nano /etc/sysctl.conf
net.ipv4.icmp_echo_ignore_all=1
sysctl -p
sudo iptables -A INPUT -p icmp --icmp-type echo-request -j DROP sudo iptables -A OUTPUT -p icmp --icmp-type echo-reply -j DROP
then Make iptables rules persistent after reboot on Ubuntu 18.04
References
https://vitux.com/how-to-block-allow-ping-using-iptables-in-ubuntu/
http://ubuntuhandbook.org/index.php/2013/07/disable-ping-response-ubuntu-server/
0 * * * * <command>
should work and will run at every 1 hour
References
https://serverfault.com/questions/256131/how-to-cron-run-every-1-hour-on-ubuntu-9
https://unix.stackexchange.com/questions/55287/crontab-e-then-0-every-hour-where-is-stored
RunAsDaemon 1 BridgeRelay 1 ORPort 16001 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ServerTransportListenAddr obfs4 0.0.0.0:16002 ExtORPort auto ContactInfo example@gmail.com Nickname yourNickname PublishServerDescriptor 0
References
https://community.torproject.org/relay/setup/bridge/debian-ubuntu/
https://scottlinux.com/2016/01/16/how-to-run-a-tor-bridge-on-linux/
https://tails.boum.org/doc/first_steps/startup_options/bridge_mode/index.en.html
Installing Certbot
sudo add-apt-repository ppa:certbot/certbot
sudo apt install python-certbot-apache
Set Up the SSL Certificate
Certbot needs to be able to find the correct virtual host in your Apache configuration for it to automatically configure SSL. Specifically, it does this by looking for a
ServerNamedirective that matches the domain you request a certificate for.
Obtaining an SSL Certificate
sudo certbot --apache -d example.com -d www.example.com
This runs
certbotwith the--apacheplugin, using-dto specify the names you’d like the certificate to be valid for.
Verifying Certbot Auto-Renewal
sudo certbot renew --dry-run
Go to /etc/apache2/conf-available/javascript-common.conf, you will find this:
Alias /javascript /usr/share/javascript/
<Directory "/usr/share/javascript/">
Options FollowSymLinks MultiViews
</Directory>
So you just have to comment this lines (with the # char) (is not recommend to edit directly the file in conf-enabled) to avoid the forbidden error. After that, do this:
a2disconf javascript-common a2enconf javascript-common
References
https://serverfault.com/questions/274254/cannot-access-javascript-folder
sudo apt-key adv --keyserver "hkps.pool.sks-keyservers.net" --recv-keys "0x6B73A36E6026DFCA"
nano /etc/apt/sources.list.d/bintray.rabbitmq.list
deb https://dl.bintray.com/rabbitmq-erlang/debian bionic erlang deb https://dl.bintray.com/rabbitmq/debian bionic main
sudo apt-get update
sudo apt-get install rabbitmq-server
sudo systemctl status rabbitmq-server.service
sudo systemctl start rabbitmq-server.service
sudo systemctl enable rabbitmq-server
In case of error install latest erlang from
https://www.erlang-solutions.com/resources/download.html
References
https://www.fosslinux.com/6339/how-to-install-rabbitmq-server-on-ubuntu-18-04-lts.htm
curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add - echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list
sudo apt-get update && sudo apt-get install yarn
References
https://yarnpkg.com/lang/en/docs/install/#debian-stable
apt install fontconfig
cp -R ~/arial /usr/share/fonts/truetype/
sudo fc-cache -f -v
References
http://chapter31.com/2012/09/24/installing-new-fonts-on-ubuntu-server/
Local bridge Setup
VPN Server IP: 192.168.7.1 VPN Client IP Range: 192.168.7.50-192.168.7.60 Tap Device name: tap_soft
ifconfig tap_soft
apt-get install dnsmasq
nano /etc/dnsmasq.conf
interface=tap_soft dhcp-range=tap_soft,192.168.7.50,192.168.7.60,12h dhcp-option=tap_soft,3,192.168.7.1
config tap
ifconfig tap_soft 192.168.7.1
Add this file to /etc/sysctl.d/to enable ipv4 forwarding
/etc/sysctl.d/ipv4_forwarding.conf
Wih this content
net.ipv4.ip_forward = 1
sysctl --system
Then we add a POSTROUTING rule to iptables
iptables -t nat -A POSTROUTING -s 192.168.7.0/24 -j SNAT --to-source [YOUR VPS IP ADDRESS]
# /etc/init.d/vpnserver restart # /etc/init.d/dnsmasq restart
References
http://blog.lincoln.hk/blog/2013/05/17/softether-on-vps-using-local-bridge/