slacky.eu

Codice: Seleziona tutto

#!/bin/sh
#
# This script will be executed *after* all the other init scripts.

#set the overcommit memory to no more that the available amount
#/sbin/sysctl -w vm.overcommit_memory=2

#load hw monitor module, specific to my computer
modprobe w83627hf

#load agpgart module
#modprobe agpgart

#load dri module for mga (this must be loaded after agpgart)
#modprobe mga

#load ip_tables
#echo loading ip_tables
#modprobe ip_tables

##load ip_conntrack
#echo loading ip_conntrack
#modprobe ip_conntrack


##load ip_conntrack_ftp
#echo loading ip_conntrack_ftp
#modprobe ip_conntrack_ftp


#load ip_nat_ftp: used for active ftp
#echo loading ip_nat_ftp
#modprobe ip_nat_ftp


#disable Explicit Congestion Notification: most internet servers do not
#connect if it is enabled, because of a bug inside them
if [ -e /proc/sys/net/ipv4/tcp_ecn ] ; then
    echo 0 > /proc/sys/net/ipv4/tcp_ecn
    echo "ECN disabled"
fi


#enable syncookies
if [ -e /proc/sys/net/ipv4/tcp_syncookies ] ; then
    echo 1 > /proc/sys/net/ipv4/tcp_syncookies
    echo "Syncookies enabled"
fi


#enable IP forwarding
#if [ -e /proc/sys/net/ipv4/ip_forward ] ; then
#    echo 1 > /proc/sys/net/ipv4/ip_forward
#    echo IP forwarding enabled
#fi

#disables replies to ICMP
if [ -e /proc/sys/net/ipv4/icmp_echo_ignore_all ] ; then
    echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all
    echo "ICMP echo replies disabled"
fi

#disable echo broadcasts replies (anti-smurf)
if [ -e /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts ] ; then
    echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
    echo "Echo broadcasts replies disabled (anti-smurf)"
fi


#do not accept IP packets with source routing
if [ -e /proc/sys/net/ipv4/conf/all/accept_source_route ] ; then
    echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
    echo "IP packets with source routing will be rejected"
fi


#do not accept ICMP redirect
if [ -e /proc/sys/net/ipv4/conf/all/accept_redirects ] ; then
    echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects
    echo "ICMP redirect packets will be rejected"
fi


#enable bogus error messages protection
if [ -e /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses ] ; then
    echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
    echo "Protect against bogus error messages enabled"
fi


#enable log of martians packets
if [ -e /proc/sys/net/ipv4/conf/all/log_martians ] ; then
    echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
    echo "Logging of martians enabled"
fi


#set iptables firewall rules
if [ -x /etc/rc.d/rc.iptables ] ; then
  . /etc/rc.d/rc.iptables
fi

#PopFile spam proxy
if [ -x /etc/rc.d/rc.popfile ] ; then
  . /etc/rc.d/rc.popfile start
fi

#logrotate, for those system not always on
echo "Rotate logs"
/etc/cron.daily/logrotate

#set the numlock key for the first seven consoles
for t in 1 2 3 4 5 6
do
    /usr/bin/setleds -D +num -caps < /dev/tty$t > /dev/null
done

touch /var/lock/subsys/local


#Fuse
# To disable Fuse, chmod rc.fuse to 644
if [ -x /etc/rc.d/rc.fuse ]; then
	sh /etc/rc.d/rc.fuse start
fi

#Bluetooth
# To disable Bluetooth, chmod rc.bluetooth and rc.messagebus to 644
# rc.messagebus starts the dbus daemon, used by bluez, so it must be
# started before starting rc.bluetooth
if [ -x /etc/rc.d/rc.messagebus ]; then
	sh /etc/rc.d/rc.messagebus start
fi

if [ -x /etc/rc.d/rc.bluetooth ]; then
	sh /etc/rc.d/rc.bluetooth start
fi