Re: laptop protection in an office network

2015-08-30 Thread Martin Read
On 30/08/15 03:20, rlhar...@oplink.net wrote: Back in the 1960's and 1970's, manufacturers such as Honeywell and Cherry made keyswitches with a life rating in the tens of millions or even hundreds of millions of keystrokes. Cherry still *are* (or at some point resumed) making mechanical keyswi

Re: laptop protection in an office network

2015-08-30 Thread Lisi Reisz
On Monday 31 August 2015 04:42:12 Doug wrote: > On 08/29/2015 09:20 PM, rlhar...@oplink.net wrote: > > On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > >> On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > >>> Forgive me; my fingers are dyslexic. > >> > >> So are mine. They don

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 04:00:07 -0500, rlhar...@oplink.net wrote: > On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote: > > ... We went with a very fine comb over things. It's always a balance > > between convenience/feasibility and security. You're not at the NSA, > > trying to whistle-blow,

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 18:28:14 +0200, to...@tuxteam.de wrote: > On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote: > > On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > > > > > I know for sure: my printing runs perfectly fine without Avahi [...] > > > This is a static configura

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote: > On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > > > On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: > > > > [...] > > > > > None of these. Bonjour plays a central role i

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: > > [...] > > > None of these. Bonjour plays a central role in printing over a network. > > Discarding it as a very useful tool isn't very helpful. > > It aids in printer disco

Re: laptop protection in an office network

2015-08-30 Thread rlharris
On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote: > ... We went with a very fine comb over things. It's always a balance > between convenience/feasibility and security. You're not at the NSA, > trying to whistle-blow, after all (use TAILS for that, and some help from > trusted friends). If y

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 30, 2015 at 09:25:23AM +0100, Joe wrote: > On Sun, 30 Aug 2015 09:47:56 +0200 > wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > > > > > > > > Its only lis

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 3:56 pm, to...@tuxteam.de wrote: > >> tcp 0 00.0.0.0:0.0.0.0:* LIS 561/inetd > > > > As others noted: what's inetd doing on ? Do

Re: laptop protection in an office network

2015-08-30 Thread Joe
On Sun, 30 Aug 2015 09:47:56 +0200 wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > > > > Its only listening on localhost. What's the problem? > > You're right, I missed that. > Which is why I suggested nmap. When you've

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > On Sat 29 Aug 2015 at 22:56:50 +0200, to...@tuxteam.de wrote: > > > On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: [...] > > > tcp 0 00.0.0.0:22 0.0.0

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: [...] > None of these. Bonjour plays a central role in printing over a network. > Discarding it as a very useful tool isn't very helpful. It aids in printer discovery. If your configuration is s

Re: laptop protection in an office network

2015-08-30 Thread Chris Bannister
On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote: > > At this point, I think that I should make a fresh installation, keeping in > mind the comments which you and others have made. And configure everything from scratch again? That seems a bit extreme. Isn't it easier just to re

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Sunday 30 August 2015 00:38:49 David Wright wrote: > Quoting Gene Heskett (ghesk...@wdtv.com): > > I found an ACER keyboard that at first seemed to be ideal for such > > an environment, but one often picks up the keyboard and takes it to > > the machine so you can see what you are doing much mo

Re: laptop protection in an office network

2015-08-29 Thread David Wright
Quoting Gene Heskett (ghesk...@wdtv.com): > I found an ACER keyboard that at first seemed to be ideal for such an > environment, but one often picks up the keyboard and takes it to the > machine so you can see what you are doing much more precisely when doing > the setup to run a job. Unfortun

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 22:20:45 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > > On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > >> Forgive me; my fingers are dyslexic. > > > > So are mine. They don't type what I tell them to lots of the t

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sun, August 30, 2015 10:42 pm, Doug wrote: > What you need is an IBM model M keyboard. They are refurbished and sold > by Clicky Keys: > > http://www.clickykeyboards.com/ > (You can get a keyboard modifier program to make some hardly-used key > into a Win key. I have selected the * above the num

Re: laptop protection in an office network

2015-08-29 Thread Doug
On 08/29/2015 09:20 PM, rlhar...@oplink.net wrote: On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: Forgive me; my fingers are dyslexic. So are mine. They don't type what I tell them to lots of the time. Coulnd't be the accu

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: >> Forgive me; my fingers are dyslexic. > So are mine. They don't type what I tell them to lots of the time. > Coulnd't be the accumulated years (nearly 81) could it? Not necessar

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 7:35 pm, Gene Heskett wrote: > > NSF is incorrect, its NFS, aka Network File System. > > Forgive me; my fingers are dyslexic. > > RLH So are mine. They don't type what I tell them to lots of the time. Couln

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 7:35 pm, Gene Heskett wrote: > NSF is incorrect, its NFS, aka Network File System. Forgive me; my fingers are dyslexic. RLH -- Bumper Sticker: DYSLEXICS UNTIE!

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 15:05:57 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 1:39 pm, Reco wrote: > > Something like this should save you from the most troubles provided > > that you don't plan to use your laptop as a print server or NFS: > > I am not sure how "print server" is defined

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 3:56 pm, to...@tuxteam.de wrote: >> tcp 0 00.0.0.0:0.0.0.0:* LIS 561/inetd > > As others noted: what's inetd doing on ? Do have a look at > its config files (somewhere in /etc/inetd.conf). As I noted previously, port is the approx server; t

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sun 30 Aug 2015 at 01:22:16 +0300, Reco wrote: > On Sat, 29 Aug 2015 23:00:51 +0100 > Brian wrote: > > > > I hadn't appreciated that iptables main function is papering over the > > cracks. > > It's the most common usage of iptables IMO, and, to some extent it's > Unix-style. I.e. you don't

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:56:50 +0200, to...@tuxteam.de wrote: > On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: > > > > # netstat -lntup > > Active Internet connections (only servers) > > Prot Rec Snd Local AddressForeign State PID/Program name > > -Q -Q

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:58:57 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 20:40:47 +0100 > Brian wrote: > > > On Sat 29 Aug 2015 at 22:18:00 +0300, Reco wrote: > > > > > Hi. > > > > > > On Sat, 29 Aug 2015 20:01:40 +0100 > > > Brian wrote: > > > > > > > On Sat 29 Aug 2015 at 21:39:2

Re: laptop protection in an office network

2015-08-29 Thread Ron
On Sat, 29 Aug 2015 15:42:08 -0500 rlhar...@oplink.net wrote: > To get back to the reason I started this thread, my goal is to be able to > go into a foreign network (most likely all-Windows, but there always is > the possibility that someone is running a Macintosh) and come back home > "disease-f

Re: laptop protection in an office network

2015-08-29 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > Also netstat (issued from your laptop) gives insight. For example > > 'netstat - -lntu' shows you the TCP or UDP listeni

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 3:28 pm, rlhar...@oplink.net wrote: (addendum to my previous post) To get back to the reason I started this thread, my goal is to be able to go into a foreign network (most likely all-Windows, but there always is the possibility that someone is running a Macintosh) and com

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:52 pm, Brian wrote: > But your question was about taking your laptop onto a foreign network. > Which goalposts do you want to aim for? What is your point if we take > this into account? When I go into the other guy's office, he takes his windows laptop computer and is goi

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 14:25:17 -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 2:01 pm, Brian wrote: > > There is much value in mDNS in an office network with CUPS nowadays. > > Simply out of custom and the influence of the guru who helped me get > started in Debian, I use static ip a

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:26 pm, Reco wrote: >> is the port used by the approx server. Months ago I had to >> install Debian on a system in another location which had a substandard >> DSL connection. And whenever I do a Debian netinst, I always use >> approx, "just in case". So that is why

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:18:00 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 20:01:40 +0100 > Brian wrote: > > > On Sat 29 Aug 2015 at 21:39:21 +0300, Reco wrote: > > > > > Hi. > > > > > > On Sat, 29 Aug 2015 13:25:28 -0500 > > > rlhar...@oplink.net wrote: > > > > > > > On Sat, August 2

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:01 pm, Brian wrote: > There is much value in mDNS in an office network with CUPS nowadays. Simply out of custom and the influence of the guru who helped me get started in Debian, I use static ip addresses for everything (including the printer) in my LAN, except the laptop

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 1:39 pm, Reco wrote: > Something like this should save you from the most troubles provided > that you don't plan to use your laptop as a print server or NFS: I am not sure how "print server" is defined. I installed CUPS so that I can print to a laser printer in my home ne

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 21:39:21 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 13:25:28 -0500 > rlhar...@oplink.net wrote: > > > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > > Also netstat (issued from your laptop) gives insight. For example > > > 'netstat - -lntu' shows you th

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > Also netstat (issued from your laptop) gives insight. For example > 'netstat - -lntu' shows you the TCP or UDP listening sockets. If you are > root (or sudo, of course), the extra option -p tells you which process is > "at the other side" l

Re: laptop protection in an office network

2015-08-29 Thread Joe
On Sat, 29 Aug 2015 11:12:07 -0500 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > > Also netstat (issued from your laptop) gives insight. For example > > 'netstat > > - -lntu' shows you the TCP or UDP listening sockets. If you are > > root (or sudo, of c

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > Also netstat (issued from your laptop) gives insight. For example > 'netstat > - -lntu' shows you the TCP or UDP listening sockets. If you are root (or > sudo, of course), the extra option -p tells you which process is "at the > other side

Re: laptop protection in an office network

2015-08-29 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 03:13:59AM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 2:10 am, Joe wrote: > > Do you have other Linux machines in your network? If so, use nmap from > > one of them to see what services your laptop is offering.

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:10 am, Joe wrote: > Do you have other Linux machines in your network? If so, use nmap from > one of them to see what services your laptop is offering. > > It is possible to install nmap on Windows, but Windows networking is > such a pain these days that I wouldn't trust th

Re: laptop protection in an office network

2015-08-29 Thread Joe
On Sat, 29 Aug 2015 01:16:35 -0500 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 12:53 am, Riley Baird wrote: > > On Fri, 28 Aug 2015 23:56:17 -0500 > > rlhar...@oplink.net wrote: > >> Do I need to take special precautions such as configuring the > >> iptable firewall on my laptop? Is the

Re: laptop protection in an office network

2015-08-28 Thread rlharris
On Sat, August 29, 2015 12:53 am, Riley Baird wrote: > On Fri, 28 Aug 2015 23:56:17 -0500 > rlhar...@oplink.net wrote: >> Do I need to take special precautions such as configuring the iptable >> firewall on my laptop? Is the laptop likely to "pick up" anything >> (virus, trojan, or whatever) which

Re: laptop protection in an office network

2015-08-28 Thread Riley Baird
On Fri, 28 Aug 2015 23:56:17 -0500 rlhar...@oplink.net wrote: > Several times a month I need to take my laptop (which is running Debian > Jessie) into the office of a client and connect it to his network (he has > both Ethernet and WiFi). The need is to view and save web pages (real > estate list

laptop protection in an office network

2015-08-28 Thread rlharris
Several times a month I need to take my laptop (which is running Debian Jessie) into the office of a client and connect it to his network (he has both Ethernet and WiFi). The need is to view and save web pages (real estate listings) posted by commercial listing services and by other agencies. The