Jeff Owens.com» Linux Archives – Jeff Owens.com

Android Running on the iPhone!

Jeff Owens — Thu, 22 Apr 2010 20:02:44 +0000

David Wong has successfully got Google Android running on an iPhone. This requires a jailbroken iPhone with openiboot and Android .img files.

Shorewall Firewall on Ubuntu Feisty VPS Part 3

Jeff Owens — Wed, 18 Jul 2007 01:23:23 +0000

So lets setup the final piece of the puzzle so we can install some packages and start coding already. If you've been following along (Part Two), we are now ready to setup the shorewall firewall. This will lock down all ports we aren't using, both tcp and udp. Go ahead and ssh into your slice from terminal and type in the code below to install the shorewall package.

PLAIN TEXT

CODE:

sudo -i
apt-get install shorewall
cd /etc/shorewall

Now we need to copy some example configuration files to get us started. Note the change to "cp" for copying (you do need to type the period at the end).

PLAIN TEXT

CODE:

cp /usr/share/doc/shorewall/default-config/interfaces .
cp /usr/share/doc/shorewall/default-config/policy .
cp /usr/share/doc/shorewall/default-config/rules .
cp /usr/share/doc/shorewall/default-config/zones .

Now we will edit each of the files to add our own secret sauce. The first line with the "#" character is a comment instruction for you, don't type it in. Remember to use + X key combination and hit the key to save.

PLAIN TEXT

CODE:

nano /etc/shorewall/interfaces
# add the following line to the end of the interfaces file and save/exit
net eth0 detect

Now lets edit the zones file.

PLAIN TEXT

CODE:

nano /etc/shorewall/zones
# add the following line to the end of the zones file and save/exit
net ipv4

The policy files also needs editing.

PLAIN TEXT

CODE:

nano /etc/shorewall/policy
# add the following 3 lines to the end of the policy file, then save/exit
fw net ACCEPT
net all DROP info
all all REJECT info

The rules file also gets some sauce. Note that if you wish Shorewall to repond to pings you have to let it know. It does not by default (see BlueNovember's comment below).

PLAIN TEXT

CODE:

nano /etc/shorewall/rules
# add the following 2 lines to the end of the rules file, then save/exit
ACCEPT net fw tcp 22
ACCEPT net fw tcp 80
# if you want your machine to respond to pings add the following line
Ping/ACCEPT net $FW

The final file we will edit is the shorewall file.

PLAIN TEXT

CODE:

nano /etc/default/shorewall
# change startup=0 to startup=1, then save/exit

Now lets restart the firewall and test it out.

PLAIN TEXT

CODE:

# Restart firewall
invoke-rc.d shorewall start

There you have it. Shorewall firewall, shaken not stirred. Now we can install some packages and start writing that application that will lead us to early retirement.

Securing Your New Ubuntu Feisty VPS Part 2

Jeff Owens — Sun, 15 Jul 2007 21:51:58 +0000

So now that we've got Ubuntu Feisty installed (Part One), we'll setup some basic security for our new slice. Fire up terminal and ssh into your slice.

PLAIN TEXT

CODE:

ssh -l your_username your_ip_address

Now let's create a new user with basic rights, we don't want to be logging in as root.

PLAIN TEXT

CODE:

adduser deploy

Type the following and hit . You'll be prompted for your new password.

PLAIN TEXT

CODE:

passwd

Now let's give our new deploy user sudo access. Type in the following command to open up the file necessary to give our new deploy user sudo access.

PLAIN TEXT

CODE:

visudo

If the VI editor opened the file for you, make sure you now hit the key to enter into insert text mode. Scroll down to the bottom of the file (use arrow keys) to the section where a comment begins: # User privilege specification. You should see on the next line: root ALL=(ALL) ALL. Hit the key after that line and add our new deploy user information as follows.

PLAIN TEXT

CODE:

deploy ALL=(ALL) ALL

Now we need to save our changes. If the editor that opened for you was GNU nano (it will display this at the top of the editor), use + X key combination and hit the key to save. If you need to save in VI, type ZZ.We'll now set up our slice so that you can't ssh in using the root user. Type in the following, scroll down to PermitRootLogin and set it to no.
PLAIN TEXT

CODE:

nano /etc/ssh/sshd_config

If you want to set you ssh port to something other than 22 (ex. 8888) you can do that as well. It should prevent some script kiddies. Now save the file: + X key combination and hit the key.In the next post we will setup the shorewall firewall.

Setting Up Ubuntu Feisty VPS on Slicehost Part 1

Jeff Owens — Fri, 01 Jun 2007 14:07:37 +0000

Today I'm focusing on setting up a new VPS at Slicehost. BTW, I'm assuming you're new to Linux. Lets get started.I'm assuming you got an email from Slicehost with the url to manage your new vps. Grab your uid and pwd they sent you and log into your new vps here. Once you've logged in, click on the link that lets you create your new slice. Create a new name for your slice and select Ubuntu Dapper for the distribution. It should take only a couple of minutes before your new vps is setup. Once its done grab the new password Slicehost will show you after your slice has been created and open a command prompt (Terminal or iTerm on Mac OSX, Putty on PC). Note that you should not type in the line numbers below in the code snippets. They are for reference only.Let's login (you'll be prompted for your pwd so have it handy):
PLAIN TEXT

CODE:

ssh -l your_username your_ip_address

Now let's change the password to one that is strong but that you can remember. As an aside, I'm a big fan of using a generic algorithm based on a websites url to create my passwords. The algorithm never changes but I'm always creating strong passwords that I can remember. Go to Security Now and listen to episodes 4 and 5. The personal password subject is covered in depth by Steve Gibson and Leo Laporte. It includes details on creating a personal algorithm.Type the following and hit . You'll be prompted for your new password.

PLAIN TEXT

CODE:

passwd

Now type in each line below and hit to update your system to Ubuntu Feisty. Note that some steps may take quiet a while as they install a number of newer packages.

PLAIN TEXT

CODE:

sed -e 's/\dapper/ edgy/g' -i /etc/apt/sources.list

apt-get update

apt-get dist-upgrade

apt-get -f install

dpkg --configure -a

reboot

Now lets do the same for Feisty.

PLAIN TEXT

CODE:

sed -e 's/edgy/ feisty/g' -i /etc/apt/sources.list

apt-get update

apt-get dist-upgrade

apt-get -f install

dpkg --configure -a

reboot

That's it for today! Next time we'll tackle installing some basic security before we get to installing all the packages we'll need to do some fun developing.