While it is possible to install VLC from the Canonical repositories or even a PPA, the latest version available through those channels for Ubuntu 16.04 (and derivatives) is 2.2. To get the absolutely latest version (3.0.1 as of this writing) it is necessary to use a Snap or Flatpack install.
Continue reading →
If you have created various pieces of code (shell scripts, conky config, etc.), you may want a way to maintain/backup them. This short guide walks you through setting up a local git server.
The HWE Kernel provides a way to get the latest hardware support within an LTS release. The kernel includes code backported from newer releases. In addition to an updated HWE Kernel, for desktop users, an updated X Stack was also delivered.
By default, MySQL versions prior to 5.6.6 store all table data in a single file called ibdata1. The following steps will replace the use of the single file with that of one file per table.
The following instructions will install a VNC server that will connect to the primary desktop display
Skype ended support for Ubuntu 12.04 LTS and its new packages have updated dependencies that are not met by this release. To get around this issue, the following script will extract the deb package and reconfigure it for installation on a 12.04 release based system. Please be aware that the package may break or not…
Continue reading →
When using a local VPN server, it is advisable to segregate internal and external network traffic over the different interfaces. Configure internal traffic over eth0 and external traffic over tun0.
To make iptables rules permanent, we need to save them to a configuration files and ensure they are restored on each boot. The following assumes that the current rules enabled are those to be made permanent. Save current rules to config file
1 | sudo sh -c "iptables-save > /etc/iptables.conf" |
Edit /etc/rc.local as root and add the following
1 2 | # Load iptables rules from config file iptables-restore < /etc/iptables.conf |
Instead of adding individual IP addresses that need to be blocked to IPTables, it is easier to maintain a a single blacklist using IPSet and reference it in IPTables. Install IPSet
1 | sudo apt-get install ipset |
Create the blacklist list
1 | sudo ipset create blacklist hash:ip hashsize 4096 |
Tell IPTables to reference the newly created list
1 2 | sudo iptables -I INPUT -m set --match-set blacklist src -j DROP sudo iptables -I FORWARD -m set --match-set blacklist src -j DROP |
Add an IP to the list to test
1 | sudo ipset add blacklist 192.168.10.10 |
…
Continue reading →
To control SSH access based on location, I will use the GeoIP free database to determine the source IP address. Each time an external (non-local network) connection is initiated, the script will be executed by the SSH daemon to identify the region. If the region is not in the allowed list the connection will be…
Continue reading →