hellresistor hellresistor

Aggresive IPTables Rules

echo "service iptables restart"| at now + 2 min

iptables --flush

### Drop invalid packets ### 
iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP

Embedding Animation GIF in A Cell on Spreadsheet

This sample script is for embedding animation GIF in a cell using custom function on Spreadsheet.

I think that this method is one of various ideas.

Problem

There are some limitations.

Images of jpeg and png can be embedded in a cell using =IMAGE(). But when animation GIF is embedded using it, GIF is not played.

	#!/usr/bin/env python3

	"""Find Debian HTTPS archives.

	Script based on https://gist.github.com/eighthave/7285154
	I made it asynchronous and parallel, so overall I measured it to be 6 times faster or more.

	Requires Python 3.7+

	Additional resources not exactly related to this script but could be helpful for

	First, update and upgrade all packages:
	sudo apt-get update
	sudo apt-get upgrade

	sudo -i # Change to root
	cd /usr/local/src


	Main docs:
	https://wiki.asterisk.org/wiki/display/AST/Installing+Asterisk+From+Source

	#!/bin/bash

	# to install directly from the Gist
	# curl https://gist.githubusercontent.com/realslacker/6dce254e16003fbec5451689c9ba1e49/raw/ \| bash -s -- -i

	# test getopt
	getopt --test > /dev/null
	if [[ $? -ne 4 ]]; then
	echo "Error: `getopt --test` failed in this environment, please update to a newer 'getopt' package"
	exit 1

	### KERNEL TUNING ###

	# Increase size of file handles and inode cache
	fs.file-max = 2097152

	# Do less swapping
	vm.swappiness = 10
	vm.dirty_ratio = 60
	vm.dirty_background_ratio = 2

	#! /bin/bash

	# ===================
	# Script funtionality
	# ===================

	# do something
	doSomething() {
	echo 'doing something'
	}

	### 1: Drop invalid packets ###
	/sbin/iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP

	### 2: Drop TCP packets that are new and are not SYN ###
	/sbin/iptables -t mangle -A PREROUTING -p tcp ! --syn -m conntrack --ctstate NEW -j DROP

	### 3: Drop SYN packets with suspicious MSS value ###
	/sbin/iptables -t mangle -A PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP

	### 4: Block packets with bogus TCP flags ###

	# TCP port to bind to
	# Change to a high/odd port if this server is exposed to the internet directly
	Port 22

	# Bind to all interfaces (change to specific interface if needed)
	ListenAddress 0.0.0.0

	# Force SSHv2 Protocol
	Protocol 2

	#!/bin/bash
	# based on script from http://www.axllent.org/docs/view/ssh-geoip
	# License: WTFPL

	# UPPERCASE space-separated country codes to ACCEPT
	ALLOW_COUNTRIES="DE EU GB"
	LOGDENY_FACILITY="authpriv.notice"

	if [ $# -ne 1 ]; then
	echo "Usage: `basename $0` <ip>" 1>&2