ohforest

Linux NetFilter, IP Tables and Conntrack Diagrams

IPTABLES TABLES and CHAINS

IPTables has the following 4 built-in tables.

1) Filter Table

Filter is default table for iptables. So, if you don’t define you own table, you’ll be using filter table. Iptables’s filter table has the following built-in chains.

ohforest

#!/usr/bin/env python
# coding: utf-8

import os
import sys
import json
import uuid
import tempfile
from flask import Flask, request, Response, g

ohforest

I’m looking for any tips or tricks for making chrome headless mode less detectable. Here is what I’ve done so far:

Set my args as follows:

const run = (async () => {

    const args = [
        '--no-sandbox',
        '--disable-setuid-sandbox',
        '--disable-infobars',

ohforest

先从windows系统复制文件simsun.ttf到你的虚拟机下(c:\windows\fonts\),在CrossOver下打开regedit(命令行方式) 找到HKEY_CURRENT_USER\Software\Wine\Fonts\Replacements，删除下面的项目simsun 宋体 新宋体

ohforest

先从windows系统复制文件simsun.ttf到你的虚拟机下(c:\windows\fonts\),在CrossOver下打开regedit(命令行方式) 找到HKEY_CURRENT_USER\Software\Wine\Fonts\Replacements，删除下面的项目simsun 宋体 新宋体

ohforest

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink]
"Arial"="wqy-microhei.ttc"
"Arial Black"="wqy-microhei.ttc"
"Arial CE,238"="wqy-microhei.ttc"
"Arial CYR,204"="wqy-microhei.ttc"
"Arial Greek,161"="wqy-microhei.ttc"
"Arial TUR,162"="wqy-microhei.ttc"
"Courier New"="wqy-microhei.ttc"

ohforest

• normal(explicitly specified start AND end)

  curl -v -X GET -H "range: bytes=1-8" http://localhost:8080/bbb/test

• specified ONLY start(end will be specified at the end of file)

  curl -v -X GET -H "range: bytes=10-" http://localhost:8080/bbb/test

• specified ONLY one negative value(last N bytes of file will be retrieved)

ohforest

Enable X11 forward to load images from remote server on MacOS Mojave

Steps

1. Install Xquartz to get X11 support on MacOS. You can google Xquartz and download it from its official site, or install using HomeBrew.

   brew cask install xquartz

2. Launch Xquartz. Go to Preference -> Security, click the box Allow connections from clients. NOTE: You have to lauch Xquartz with Allow connections from clients enable everytime you want to ssh to remote server with X11 forwarding support.

ohforest

#!/bin/bash

set -e

cf_ips() {
  echo "# https://www.cloudflare.com/ips"
  echo "geo \$realip_remote_addr \$cloudflare_ip {"
  echo "default          0;"

  for type in v4 v6; do

ohforest

Background

• Understanding how uid and gid work in Docker containers Jan 2017
• Processes In Containers Should Not Run As Root Sept 2017

Solutions

Prior to Docker supporting User Namespaces

• Handling Permissions with Docker Volumes Feb 2016