VNC SSH Tunnel

 
ssh -L localport:host:remoteport username@serverhost

example)

connecting remote host from local desktop

ssh -L 7777:localhost:5900 USER@REMOTE_HOST


in VNC
localhost:7777 reaches out to REMOTE_HOST:5900

 

 

Samba Restrict File Sharing To Particular Users or Network Addresses

https://www.cyberciti.biz/faq/samba-user-network-file-sharing-restictions/

Samba Restrict File Sharing To Particular Users or Network Addresses

Author: Vivek Gite Last updated: June 4, 2021 8 comments

All my local Linux or Unix user accounts will be able to log in to my Samba server and access share. How do I restrict access to particular users or network subnet such as 192.168.2.1/24?

You can use TCP wrappers to limit subnet access via:

Advertisement

1. /etc/hosts.allow – This file describes the names of the hosts which are allowed to use the local INET services, as decided by the /usr/sbin/tcpd server.
2. /etc/hosts.deny – This file describes the names of the hosts which are NOT allowed to use the local INET services, as decided by the /usr/sbin/tcpd server.

Tutorial details
Difficulty level	Easy
Root privileges	No
Requirements	Samba server on Linux or Unix
Est. reading time	2 minutes

Samba Restrict File Sharing To Particular Users or Network Addresses

For example, allow access to smbd service inside LAN only via /etc/hosts.allow:

smbd : 192.168.2.

However, samba may or may not be built to support tcp wrappers.

hosts allow: Samba Configuration

Open your smb.conf file and add the following line to [share] to configuring Host-based share access:

[share]
  hosts allow = 192.168.2. 127.0.0.1

The hosts deny parameter has a higher priority than the hosts allow parameter. For instance:

[share]
  hosts allow = 192.168.2. 127.0.0.1
  hosts deny = router.sweet.home

valid users: Samba Configuration

Open your smb.conf file and add the following line to [share]

[share]
  valid users = user1 user2 @group1 @group2

So we can use share-based access control enables you to grant or deny access to a share for certain users and groups:

[share]
   valid users = +SAMDOM\"Domain Users"
   # block tom
   invalid users = SAMDOM\tom

read only & write only: Samba Configuration

You can also set read and write access to set of users with the read list and write list directives.

[share]
     read only = yes
     write list = user1 user2 @group1 @group2

Examples

Make [sales] share read only but allow user tom and jerry to write it:

[sales]
     comment = All Printers
     path = /nas/fs/sales
     read only = yes
     write list = tom jerry

You can also configure iptables to allow or deny access to the Samba server. See the following pages:

1. What Ports Need To Be Open For Samba To Communicate With Other Windows/Linux Systems?
2. Samba: Linux Iptables Firewall Configuration
3. How to configure Samba to use SMBv2 and disable SMBv1 on Linux or Unix

 

https://serverfault.com/questions/683518/check-if-samba-only-works-locally 

It is probably secure, but there is no guarantee for that.

The samba service runs as a process listening at least on the TCP ports 139 and 445. By default it accepts connections from everywhere.

Your host allow/deny parameters make only the authentication impossible on these ports, but they don't forbid the connections to your samba service, which will be so attackable by different methods (for example, DoS attack or for any possible sechole in your system).

On my opinion, the best and most simple thing which you can do, if you set up samba to listen only on your internal network. It can be done with the interfaces setting in your smb.conf. For example, set an interfaces = 192.168.1.1/24, if your internal IP is 192.168.1.1 on a /24 subnet.

As an alternative, you can change your firewall settings as well. It depends on your firewall. In case of iptables, an iptables -A INPUT -j DROP ! -s 192.168.1.0/24 -m multiport -p tcp --dports 139,445 would deny every incoming connections to your samba service which originates out of your internal network.

 

Linux Firefox broken sound

 https://tqdev.com/2021-firefox-ubuntu-crackling-sound

 

 

Fix 1:

Go to about:config in Firefox and search for "media.webspeech.synth.enabled" and set it to "false" (double clicking on the entry should do it) then close Firefox. Don't forget to restart Firefox.

Fix 2:

It seems related to speech-dispatcher (some text-to-speech utility), so you can try:

killall speech-dispatcher

If the sound comes back to normal you can remove it completely (if you don't need it) with:

sudo apt remove speech-dispatcher

Don't forget to restart Firefox.

Google test

https://medium.com/@jgrant.esteve/google-test-compiled-from-source-c7ab87329321

 

 

 1. get google test source

git clone https://github.com/google/googletest.git

2.  cd into googletest.

cmake .. 

library files should be generated 

make install 

this command install header files and library to common path   

so you can include gtest header and start writing test cases for your code

3.  example files

#include "gtest/gtest.h"
#include "main.cpp"   

TEST(Name, Test) {
  ASSERT_TRUE(1 == 1);
} 

int main(int argc, char **argv) 

{
  testing::InitGoogleTest(&argc, argv);
  return RUN_ALL_TESTS();
}

 

4. compile with command 

 $ g++ example.cpp -o example -lgtest -lpthread

Keyboard shortcut for taking selected area screenshot in Mint 20.04

 

Keyboard shortcut for taking selected area screenshot in Mint 20.04

 

Mate 20 does not have a keybinding for a partial screen print.
You can make one yourself.

In a terminal window type:

Code: Select all

mate-keybinding-properties

This will give you the keyboard shortcut window.

Click the add button.
Choose a name like 'partial screenprint'
Copy the following line to the command field:

Code: Select all

bash -c "sleep 0.2; mate-screenshot -a"

Click apply.

Your key is now defined but it is still disabled.
Double click on the word disabled behind your key and enter your preferred key combination. I would suggest ctrl-prtscr as shift-prtscr is already taken.

Click close and you are done.

Delete Invalid VM in ESXi

http://www.firewall.cx/general-topics-reviews/virtualization-vm-backup/1259-vmware-esxi-invalid-status-virtual-machine.html

 

log in with SSH intoVMware Esxi server.

following command:

]vim-cmd vmsvc/getallvms | grep invalid
]vim-cmd /vmsvc/unregister NUMBER_OF_INVALID_VM_HERE

Firefox Delete all Saved Login.

use below address copy and paste into address bar and enter, current version 84.0.1

chrome://pippki/content/resetpassword.xhtml

  

Lack of basic feature, UI/UX guy must didn't do their job. I am not designer but I can say I can do better job than this one. ha!