diff --git a/01-debian-networking.txt b/01-debian-networking.txt index 99c67d1..0b57958 100755 --- a/01-debian-networking.txt +++ b/01-debian-networking.txt @@ -1,13 +1,15 @@ +# ip A to find interface name +su - root vi /etc/dhcpcd.conf denyinterfaces enp1s0 -sudo vi /etc/network/interfaces +vi /etc/network/interfaces source /etc/network/interfaces.d/* auto lo iface lo inet loopback allow-hotplug enp1s0 -sudo vi /etc/network/interfaces.d/enp1s0 +vi /etc/network/interfaces.d/enp1s0 iface enp1s0 inet static address 192.168.1.203 netmask 255.255.255.0 @@ -15,7 +17,7 @@ iface enp1s0 inet static dns-domain intensewebs.com dns-nameservers 192.168.1.140 192.168.1.141 192.168.1.124 -sudo vi /etc/resolv.conf +vi /etc/resolv.conf domain intensewebs.com search intensewebs.com nameserver 192.168.1.140 @@ -36,7 +38,10 @@ reboot ~ . -___________________________________________________________________________ +---------------------------------------------------------- +# TO REMOVE OLD KEYS FROM known_hosts file +ssh-keygen -f "/home/privacy/.ssh/known_hosts" -R "192.168.1.124" +_________________________________________________________________________ # OPTIONAL NOT NEEDED METHODS # IF DESIRING TO USE Netork Manager: sudo apt install network-manager ip link list diff --git a/02-ssh-help.txt b/02-ssh-help.txt index 5b1ded5..0f85e06 100755 --- a/02-ssh-help.txt +++ b/02-ssh-help.txt @@ -8,6 +8,7 @@ ssh-keygen -t ed25519 -b 256 -C "comment" -f ~/.ssh/id_ed25519 # ENABLE root access during OS install with password but don't enable SSH remote login for 'root'. # DEBIAN--LOGIN AS ROOT - Adding SUDO su - root +# Disable CDROM REPOSITORY: vi /etc/apt/sources.list sudo apt update && sudo apt upgrade # apt install sudo ---------------------------------------------------------- diff --git a/03-firewalld.txt b/03-firewalld.txt index 125d317..e2cbb8c 100755 --- a/03-firewalld.txt +++ b/03-firewalld.txt @@ -9,34 +9,34 @@ systemctl stop firewalld.service systemctl disable firewalld.service apt policy firewalld + +systemctl enable firewalld +systemctl start firewalld firewall-cmd --permanent --add-port=80/tcp firewall-cmd --permanent --add-port=443/tcp firewall-cmd --permanent --add-source=192.168.1.0/24 firewall-cmd --add-service=ssh --permanent -systemctl enable firewalld firewall-cmd --reload systemctl status firewalld firewall-cmd --state firewall-cmd --list-services firewall-cmd --list-all -# VNC -# sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent -# sudo firewall-cmd --zone=public --add-service=vnc-server --permanent -# sudo firewall-cmd --zone=public --add-source=192.168.1.0/24 -# sudo firewall-cmd --reload - -# firewall-cmd --permanent --add-service=vnc-server -# firewall-cmd --reload -# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent - firewall-cmd --get-active-zones firewall-cmd --zone=public --list-all -# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop' -# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept' firewall-cmd --zone=internal --add-source=192.168.1.0/24 firewall-cmd --zone=public --remove-service=ssh firewall-cmd --zone=public --remove-service=dhcpv6-client firewall-cmd --runtime-to-permanent firewall-cmd --add-service=cockpit --permanent firewall-cmd --reload + +# VNC +firewall-cmd --zone=public --add-port 5901/tcp --permanent +firewall-cmd --zone=public --add-service=vnc-server --permanent +firewall-cmd --zone=public --add-source=192.168.1.0/24 +sudo firewall-cmd --reload + +# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent +# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop' +# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept' diff --git a/proxmox-create-template b/proxmox-create-template index d8921df..a72dc31 100644 --- a/proxmox-create-template +++ b/proxmox-create-template @@ -5,7 +5,7 @@ timedatectl set-timezone UTC apt install -y unattended-upgrades dpkg-reconfigure -plow unattended-upgrades -# Anonymize the VM & Sysprep Windows: C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown +# Anonymize the VM or Sysprep Windows: C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown truncate -s 0 /etc/machine-id rm -f /var/lib/dbus/machine-id @@ -20,5 +20,5 @@ rm -f /var/lib/dhcp/*.leases apt clean shutdown -h now -# # Via command line - (VM # in Proxmox) +# # Via command line clone VM or below (VM # in Proxmox) qm template 100