/etc/udev/rules.d/70-persistent-net.rules

# This file was automatically generated by the /lib/udev/write_net_rules
# program, probably run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single line.
# MAC addresses must be written in lowercase.
 
# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", DRIVERS=="?*", ATTRS{address}=="00:0c:29:65:ae:04", NAME="eth1"
 
# PCI device 0x10ec:0x8168 (r8169)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1c:c0:01:5f:e0", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

(menu-bar-mode -1)                                                                                                                                                                                                                      
;; (tool-bar-mode -1)                                                                                                                                                                                                                   
;; (scroll-bar-mode -1)                                                                                                                                                                                                                 
(setq visible-bell t)                                                                                                                                                                                                                   
 
;; mettre en surligne la zone de selection
(transient-mark-mode t)                   
 
;; parenthese matching
(show-paren-mode 1)   
(setq-default hilight-paren-expression t)
 
;; joli fond
;;(set-background-color "Wheat" )
 
;; colorisation de la syntaxe
(global-font-lock-mode t)    
;;maximum de couleurs        
(setq font-lock-maximum-decoration t)
(windmove-default-keybindings 'meta) 
 
;; completion sur shift-tab
(global-set-key (quote [S-iso-lefttab]) (quote dabbrev-expand))
(global-set-key (quote [S-tab]) (quote dabbrev-expand))        
 
;; circuler entre les buffer par ctrl-tab
(global-set-key [(control tab)] `other-window)
 
;; redefinition de quelques touches
(global-set-key [delete] 'delete-char)
(global-set-key [home] 'beginning-of-line)
(global-set-key [end] 'end-of-line)       
(global-set-key [\s-tab] (lambda ()       
                           (interactive)  
                           (switch-to-buffer (other-buffer))))
(global-set-key [\M-\s] 'set-mark-command)                    
;;nom du buffer en cours dans la barre de titre               
(setq frame-title-format "%b - Emacs")                        
(setq icon-title-format "%b - Emacs")                         
 
;;backups/autosaves : pas d'autosaves (encombrant), et garder les backups dans un dossier à part
(setq auto-save-default nil)                                                                    
(defvar backup-dir "~/.emacsbackups/")                                                          
(setq backup-directory-alist (list (cons "." backup-dir)))                                      
 
;; untabify sur F10
(global-set-key [f10]  'untabify)
 
;; moi, j'aime bien avoir le undo en Ctrl-Z
(global-set-key [(control z)] `undo)       
 
;; F7 lance la compilation
(global-set-key [f7] `compile)
 
(global-set-key [f3] 'find-file)
(global-set-key [f4] '(lambda () (interactive) (kill-buffer (current-buffer))))
(global-set-key [(control b)] 'electric-buffer-list)
;; Gestion de la roulette de la souris avec plusieurs vitesses
;; control + scroll      : grande vitesse
;; shift + scroll        : petite vitesse
;; scroll seul           : vitesse normale
 
(defun up-slightly () (interactive) (scroll-up 5))
(defun down-slightly () (interactive) (scroll-down 5))
(global-set-key [mouse-4] 'down-slightly)
(global-set-key [mouse-5] 'up-slightly)
 
(defun up-one () (interactive) (scroll-up 1))
(defun down-one () (interactive) (scroll-down 1))
(global-set-key [S-mouse-4] 'down-one)
(global-set-key [S-mouse-5] 'up-one)
 
(defun up-a-lot () (interactive) (scroll-up))
(defun down-a-lot () (interactive) (scroll-down))
(global-set-key [C-mouse-4] 'down-a-lot)
(global-set-key [C-mouse-5] 'up-a-lot)
 
;; si je fait des scripts, je les met la :
(add-to-list 'load-path "~/emacs-lisp/" )
 
;; on arrete de rajouter des lignes avec bas en fin de buffer
(setq next-line-add-newlines nil)
 
;; on est en europe, config du charset par defaut proprement
(standard-display-8bit 128 255)
;;(standard-display-european 1)
 
;; affichage de l'heure (format 24h) :
(display-time)
(setq display-time-24hr-format t)
 
;; Affiche numero de ligne et colonne
(setq column-number-mode t)
(setq line-number-mode t)
 
;; petite fenetre de compil, pas tout l'ecran
(setq compilation-window-height 10)
(custom-set-variables
  ;; custom-set-variables was added by Custom.
  ;; If you edit it by hand, you could mess it up, so be careful.
  ;; Your init file should contain only one such instance.
  ;; If there is more than one, they won't work right.
 '(inhibit-startup-screen t))
(custom-set-faces
  ;; custom-set-faces was added by Custom.
  ;; If you edit it by hand, you could mess it up, so be careful.
  ;; Your init file should contain only one such instance.
  ;; If there is more than one, they won't work right.
 )
 
;; Des espaces pour indenter.
(setq indent-tabs-mode nil)
 
(split-window-horizontally)
 
(put 'upcase-region 'disabled nil)

...
(split-window-horizontally)
(split-window-vertically)
(other-window 2)
(split-window-vertically)
...

...
(split-window-horizontally)
...

#!/bin/bash
set -e
iptables="/sbin/iptables"
modprobe="/sbin/modprobe"
allowporttcp="80 443 6667 6669"
allowportudp="1194"
allowporttcptoip="7000"
whitelist="82.225.**.** 81.56.**.** 81.57.**.**"
blacklist="74.52.74.** 213.23.175.** 81.2.210.** 60.242.109.**"
 
load () {
  #echo "Loading kernel modules..."
  #$modprobe ip_tables
  #$modprobe ip_conntrack
  #$modprobe iptable_filter
  #$modprobe ipt_state
  #echo "Kernel modules loaded."
 
    echo "Loading rules..."
    $iptables -P FORWARD DROP
    $iptables -P INPUT DROP
    $iptables -N blacklist
    $iptables -A INPUT -i eth0 -j blacklist
 
    for i in $allowporttcp
      do
      $iptables -A INPUT -p tcp -m tcp --destination-port $i -j ACCEPT
      echo "Allow port : $i/tcp"
    done
 
    for i in $allowportudp
      do
      $iptables -A INPUT -p udp -m udp --destination-port $i -j ACCEPT
      echo "Allow port : $i/udp"
    done
 
    for i in $allowporttcptoip
      do
      for j in $whitelist
	do
	$iptables -A INPUT -p tcp -m tcp --destination-port $i -s $j -j ACCEPT
	echo "Allow port : $i/tcp for $j"
      done
    done
 
    for i in $blacklist
      do
      $iptables -s $i -j DROP -A blacklist
      echo "$i blacklisted"
    done
 
    for i in /proc/sys/net/ipv4/conf/*/rp_filter;
      do
      echo 1 > $i
      echo "1 > $i"
    done
    $iptables -A INPUT -p icmp -j ACCEPT
    $iptables -A INPUT -p ALL -m state --state ESTABLISHED,RELATED -j ACCEPT
    $iptables -A INPUT -s 127.0.0.1 -j ACCEPT
  echo "Rules loaded."
}
 
blacklist () {
    $iptables -L blacklist -n
    $iptables -L blacklist
}
 
flush () {
    echo "Flushing rules..."
    $iptables -F
    $iptables -X
    $iptables -t mangle -F
    $iptables -t mangle -X
    $iptables -P INPUT ACCEPT
    $iptables -P FORWARD ACCEPT
    $iptables -P OUTPUT ACCEPT
    echo "Rules flushed."
}
 
case "$1" in
    start|restart)
	flush
	load
	;;
    stop)
	flush
	;;
    blacklist)
	blacklist
	;;
    *)
	echo "usage: start|stop|restart|blacklist."
	;;
esac
exit 0

iptables.sh start|stop|restart|blacklist

debian:~$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/hio/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in id_rsa.
Your public key has been saved in id_rsa.pub.
The key fingerprint is:
0b:97:e8:18:78:50:f8:3b:c9:41:ba:f3:6d:4b:41:b9 hio@debian
The key's randomart image is:
+--[ RSA 2048]----+
|   ..            |
|  ...  .         |
|  .+  o          |
|  .oo. o .       |
|  .oo+E S        |
|  o.=+ + .       |
|   o.oo .        |
|    ..o          |
|     ...         |
+-----------------+

debian:~$ ls -l
total 8
-rw------- 1 hio hio 1675 mar  6 12:41 id_rsa
-rw-r--r-- 1 hio hio  392 mar  6 12:41 id_rsa.pub

debian:~$ mkdir .ssh
debian:~$ cat id_rsa >> .ssh/authorized_keys
debian:~$ la .ssh/
total 8
-rw-r--r-- 1 hio hio  392 mar  6 12:41 authorized_keys

debian:~$ chmod 600 .ssh/authorized_keys
debian:~$ ls -l .ssh/
total 4
-rw------- 1 hio hio 392 mar  6 12:41 authorized_keys

# Package generated configuration file
# See the sshd(8) manpage for details
# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
# Logging
SyslogFacility AUTH
LogLevel INFO
# Authentication:
LoginGraceTime 120
PermitRootLogin no
 
# La partie qui nous interresse
StrictModes yes
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile      %h/.ssh/authorized_keys
 
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
#PasswordAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
#MaxStartups 10:30:60
#Banner /etc/issue.net
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
UsePAM yes

login as: hio
Authenticating with public key "imported-openssh-key"
Linux debian 2.6.26-1-686 #1 SMP Sat Jan 10 18:29:31 UTC 2009 i686
 
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
 
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
You have new mail.
Last login: Wed Feb 25 11:23:13 2009 from fpc-a800662.bayard-presse.com
debian:~$