<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>FalconIA&#039;s BLOG &#187; linux</title>
	<atom:link href="https://falconia.org/blog/archives/tag/linux/feed" rel="self" type="application/rss+xml" />
	<link>https://falconia.org/blog</link>
	<description>FalconIA&#039;s Lazy Blog</description>
	<lastBuildDate>Tue, 02 Dec 2014 01:45:41 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=4.2.38</generator>
	<item>
		<title>Optimize iptables reject rules</title>
		<link>https://falconia.org/blog/archives/464</link>
		<comments>https://falconia.org/blog/archives/464#comments</comments>
		<pubDate>Mon, 01 Dec 2014 09:42:09 +0000</pubDate>
		<dc:creator><![CDATA[FalconIA]]></dc:creator>
				<category><![CDATA[技术杂烩]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[linux]]></category>

		<guid isPermaLink="false">http://falconia.org/blog/?p=464</guid>
		<description><![CDATA[We always use this rule to notice a interloper that the service was prohibited. -A INPUT -j REJECT --reject-with icmp-host-prohibited But, I think it's better to disguise the rejection as no service, rather than notice a interloper there was a service you cannot reache. -A INPUT -p tcp -j REJECT --reject-with tcp-reset -A INPUT -p [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>We always use this rule to notice a interloper that the service was prohibited.<br />
<code>-A INPUT -j REJECT --reject-with icmp-host-prohibited</code><br />
But, I think it's better to disguise the rejection as no service, rather than notice a interloper there was a service you cannot reache.<br />
<code>-A INPUT -p tcp -j REJECT --reject-with tcp-reset<br />
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable<br />
-A INPUT -j REJECT --reject-with icmp-host-prohibited</code></p>
]]></content:encoded>
			<wfw:commentRss>https://falconia.org/blog/archives/464/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Enable numlock on in LightDM</title>
		<link>https://falconia.org/blog/archives/403</link>
		<comments>https://falconia.org/blog/archives/403#comments</comments>
		<pubDate>Wed, 08 Feb 2012 08:01:42 +0000</pubDate>
		<dc:creator><![CDATA[FalconIA]]></dc:creator>
				<category><![CDATA[系统相关]]></category>
		<category><![CDATA[lightdm]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://falconia.org/blog/?p=403</guid>
		<description><![CDATA[$ sudo apt-get install numlockx $ sudo gedit /etc/lightdm/lightdm.conf add this line at he end greeter-setup-script=/usr/bin/numlockx on]]></description>
				<content:encoded><![CDATA[<p><code>$ sudo apt-get install numlockx<br />
$ sudo gedit /etc/lightdm/lightdm.conf</code><br />
add this line at he end<br />
<code>greeter-setup-script=/usr/bin/numlockx on</code></p>
]]></content:encoded>
			<wfw:commentRss>https://falconia.org/blog/archives/403/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
