Re: laptop protection in an office network

2015-08-30 Thread Martin Read
On 30/08/15 03:20, rlhar...@oplink.net wrote: Back in the 1960's and 1970's, manufacturers such as Honeywell and Cherry made keyswitches with a life rating in the tens of millions or even hundreds of millions of keystrokes. Cherry still *are* (or at some point resumed) making mechanical keyswi

Re: laptop protection in an office network

2015-08-30 Thread Lisi Reisz
On Monday 31 August 2015 04:42:12 Doug wrote: > On 08/29/2015 09:20 PM, rlhar...@oplink.net wrote: > > On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > >> On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > >>> Forgive me; my fingers are dyslexic. > >> > >> So are mine. They don

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 04:00:07 -0500, rlhar...@oplink.net wrote: > On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote: > > ... We went with a very fine comb over things. It's always a balance > > between convenience/feasibility and security. You're not at the NSA, > > trying to whistle-blow,

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 18:28:14 +0200, to...@tuxteam.de wrote: > On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote: > > On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > > > > > I know for sure: my printing runs perfectly fine without Avahi [...] > > > This is a static configura

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 30, 2015 at 03:07:44PM +0100, Brian wrote: > On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > > > On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: > > > > [...] > > > > > None of these. Bonjour plays a central role i

Re: laptop protection in an office network

2015-08-30 Thread Brian
On Sun 30 Aug 2015 at 09:31:50 +0200, to...@tuxteam.de wrote: > On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: > > [...] > > > None of these. Bonjour plays a central role in printing over a network. > > Discarding it as a very useful tool isn't very helpful. > > It aids in printer disco

Re: laptop protection in an office network

2015-08-30 Thread rlharris
On Sun, August 30, 2015 3:26 am, to...@tuxteam.de wrote: > ... We went with a very fine comb over things. It's always a balance > between convenience/feasibility and security. You're not at the NSA, > trying to whistle-blow, after all (use TAILS for that, and some help from > trusted friends). If y

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 30, 2015 at 09:25:23AM +0100, Joe wrote: > On Sun, 30 Aug 2015 09:47:56 +0200 > wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > > > > > > > > Its only lis

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 3:56 pm, to...@tuxteam.de wrote: > >> tcp 0 00.0.0.0:0.0.0.0:* LIS 561/inetd > > > > As others noted: what's inetd doing on ? Do

Re: laptop protection in an office network

2015-08-30 Thread Joe
On Sun, 30 Aug 2015 09:47:56 +0200 wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > > > > Its only listening on localhost. What's the problem? > > You're right, I missed that. > Which is why I suggested nmap. When you've

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 11:28:10PM +0100, Brian wrote: > On Sat 29 Aug 2015 at 22:56:50 +0200, to...@tuxteam.de wrote: > > > On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: [...] > > > tcp 0 00.0.0.0:22 0.0.0

Re: laptop protection in an office network

2015-08-30 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 11:00:51PM +0100, Brian wrote: [...] > None of these. Bonjour plays a central role in printing over a network. > Discarding it as a very useful tool isn't very helpful. It aids in printer discovery. If your configuration is s

Re: laptop protection in an office network

2015-08-30 Thread Chris Bannister
On Sat, Aug 29, 2015 at 06:39:46PM -0500, rlhar...@oplink.net wrote: > > At this point, I think that I should make a fresh installation, keeping in > mind the comments which you and others have made. And configure everything from scratch again? That seems a bit extreme. Isn't it easier just to re

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Sunday 30 August 2015 00:38:49 David Wright wrote: > Quoting Gene Heskett (ghesk...@wdtv.com): > > I found an ACER keyboard that at first seemed to be ideal for such > > an environment, but one often picks up the keyboard and takes it to > > the machine so you can see what you are doing much mo

Re: laptop protection in an office network

2015-08-29 Thread David Wright
Quoting Gene Heskett (ghesk...@wdtv.com): > I found an ACER keyboard that at first seemed to be ideal for such an > environment, but one often picks up the keyboard and takes it to the > machine so you can see what you are doing much more precisely when doing > the setup to run a job. Unfortun

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 22:20:45 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > > On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > >> Forgive me; my fingers are dyslexic. > > > > So are mine. They don't type what I tell them to lots of the t

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sun, August 30, 2015 10:42 pm, Doug wrote: > What you need is an IBM model M keyboard. They are refurbished and sold > by Clicky Keys: > > http://www.clickykeyboards.com/ > (You can get a keyboard modifier program to make some hardly-used key > into a Win key. I have selected the * above the num

Re: laptop protection in an office network

2015-08-29 Thread Doug
On 08/29/2015 09:20 PM, rlhar...@oplink.net wrote: On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: Forgive me; my fingers are dyslexic. So are mine. They don't type what I tell them to lots of the time. Coulnd't be the accu

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 8:33 pm, Gene Heskett wrote: > On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: >> Forgive me; my fingers are dyslexic. > So are mine. They don't type what I tell them to lots of the time. > Coulnd't be the accumulated years (nearly 81) could it? Not necessar

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 21:24:47 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 7:35 pm, Gene Heskett wrote: > > NSF is incorrect, its NFS, aka Network File System. > > Forgive me; my fingers are dyslexic. > > RLH So are mine. They don't type what I tell them to lots of the time. Couln

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 7:35 pm, Gene Heskett wrote: > NSF is incorrect, its NFS, aka Network File System. Forgive me; my fingers are dyslexic. RLH -- Bumper Sticker: DYSLEXICS UNTIE!

Re: laptop protection in an office network

2015-08-29 Thread Gene Heskett
On Saturday 29 August 2015 15:05:57 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 1:39 pm, Reco wrote: > > Something like this should save you from the most troubles provided > > that you don't plan to use your laptop as a print server or NFS: > > I am not sure how "print server" is defined

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 3:56 pm, to...@tuxteam.de wrote: >> tcp 0 00.0.0.0:0.0.0.0:* LIS 561/inetd > > As others noted: what's inetd doing on ? Do have a look at > its config files (somewhere in /etc/inetd.conf). As I noted previously, port is the approx server; t

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sun 30 Aug 2015 at 01:22:16 +0300, Reco wrote: > On Sat, 29 Aug 2015 23:00:51 +0100 > Brian wrote: > > > > I hadn't appreciated that iptables main function is papering over the > > cracks. > > It's the most common usage of iptables IMO, and, to some extent it's > Unix-style. I.e. you don't

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:56:50 +0200, to...@tuxteam.de wrote: > On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: > > > > # netstat -lntup > > Active Internet connections (only servers) > > Prot Rec Snd Local AddressForeign State PID/Program name > > -Q -Q

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:58:57 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 20:40:47 +0100 > Brian wrote: > > > On Sat 29 Aug 2015 at 22:18:00 +0300, Reco wrote: > > > > > Hi. > > > > > > On Sat, 29 Aug 2015 20:01:40 +0100 > > > Brian wrote: > > > > > > > On Sat 29 Aug 2015 at 21:39:2

Re: laptop protection in an office network

2015-08-29 Thread Ron
On Sat, 29 Aug 2015 15:42:08 -0500 rlhar...@oplink.net wrote: > To get back to the reason I started this thread, my goal is to be able to > go into a foreign network (most likely all-Windows, but there always is > the possibility that someone is running a Macintosh) and come back home > "disease-f

Re: laptop protection in an office network

2015-08-29 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 01:25:28PM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > Also netstat (issued from your laptop) gives insight. For example > > 'netstat - -lntu' shows you the TCP or UDP listeni

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 3:28 pm, rlhar...@oplink.net wrote: (addendum to my previous post) To get back to the reason I started this thread, my goal is to be able to go into a foreign network (most likely all-Windows, but there always is the possibility that someone is running a Macintosh) and com

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:52 pm, Brian wrote: > But your question was about taking your laptop onto a foreign network. > Which goalposts do you want to aim for? What is your point if we take > this into account? When I go into the other guy's office, he takes his windows laptop computer and is goi

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 14:25:17 -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 2:01 pm, Brian wrote: > > There is much value in mDNS in an office network with CUPS nowadays. > > Simply out of custom and the influence of the guru who helped me get > started in Debian, I use static ip a

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:26 pm, Reco wrote: >> is the port used by the approx server. Months ago I had to >> install Debian on a system in another location which had a substandard >> DSL connection. And whenever I do a Debian netinst, I always use >> approx, "just in case". So that is why

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 22:18:00 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 20:01:40 +0100 > Brian wrote: > > > On Sat 29 Aug 2015 at 21:39:21 +0300, Reco wrote: > > > > > Hi. > > > > > > On Sat, 29 Aug 2015 13:25:28 -0500 > > > rlhar...@oplink.net wrote: > > > > > > > On Sat, August 2

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:01 pm, Brian wrote: > There is much value in mDNS in an office network with CUPS nowadays. Simply out of custom and the influence of the guru who helped me get started in Debian, I use static ip addresses for everything (including the printer) in my LAN, except the laptop

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 1:39 pm, Reco wrote: > Something like this should save you from the most troubles provided > that you don't plan to use your laptop as a print server or NFS: I am not sure how "print server" is defined. I installed CUPS so that I can print to a laser printer in my home ne

Re: laptop protection in an office network

2015-08-29 Thread Brian
On Sat 29 Aug 2015 at 21:39:21 +0300, Reco wrote: > Hi. > > On Sat, 29 Aug 2015 13:25:28 -0500 > rlhar...@oplink.net wrote: > > > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > > Also netstat (issued from your laptop) gives insight. For example > > > 'netstat - -lntu' shows you th

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > Also netstat (issued from your laptop) gives insight. For example > 'netstat - -lntu' shows you the TCP or UDP listening sockets. If you are > root (or sudo, of course), the extra option -p tells you which process is > "at the other side" l

Re: laptop protection in an office network

2015-08-29 Thread Joe
On Sat, 29 Aug 2015 11:12:07 -0500 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > > > Also netstat (issued from your laptop) gives insight. For example > > 'netstat > > - -lntu' shows you the TCP or UDP listening sockets. If you are > > root (or sudo, of c

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 6:53 am, to...@tuxteam.de wrote: > Also netstat (issued from your laptop) gives insight. For example > 'netstat > - -lntu' shows you the TCP or UDP listening sockets. If you are root (or > sudo, of course), the extra option -p tells you which process is "at the > other side

Re: laptop protection in an office network

2015-08-29 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Aug 29, 2015 at 03:13:59AM -0500, rlhar...@oplink.net wrote: > On Sat, August 29, 2015 2:10 am, Joe wrote: > > Do you have other Linux machines in your network? If so, use nmap from > > one of them to see what services your laptop is offering.

Re: laptop protection in an office network

2015-08-29 Thread rlharris
On Sat, August 29, 2015 2:10 am, Joe wrote: > Do you have other Linux machines in your network? If so, use nmap from > one of them to see what services your laptop is offering. > > It is possible to install nmap on Windows, but Windows networking is > such a pain these days that I wouldn't trust th

Re: laptop protection in an office network

2015-08-29 Thread Joe
On Sat, 29 Aug 2015 01:16:35 -0500 rlhar...@oplink.net wrote: > On Sat, August 29, 2015 12:53 am, Riley Baird wrote: > > On Fri, 28 Aug 2015 23:56:17 -0500 > > rlhar...@oplink.net wrote: > >> Do I need to take special precautions such as configuring the > >> iptable firewall on my laptop? Is the

Re: laptop protection in an office network

2015-08-28 Thread rlharris
On Sat, August 29, 2015 12:53 am, Riley Baird wrote: > On Fri, 28 Aug 2015 23:56:17 -0500 > rlhar...@oplink.net wrote: >> Do I need to take special precautions such as configuring the iptable >> firewall on my laptop? Is the laptop likely to "pick up" anything >> (virus, trojan, or whatever) which

Re: laptop protection in an office network

2015-08-28 Thread Riley Baird
On Fri, 28 Aug 2015 23:56:17 -0500 rlhar...@oplink.net wrote: > Several times a month I need to take my laptop (which is running Debian > Jessie) into the office of a client and connect it to his network (he has > both Ethernet and WiFi). The need is to view and save web pages (real > estate list