<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://wiki.cedricbonhomme.org/lib/exe/css.php?s=feed" type="text/css"?>
<rss version="2.0">
    <channel xmlns:g="http://base.google.com/ns/1.0">
        <title>cedric's bazaar - debian</title>
        <description></description>
        <link>https://wiki.cedricbonhomme.org/</link>
        <lastBuildDate>Fri, 05 Jun 2026 02:16:11 +0000</lastBuildDate>
        <generator>FeedCreator 1.8</generator>
        <image>
            <url>https://wiki.cedricbonhomme.org/_media/wiki:dokuwiki.svg</url>
            <title>cedric's bazaar</title>
            <link>https://wiki.cedricbonhomme.org/</link>
        </image>
        <item>
            <title>jessie</title>
            <link>https://wiki.cedricbonhomme.org/debian:jessie?rev=1476687932&amp;do=diff</link>
            <description>
&lt;h1 class=&quot;sectionedit1&quot; id=&quot;configuration_files&quot;&gt;Configuration files&lt;/h1&gt;
&lt;div class=&quot;level1&quot;&gt;

&lt;p&gt;
&lt;a href=&quot;https://github.com/cedricbonhomme/dotfiles&quot; class=&quot;urlextern&quot; title=&quot;https://github.com/cedricbonhomme/dotfiles&quot; rel=&quot;ugc nofollow&quot;&gt;https://github.com/cedricbonhomme/dotfiles&lt;/a&gt;
&lt;/p&gt;

&lt;/div&gt;
&lt;!-- EDIT{&amp;quot;target&amp;quot;:&amp;quot;section&amp;quot;,&amp;quot;name&amp;quot;:&amp;quot;Configuration files&amp;quot;,&amp;quot;hid&amp;quot;:&amp;quot;configuration_files&amp;quot;,&amp;quot;codeblockOffset&amp;quot;:0,&amp;quot;secid&amp;quot;:1,&amp;quot;range&amp;quot;:&amp;quot;1-80&amp;quot;} --&gt;
&lt;h1 class=&quot;sectionedit2&quot; id=&quot;mirrors&quot;&gt;Mirrors&lt;/h1&gt;
&lt;div class=&quot;level1&quot;&gt;
&lt;pre class=&quot;code bash&quot;&gt;deb http:&lt;span class=&quot;sy0&quot;&gt;//&lt;/span&gt;http.debian.net&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;debian jessie main contrib non-free
&lt;span class=&quot;co0&quot;&gt;#deb-src http://http.debian.net/debian jessie main contrib non-free&lt;/span&gt;
&amp;nbsp;
deb http:&lt;span class=&quot;sy0&quot;&gt;//&lt;/span&gt;http.debian.net&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;debian jessie-updates main contrib non-free
&lt;span class=&quot;co0&quot;&gt;#deb-src http://http.debian.net/debian jessie-updates main contrib non-free&lt;/span&gt;
&amp;nbsp;
deb http:&lt;span class=&quot;sy0&quot;&gt;//&lt;/span&gt;security.debian.org&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt; jessie&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;updates main
&lt;span class=&quot;co0&quot;&gt;#deb-src http://security.debian.org/ jessie/updates main&lt;/span&gt;&lt;/pre&gt;

&lt;/div&gt;
&lt;!-- EDIT{&amp;quot;target&amp;quot;:&amp;quot;section&amp;quot;,&amp;quot;name&amp;quot;:&amp;quot;Mirrors&amp;quot;,&amp;quot;hid&amp;quot;:&amp;quot;mirrors&amp;quot;,&amp;quot;codeblockOffset&amp;quot;:0,&amp;quot;secid&amp;quot;:2,&amp;quot;range&amp;quot;:&amp;quot;81-514&amp;quot;} --&gt;
&lt;h1 class=&quot;sectionedit3&quot; id=&quot;packages_to_install&quot;&gt;Packages to install&lt;/h1&gt;
&lt;div class=&quot;level1&quot;&gt;
&lt;pre class=&quot;code bash&quot;&gt;&lt;span class=&quot;co0&quot;&gt;# apt-get install firmware-linux&lt;/span&gt;
&amp;nbsp;
&lt;span class=&quot;co0&quot;&gt;# apt-get install ttf-freefont ttf-mscorefonts-installer ttf-bitstream-vera ttf-dejavu ttf-liberation&lt;/span&gt;&lt;/pre&gt;

&lt;/div&gt;
&lt;!-- EDIT{&amp;quot;target&amp;quot;:&amp;quot;section&amp;quot;,&amp;quot;name&amp;quot;:&amp;quot;Packages to install&amp;quot;,&amp;quot;hid&amp;quot;:&amp;quot;packages_to_install&amp;quot;,&amp;quot;codeblockOffset&amp;quot;:1,&amp;quot;secid&amp;quot;:3,&amp;quot;range&amp;quot;:&amp;quot;515-706&amp;quot;} --&gt;
&lt;h1 class=&quot;sectionedit4&quot; id=&quot;firewall&quot;&gt;Firewall&lt;/h1&gt;
&lt;div class=&quot;level1&quot;&gt;

&lt;p&gt;
Backup your actual iptables rules (&lt;a href=&quot;https://bitbucket.org/cedricbonhomme/dotfiles/src/545e63e7c21dd30190305fe5bbc380eb555cedfb/firewall/firewall.sh&quot; class=&quot;urlextern&quot; title=&quot;https://bitbucket.org/cedricbonhomme/dotfiles/src/545e63e7c21dd30190305fe5bbc380eb555cedfb/firewall/firewall.sh&quot; rel=&quot;ugc nofollow&quot;&gt; my firewall&lt;/a&gt;):
&lt;/p&gt;
&lt;pre class=&quot;code bash&quot;&gt;&lt;span class=&quot;co4&quot;&gt;# &lt;/span&gt;iptables-save &lt;span class=&quot;sy0&quot;&gt;&amp;gt;&lt;/span&gt; &lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;etc&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;iptables.rules&lt;/pre&gt;

&lt;p&gt;
Create a systemd service for iptables:
&lt;/p&gt;
&lt;pre class=&quot;code bash&quot;&gt;&lt;span class=&quot;co0&quot;&gt;# cat /etc/systemd/system/iptables.service &lt;/span&gt;
&lt;span class=&quot;br0&quot;&gt;&amp;#91;&lt;/span&gt;Unit&lt;span class=&quot;br0&quot;&gt;&amp;#93;&lt;/span&gt;
&lt;span class=&quot;re2&quot;&gt;Description&lt;/span&gt;=Firewall
&lt;span class=&quot;re2&quot;&gt;After&lt;/span&gt;=network.target
&amp;nbsp;
&lt;span class=&quot;br0&quot;&gt;&amp;#91;&lt;/span&gt;Service&lt;span class=&quot;br0&quot;&gt;&amp;#93;&lt;/span&gt;
&lt;span class=&quot;re2&quot;&gt;Type&lt;/span&gt;=oneshot
&lt;span class=&quot;re2&quot;&gt;RemainAfterExit&lt;/span&gt;=&lt;span class=&quot;kw2&quot;&gt;yes&lt;/span&gt;
&lt;span class=&quot;re2&quot;&gt;ExecStart&lt;/span&gt;=&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;bin&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;&lt;span class=&quot;kw2&quot;&gt;sh&lt;/span&gt; &lt;span class=&quot;re5&quot;&gt;-c&lt;/span&gt; &lt;span class=&quot;st0&quot;&gt;&amp;quot;/sbin/iptables-restore &amp;lt; /etc/iptables.rules&amp;quot;&lt;/span&gt;
&amp;nbsp;
&lt;span class=&quot;br0&quot;&gt;&amp;#91;&lt;/span&gt;Install&lt;span class=&quot;br0&quot;&gt;&amp;#93;&lt;/span&gt;
&lt;span class=&quot;re2&quot;&gt;WantedBy&lt;/span&gt;=multi-user.target&lt;/pre&gt;

&lt;p&gt;
Enable the new service:
&lt;/p&gt;
&lt;pre class=&quot;code bash&quot;&gt;&lt;span class=&quot;co0&quot;&gt;# systemctl enable iptables.service&lt;/span&gt;
&lt;span class=&quot;co0&quot;&gt;# systemctl restart iptables.service&lt;/span&gt;
&amp;nbsp;
&lt;span class=&quot;co0&quot;&gt;# systemctl list-unit-files | grep iptables &lt;/span&gt;
iptables.service                           enabled
&amp;nbsp;
&lt;span class=&quot;co0&quot;&gt;# systemctl status iptables.service&lt;/span&gt;
● iptables.service - Firewall
   Loaded: loaded &lt;span class=&quot;br0&quot;&gt;&amp;#40;&lt;/span&gt;&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;etc&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;systemd&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;system&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;iptables.service; enabled&lt;span class=&quot;br0&quot;&gt;&amp;#41;&lt;/span&gt;
   Active: active &lt;span class=&quot;br0&quot;&gt;&amp;#40;&lt;/span&gt;exited&lt;span class=&quot;br0&quot;&gt;&amp;#41;&lt;/span&gt; since Mon &lt;span class=&quot;nu0&quot;&gt;2015&lt;/span&gt;-05-&lt;span class=&quot;nu0&quot;&gt;11&lt;/span&gt; 07:&lt;span class=&quot;nu0&quot;&gt;40&lt;/span&gt;:&lt;span class=&quot;nu0&quot;&gt;14&lt;/span&gt; CEST; 11min ago
 Main PID: &lt;span class=&quot;nu0&quot;&gt;3307&lt;/span&gt; &lt;span class=&quot;br0&quot;&gt;&amp;#40;&lt;/span&gt;&lt;span class=&quot;re2&quot;&gt;code&lt;/span&gt;=exited, &lt;span class=&quot;re2&quot;&gt;status&lt;/span&gt;=&lt;span class=&quot;nu0&quot;&gt;0&lt;/span&gt;&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;SUCCESS&lt;span class=&quot;br0&quot;&gt;&amp;#41;&lt;/span&gt;&lt;/pre&gt;

&lt;/div&gt;
&lt;!-- EDIT{&amp;quot;target&amp;quot;:&amp;quot;section&amp;quot;,&amp;quot;name&amp;quot;:&amp;quot;Firewall&amp;quot;,&amp;quot;hid&amp;quot;:&amp;quot;firewall&amp;quot;,&amp;quot;codeblockOffset&amp;quot;:2,&amp;quot;secid&amp;quot;:4,&amp;quot;range&amp;quot;:&amp;quot;707-1735&amp;quot;} --&gt;
&lt;h1 class=&quot;sectionedit5&quot; id=&quot;fstab&quot;&gt;fstab&lt;/h1&gt;
&lt;div class=&quot;level1&quot;&gt;
&lt;pre class=&quot;code bash&quot;&gt;&lt;span class=&quot;sy0&quot;&gt;//&lt;/span&gt;listfileserver.private.list.lu&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;LIST &lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;media&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;LIST cifs &lt;span class=&quot;re2&quot;&gt;credentials&lt;/span&gt;=&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;etc&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;LIST&lt;span class=&quot;sy0&quot;&gt;/&lt;/span&gt;.smbcredentials,&lt;span class=&quot;re2&quot;&gt;uid&lt;/span&gt;=cedric,&lt;span class=&quot;re2&quot;&gt;gid&lt;/span&gt;=cedric &lt;span class=&quot;nu0&quot;&gt;0&lt;/span&gt; &lt;span class=&quot;nu0&quot;&gt;0&lt;/span&gt;&lt;/pre&gt;

&lt;/div&gt;
&lt;!-- EDIT{&amp;quot;target&amp;quot;:&amp;quot;section&amp;quot;,&amp;quot;name&amp;quot;:&amp;quot;fstab&amp;quot;,&amp;quot;hid&amp;quot;:&amp;quot;fstab&amp;quot;,&amp;quot;codeblockOffset&amp;quot;:5,&amp;quot;secid&amp;quot;:5,&amp;quot;range&amp;quot;:&amp;quot;1736-&amp;quot;} --&gt;</description>
            <author>anonymous@undisclosed.example.com (Anonymous)</author>
            <pubDate>Mon, 17 Oct 2016 07:05:32 +0000</pubDate>
        </item>
    </channel>
</rss>
