the only drives accessed are internal, formatted with
ext4, and an external USB.


> iptables -P INPUT DROP iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT
> -p icmp -j ACCEPT
> iptables -A INPUT -m conntrack --ctstate INVALID -j DROP iptables -A INPUT
> -p tcp -m conntrack --ctstate RELATED,ESTABLISHED \
> -j ACCEPT
> iptables -A INPUT -p udp -m conntrack --ctstate RELATED,ESTABLISHED \ -j
> ACCEPT
> iptables -A INPUT -p tcp --dport 22 -j ACCEPT iptables -A INPUT -p udp
> --dport 123 -j ACCEPT
>
> iptables -P FORWARD DROP
>
> ip6tables -P INPUT DROP ip6tables -A INPUT -p ipv6-icmp -j ACCEPT ip6tables
> -A INPUT -m conntrack --ctstate INVALID -j DROP
> ip6tables -A INPUT -p tcp -m conntrack --ctstate RELATED,ESTABLISHED \ -j
> ACCEPT
> ip6tables -A INPUT -p udp -m conntrack --ctstate RELATED,ESTABLISHED \ -j
> ACCEPT
> ip6tables -A INPUT -p tcp --dport 22 -j ACCEPT ip6tables -A INPUT -p udp
> --dport 123 -j ACCEPT
>
> ip6tables -P FORWARD DROP
>
>
> Of course, it's *very* simplistic set of rules (for example, someone
> may consider accepting ssh connections from arbitrary hosts a bad idea),
> but it should work.

And I thank you.


> Two things I'm unsure of are:
>
> 1) Avahi's udp 5353. I don't see any value in mDNS (especially in office
> network), but YMMV.

I have been running Debian for thirteen years, but I know absolutely
nothing about avahi.  It must have been installed by default, or else,
perhaps as a dependency of some other package.


> 2) Whatever thing you're listening for on tcp 9999 with inetd.

Ah!  9999 is the port used by the approx server.  Months ago I had to
install Debian on a system in another location which had a substandard DSL
connection.  And whenever I do a Debian netinst, I always use approx,
"just in case".  So that is why I installed approx on the laptop.

RLH

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

laptop protection in an office network rlharris@oplink.net - 2015-08-29 07:00 +0200
  Re: laptop protection in an office network Riley Baird <BM-2cVqnDuYbAU5do2DfJTrN7ZbAJ246S4XiX@bitmessage.ch> - 2015-08-29 08:00 +0200
    Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 08:20 +0200
      Re: laptop protection in an office network Joe <joe@jretrading.com> - 2015-08-29 09:20 +0200
        Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 10:20 +0200
          Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-29 14:00 +0200
            Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 18:20 +0200
              Re: laptop protection in an office network Joe <joe@jretrading.com> - 2015-08-29 18:30 +0200
            Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 20:30 +0200
              Re: laptop protection in an office network Reco <recoverym4n@gmail.com> - 2015-08-29 20:40 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 21:10 +0200
                Re: laptop protection in an office network Reco <recoverym4n@gmail.com> - 2015-08-29 21:30 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 21:50 +0200
                Re: laptop protection in an office network Gene Heskett <gheskett@wdtv.com> - 2015-08-30 02:40 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-30 03:30 +0200
                Re: laptop protection in an office network Gene Heskett <gheskett@wdtv.com> - 2015-08-30 03:40 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-30 04:30 +0200
                Re: laptop protection in an office network Doug <dmcgarrett@optonline.net> - 2015-08-30 04:50 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-30 05:00 +0200
                Re: laptop protection in an office network Lisi Reisz <lisi.reisz@gmail.com> - 2015-08-31 00:20 +0200
                Re: laptop protection in an office network Gene Heskett <gheskett@wdtv.com> - 2015-08-30 05:10 +0200
                Re: laptop protection in an office network David Wright <deblis@lionunicorn.co.uk> - 2015-08-30 06:40 +0200
                Re: laptop protection in an office network Gene Heskett <gheskett@wdtv.com> - 2015-08-30 07:30 +0200
                Re: laptop protection in an office network Martin Read <zen75502@zen.co.uk> - 2015-08-31 03:50 +0200
                quality keyboards rlharris@oplink.net - 2015-08-31 09:10 +0200
                Re: quality keyboards Petter Adsen <petter@synth.no> - 2015-08-31 09:40 +0200
                Re: quality keyboards "Gian Uberto Lauri" <saint@eng.it>  - 2015-08-31 09:50 +0200
                Re: quality keyboards Petter Adsen <petter@synth.no> - 2015-08-31 12:00 +0200
                Re: quality keyboards Joel Rees <joel.rees@gmail.com> - 2015-08-31 13:20 +0200
                Re: quality keyboards Petter Adsen <petter@synth.no> - 2015-08-31 14:30 +0200
                Re: quality keyboards "Gian Uberto Lauri" <saint@eng.it>  - 2015-08-31 14:40 +0200
                Re: quality keyboards Joel Rees <joel.rees@gmail.com> - 2015-08-31 15:50 +0200
                Re: quality keyboards Petter Adsen <petter@synth.no> - 2015-08-31 16:40 +0200
                Re: quality keyboards "Gian Uberto Lauri" <saint@eng.it>  - 2015-08-31 17:00 +0200
                Re: quality keyboards Anthony Maples <anthonym7009@gmail.com> - 2015-09-01 00:10 +0200
                Re: quality keyboards "Thomas Schmitt" <scdbackup@gmx.net> - 2015-08-31 16:10 +0200
                Re: quality keyboards Haines Brown <haines@histomat.net> - 2015-08-31 13:00 +0200
                Re: quality keyboards Curt <curty@free.fr> - 2015-08-31 14:20 +0200
                Re: quality keyboards Joel Rees <joel.rees@gmail.com> - 2015-08-31 13:10 +0200
                Re: quality keyboards Gene Heskett <gheskett@wdtv.com> - 2015-08-31 14:30 +0200
                Re: quality keyboards Petter Adsen <petter@synth.no> - 2015-08-31 15:00 +0200
                Re: quality keyboards "Gian Uberto Lauri" <saint@eng.it>  - 2015-08-31 15:10 +0200
                Re: quality keyboards Lisi Reisz <lisi.reisz@gmail.com> - 2015-08-31 15:10 +0200
                Re: quality keyboards Martin Read <zen75502@zen.co.uk> - 2015-08-31 13:20 +0200
                Re: quality keyboards David Wright <deblis@lionunicorn.co.uk> - 2015-08-31 17:40 +0200
                Re: quality keyboards Glenn English <ghe@slsware.net> - 2015-08-31 18:30 +0200
                Re: quality keyboards Don Armstrong <don@debian.org> - 2015-08-31 21:50 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-29 21:10 +0200
                Re: laptop protection in an office network Reco <recoverym4n@gmail.com> - 2015-08-29 21:20 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-29 21:50 +0200
                Re: laptop protection in an office network Reco <recoverym4n@gmail.com> - 2015-08-29 22:00 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 00:10 +0200
                Re: laptop protection in an office network Reco <recoverym4n@gmail.com> - 2015-08-30 00:30 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 00:50 +0200
                Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-30 09:40 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 16:10 +0200
                Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-30 18:30 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 20:50 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 21:30 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-29 22:00 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 22:30 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-29 22:50 +0200
                Re: laptop protection in an office network Renaud (Ron) OLGIATI <renaud@olgiati-in-paraguay.org> - 2015-08-29 23:40 +0200
              Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-29 23:00 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 00:30 +0200
                Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-30 09:50 +0200
                Re: laptop protection in an office network Joe <joe@jretrading.com> - 2015-08-30 10:30 +0200
                Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-30 10:40 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-30 01:50 +0200
                Re: laptop protection in an office network Chris Bannister <cbannister@slingshot.co.nz> - 2015-08-30 09:30 +0200
                Re: laptop protection in an office network <tomas@tuxteam.de> - 2015-08-30 10:30 +0200
                Re: laptop protection in an office network rlharris@oplink.net - 2015-08-30 11:10 +0200
                Re: laptop protection in an office network Brian <ad44@cityscape.co.uk> - 2015-08-30 21:10 +0200

csiph-web