Gecko [ www.jobworksschool.com ]

Name	Size	Permission	Date
:etc:apt:apt.conf.d:20auto-upgrades	80 B	-rw-r--r--	2024-02-12 17:50
:etc:apt:apt.conf.d:50unattended-upgrades	6.01 KB	-rw-r--r--	2024-02-12 17:50
:etc:default:grub	1.5 KB	-rw-r--r--	2025-11-05 21:37
:etc:default:sysstat	284 B	-rw-------	2025-08-05 17:14
:etc:php:8.3:mods-available:calendar.ini	74 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:ctype.ini	71 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:curl.ini	68 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:dom.ini	66 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:exif.ini	70 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:ffi.ini	69 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:fileinfo.ini	74 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:ftp.ini	69 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:gd.ini	64 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:gettext.ini	73 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:iconv.ini	71 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:mysqli.ini	71 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:mysqlnd.ini	72 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:opcache.ini	95 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:pdo.ini	69 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:pdo_mysql.ini	74 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:phar.ini	70 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:posix.ini	71 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:readline.ini	76 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:shmop.ini	71 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:simplexml.ini	72 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:sockets.ini	73 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:sysvmsg.ini	73 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:sysvsem.ini	73 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:sysvshm.ini	73 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:tokenizer.ini	75 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:xml.ini	66 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:xmlreader.ini	72 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:xmlwriter.ini	72 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:xsl.ini	66 B	-rw-r--r--	2025-07-14 18:30
:etc:php:8.3:mods-available:zip.ini	66 B	-rw-r--r--	2025-07-14 18:30
:etc:rsyslog.d:50-default.conf	1.1 KB	-rw-r--r--	2025-08-05 17:14
:etc:ssh:sshd_config	3.43 KB	-rw-r--r--	2025-08-26 13:49
:etc:ufw:after.rules	1004 B	-rw-r--r--	2025-08-05 17:14
:etc:ufw:after6.rules	915 B	-rw-r--r--	2025-08-05 17:14
:etc:ufw:before.rules	2.48 KB	-rw-r--r--	2025-08-05 17:14
:etc:ufw:before6.rules	6.54 KB	-rw-r--r--	2025-08-05 17:14

Rename

#
# rules.before
#
# Rules that should be run before the ufw command line added rules. Custom
# rules should be added to one of these chains:
#   ufw6-before-input
#   ufw6-before-output
#   ufw6-before-forward
#

# Don't delete these required lines, otherwise there will be errors
*filter
:ufw6-before-input - [0:0]
:ufw6-before-output - [0:0]
:ufw6-before-forward - [0:0]
# End required lines

# allow all on loopback
-A ufw6-before-input -i lo -j ACCEPT
-A ufw6-before-output -o lo -j ACCEPT

# drop packets with RH0 headers
-A ufw6-before-input -m rt --rt-type 0 -j DROP
-A ufw6-before-forward -m rt --rt-type 0 -j DROP
-A ufw6-before-output -m rt --rt-type 0 -j DROP

# quickly process packets for which we already have a connection
-A ufw6-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A ufw6-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A ufw6-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

# multicast ping replies are part of the ok icmp codes for INPUT (rfc4890,
# 4.4.1 and 4.4.2), but don't have an associated connection and are otherwise
# be marked INVALID, so allow here instead.
-A ufw6-before-input -p icmpv6 --icmpv6-type echo-reply -j ACCEPT

# drop INVALID packets (logs these in loglevel medium and higher)
-A ufw6-before-input -m conntrack --ctstate INVALID -j ufw6-logging-deny
-A ufw6-before-input -m conntrack --ctstate INVALID -j DROP

# ok icmp codes for INPUT (rfc4890, 4.4.1 and 4.4.2)
-A ufw6-before-input -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT
# codes 0 and 1
-A ufw6-before-input -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT
# codes 0-2 (echo-reply needs to be before INVALID, see above)
-A ufw6-before-input -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type echo-request -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type router-solicitation -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type neighbor-solicitation -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-input -p icmpv6 --icmpv6-type neighbor-advertisement -m hl --hl-eq 255 -j ACCEPT
# IND solicitation
-A ufw6-before-input -p icmpv6 --icmpv6-type 141 -m hl --hl-eq 255 -j ACCEPT
# IND advertisement
-A ufw6-before-input -p icmpv6 --icmpv6-type 142 -m hl --hl-eq 255 -j ACCEPT
# MLD query
-A ufw6-before-input -p icmpv6 --icmpv6-type 130 -s fe80::/10 -j ACCEPT
# MLD report
-A ufw6-before-input -p icmpv6 --icmpv6-type 131 -s fe80::/10 -j ACCEPT
# MLD done
-A ufw6-before-input -p icmpv6 --icmpv6-type 132 -s fe80::/10 -j ACCEPT
# MLD report v2
-A ufw6-before-input -p icmpv6 --icmpv6-type 143 -s fe80::/10 -j ACCEPT
# SEND certificate path solicitation
-A ufw6-before-input -p icmpv6 --icmpv6-type 148 -m hl --hl-eq 255 -j ACCEPT
# SEND certificate path advertisement
-A ufw6-before-input -p icmpv6 --icmpv6-type 149 -m hl --hl-eq 255 -j ACCEPT
# MR advertisement
-A ufw6-before-input -p icmpv6 --icmpv6-type 151 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT
# MR solicitation
-A ufw6-before-input -p icmpv6 --icmpv6-type 152 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT
# MR termination
-A ufw6-before-input -p icmpv6 --icmpv6-type 153 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT

# ok icmp codes for OUTPUT (rfc4890, 4.4.1 and 4.4.2)
-A ufw6-before-output -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT
# codes 0 and 1
-A ufw6-before-output -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT
# codes 0-2
-A ufw6-before-output -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type echo-request -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type echo-reply -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type router-solicitation -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type neighbor-advertisement -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type neighbor-solicitation -m hl --hl-eq 255 -j ACCEPT
-A ufw6-before-output -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT
# IND solicitation
-A ufw6-before-output -p icmpv6 --icmpv6-type 141 -m hl --hl-eq 255 -j ACCEPT
# IND advertisement
-A ufw6-before-output -p icmpv6 --icmpv6-type 142 -m hl --hl-eq 255 -j ACCEPT
# MLD query
-A ufw6-before-output -p icmpv6 --icmpv6-type 130 -s fe80::/10 -j ACCEPT
# MLD report
-A ufw6-before-output -p icmpv6 --icmpv6-type 131 -s fe80::/10 -j ACCEPT
# MLD done
-A ufw6-before-output -p icmpv6 --icmpv6-type 132 -s fe80::/10 -j ACCEPT
# MLD report v2
-A ufw6-before-output -p icmpv6 --icmpv6-type 143 -s fe80::/10 -j ACCEPT
# SEND certificate path solicitation
-A ufw6-before-output -p icmpv6 --icmpv6-type 148 -m hl --hl-eq 255 -j ACCEPT
# SEND certificate path advertisement
-A ufw6-before-output -p icmpv6 --icmpv6-type 149 -m hl --hl-eq 255 -j ACCEPT
# MR advertisement
-A ufw6-before-output -p icmpv6 --icmpv6-type 151 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT
# MR solicitation
-A ufw6-before-output -p icmpv6 --icmpv6-type 152 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT
# MR termination
-A ufw6-before-output -p icmpv6 --icmpv6-type 153 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT

# ok icmp codes for FORWARD (rfc4890, 4.3.1)
-A ufw6-before-forward -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT
-A ufw6-before-forward -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT
# codes 0 and 1
-A ufw6-before-forward -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT
# codes 0-2
-A ufw6-before-forward -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT
-A ufw6-before-forward -p icmpv6 --icmpv6-type echo-request -j ACCEPT
-A ufw6-before-forward -p icmpv6 --icmpv6-type echo-reply -j ACCEPT
# ok icmp codes for FORWARD (rfc4890, 4.3.2)
# Home Agent Address Discovery Reques
-A ufw6-before-input -p icmpv6 --icmpv6-type 144 -j ACCEPT
# Home Agent Address Discovery Reply
-A ufw6-before-input -p icmpv6 --icmpv6-type 145 -j ACCEPT
# Mobile Prefix Solicitation
-A ufw6-before-input -p icmpv6 --icmpv6-type 146 -j ACCEPT
# Mobile Prefix Advertisement
-A ufw6-before-input -p icmpv6 --icmpv6-type 147 -j ACCEPT

# allow dhcp client to work
-A ufw6-before-input -p udp -s fe80::/10 --sport 547 -d fe80::/10 --dport 546 -j ACCEPT

# allow MULTICAST mDNS for service discovery
-A ufw6-before-input -p udp -d ff02::fb --dport 5353 -j ACCEPT

# allow MULTICAST UPnP for service discovery
-A ufw6-before-input -p udp -d ff02::f --dport 1900 -j ACCEPT

# don't delete the 'COMMIT' line or these rules won't be processed
COMMIT