Ostatnie wiadomości
#1
Debian / Odp: Aktualizacje proponowane
Ostatnia wiadomość przez PomPom - Luty 07, 2023, 07:06:04 PMCytat: linux4ever w Luty 07, 2023, 05:53:32 PMSystem będzie po nich niestabilnySkąd ta pewność?
To są pakiety, które najpewniej dostaną się do systemu przy okazji następnej aktualizacji typu point release - 11.6 -> 11.7. Nie są to żadne wielkie zmiany, które posypią system, a zmiany, których bardzo zapobiegawczo Debian jeszcze nie wrzuca. Inna sprawa, że jak nie masz wyraźnej potrzeby i teraz jest dobrze, to nie masz po co aktywować tego repozytorium. Ja bym aktywował, ale też sobie spokojnie poradzę, jeżeli coś by miało się dziać źle (chociaż nie wiem co miałoby się zepsuć).
#2
Debian / Odp: Aktualizacje proponowane
Ostatnia wiadomość przez linux4ever - Luty 07, 2023, 05:53:32 PMSystem będzie po nich niestabilny dlatego odradzam.
Mogą być bugi a os się wysypać.
Nigdy nie włączam tego.
Mogą być bugi a os się wysypać.
Nigdy nie włączam tego.
#3
Debian / Aktualizacje proponowane
Ostatnia wiadomość przez sovtware - Luty 07, 2023, 05:45:33 PMW Ubuntu nie raz mi psuło system po takich aktualizacjach szczególnie przy aktualizacji do nowszej wersji
a czy w Debianie są bezpieczne czy też mogą czasem wystąpić jakieś błędy i lepiej ich nie ruszać ?
dokładnie chodzi mi o te aktualizacje
a czy w Debianie są bezpieczne czy też mogą czasem wystąpić jakieś błędy i lepiej ich nie ruszać ?
dokładnie chodzi mi o te aktualizacje
#4
Debian / Odp: zatrzymanie systemu przez...
Ostatnia wiadomość przez sovtware - Luty 07, 2023, 05:07:04 PMPo aktualizacji do Najnowszej wersji Brave problem znikł działa beż problemów
fakt procesor mi zżera ale to zależy na jakiej stronce jestem :) zawsze tak miałem jak dobrze pamiętam i to w każdej przeglądarce
skacze mi od 20 - do nawet 91 %
ok nie wstrzymuje mi Debiana więc już jest dobrze
wyczyściłem jeszcze cache itp:
pozdrawiam
fakt procesor mi zżera ale to zależy na jakiej stronce jestem :) zawsze tak miałem jak dobrze pamiętam i to w każdej przeglądarce
skacze mi od 20 - do nawet 91 %
ok nie wstrzymuje mi Debiana więc już jest dobrze
wyczyściłem jeszcze cache itp:
pozdrawiam
#5
Bezpieczeństwo / Odp: firejail-pomimo dodania l...
Ostatnia wiadomość przez melis - Luty 07, 2023, 03:55:19 PMrobson75 Tu jest nieco jakby inny kłopot, bo firejail w ogóle nie reaguje na zapisane profile, a z pozycji gui firetool's, nie tworzy nowych dowiązań. Mimo zakazu przeglądarce na dostęp do wybranych lokalizacji, moge z jej poziomu przeczesać cały system, bez podania żadnego hasła.
#6
Bezpieczeństwo / Odp: firejail-pomimo dodania l...
Ostatnia wiadomość przez robson75 - Luty 07, 2023, 03:30:30 PMProponuje przeczytanie manuala.
#7
Bezpieczeństwo / firejail-pomimo dodania lokali...
Ostatnia wiadomość przez melis - Luty 07, 2023, 02:15:30 PMCześć! Czytałem troszkę, z naciskiem na troszkę, i dodałem sugerowane lokalizacje do czarnej listy, tj /sbin oraz /usr/sbin. Mimo to przy uruchamianiu firejail zgłasza:
Kod [Zaznacz]
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Chyba że ja coś jednak robię nie tak, bo wykonuję w edycji profilu aplikacji blacklist /usr/sbin oraz blacklist /sbin. Co więc może być grane, jesli macie w ogóle jakieś pojęcie na temat używania firejail? #8
Fedora / anybody know how to add vlans?
Ostatnia wiadomość przez dushback1111 - Luty 07, 2023, 01:30:26 PM/interface bridge
add fast-forward=no name=bridge1-lan vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] arp=proxy-arp name=ether1-WAN-Fiber
set [ find default-name=ether2 ] name=ether2-WAN-Cable
/interface vlan
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=lan ranges=192.168.168.50-192.168.168.190
/ip dhcp-server
add address-pool=lan disabled=no interface=bridge1-lan lease-time=1d name=bridge1
/queue tree
add max-limit=100M name=FiberQueue parent=ether1-WAN-Fiber
add limit-at=10M max-limit=100M name=FiberQueueVoice packet-mark=voice parent=FiberQueue priority=3
add max-limit=100M name=FiberQueueBestEffort packet-mark=best_effort parent=FiberQueue priority=5
add max-limit=5M name=CableQueue parent=ether1-WAN-Fiber
add limit-at=2M max-limit=5M name=CableQueueVoice packet-mark=voice parent=FiberQueue priority=3
add max-limit=5M name=CableQueueBestEffort packet-mark=best_effort parent=FiberQueue priority=5
/snmp community
/system logging action
/dude
set enabled=yes
/interface bridge port
/interface bridge vlan
add bridge=bridge1-lan
/interface l2tp-server server
/ip address
add address=192.168.168.1/24 interface=bridge1-lan network=192.168.168.0
add address=50.238.145.163/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=96.70.56.130/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=50.238.145.164/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.238.145.165/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.238.145.166/29 disabled=yes interface=ether1-WAN-Fiber network=50.238.145.160
add address=96.70.56.131/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=96.70.56.132/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=96.70.56.133/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=50.238.145.162/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.239.246.98/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.99/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.100/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.101/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.102/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.103/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.104/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.105/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.106/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.107/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.108/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.109/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.110/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1-WAN-IPS
add dhcp-options=hostname,clientid disabled=no interface=sfp1-WAN-DHCP
/ip dhcp-server lease
/ip dns
set allow-remote-requests=yes cache-max-ttl=10m servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.168.15 name=voip.kvik.net ttl=10m
/ip firewall address-list
add address=0.0.0.0/8 comment=RFC6890 list=NotPublic
add address=10.0.0.0/8 comment=RFC6890 list=NotPublic
add address=100.64.0.0/10 comment=RFC6890 list=NotPublic
add address=127.0.0.0/8 comment=RFC6890 list=NotPublic
add address=169.254.0.0/16 comment=RFC6890 list=NotPublic
add address=172.16.0.0/12 comment=RFC6890 list=NotPublic
add address=192.0.0.0/24 comment=RFC6890 list=NotPublic
add address=192.0.2.0/24 comment=RFC6890 list=NotPublic
add address=192.168.0.0/16 comment=RFC6890 list=NotPublic
add address=192.88.99.0/24 comment=RFC3068 list=NotPublic
add address=198.18.0.0/15 comment=RFC6890 list=NotPublic
add address=198.51.100.0/24 comment=RFC6890 list=NotPublic
add address=203.0.113.0/24 comment=RFC6890 list=NotPublic
add address=224.0.0.0/4 comment=RFC4601 list=NotPublic
add address=240.0.0.0/4 comment=RFC6890 list=NotPublic
add address=192.168.168.206 list=zimbra_internal
add address=192.168.168.207 list=zimbra_internal
/ip firewall filter
add chain=input comment="Accept established and related packets" connection-state=established,related
add chain=input comment="Accept all connections from local network" in-interface=bridge1-lan
add action=drop chain=input comment="Drop invalid packets" connection-state=invalid
add action=drop chain=input comment="Drop all packets which are not destined to routes IP address" dst-address-type=!local
add action=drop chain=input comment="Drop all packets which does not have unicast source IP address" src-address-type=!unicast
add action=drop chain=input comment="Drop all packets from public internet which should not exist in public network" in-interface=ether1-WAN-Fiber src-address-list=NotPublic
add action=drop chain=input comment="Drop all packets from public internet which should not exist in public network" in-interface=ether2-WAN-Cable src-address-list=NotPublic
add action=drop chain=input in-interface=ether1-WAN-Fiber
add action=drop chain=input in-interface=ether2-WAN-Cable
add chain=forward comment="Accept established and related packets" connection-state=established,related
add action=drop chain=forward comment="Drop invalid packets" connection-state=invalid
add action=drop chain=forward comment="Drop new connections from internet which are not dst-natted" connection-nat-state=!dstnat connection-state=new in-interface=ether1-WAN-Fiber
add action=drop chain=forward comment="Drop new connections from internet which are not dst-natted" connection-nat-state=!dstnat connection-state=new in-interface=ether2-WAN-Cable
add action=drop chain=forward comment="Drop all packets from public internet which should not exist in public network" in-interface=ether1-WAN-Fiber src-address-list=NotPublic
add action=drop chain=forward comment="Drop all packets from public internet which should not exist in public network" in-interface=ether2-WAN-Cable src-address-list=NotPublic
add action=drop chain=forward comment="Please keep this rule disabled for traffic between VLANS !!!!!!!!!!!" disabled=yes dst-address-list=NotPublic in-interface=bridge1-lan
add action=drop chain=forward comment="Drop all packets in local network which does not have local network address" in-interface=bridge1-lan src-address=!192.168.0.0/16
add action=accept chain=forward comment="Internal managed " dst-port=10000-20000 protocol=udp
add action=accept chain=forward dst-port=1194 in-interface=ether1-WAN-Fiber protocol=udp
add action=accept chain=forward dst-port=80,443 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=25,110,995,143,993,7071,7072,7110,7995,7143,7993 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=21,10090-10100 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=3389 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=9090 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=33389 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=8989 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=3050 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=33333 in-interface=ether1-WAN-Fiber protocol=tcp
/ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=best_effort_con src-address=192.168.0.0/16
add action=mark-packet chain=forward connection-mark=voice_con new-packet-mark=voice
add action=mark-packet chain=forward connection-mark=best_effort_con new-packet-mark=best_effort
/ip firewall nat
add action=src-nat chain=srcnat comment="MAIL mx.kvik.net" out-interface=ether1-WAN-Fiber src-address=192.168.168.206 to-addresses=50.239.246.98
add action=dst-nat chain=dstnat dst-address=50.239.246.98 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.206
add action=dst-nat chain=dstnat dst-address=50.239.246.99 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.252
add action=src-nat chain=srcnat comment="WEB SERVER wx.kvik.net" out-interface=ether1-WAN-Fiber src-address=192.168.168.253 to-addresses=50.239.246.100
add action=dst-nat chain=dstnat dst-address=50.239.246.100 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.253
add action=src-nat chain=srcnat comment="VOIP" out-interface=ether1-WAN-Fiber src-address=192.168.168.250 to-addresses=50.238.145.162
add action=dst-nat chain=dstnat dst-address=50.238.145.162 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.250
add action=dst-nat chain=dstnat dst-port=3389 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.251
add action=dst-nat chain=dstnat dst-port=33389 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.240 to-ports=3389
add action=dst-nat chain=dstnat dst-port=8989 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.240
add action=dst-nat chain=dstnat dst-port=3050 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.251 to-ports=3050
add action=dst-nat chain=dstnat dst-port=1194 protocol=udp src-address=!192.168.0.0/16 to-addresses=192.168.168.245
add action=src-nat chain=srcnat comment=168 out-interface=ether1-WAN-Fiber src-address=192.168.0.0/16 to-addresses=50.238.145.163
add action=src-nat chain=srcnat out-interface=ether2-WAN-Cable src-address=192.168.0.0/16 to-addresses=96.70.56.130
add action=dst-nat chain=dstnat comment="RDP" dst-address=50.239.246.101 dst-port=33333 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.241 to-ports=3389
add action=dst-nat chain=dstnat comment=RTP dst-address=50.238.145.163 dst-port=10000-20000 protocol=udp src-address=!192.168.0.0/16 to-addresses=192.168.181.2
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
/ip ipsec peer
/ip ipsec policy
/ip route
add distance=1 gateway=50.238.145.161
add distance=2 gateway=96.70.56.134
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
/lcd
set time-interval=daily
/ppp secret
/snmp
set enabled=yes
/system clock
set time-zone-name=America
/system logging
add action=remote topics=script,info,dhcp,error,system,critical,warning
add action=logging topics=account
add action=logging prefix="login failure" topics=critical
/system routerboard settings
set silent-boot=no
/system scheduler
/tool sniffer
add fast-forward=no name=bridge1-lan vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] arp=proxy-arp name=ether1-WAN-Fiber
set [ find default-name=ether2 ] name=ether2-WAN-Cable
/interface vlan
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=lan ranges=192.168.168.50-192.168.168.190
/ip dhcp-server
add address-pool=lan disabled=no interface=bridge1-lan lease-time=1d name=bridge1
/queue tree
add max-limit=100M name=FiberQueue parent=ether1-WAN-Fiber
add limit-at=10M max-limit=100M name=FiberQueueVoice packet-mark=voice parent=FiberQueue priority=3
add max-limit=100M name=FiberQueueBestEffort packet-mark=best_effort parent=FiberQueue priority=5
add max-limit=5M name=CableQueue parent=ether1-WAN-Fiber
add limit-at=2M max-limit=5M name=CableQueueVoice packet-mark=voice parent=FiberQueue priority=3
add max-limit=5M name=CableQueueBestEffort packet-mark=best_effort parent=FiberQueue priority=5
/snmp community
/system logging action
/dude
set enabled=yes
/interface bridge port
/interface bridge vlan
add bridge=bridge1-lan
/interface l2tp-server server
/ip address
add address=192.168.168.1/24 interface=bridge1-lan network=192.168.168.0
add address=50.238.145.163/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=96.70.56.130/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=50.238.145.164/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.238.145.165/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.238.145.166/29 disabled=yes interface=ether1-WAN-Fiber network=50.238.145.160
add address=96.70.56.131/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=96.70.56.132/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=96.70.56.133/29 interface=ether2-WAN-Cable network=96.70.56.128
add address=50.238.145.162/29 interface=ether1-WAN-Fiber network=50.238.145.160
add address=50.239.246.98/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.99/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.100/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.101/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.102/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.103/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.104/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.105/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.106/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.107/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.108/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.109/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
add address=50.239.246.110/28 comment="IPS LAN block 1" interface=ether1-WAN-Fiber network=50.239.246.96
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1-WAN-IPS
add dhcp-options=hostname,clientid disabled=no interface=sfp1-WAN-DHCP
/ip dhcp-server lease
/ip dns
set allow-remote-requests=yes cache-max-ttl=10m servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.168.15 name=voip.kvik.net ttl=10m
/ip firewall address-list
add address=0.0.0.0/8 comment=RFC6890 list=NotPublic
add address=10.0.0.0/8 comment=RFC6890 list=NotPublic
add address=100.64.0.0/10 comment=RFC6890 list=NotPublic
add address=127.0.0.0/8 comment=RFC6890 list=NotPublic
add address=169.254.0.0/16 comment=RFC6890 list=NotPublic
add address=172.16.0.0/12 comment=RFC6890 list=NotPublic
add address=192.0.0.0/24 comment=RFC6890 list=NotPublic
add address=192.0.2.0/24 comment=RFC6890 list=NotPublic
add address=192.168.0.0/16 comment=RFC6890 list=NotPublic
add address=192.88.99.0/24 comment=RFC3068 list=NotPublic
add address=198.18.0.0/15 comment=RFC6890 list=NotPublic
add address=198.51.100.0/24 comment=RFC6890 list=NotPublic
add address=203.0.113.0/24 comment=RFC6890 list=NotPublic
add address=224.0.0.0/4 comment=RFC4601 list=NotPublic
add address=240.0.0.0/4 comment=RFC6890 list=NotPublic
add address=192.168.168.206 list=zimbra_internal
add address=192.168.168.207 list=zimbra_internal
/ip firewall filter
add chain=input comment="Accept established and related packets" connection-state=established,related
add chain=input comment="Accept all connections from local network" in-interface=bridge1-lan
add action=drop chain=input comment="Drop invalid packets" connection-state=invalid
add action=drop chain=input comment="Drop all packets which are not destined to routes IP address" dst-address-type=!local
add action=drop chain=input comment="Drop all packets which does not have unicast source IP address" src-address-type=!unicast
add action=drop chain=input comment="Drop all packets from public internet which should not exist in public network" in-interface=ether1-WAN-Fiber src-address-list=NotPublic
add action=drop chain=input comment="Drop all packets from public internet which should not exist in public network" in-interface=ether2-WAN-Cable src-address-list=NotPublic
add action=drop chain=input in-interface=ether1-WAN-Fiber
add action=drop chain=input in-interface=ether2-WAN-Cable
add chain=forward comment="Accept established and related packets" connection-state=established,related
add action=drop chain=forward comment="Drop invalid packets" connection-state=invalid
add action=drop chain=forward comment="Drop new connections from internet which are not dst-natted" connection-nat-state=!dstnat connection-state=new in-interface=ether1-WAN-Fiber
add action=drop chain=forward comment="Drop new connections from internet which are not dst-natted" connection-nat-state=!dstnat connection-state=new in-interface=ether2-WAN-Cable
add action=drop chain=forward comment="Drop all packets from public internet which should not exist in public network" in-interface=ether1-WAN-Fiber src-address-list=NotPublic
add action=drop chain=forward comment="Drop all packets from public internet which should not exist in public network" in-interface=ether2-WAN-Cable src-address-list=NotPublic
add action=drop chain=forward comment="Please keep this rule disabled for traffic between VLANS !!!!!!!!!!!" disabled=yes dst-address-list=NotPublic in-interface=bridge1-lan
add action=drop chain=forward comment="Drop all packets in local network which does not have local network address" in-interface=bridge1-lan src-address=!192.168.0.0/16
add action=accept chain=forward comment="Internal managed " dst-port=10000-20000 protocol=udp
add action=accept chain=forward dst-port=1194 in-interface=ether1-WAN-Fiber protocol=udp
add action=accept chain=forward dst-port=80,443 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=25,110,995,143,993,7071,7072,7110,7995,7143,7993 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=21,10090-10100 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=3389 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=9090 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=33389 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=8989 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=3050 in-interface=ether1-WAN-Fiber protocol=tcp
add action=accept chain=forward dst-port=33333 in-interface=ether1-WAN-Fiber protocol=tcp
/ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=best_effort_con src-address=192.168.0.0/16
add action=mark-packet chain=forward connection-mark=voice_con new-packet-mark=voice
add action=mark-packet chain=forward connection-mark=best_effort_con new-packet-mark=best_effort
/ip firewall nat
add action=src-nat chain=srcnat comment="MAIL mx.kvik.net" out-interface=ether1-WAN-Fiber src-address=192.168.168.206 to-addresses=50.239.246.98
add action=dst-nat chain=dstnat dst-address=50.239.246.98 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.206
add action=dst-nat chain=dstnat dst-address=50.239.246.99 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.252
add action=src-nat chain=srcnat comment="WEB SERVER wx.kvik.net" out-interface=ether1-WAN-Fiber src-address=192.168.168.253 to-addresses=50.239.246.100
add action=dst-nat chain=dstnat dst-address=50.239.246.100 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.253
add action=src-nat chain=srcnat comment="VOIP" out-interface=ether1-WAN-Fiber src-address=192.168.168.250 to-addresses=50.238.145.162
add action=dst-nat chain=dstnat dst-address=50.238.145.162 in-interface=ether1-WAN-Fiber to-addresses=192.168.168.250
add action=dst-nat chain=dstnat dst-port=3389 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.251
add action=dst-nat chain=dstnat dst-port=33389 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.240 to-ports=3389
add action=dst-nat chain=dstnat dst-port=8989 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.240
add action=dst-nat chain=dstnat dst-port=3050 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.251 to-ports=3050
add action=dst-nat chain=dstnat dst-port=1194 protocol=udp src-address=!192.168.0.0/16 to-addresses=192.168.168.245
add action=src-nat chain=srcnat comment=168 out-interface=ether1-WAN-Fiber src-address=192.168.0.0/16 to-addresses=50.238.145.163
add action=src-nat chain=srcnat out-interface=ether2-WAN-Cable src-address=192.168.0.0/16 to-addresses=96.70.56.130
add action=dst-nat chain=dstnat comment="RDP" dst-address=50.239.246.101 dst-port=33333 protocol=tcp src-address=!192.168.0.0/16 to-addresses=192.168.168.241 to-ports=3389
add action=dst-nat chain=dstnat comment=RTP dst-address=50.238.145.163 dst-port=10000-20000 protocol=udp src-address=!192.168.0.0/16 to-addresses=192.168.181.2
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
/ip ipsec peer
/ip ipsec policy
/ip route
add distance=1 gateway=50.238.145.161
add distance=2 gateway=96.70.56.134
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
/lcd
set time-interval=daily
/ppp secret
/snmp
set enabled=yes
/system clock
set time-zone-name=America
/system logging
add action=remote topics=script,info,dhcp,error,system,critical,warning
add action=logging topics=account
add action=logging prefix="login failure" topics=critical
/system routerboard settings
set silent-boot=no
/system scheduler
/tool sniffer
#9
Komputery / Odp: nie mogę zainstalować win...
Ostatnia wiadomość przez linux4ever - Luty 07, 2023, 06:17:15 AMWpisujesz sudo apt --fix-broken install.
Co do play on linux nie ma już go w debianie 11 jest za to q4wine.
Czyli sudo apt install q4wine*
Q4Wine wymaga nieco głębszej konfiguracji ale ma razem winetricks czyli przydatne skrypty oraz działa na nim wszystko.
Jak będzie jakiś problem to pomogę z konfiguracją.
Co do play on linux nie ma już go w debianie 11 jest za to q4wine.
Czyli sudo apt install q4wine*
Q4Wine wymaga nieco głębszej konfiguracji ale ma razem winetricks czyli przydatne skrypty oraz działa na nim wszystko.
Jak będzie jakiś problem to pomogę z konfiguracją.
#10
Komputery / Odp: nie mogę zainstalować win...
Ostatnia wiadomość przez dziki - Luty 06, 2023, 08:52:06 PMPostępując zgodnie z Twoimi instrukcjami uzyskałam coś takiego
z czymś takim miałam już do czynienia wcześniej i nie umiałam tego obejść
CytatE: Unmet dependencies. Try 'apt --fix-broken install' with no packages (or specify a solution).
dziki@penguin:~$ sudo apt install wine
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
wine is already the newest version (5.0.3-3).
You might want to run 'apt --fix-broken install' to correct these.
The following packages have unmet dependencies:
playonlinux : Depends: python
Depends: python-wxgtk2.8 but it is not installable or
python-wxgtk3.0 but it is not installable
Depends: imagemagick
Depends: cabextract
Depends: icoutils
Depends: p7zip-full
Depends: jq
E: Unmet dependencies. Try 'apt --fix-broken install' with no packages (or specify a solution).
dziki@penguin:~$ apt --fix-broken install
E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission denied)
E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are you root?
dziki@penguin:~$
z czymś takim miałam już do czynienia wcześniej i nie umiałam tego obejść