apt-get install build-essential bzip2 libpcre3-dev libssl-dev mysql-server daemon libgeoip-dev
Download Nginx, Naxsi Core dan Naxsi UI. Saya berasumsi tempat download berada di /home/compile
# Version key/value should be on his own line | |
PACKAGE_VERSION=$(cat package.json \ | |
| grep version \ | |
| head -1 \ | |
| awk -F: '{ print $2 }' \ | |
| sed 's/[",]//g') | |
echo $PACKAGE_VERSION |
version: '2' | |
networks: | |
gitlab_net: | |
driver: bridge | |
ipam: | |
driver: default | |
config: | |
- subnet: 192.168.201.0/24 | |
gateway: 192.168.201.1 |
The purpose of this short howto is to show you how to:
openconnect
[1] to connect to an enterprise cisco anyconnect endpointUsually VPN administrators will puth the default route to the users, so that all user traffic is routed through the vpn connection. This is to address the various security concerns around compromised user computers bridging external internet traffic into the secure VPN network.
While the VPN administrator can push routes to the clients, the client can ignore these default routes and establish client side routing so that only the required A.B.C.D/E network is routed through the VPN. All other traffic will still use the clients default route and default outbound internet connection.
Download the appropriate Kali Linux .iso
I used a 64 bit .iso
image, downloaded via HTTP. I downloaded the amd64 weekly version, as the pool
linux headers (needed below for installation of wireless drivers) were ahead of the stable release kernel.
Download the SHA256SUMS
and SHA256SUMS.gpg
files from the same location.
#!/usr/bin/env bash | |
apt-get install -y libpcre3 libpcre3-dev libssl-dev unzip make \ | |
libgoogle-perftools-dev google-perftools jq gcc zlib1g-dev | |
mkdir /tmp/ngxbuild | |
cd /tmp/ngxbuild | |
ng_cookies=$(curl -s http://hg.nginx.org/nginx/tags|grep cookie|cut -f 2 -d '"'|tr -d '\n') | |
latestNginx=$(curl --cookie ${ng_cookies} -s http://hg.nginx.org/nginx/tags|grep "^ *release-" | head -1 | cut -c 9-) | |
echo "found: ${latestNginx}" | |
latestNaxsi=$(curl -s https://api.github.com/repos/nbs-system/naxsi/releases | |
#!/bin/bash | |
# version 2 thanks to @dhx-mike-palandra | |
echo "Creating /etc/NetworkManager/conf.d/99-forticlient.conf..." | |
sudo cat > /etc/NetworkManager/conf.d/99-forticlient.conf << 'EOF' | |
[keyfile] | |
unmanaged-devices=interface-name:~vpn*,type:tun | |
EOF | |
if [ $? -eq 0 ] |
This is a follow up for my Reddit post. Note that this is relevant for the classic X server (not Xwayland, which doesn't have this problem). If you have an NVIDIA GPU on your laptop, This is probably for you: Ubuntu configures the system with the non-Wayland, classic X server when an NVIDIA GPU is used.
The inspiration is from this article from the DELL site. Although the approach is outdated for recent Ubuntu, the basic premise is the same, that is, to eliminate duplicated touchpad / mouse input from X server configuration.