Caltrops - American McGee's Honda Civic





	[quote name="The Happiness Engine"][quote name="Ice Cream Jonsey"]I know people say you don't need a UI. I need a UI. I have tried Freenx, Remote Desktop and TightViewer. If I do get in, I get a black or a gray screen. Nnnngh. I need to read up on x server versus KDE versus gnome versus vncserver and see what does what. This isn't really a question.[/quote] lern 2 bash. I'm a sysadmin, sorry. Trying to run some Xwindows bullshit will eat all your resources and still suck terribly. Pretend you're 14 and trying to load DOOM2. [quote] So, another friend of mine is gonna access the machine as well. He frequently goes to coffee shops to code. I would also like to be able to access this from anywhere in the world. So I want to lock down ssh... since he and I use Windows, how do we make rsa keys? It <a href="https://www.racf.bnl.gov/docs/authentication/ssh/sshkeygenwin">LOOKS</a> like this will do it? [/quote] With Windows, everyone uses putty because the alternatives are all somehow impossibly more terrible. Putty can generate keys, but hilariously refuses to store them in openssh format. It will show you the key once when you generate it though so copy and save that. Because I'm a retarded it took me awhile to get a good keypair analogy: the public key is a lock and the private key is well, a key. So put your public key everywhere and keep your private key safe. On a linux machine the public key goes in ~/.ssh/known_hosts, one key per line. Install something like denyhosts or fail2ban to lock out people to try to brute-force ssh but otherwise leave it unfirewalled. On the subject of firewalling, just <a href="http://firehol.sourceforge.net/">use this</a>. My ruleset is like all of 5 lines. You'll probably want to setup /etc/ssh/sshd_config to not allow password-only logins. [quote] What on earth is "domain.com" doing? All the tutorials say you can have anything there for domain.com. I don't see how it can be arbitrary. I don't see how it can be arbitrary and still provide some useful function, haha. [/quote] I think this was covered well enough, but your hosts file is just a way to shortcut DNS. You put an IP, an FQDN (ideally), then a space-separated list of short hostnames. Do you want to be able to type "telnet bob" and have it do something? That's your file. Unless something stupid seems to be happening ignore it.[/quote]