security – LocalShareSpace

Bonding Multiple Windscribe VPN Connections with pfSense and Wireguard

Michael — Fri, 01 Sep 2023 16:19:52 +0000

This guide will show you how to setup pfSense and Wireguard with multiple connections to Windscribe’s VPNs for faster speeds and redundancy / failover. Go to https://windscribe.com/getconfig/wireguard Select Location, Port, and Key Pair Select New Key Pair if this is the first time generating a config file. In this guide, we will use Port 443 for the examples.

Source

Windows SSH with Public Key Authentication

Michael — Wed, 03 May 2023 14:09:15 +0000

PowerShell is a powerful scripting language that can automate tasks on Windows computers. This guide will show you how to use SSH from PowerShell to log into a connection without a password by using a key stored on your Windows 11 computer. To use SSH from PowerShell, you will need: The SSH client is not installed by default on Windows. To install it on Windows 10 or…

Source

Fix Windows 10 / 11 keeps setting static DNS address

Michael — Fri, 24 Feb 2023 23:38:21 +0000

If you find Windows 10 or Windows 11 keeps setting your DNS setting to certain servers instead of automatically getting the DNS from your DHCP server, you can try the following fix: Windows should now use the DNS entries from DHCP server.

Source

Implement EAP-TLS with pfSense and FreeRADIUS

Michael — Wed, 19 Oct 2022 17:01:12 +0000

This guide shows how pfSense can be configured to implement EAP-TLS for a more secure method of WiFi authentication. [To be completed]…

Source

How to Forward Pi-Hole Log Messages and Events to Graylog

Michael — Tue, 18 Oct 2022 21:18:57 +0000

rsyslog can be used to forward Pi-hole’s log messages and events to Graylog. The module of rsyslog allows you to convert any logs or other text messages into a syslog message format. By using the input module with the output module omfwd, you can send the converted syslog messages from Pi-hole to Graylog. On your Pi-hole server, create a file under /etc/rsyslog.d/ named 02-graylog.conf…

Source

How to Add ntopng as Input for Graylog

Michael — Tue, 18 Oct 2022 21:06:17 +0000

You can stream log messages from ntopng to Graylog by adding the Graylog server as an endpoint and recipient for ntopng notifications, and adding the ntopng server as an input in Graylog.

Source

How to Use Pi-hole with DoH and Cloudflared (Zero Trust)

Michael — Tue, 20 Sep 2022 00:45:43 +0000

I was setting up Pi-hole on a new LXC container on Proxmox and wanted to use DNS over HTTPS (DoH) for DNS traffic, so I referred to the the official guide from Pi-hole that previously worked for me. When I tried to install the cloudflared package using the –legacy flag per the instructions from the Pi-hole website , I received the error This guide will show you how to install…

Source

How to Fix Memory Integrity Vulnerability with X-Rite i1Display

Michael — Wed, 31 Aug 2022 14:00:35 +0000

If you have an X-Rite i1Display, old incompatible drivers could be causing you to receive a warning from Windows Security about your memory integrity being off and your device being vulnerable. One solution is to delete the incompatible drivers. On my system, the filename of the incompatible drivers for the X-Rite i1Display were oem205.inf and oem209.inf. From the command prompt…

Source

How to Check UFW Firewall Log

Michael — Sat, 09 Jul 2022 15:56:13 +0000

A firewall is critical to the security of your linux system. This is a tutorial to enable UFW (Uncomplicated Firewall) logging and read the logs. For UFW logging to work, rsyslog must be enabled. Check to see if it is running: If rsyslog is not running, enable the service for it: Then, check if UFW logging is enabled or disabled: If logging is disabled…

Source

How to Restrict SSH Access by IP Address

Michael — Fri, 08 Jul 2022 21:15:33 +0000

Allowing SSH access to the outside world is a security risk, so it’s a good idea to restrict access to certain IP addresses or subnets within your LAN. Here is how to restrict SSH access to certain IP addresses. Open the file/etc/hosts.allow as follows: Assuming you want to restrict access to systems in the 192.168.2.0 subnet, add the following line to hosts.allow : Next…

Source