Difference between revisions of "Ict-usb-linux"

From CDOT Wiki
Jump to: navigation, search
(Features)
(Features)
Line 5: Line 5:
 
Distribution: Linux Mint 17
 
Distribution: Linux Mint 17
 
==Features==
 
==Features==
 +
=== host name ===
 +
<pre>
 +
ict-2014-v1 ~ # hostname
 +
ict-2014-v1
 +
</pre>
 
===Disk Usage===
 
===Disk Usage===
 
<pre>
 
<pre>

Revision as of 11:23, 17 December 2014

ICT Linux USB for First Semester Students

Version 1, 2014

Date Created: December 2014 Distribution: Linux Mint 17

Features

host name

ict-2014-v1 ~ # hostname
ict-2014-v1

Disk Usage

Filesystem     1K-blocks    Used Available Use% Mounted on
/cow             3984736   93728   3891008   3% /
udev             3973320       4   3973316   1% /dev
tmpfs             796948    1364    795584   1% /run
/dev/sdb1        3897904 1651776   2246128  43% /cdrom
/dev/loop0       1610368 1610368         0 100% /rofs
none                   4       0         4   0% /sys/fs/cgroup
tmpfs            3984736     140   3984596   1% /tmp
none                5120       0      5120   0% /run/lock
none             3984736      76   3984660   1% /run/shm
none              102400      16    102384   1% /run/user
/dev/sdb2       25858132   70220  24451336   1% /home

Open Firewall wall - no filtering rules

    • Suggestion:
      • Drop policy on INPUT and Forward chains
      • Accept policy on OUTPUT chains
      • Add accept rule to FORWARD chain to allow "ESTABLISHED" and "RELATED" packets
/sbin/iptables -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

smbd and nmbd services

  • Do you really want to have these on?
ict-2014-v1 selinux # netstat -taunp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      1436/smbd      
tcp        0      0 127.0.1.1:53            0.0.0.0:*               LISTEN      3237/dnsmasq   
tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      3004/cupsd     
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      1436/smbd      
tcp6       0      0 :::139                  :::*                    LISTEN      1436/smbd      
tcp6       0      0 ::1:631                 :::*                    LISTEN      3004/cupsd     
tcp6       0      0 :::445                  :::*                    LISTEN      1436/smbd      
tcp6       1      0 ::1:55026               ::1:631                 CLOSE_WAIT  2185/cups-browsed
tcp6       0      0 ::1:55028               ::1:631                 ESTABLISHED 2635/cinnamon-setti
tcp6       0      0 ::1:631                 ::1:55028               ESTABLISHED 3004/cupsd     
udp        0      0 127.0.1.1:53            0.0.0.0:*                           3237/dnsmasq   
udp        0      0 0.0.0.0:68              0.0.0.0:*                           3233/dhclient  
udp        0      0 172.18.255.255:137      0.0.0.0:*                           3361/nmbd      
udp        0      0 172.18.81.236:137       0.0.0.0:*                           3361/nmbd      
udp        0      0 0.0.0.0:137             0.0.0.0:*                           3361/nmbd      
udp        0      0 172.18.255.255:138      0.0.0.0:*                           3361/nmbd      
udp        0      0 172.18.81.236:138       0.0.0.0:*                           3361/nmbd      
udp        0      0 0.0.0.0:138             0.0.0.0:*                           3361/nmbd      
udp        0      0 0.0.0.0:631             0.0.0.0:*                           2185/cups-browsed
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           1231/avahi-daemon:
udp        0      0 0.0.0.0:35063           0.0.0.0:*                           1231/avahi-daemon:
udp        0      0 0.0.0.0:14647           0.0.0.0:*                           3233/dhclient  
udp6       0      0 :::52153                :::*                                1231/avahi-daemon:
udp6       0      0 :::28749                :::*                                3233/dhclient  
udp6       0      0 :::5353                 :::*                                1231/avahi-daemon: