Tech feedback and support (技术支持) > 跑题及其他无关话题
几个安全好用的 Linux / UNIX 操作系统——应用比较
jingyue:
关于 Debian 固件，——————》各种有线和无线网卡驱动，各种显卡驱动，官方下载，
属于 non-free 的那些固件，主页，（免费下载，免费使用，）
https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/
Debian 11
https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/bullseye/
https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/bullseye/current/
Debian 10
https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/buster/
https://cdimage.debian.org/cdimage/unofficial/non-free/firmware/buster/current/
Debian 9
http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/stretch/
http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/stretch/current/
Debian 8
http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/jessie/
http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/jessie/current/
搜索其它固件或软件包
https://packages.debian.org/search?keywords=firmware
～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～
下载对应版本的压缩包或 zip 文件，然后解压到一个 FAT32 格式的 U 盘里面，备用，（必备）
在安装 Debian 操作系统过程中，DVD 安装光盘会自动检测网卡驱动，如果缺少某个网卡驱动的固件，就会跳出一个对话框，这个时候插入 U 盘，然后确认，系统就会自动从 U 盘里找到相应的固件并自动安装，
--- 引用自: jingyue 于 三月 09, 2018, 09:57:07 pm ---
Debian 各种桌面环境 ( 含 non-free 固件 ) 的 Live-CD 光盘镜像下载地址，
--- End quote ---
jingyue:
FreeBSD，
杀毒软件：clamtk，解决clamtk中文界面乱码问题：暂时可使用英文界面，
--- 引用 ---
# rm -r /usr/local/share/locale/zh_CN/LC_MESSAGES/clamtk.mo
--- End quote ---
PDF 文档浏览工具：okular，
磁盘文件分布统计管理工具：filelight，
windows 模拟器： playonbsd ( 可以安装游戏 ,安装微软的 office 2003 / office 2007 等等 )
虚拟机软件：virtualbox，
光盘编辑软件：isomaster，
光盘刻录软件：xfburn，
jingyue:
UNIX 防火墙应用实例：（IPFW 防火墙规则），
IPFW 防火墙过滤规则（白名单模式），有防止 IP 地址欺骗功能，有过滤碎片攻击和 RST 攻击功能，适用于个人桌面电脑，支持 IPv4 / IPv6，
可应用于 FreeBSD，苹果电脑操作系统 Mac OS X，
--- 引用 ---
# ipfw list
00100 allow ip from 127.0.0.0/8 to 127.0.0.0/8 via lo0
00200 allow ip6 from ::1 to ::1 via lo0
00300 deny ip from any to 127.0.0.0/8
00400 deny ip6 from any to ::1
00500 deny ip from 127.0.0.0/8 to any
00600 deny ip6 from ::1 to any
00700 deny tcp from any to any frag
00800 deny ip from any to any not antispoof in
00900 deny tcp from any to me tcpflags rst in
01000 deny tcp from any to me6 tcpflags rst in
01100 check-state
01200 deny icmp from any to me in
01300 deny ipv6-icmp from any to me6 in
01400 deny tcp from any to me setup
01500 deny tcp from any to me6 setup
01600 deny tcp from any to any established
01700 allow tcp from me to any setup keep-state :default
01800 allow tcp from me6 to any setup keep-state :default
01900 deny tcp from any to any
02000 allow udp from me to any keep-state :default
02100 allow udp from me6 to any keep-state :default
02200 deny udp from any to any
02300 allow ip from me to any out keep-state :default
02400 allow ip6 from me6 to any out keep-state :default
02500 allow icmp from me to any keep-state :default
02600 allow ipv6-icmp from me6 to any keep-state :default
02700 deny icmp from any to any
02800 deny ipv6-icmp from any to any
02900 deny log ip from any to any
65535 allow ip from any to any
--- End quote ---
仅供参考
～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～～
FreeBSD 12.0 防火墙 ipfw，
rc.conf（局部）
--- 引用 ---
firewall_enable="YES" # Set to YES to enable firewall functionality
firewall_script="/etc/rc.firewall" # Which script to run to set up the firewall
firewall_type="workstation" # Firewall type (see /etc/rc.firewall)
--- End quote ---
添加执行权限，
--- 引用 ---
# chmod +x /etc/rc.firewall
--- End quote ---
终端命令临时添加两条阻止 RST 攻击的规则，（firewall_type="workstation"）
--- 引用 ---
# ipfw add 510 drop tcp from any to me tcpflags rst in
# ipfw add 520 drop tcp from any to me6 tcpflags rst in
--- End quote ---
jingyue:
FreeBSD 11.0-RELEASE security update:
--- 引用 ---
# freebsd-update fetch
--- End quote ---
--- 引用 ---
# freebsd-update install
--- End quote ---
--- 引用 ---
$ freebsd-version
11.0-RELEASE-p12
--- End quote ---
FreeBSD 11.0-RELEASE package update:
--- 引用 ---
# pkg update
--- End quote ---
--- 引用 ---
# pkg upgrade
--- End quote ---
--- 引用 ---
$ freebsd-version
11.0-RELEASE-p12
--- End quote ---
--- 引用 ---
$ wine --version
wine-2.0.1
--- End quote ---
jingyue:
FreeBSD 11.0-RELEASE upgrade to FreeBSD 11.1-RELEASE:
( 1 )
--- 引用 ---
# freebsd-update -r 11.1-RELEASE upgrade
# y
# q
--- End quote ---
--- 引用 ---
# freebsd-update install
# reboot
--- End quote ---
( 2 )
--- 引用 ---
# freebsd-version
11.0-RELEASE-p12
--- End quote ---
--- 引用 ---
# freebsd-update install
--- End quote ---
--- 引用 ---
# freebsd-version
11.1-RELEASE-p1
--- End quote ---
导航条
[0] 帖子列表
[#] 下一页
[*] 前一页
Go to full version