(P)E(N)-Kocsma

deb http://www.backports.org/debian lenny-backports main contrib non-free

# apt-get install debian-backports-keyring

# apt-get update

# apt-get -t lenny-backports install openoffice.org openoffice.org-l10n-hu openoffice.org-help-hu myspell-hu

# apt-get -t lenny-backports install openoffice.org-gnome

# apt-get -t lenny-backports install openoffice.org-kde

export _POSIX2_VERSION=199209

$ ./ut-install-436-goty.run

$ vi ~/.loki/ut/System/UnrealTournament.ini

...
Language=int
...

...
Language=hun
...

./configure --prefix=/usr --disable-nls --disable-mozilla --disable-live555 --disable-swscale

Enabled modules: a52tofloat32 a52tospdif access_alsa access_mmap access_oss access_smb adjust alphamask alsa aout_file aout_sdl atmo audio_format audioscrobbler avcodec avformat bandlimited_resampler blend blendbench bluescreen bonjour canvas cdda chain clone cmml colorthres converter_float crop croppadd dbus deinterlace dolby_surround_decoder dtstospdif dvb dvb dvdnav dvdread dynamicoverlay equalizer erase extract fake fb float32_mixer folder freetype gaussianblur gestures glx gnutls gradient grain hal headphone_channel_mixer hotkeys http i420_rgb_mmx i420_rgb_sse2 i420_ymga i420_ymga_mmx i420_yuy2 i420_yuy2_mmx i420_yuy2_sse2 i422_i420 i422_yuy2 i422_yuy2_mmx i422_yuy2_sse2 inhibit invert libmpeg2 linear_resampler logo magnify marq memcpy3dn memcpymmx memcpymmxext mkv mod mosaic motion motionblur motiondetect mpc mpgatofixed32 mux_ogg mux_ts noise normvol notify ogg opengl opengl osd_parser osdmenu oss panoramix param_eq png podcast postproc probe_hal psychedelic puzzle qt4 rc remoteosd ripple rotate rss rv32 sap scale scaletempo scene screensaver sdl_image sharpen shout showintf signals simple_channel_mixer skins2 spatializer spdif_mixer speex stream_out_raop telepathy telnet telx transform ts unzip v4l2 vcd visual vmem vorbis vout_sdl wall wave x11 x11_screen xml xvideo yuv yuvp yuy2_i420 yuy2_i422 zip 


libvlc configuration
--------------------
version               : 1.0.1
system                : linux
architecture          : i686 mmx sse sse2
build flavour         : devel 
vlc aliases           : cvlc rvlc svlc qvlc
plugins/bindings      :

# dpkg -i vlc_1.0.1-1_i386.deb

./configure --prefix=/usr --disable-nm --disable-vv

# dpkg -i pidgin_2.6.2-1_i386.deb

#!/bin/bash

# for Debian & Ubuntu

# Set variables
IPTABLES="$(which iptables)"
PUBIF="eth0"

# Reset Default Policies
$IPTABLES -P INPUT ACCEPT
$IPTABLES -P FORWARD ACCEPT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -t nat -P PREROUTING ACCEPT
$IPTABLES -t nat -P POSTROUTING ACCEPT
$IPTABLES -t nat -P OUTPUT ACCEPT
$IPTABLES -t mangle -P PREROUTING ACCEPT
$IPTABLES -t mangle -P OUTPUT ACCEPT

# Set Policies ipv6
ip6tables -P INPUT ACCEPT
ip6tables -P OUTPUT ACCEPT
ip6tables -P FORWARD ACCEPT

# Flush all rules
$IPTABLES -F
$IPTABLES -t nat -F
$IPTABLES -t mangle -F

# Erase all non-default chains
$IPTABLES -X
$IPTABLES -t nat -X
$IPTABLES -t mangle -X

# Load modules
modprobe ip_conntrack_ftp # for passive ftp, dynamically use port 1024:65535 when needed
if ! grep "ip_conntrack_ftp" /etc/modules 1>/dev/null; then echo "ip_conntrack_ftp" >> /etc/modules; fi

# Kernel Parameter Configuration
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts # Drop ICMP echo-request messages sent to broadcast or multicast addresses
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route # Drop source routed packets
echo 1 > /proc/sys/net/ipv4/tcp_syncookies # Enable TCP SYN cookie protection from SYN floods
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects # Don't accept ICMP redirect messages
echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects # Don't send ICMP redirect messages
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter # Enable source address spoofing protection
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians # Log packets with impossible source addresses

# Reset Default Policies
$IPTABLES -P INPUT ACCEPT
$IPTABLES -P FORWARD ACCEPT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -t nat -P PREROUTING ACCEPT
$IPTABLES -t nat -P POSTROUTING ACCEPT
$IPTABLES -t nat -P OUTPUT ACCEPT
$IPTABLES -t mangle -P PREROUTING ACCEPT
$IPTABLES -t mangle -P OUTPUT ACCEPT

# Flush all rules
$IPTABLES -F
$IPTABLES -t nat -F
$IPTABLES -t mangle -F

# Erase all non-default chains
$IPTABLES -X
$IPTABLES -t nat -X
$IPTABLES -t mangle -X

# Set Policies
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT DROP
$IPTABLES -P FORWARD ACCEPT

# Set Policies ipv6
ip6tables -P INPUT DROP
ip6tables -P OUTPUT DROP
ip6tables -P FORWARD DROP

# Allow ipv4 forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

# Sharing connection?
$IPTABLES -t nat -A POSTROUTING -o $PUBIF -j MASQUERADE

###############################################################################
#
# Input

$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Caching DNS server on localhost
# $IPTABLES -A INPUT -i lo -s 127.0.0.1 -p tcp --dport 53 -j ACCEPT
# $IPTABLES -A INPUT -i lo -s 127.0.0.1 -p udp --dport 53 -j ACCEPT

# SSH tunneling
$IPTABLES -A INPUT -s 127.0.0.1 -p tcp --dport 6000 -j ACCEPT

# Allow ping
# $IPTABLES -A INPUT -p icmp --icmp-type echo-request -j ACCEPT

# SSH server
# $IPTABLES -A INPUT -p tcp -s 192.168.1.0/24 --dport 22 -j ACCEPT

# CUPS
# $IPTABLES -A INPUT -i lo -s 127.0.0.1 -p tcp --dport 631 -j ACCEPT

# Samba server
# $IPTABLES -A INPUT -p tcp -m multiport --dport 135,137,139 -j ACCEPT
# $IPTABLES -A INPUT -p udp -m multiport --dport 135,137,139 -j ACCEPT
# $IPTABLES -A INPUT -p tcp --dport 445 -j ACCEPT
# $IPTABLES -A INPUT -p udp --dport 445 -j ACCEPT

# NFS
# $IPTABLES -A INPUT -i lo -s 127.0.0.1 -p udp --dport 111 -j ACCEPT
# $IPTABLES -A INPUT -i lo -s 127.0.0.1 -p tcp --dport 111 -j ACCEPT

# FTPS
# $IPTABLES -A INPUT -p tcp -m multiport --dport 20:21 -j ACCEPT
# $IPTABLES -A INPUT -p tcp -m multiport --dport 53234:53235 -j ACCEPT

# torrent
#$IPTABLES -A INPUT -p tcp --dport 51443 -j ACCEPT
#$IPTABLES -A INPUT -p udp --dport 51443 -j ACCEPT

# Log
#$IPTABLES -A INPUT -j LOG --log-prefix 'INPUT_DROP_LOG: '

###############################################################################


###############################################################################
#
# Output


$IPTABLES -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# DNS
$IPTABLES -A OUTPUT -p tcp --dport 53 -j ACCEPT
$IPTABLES -A OUTPUT -p udp --dport 53 -j ACCEPT

# Caching DNS server on localhost
# $IPTABLES -A OUTPUT -o lo -s 127.0.0.1 -p tcp --dport 53 -j ACCEPT
# $IPTABLES -A OUTPUT -o lo -s 127.0.0.1 -p udp --dport 53 -j ACCEPT

# SSH tunneling
$IPTABLES -A OUTPUT -p tcp --dport 6000 -d 127.0.0.1 -j ACCEPT

# Dude
$IPTABLES -A OUTPUT -p tcp --dport 2211 -j ACCEPT

# Nagios
$IPTABLES -A OUTPUT -p tcp --dport 9456 -j ACCEPT

# webmin
$IPTABLES -A OUTPUT -p tcp --dport 10000 -j ACCEPT

# nyomtato
$IPTABLES -A OUTPUT -p tcp --dport 9100 -j ACCEPT

# Allow ping
$IPTABLES -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT

# Http, https
$IPTABLES -A OUTPUT -p tcp -m multiport --dport 80,443 -j ACCEPT

# Home - siteworks, etc
# $IPTABLES -A OUTPUT -p tcp -m multiport --dport 48732,52316 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --dport 2443 -j ACCEPT

# SSH
$IPTABLES -A OUTPUT -p tcp --dport 22 -j ACCEPT

# NTP
$IPTABLES -A OUTPUT -p udp --dport 123 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --dport 123 -j ACCEPT

# E-mail
# $IPTABLES -A OUTPUT -p tcp --dport 25 -j ACCEPT # SMTP
$IPTABLES -A OUTPUT -p tcp --dport 465 -j ACCEPT # SMTPS
# $IPTABLES -A OUTPUT -p tcp --dport 587 -j ACCEPT # Submission
# $IPTABLES -A OUTPUT -s 127.0.0.1 -p tcp --dport 110 -j ACCEPT # POP3
# $IPTABLES -A OUTPUT -p tcp --dport 995 -j ACCEPT # POP3S
# $IPTABLES -A OUTPUT -s 127.0.0.1 -p tcp --dport 143 -j ACCEPT # IMAP
$IPTABLES -A OUTPUT -p tcp --dport 993 -j ACCEPT # IMAPS

# Samba
# $IPTABLES -A OUTPUT -p tcp -m multiport --dport 135,137,139 -j ACCEPT
# $IPTABLES -A OUTPUT -p udp -m multiport --dport 135,137,139 -j ACCEPT
# $IPTABLES -A OUTPUT -p tcp --dport 445 -j ACCEPT
# $IPTABLES -A OUTPUT -p udp --dport 445 -j ACCEPT

# IRC
# $IPTABLES -A OUTPUT -p tcp --dport 6667 -j ACCEPT

# FTP
$IPTABLES -A OUTPUT -p tcp --dport 20:21 -j ACCEPT

# FTPS
$IPTABLES -A OUTPUT -p tcp --dport 989:990 -j ACCEPT

# NFS
# $IPTABLES -A OUTPUT -p tcp -m multiport --dport 111,2049 -j ACCEPT
# $IPTABLES -A OUTPUT -p udp -m multiport --dport 111,2049 -j ACCEPT

# CUPS
# $IPTABLES -A OUTPUT -o lo -s 127.0.0.1 -p tcp --dport 631 -j ACCEPT

# Msn
# $IPTABLES -A OUTPUT -p tcp -m multiport --dport 1863,6891:6901 -j ACCEPT
# $IPTABLES -A OUTPUT -p udp -m multiport --dport 1863,5190,6901 -j ACCEPT

# Torrent [or FTPS...]
$IPTABLES -A OUTPUT -o $PUBIF -p tcp -m tcp --sport 1024:65535 --dport 1024:65535 -j ACCEPT

# torrent
#$IPTABLES -A OUTPUT -p tcp --sport 51443 -j ACCEPT
#$IPTABLES -A OUTPUT -p udp --sport 51443 -j ACCEPT

# Log
#$IPTABLES -A OUTPUT -j LOG --log-prefix 'OUTPUT_DROP_LOG: '