整理磁盘碎片(Defragment your hard disk)

Defragment your hard disk
Before creating new partitions on your hard drive, you shoulddefragment the drive so that all data is stored at the beginning of theexisting partition. Here is how to do it:
Start up Windows.
First, backup your files to CD-ROM, DVD, or an external hard drive.Also remember to backup your Internet link collection (Favourites) andyour e-mails. If your data is encrypted, it is advisable to decrypt itbefore backing it up. This protects you from data loss becausemodifying hard drive partitions always carries the risk of data loss.
Next, start the Disk Defragmenter program under Windows. The programis located at "Start | All Programs | Utilities | System Programs |Disk Defragmenter". Select hard drive c:\ and click the "Check" button.



Click the "Defragment" button. Depending on the size of thepartition and the amount of data on it, this process can take a longtime (over an hour). If you have very large amounts of data, you canspeed up this process drastically by deleting your files after you havebacked them up (see the previous item) and restoring them once you aredone with the modifications. In this case, please make sure beforehandthat your backup is readable, otherwise there will be wailing andgnashing of teeth.

Click the "Close" button.

There is now space on the harddisk for additional partitions.
Shut down Windows.

创建分区（Creating partitions）

Creating partitions
Now you should plan the layout of your hard disk partitionsregarding file system and size. I recommend creating three or fourpartitions in addition to the Windows partition. The following exampleassumes you have exactly one Windows partition (drive letter C). Yourhard disk would then look like this:
First partition: NTFS or FAT32 (Windows)
Second partition: ext2 or ext3 (this is where Puppy will be installied to)
Third partition: Linux swap (for page files)
Fourth partition: FAT32 (for exchanging data between Windows and Linux)
Optionally, a fifth partition: ext2 or ext3 (Linux)
Windows will continue to reside on your first partition with all itsprograms and data. The second partition (recommended size about 1-2 GB)has a Linux file system (ext2 or ext3). This is the partition Puppywill be installed to. The third partition (exactly as large as yourcomputer's memory) will be a Linux swap partition that Linux can ...well, swap files to. The fourth partition has a FAT32 file system,which is recognized by both Windows and Linux. This partition(recommended size about 5 GB) is used for files that you want to accessfrom both Windows and Linux. If you want to manage large amounts ofdata under Puppy (e.g. music collection, pictures), you should create afifth partition with a Linux file system (ext2/ext3). This file systemcannot be accessed from Windows and is meant for Linux only.
To create the partitions, proceed as follows:
Start Puppy Linux from CD with the "pfix=ram" boot option.
Start the Gparted program: "Menu | System | Gparted partition manager".
First, shrink your Windows partition (NTFS file system). To do this, select the Windows partition /dev/hda1.

Click the "Resize/Move" button.

Reduce the "New Size" value until the "Free Space Following" fieldshows enough free space following for the new partitions. My testcomputer's hard disk has only 3 gigabytes; I am using half of that forthe mew partitions. You probably have a much larger hard drive so yourpartition sizes can be increased accordingly.

Then press the "Resize/Move" button.
Next, select "Edit | Apply All Operations" from the menu.

In the dialogue box that comes up, click the "Apply" button.



Click the "Close" button. You now have an "unallocated" area on your hard disk.
Select the line saying "unallocated" and click the "New" button.

Enter the size of the second partition in the "New Size" field. Thisis where Puppy Linux will be installed to. I recommend a size of 1 to 2gigabytes (i.e., 1024 to 2048 MB). Select ext2 from the "Filesystem"box and click "Add".

Again select the line saying "unallocated" and click the "New" button. (You can see where this is going.)

Enter the size of the third partition in the "New Size" field. Thispartition is to hold Linux's swap files as a Linux swap partition. Youshould make it as large as your computer's memory (RAM). With my testcomputer, this amounts to 128 megabytes (MB). Select linux-swap fromthe "Filesystem" box and click "Add".

Again select the line saying "unallocated" and click the "New" button.

Enter the size of the fourth partition in the "New Size" field.Thispartition is meant for shared access to files from Windows and Linux. Irecommend a size of about 5 gigabytes (5120 MB). Since my test computerdoes not have a large enough hard disk, I am using 396 megabytes (MB)as an example. Select FAT32 from the "Filesystem" box and click "Add".

Hint: if you want to create additional partitions (e.g., for verylarge files under Linux), repeat the process outlined aboveaccordingly. In this case, you may have to create so-called logicalpartitions. Please consult additional sources if you are unsure abouthow to do that.
To actually write the changes to disk, select "Edit | Apply All Operations" from the menu.

In the dialogue box that comes up, click "Apply".


Click the "Close" button.

Exit GParted.

系统安装（Installation）

Installation

There are different ways to install Puppy:

Frugal Installation (Pupy CD image on hard drive)
Full Installation
Installation to a USB flash drive
Installation to a CF card

I recommend Frugal Installation, if you have 256 MB RAM or more. If you have less than 256 MB RAM you should choose Full Installation.

简化安装（Frugal Installation）

这里介绍的是如何用Puppy通用安装程序来简化安装Puppy，其实，用Pup2usb安装Puppy到硬盘或U盘，也是简化安装的最简便方式。

---

Frugal Installation using Puppy Universal Installer

A Frugal Installation copies the image from the Puppy CD to the harddrive. At bootup, Puppy is loaded into your computer's memory (RAM)just as it is when you boot Puppy from CD, however, loading it from ahard drive is much faster. This way, Frugal Installation combines theadvantages of booting from CD-ROM (protection from malware) and a harddrive bootup (speed). Moreover, upgrading to a new Puppy version isvery simple - all you have to do is replace some files.
Start "Menu | Setup | Puppy universal installer". Choose whichmedium Puppy should be installed to. In this example, I chose theinternal hard drive.

If you have several hard drives, select one.

Next, click on the button next to the partition that you want Puppy to be installed to - /hda2 in this example.

In the dialogue box, click "OK".

You now have to decide whether you want a "Frugal" or a "Full" installation. In our example, click on the "FRUGAL" button.

Now you change the installation directory. Just click on the "OK" button.

The files are now copied from CD to the hard drive.
The installation is finished. In the next two dialogue boxes, click "OK".


Since you now have two operating systems on your computer (Windowsand Puppy Linux), you need a boot loader. The boot loader is the firstprogram executed after switching the computer on. It enables you tospecify which operating system should be started up. If Windows was theonly operating system on your computer up to now, you do not have aboot loader. Start the installation of the boot loader GRUB with "Menu| System | Grub bootloader config".
Select "simple installation" and click "OK".

In the next dialogue box, select "standard" and click "OK".

Now you have to specify where the GRUB boot loader should store itsfiles. These can only be written to a Linux file system partition.Thus, please specify one of the Linux (ext2 or ext3 file system)partitions you created (/dev/hda2 in the example). If you do not have aLinux file system partition yet, you need to create one.

Now you have to specify where the GRUB boot loader itself should beinstalled to. Select the Master Boot Record "MBR" and click "OK".

In the next dialogue box, click "OK".

The installation is complete. What remains to be done is toconfigure the GRUB boot loader so that Puppy Linux can be booted. Thisis how to do it:
Open the file "menu.lst". You will find this file in the /boot/grubdirectory of the partition you installed the GRUB files to (/dev/hda2in our example). For Linux newbies, I include detailed instructions onhow to find and open this file. More advanced users can skip ahead towhere menu.lst gets edited.
Start "Menu | Filesystem | Pmount mount/unmount drives" and click on the button "MOUNT" next to "/dev/hda2".

The button changes to "UNMNT".

Start "Menu | Filesystem | ROX-Filer file filemanager".

Right-click with the mouse and choose "Window | Enter Path".

Enter the following path next to "Goto: /mnt/hda2/boot/grub/

You are now at the folder /mnt/hda2/boot/grub/

Use the right mouse button to click on the file called "menu.lst".

From the context menu that pops up, select "File menu.lst | Open As Text".

You can now see the contents of the menu.lst file.

Edit the file at this point:

title Puppy Linux 4.00 frugal (on /dev/hda2)
rootnoverify (hd0,1)
kernel /puppy400/vmlinuz pmedia=idehd psubdir=puppy400
initrd /puppy400/initrd.gz
(Notice: depending on what medium you boot from, you have to set thepmedia parameter to one of usbflash, usbhd, usbcd, ideflash, idehd,idecd, idezip, satahd, scsihd or scsicd. If you did not install theGRUB files to the /dev/hda2 partition, you need to change therootnoverify parameter as well - partition number and Linux driveletter minus one, so if the GRUB files are on /dev/hdb3, make it"rootnoverify (hd1,2)".)
The bit you changed in the file should now look like this:

"Comment out", i.e. put a number sign (#) before each of the following lines:

It should now look like this:

All necessary changes have been made. The file should now look like this:

Save the file by selecting "File | Save" from the program's menu. Exit the text editor.
Close the ROX file manager.
Click on the button "UNMNT" next to /dev/hda2.

The button changes to "MOUNT".

Click on the button "QUIT".
Exit Puppy and reboot the computer: "Menu | Shutdown | Reboot computer".
When you reboot the computer, you will be asked whether you want tosave the "session" (i.e., all the configuration changes you made). HitReturn to select the entry "SAVE TO FILE", which is alreadyhighlighted.
Confirm the next dialogue (Warning) by hitting Return.
In the next dialogue, select the "hda2" partition with the cursor keys and press Return.
Now. you will be asked, if the file should get a special filename. Just press Return.
You will be asked whether you want a normal (unencrypted) or anencrypted save file. Select "NORMAL" with the cursor keys and pressReturn.
The next dialogue lets you choose a size for your save file. A filesize of 512 megabytes is usually sufficient. You can increase (but notdecrease) this size anytime from within Puppy. Pick the desired filesize with the cursor keys and press Return.
In the next screen you see a summary. Choose "Change Folder" and press return.
Next, you enter "/puppy400" as subfolder and confirm with return.
Again a summary is shown and if everything seems to be ok, choose "Yes, save" with the arrow keys, then press return.
Please be patient while the file is created.
Next you will be asked if Puppy 4.xx should test for serial devicesat each boot. Choose ""No" with the arrow keys and confirm with return.
Now you decide wether the system file pup400.sfs should be copiedover to the harddrive. Choose "Yes" with the arrow keys and confirmwith return.
Last not least the computer restarts automatically. Remove the PuppyCD from the drive before the shutdown is complete. Upon reboot the bootloader will show up. Choose ""Puppy Linux 4.00 frugal (on /dev/hda2)""with the arrow keys and confirm with return.

手动安装（Manual Installation）

Manual Installation

To be able to use this option, a boot loader has to be installed on your computer. If there is no boot loader installed on your computer, I recommend doing so using the Puppy Universal Installer.

Boot Puppy fom CD with the "puppy pfix=ram" boot option.

Create a new directory "puppy400" onto a partition with a Linux file system (ext2/ext3) or a FAT32 file system.

Copy the files

pup_400.SFS
zdrv_400.SFS
initrd.gz
vmlinuz

into this directory. If you are updating Puppy, overwrite the existing files. Reconfigure the GRUB boot loader by editing the menu.lst file. You will usually find this file on a Linux partition in the /boot/grub folder.

Append the following two lines to the file menu.lst:

title Puppy Linux 4.00 frugal (on /dev/hda2)
rootnoverify (hd0,1)
kernel /puppy400/vmlinuz pmedia=idehd psubdir=puppy400
initrd /puppy400/initrd.gz

Notice: (hd0,1) signifies the hard disk and partition on which GRUB is stored. Depending on your boot medium, you will need to set the pmedia parameter to one of usbflash, usbhd, usbcd, ideflash, idehd, idecd, idezip, satahd, scsihd or scsicd.

Save the file menu.lst

Close the text editor. Remove the Puppy CD from the drive and exit Puppy without saving your session. Reboot the PC. Puppy should now boot without the CD in the drive.

完整安装（Full Installation）

完整安装需要在硬盘里专门划出一个ext2/3/4分区，完整安装后，直接卸载半步中文体验包（或一步到位中文包）可能会导致系统无法启动或无法进入X图形界面，也无法外挂sfs镜像文件。
如果没有特别需求，不推荐用这种方式来安装Puppy Linux。

---

Full Installation
A Full Installation installs Puppy onto the hard drive like any other"normal" Linux. This kind of installation is a good idea if you haveless than 256 MB of memory.
Start "Menu | Setup | Puppy universal installer". Select the mediumthat you want to install Puppy to. I chose the internal hard drive forthis example.

If you have more than one hard drive, choose one.

Click the button next to the partition that you want to install Puppy to.

Confirm the next dialogue by clicking "OK".

You now have to decide whether you want a "Frugal" or a "Full"installation. Since this chapter describes a Full installation, clickthe button labelled "FULL".

The files will be copied from the CD to the hard drive.


Since you now have two operating systems on your computer (Windowsand Puppy Linux), you need a boot loader. The boot loader is the firstprogram executed after switching the computer on. It enables you tospecify which operating system should be started up. If Windows was theonly operating system on your computer up to now, you do not have aboot loader. The Puppy Installer can install GRUB as a boot loader foryou. To do this, click on "INSTALL GRUB".

In the next dialogue box click "Install"

Confirm the next dialogue by clicking "OK".

Select "simple installation" and click "OK".

In the next dialogue box, select "standard" and click "OK".

Now you have to specify where the GRUB boot loader should store itsfiles. These can only be written to a Linux file system partition.Thus, please type "/dev/hda2" - that is, the same partition to whichPuppy has just been installed.

Now you have to specify where the GRUB boot loader itself should beinstalled to. Select the Master Boot Record "MBR" and click "OK".

Confirm the next dialogue by clicking "OK".

In the next dialogue box, click the "No" button.

The installation is complete. What remains to be done is toconfigure the GRUB boot loader so that Puppy Linux can be booted. Thisis how to do it:
Open the file "menu.lst". You will find this file in the /boot/grubdirectory of the partition you installed the GRUB files to (/dev/hda2in our example). For Linux newbies, I include detailed instructions onhow to find and open this file. More advanced users can skip ahead towhere menu.lst gets edited.
Start "Menu | Filesystem | Pmount mount/unmount drives" and click on the button "MOUNT" next to "/dev/hda2".

The button changes to "UNMNT".

Start "Menu | Filesystem | ROX-Filer file filemanager".

Click with the right mouse button and choose "Window | Enter Path" from the context menu.

Type this into the box labelled "Goto" (do not omit the slash at the end): /mnt/hda2/boot/grub/

You are now inside the /mnt/hda2/boot/grub/ folder.

Use the right mouse button to click on the file called "menu.lst".

From the context menu that pops up, select "File menu.lst | Open As Text".

You can now see the contents of the menu.lst file.

"Comment out", i.e. put a number sign (#) before each of the following lines:

All necessary changes have been made. The file should now look like this:

Save the file by selecting "File | Save" from the program's menu. Exit the text editor.
Close the ROX file manager.
Click on the button "UNMNT" next to /dev/hda2.

The button changes to "MOUNT".

Exit Puppy and reboot the computer: "Menu | Shutdown | Reboot computer".
When you reboot the computer, you will be asked whether you want tosave the "session" (i.e., all the configuration changes you made).Select "DO NOT SAVE" with the cursor keys and hit Return.
Your computer will now shut down completely and then start up again.You will then see the boot loader come up. Select "Puppy Linux (on/dev/hda2)" with the cursor keys and press Return. Puppy boots up. Atthe first bootup, you will once again have to specify your country andyour screen resolution. This configuration is saved so that you do nothave to repeat this process at the next bootup.

调制解调器（Modem）

Modem
Start off clicking on "Menu | Network | PupDial modem dialup".

Next, enter the information from your provider.

宽带连接（DSL）

DSL
First you should check if the ethernet-interface was detected.
Start a shell ("Menu | Utility | Rxvt terminal emulator") and enter the following command:
ifconfig

Can you see "eth0"?

If you can not see "eth0" enter the following command:
ifconfig eth0 up

To check if the ethernet-interface is available now, enter the following command:
ifconfig

Now you should see "eth0". Close the shell.
Start the program "Menu | Network | Roaring Penguin PPPoE".

Press the button "SETUP".

Enter your username (ask your provider), then press the return-key.

Enter the ethernet interface. eth0 is usually correct so you can press the return-key.

At the next question you confirm the default "no" and press the return-key.

Then you have to enter your IP adress. If you get a dynamic IP adress press the return-key only.

Now enter your password (ask your provider).

Enter your password again.

Choose "1" as a "standalone" firewall.

Now you can see your input again. If everything is alrigth press the key "y".

If you want to connect the internet-connection press the button "Start".

A message box opens and you get connected. Press the return-key.

You can now open the Internet browser "Menu | Internet | SeaMonkeyWebbrowser". Enter a URL and see if the Internet site is displayed.
If you want to disconnect the internet-connection press the button "Stop".

A message box opens and you get disconnected. Press the return-key.

路由（Router）

Router

This chapter is still missing.

无线局域网（WLAN）

WLAN
To connect your Puppy to a wireless network take the following steps: Step 1
Click on the "connect" icon on your Desktop, then click "Connect to the Internet by network interface"
.....OR.......
Click on Menu / Setup / Network Wizard



If Puppy recognizes your interface, it will be displayed in the upper portion of the box.
Just click the button for your interface and see step 2 below.
If puppy does not see your interface you will have to load the appropriate module with the Load Module button

If you are unsure, click the "more" tab to Auto-probe drivers, or to install a Windows driver.
After you have loaded the correct module for your interface, it will show up in the first box seen above.
Click on it and proceed to step 2
Step 2
Configuring Network Interface


Click the Wireless button



Click Scan ( Or enter the information for your interface if you know it)
Click on your Network from the list that appears . Click Save. Enter your WEP / WPA key if on a secured network.
Then click Use This Profile. Click the Test button to see if Puppy see`s a "live" connection. If it does, then click
Auto DHCP. If successful Puppy will ask you if you want to save the configuration for next boot. Choose yes or no.
Click Done on the box that appears, and you`re all set!

配置电子邮件（How to setup your email-program）

How to setup your email-program
Start the program "Menu | Internet | SeaMonkey mail and news". Theconfiguration depends on your email-provider. In the following you willfind an example for GMX.






After you press the button "Finish" the program automaticallydownloads your emails from your email account. If you are offline, thefollowing error message appears:

Start an Internet-connection and click (in the Seamonkey-Mail-Programm) on the button "Get new messages".

打印机（Printer）

Printer

This is an easy one to get up and running.Just run "Menu | Setup | Printer Wizard" and the directions there should be sufficient to get most printers working.If your printer is not on the list that comes up try one that is similar for example if you have an superjet 23e try the superjet 23 or superjet 23f.

扫描仪（Scanner）

Scanner

This chapter is still missing.

U盘/外置硬盘（USB sticks / external harddrive）

USB sticks / external harddrive
USB sticks and external harddrives are very simple to use. Start the program "Menu | File managers | Pmount mount/unmount drives" and click on the button "Refresh". Then you click on the USB stick symbol and the file manager ROX will automatically open and show you the files on the USB stick. External harddrives with FAT32-filesystem can be used too. If you changed the file system of the external harddrive e.g. to an ext3-filesystem the program Pmount can not mount the external harddrive. In this case you open a shell and enter:

mount /dev/sdax /mnt/sdax (e.g. for the first partition: mount /dev/sda1 /mnt/sda1)

键盘布局（Keyboard layout）

Keyboard layout

If you are using Xvesa as your video server and you do not have a US keyboard, you need to customise the keyboard layout. Start "Menu | Document | Geany text editor" and copy the following lines into it for a German keyboard layout.

clear shift
clear lock
clear control
clear mod1
clear mod2
clear mod3
!clear mod4
!clear mod5
!de-latin1.map: German keymap
keycode 9 = Escape Escape
keycode10 = 1 exclam
keycode11 = 2 quotedbl twosuperior
keycode12 = 3 section threesuperior
keycode13 = 4 dollar dollar
keycode14 = 5 percent
keycode15 = 6 ampersand
keycode16 = 7 slash braceleft
keycode17 = 8 parenleft bracketleft
keycode18 = 9 parenright bracketright
keycode19 = 0 equal braceright
keycode20 = ssharp question backslash
keycode21 = dead_acute dead_grave
keycode22 = BackSpace Delete
keycode23 = Tab Tab
keycode24 = q Q at
keycode25 = w
keycode26 = e E currency EuroSign
keycode27 = r
keycode28 = t
keycode29 = z
keycode30 = u
keycode31 = i
keycode32 = o
keycode33 = p
keycode34 = udiaeresis Udiaeresis
keycode35 = plus asterisk dead_tilde
keycode36 = Return
keycode37 = Control_L
keycode38 = a
keycode39 = s
keycode40 = d
keycode41 = f
keycode42 = g
keycode43 = h
keycode44 = j
keycode45 = k
keycode46 = l
keycode47 = odiaeresis Odiaeresis
keycode48 = adiaeresis Adiaeresis
keycode49 = dead_circumflex degree
keycode50 = Shift_L
keycode51 = numbersign apostrophe
keycode52 = y
keycode53 = x
keycode54 = c
keycode55 = v
keycode56 = b
keycode57 = n
keycode58 = m M mu
keycode59 = comma semicolon
keycode60 = period colon Multi_key
keycode61 = minus underscore
keycode62 = Shift_R
keycode63 = KP_Multiply
keycode64 = Alt_L Meta_L
keycode65 = space space
keycode66 = Caps_Lock
keycode67 = F1 F11
keycode68 = F2 F12
keycode69 = F3 F13
keycode70 = F4 F14
keycode71 = at F15
keycode72 = bar F16
keycode73 = dead_tilde F17
keycode74 = currency EuroSign F18
keycode75 = braceleft F19
keycode76 = braceright F20
keycode77 = Num_Lock
keycode78 = Scroll_Lock
keycode79 = KP_7
keycode80 = KP_8
keycode81 = KP_9
keycode82 = KP_Subtract
keycode83 = KP_4
keycode84 = KP_5
keycode85 = KP_6
keycode86 = KP_Add
keycode87 = KP_1
keycode88 = KP_2
keycode89 = KP_3
keycode90 = KP_0
keycode91 = KP_Decimal
keycode94 = less greater bar
keycode95 = bracketleft F11
keycode96 = bracketright F12
keycode98 = Up
!keycode99 = Prior
keycode 100 = Left
keycode 102 = Right
!keycode 104 = Down
keycode 105 = Control_R
keycode 106 = KP_Divide
keycode 108 = Alt_R
keycode 110 = Home
keycode 112 = Prior
keycode 113 = Left
keycode 114 = Right
keycode 115 = End
keycode 116 = Down
keycode 117 = Next
keycode 133 = Alt_L
keycode 134 = Alt_R
add shift = Shift_L Shift_R
add lock = Caps_Lock
add control = Control_L Control_R
add mod1 = Alt_L Alt_R
add mod2 = Mode_switch
add mod3 = Num_Lock
!add mod4 =
!add mod5 =

Save this file as .Xmodmap into the /root directory (please note that the first character of the file name should indeed be a dot). Then restart the X server by selecting "Menu | Shutdown | Restart X Server" (alternatively, you can open a console and issue the "xmodmap /root/.Xmodmap" command). Now the äöüÄÖÜ umlauts are available. The special characters @|~ have been assigned to the function keys F5, F6 and F7 (F7 has to be pressed twice to make the tilde appear). The {}[] brackets are located on function keys F9 to F12.

You can create country-specific keyboard layouts of your own by editing that file. To find out the correct keycodes, open a console and enter the "xev" command. The keycode of any key you press and its assigned character will then be displayed.

即用CD（Live-CD）

Live-CD

If you start Puppy from CD-ROM (or from a CD-image on your harddrive) no potentially harmful programs can install on your computer. With every reboot all potential malware is gone.

However you are not wholly protected against malware while you are online, because (in theory) malware can be installed on your computer and can be active until the next reboot. That is why you should always run a firewall. Besides you can store checksums of all your files to make sure, no one has manipulated your files.

超级用户（Root）

Root

In contrast to most other Linux distributions Puppy does not differentiate between a normal user and the administrator root. Rather you always works as root, which simplifies the use of Puppy. The question arises if it is unsecure to work as root and to have full access to all files, programs and data.

For the normal home user, there are no special risks compared to other Linux distributions. On the contrary, Puppy is probably a bit safer than many other distributions.

First let's analyze the risk of a distribution, which differentiates between user and root. The user works as a normal user, who does not have privileges to write/delete programs and system files. An intruder can compromise only the user’s files. However the intruder has an entrance to the system and can try to gain root-privileges (find the password file, use exploits to transfer malware code and so on), and afterwards try to get access to all files.

As long as Puppy starts from CD-ROM (and is not installed on the harddrive) the program-files and system-files are secure. Everytime you reboot any malware programs, which an intruder could have left, are gone. Of course your own files stored into the pup_save.3fs-file or on a harddrive can be compromised by an intruder, but this can happen to the normal user of another Linux-distribution as well. If you want to be safe from intrusion, store checksums of all files and backup your files regulary.

防火墙与守护进程（Firewall and daemons）

Firewall and daemons
You should always have an active firewall. It allows you to controlwhat ports your PC uses to communicate with the Internet. Ideally, allports are closed.
Start "Menu | Setup | Linux-Firewall Wizard".

Go to the "default" entry using the Arrow Down key (this option closes all ports) and press Return.

Now you can check the firewall rules. Confirm the default ("Yes") with the Return key.


The line that reads "Performing sanity checks ..." should display "PASSED" now. Press the key you love best ...
... to get to the next dialogue. It allows you to activate the firewall rules.

Confirm the default ("Yes") with the Return key.

The firewall is now active. Hit Return to finish setup.
The "default" option you selected closes all ports. You can specifywhich ports should be left open using the Firewall Wizard's "custom"option. You should only open the ports you really need. If you use acertain port only occasionally, you should open it only when you needit. An open port is usually not a security risk per se. It only becomesvulnerable if your PC is running a service (a so-called "daemon") whichuses that port to listen for incoming requests. This is why you shouldnot run any daemons you do not need on your PC.
This is how to check for which ports are open and which services are running:
Install the Program nmap. Nmap is available as a PETget.
Open a shell and enter:
nmap localhost

This lists open ports. A home user without a home network of her ownshould have no open ports. The X11 service is open because it is theone responsible for the graphical desktop.
The following command gives you a list of which services are listening on which ports:
netstat -anp --ip

This list, too, should be empty except for the X11 port if you are ahome user who does not run a web server or a home network; i.e., noservices (daemons) should be running.
You can test your firewall at the Web site Shields Up!. Load the page and click the Proceed-button.

病毒查杀（Virus scanner）

Virus scanner
If you want to scan your files or a Windows computer you can use F-Prot virus scanner. You can download the program from the Forum. After you have downloaded and installed the program open a shell and enter the following command while you are still online.
/usr/local/bin/xfprot-gtk
or
/usr/local/xfprot/xfprot-gtk
Now you can update the virus definitions. Then you can get offline.Mount your Windows-partition (mount /dev/hdax /mnt/hdax) and make thefollwing settings in F-Prot:

Path to scan: /mnt/hdax
Scan mode: Interactive
Report file: /root/xfprot.log
When the virus scan has finished you can find the log-file at /root/xfprot.log.
If you want to scan another Windows computer, you can remasterPuppy. Boot the Windows computer from the remastered Puppy CD(boot-option puppy pfix=ram) and scan the PC as described above.

入侵检测（Intrusion detection）

Intrusion detection

For further improvement of your security you should store a checksum (a fingerprint) for all files. At regular intervals, but in any case before a backup, you examine the checksums of your files. If the checksums do not agree, the file was changed or deleted.

In order to compute and store the checksums, you open a shell and enter the following commands:

md5sum /usr/bin/md5sum

Create a checksum of the program md5sum. Write down the checksum.

mount /dev/hda4 /mnt/hda4

Mount the harddrive with your files.

find /mnt/hda4 -type f -exec ls -ail {} \; \-exec md5sum {} \; > /root/check1.dat

Create the file check1.dat with the checksums of all files.

md5sum /root/check1.dat

Create a checksum of the file. Write down the checksum.

If you want to check, which files have been changed enter these commands:

md5sum /usr/bin/md5sum

Create a checksum of the program md5sum. Compare the checksum with the checksum of step (1).

md5sum /root/check1.dat

Create a checksum of the file /root/check1.dat. Compare the checksum with the checksum of step (3).

mount /dev/hda4 /mnt/hda4

Mount the harddrive with your files.

find /mnt/hda4 -type f -exec ls -ail {} \; \-exec md5sum {} \; > /root/check2.dat

Create the file check2.dat with the actual checksums of the files.

diff /root/check1.dat /root/check2.dat > /root/diff.txt

Compare the two files check1.dat and check2.dat. The differences are written to the file diff.txt.

Open the file /root/diff.txt and check, if you know about the changed files. If not think why these files have been changed.

Delete the file /root/check1.dat

Rename the file /root/check2.dat as /root/check1.dat.

md5sum /root/check1.dat

Create a checksum of the new check1.dat-file. Write down the checksum.

用bcrypt加密文件（Encrypt with bcrypt）

Encrypt with bcrypt

You should encrypt very sensitive files with the program bcrypt. Bcrypt uses the secure Blowfish-algorithm.
Open a shell and enter:
bcrypt /MyDirectory/MyFile
Then you are asked a passwort (at least eight characters long; you can abort bcrypt with "Ctrl" + "C"). Bcrypt encrypts your file and appends the extension bfe to the file. The original file is deleted automatically.
If you want to encrypt more than one file or a complete directory you should create an archive-file. Start the program "Menu | Utilities | Xarchive archiver". Afterwards you encrypt the archive-file.
Note that bcrypt deletes the original file automatically. You can't recover the file. If you don't want to delete the file start bcrypt with the option -r:
bcrypt -r /MyDirectory/MyFile
If you want to decrypt the file start bcrypt again:
bcrypt /MyDirectory/MyEncryptedFile
Than you enter your password.
For further information see :
Homepage bcrypt