Linux Users of the World Unite

Sourced from FSF

Will your computer's "Secure Boot" turn out to be "Restricted Boot"?
by Matt Lee — last modified October 17, 2011 14:54

Read more...

The latest computing craze is the Netbook, a small, portable notebook that is light in weight, small in size and quickly connected to the internet.

Linux has had a good run on Netbooks, with return rates about average with Windows version when well-marketed and the user knows they are not getting Windows.

Yet now Microsoft is coming out withe Windows 7 which is supposed to work on even Netbook's meager specifications and blogs lit up with "Windows 7 is a Linux killer!"

Read more...

I don't sacrifice a damn thing by single-booting Linux. It's those Command-Line lovin' Open-Source Only Distros that make lay-people think we are all in the Geek Squad; they have M$Windows on the brain. If they'd ditch their crappy CLI 1990s Linux and get a modern distro like Mint or PCLOS, then they'd understand that WinDoze was trumped LONG TIME AGO by 'Big Daddy' [ask a PCLinux fan]. Now, we have our sights on the best GUI of all, Apple.

We need to make sure though, that we don't do the old 'tow the company [Linux] line' of 'install it and then fix it twice'. The End User wants to do work on their computer, not work on their computer.

The average person that actually does work on their computer thinks we are all fools for 'settling' for Linux' not-ready-for-Prime Time desktops. But you see, Linux IS ready for the desktop; Linux HAS already beaten M$Windows w/ at it's own game of User-Friendlyness. Yet the very biggest names in Linux distros are not User Friendly at all. Just like MicroSoft, they are all large multi-national corporations. Hmmmmmmm.............

An End User does not want to 'tinker' w/ the Operating System, they just want it to work. Any 2008 desktop that can't play a .AVI file without you having to 'fix' it first is a FAILURE, folks. Then OpenSUSE, Ubuntu, and Fedora are dismal embarassments to modern distros like Mint and PCLinuxOS; just like the apes are a laughing stock to the Homo Sapiens.

The End User does not want to hunt down any repositories that do not come w/ the default installation. Once again, they expect it to JUST WORK --and rightfully so.

I am a Linux End User, and I've put my money where my mouth is.

I go all the way back to the 1990s w/ Helix Gnome and Ximian Gnome, when there were no Live-CDs so you had to install everything just to even have a look [using dial-up for days on end]. Everything then was barely a GUI at all; heavy command-line typing all the time. Stuff like copy/paste functions and applicaions were a joke. Linux on the desktop was more of a TOY back then, w/ no real use; definately not anything you'd want to pay for.

You see, I can and have fixed Linux installs and used the Command Line Interface until my eyes and fingers were sore. In 2008, I have no friggin' desire to still be using the CLI ten years later from the Bad Old Days. In 2008, I want to be an End User and I don't want to fix a damn thing. I give TexStar my money and he insures that I don't have to.

The PCLinux GUI is pure Push-Button Sex, folks; I haven't used the CLI in so long that I've forgotten many of the commands. I know people call M$Windows 'the Old Peoples OS', but the PCLOS desktop experience is so evolved that my 60+ parents both single-boot Linux [PCLOS Gnome and TinyMe].

PCLinux repos offer applications that finish at the top of the Best-Dressed List for all software, regardlesss of OS [+Win +Mac +Lin]; names like Opera, VLC, NoteCase, Compix/Fusion, VirtualBox, BlueFish, Pidgin, Scribus, Deluge, BlueTooth, SongBird, AbiWord, FileZilla,TV-Time, nVidiaDock, Picasa, AdobeReader, and of course DVD::Rip.

The End User doesn't need for you to hold his hand, he needs for you to do the work for him ...preferably before he even gets the Live-CD. The End User, in turn, gives you money. Mint and PCLinux understand this concept, the Big Corps do not.

A while ago I was struggling to get my old Dell GX110 CPU with 2 NIC cards to act as a firewall and DHCP server.  I thought by using a full-fledged Linux distro I would be able to later on add such things as Squid, or DansGuardian proxy server and content management controls.

Content filtering and logging is something that software seem to do one one level or another.  Microsoft Vista and the Trend Micro Internet security suite includes parental controls and content filtering options for Windows, plus DansGuardian can be installed on the kid's Edubuntu computer and even my laptop. That's not the issue. The issue is that the first one savvy enough to realize they can bypass it simply by running a LiveCD or  a distro on a USB stick instead of the protected operating system wins!  That is, of course, after thorough attempts at breaking into the controls on the system itself.

By placing these controls on a gateway for the entire household, not only do I protect my file server from being accessed by unwanted hackers, but I protect the entire household regardless of if the user is using the installed operating system or a LiveCD or even if somebody access the wireless network (which I hope to have in the near future). Combine this with making the modem and router physically inaccessible and then I can provide protected access through either the switch or wireless.

The people in the forums were very patient with me and tried to understand my questions as I muddled away trying to set up the gateway using the available documentation and miniscule networking knowledge. I got to the point where I almost had it, I think. That is until a friend at the computer club meeting told me about IPCop.

Actually he mentioned Smoothwall and IPCop, but admitted that he finds himself going back to IPCop. I took a look at it that night and saw the ISO download is rather small plus it facilitates DansGuardian and Squid as well as a scan utility.  That night I downloaded version 1.4.18  and copied it onto my USB drive.

Thankfully this friend also gave me some advice on setting up the system, and told me about IPCop's "zones"

IPCop has a number of zones [1];

• Green for internal (safe)
• Red for external, or the internet (unsafe)
• Blue for wireless (lock down so cannot access Green zone except through VPN or controlled "pinholes")
• Orange for publicly accessible servers (cannot access Green or Blue networks except vial controlled "pinholes") such as mail or web servers

I don't have wireless yet, so I opted for Green + Red zones with one NIC being assigned to each. When I do get wireless then I can either add it to the Green zone and try to lock it down as much as possible, or add it to the Blue zone and lock the wireless access point to bare minimums.

The other piece of information he provided that was a big help is setting the IP address and range.  I foolishly was trying to set up all of the IPs in the same sub-domain as the DSL modem (192.168.1.x). He gave me a suggested internal IP sub-domain of 10.0.7.x  and leaving the external IP with 192.168.1.x.

IPCop also runs a DHCP server, so I can manage to have

With this knowledge in hand I gave installing IPCop a go, and installed it on over my previous attempt.

The installation was very easy, took less than 30 minutes and that's with the installer scanning the NICs to determine it the internal is eth0 or eth1. It helped that I already knew the static IP addresses for the router/gateway, the modem and the server.

Once it is installed and the passwords are set you don't need the keyboard or monitor hooked up to the gateway because it includes a web interface for configuring things.  You just have to remember the passwords you entered for each of the different roles (3 I think).

I feel so much better knowing I've got the gateway and firewall up to protect my network. Now my next excursion is going to be installing DansGuardian content filtering and parental controls. This looks to need to install  the (Unofficial) IPCop Firewqall Addon Server, which seems to include an easy manner to navigate the available addons which I see  DansGuardian being listed as Cop+. Considering the added interest in the Internet by my son, I best get this installed and working quickly.

*hangs her head in shame and waits for the laughter*
How does one vote on the poll exactly?