Raspberry Pi Access Point How To OBJECTIVE: Raspberry Pi as an Access Point to route all DHCPD clients via (external server, outside my country) INTRO: I already have a server with SSH on port 443 ready for tunnel, and I […]
iptables block country script
My own server is daily attacked by SSH scanner and bruteforce scripts. My fail2ban solution But as I get hammered by China’s ssh I got tired of it and block all China SSH access using iptables. The concept is simples, […]
check_conntrack_unreplied
Our front end varnish servers expierence a lot of traffic and we currently must have a iptables NAT that routes from port 80 to port 81, where the varnish daemon listen to traffic. Doing this we end up using the […]
How to setup sshguard
How to setup sshguard Using Iptables and centos or redhat (another option is to use fail2ban, checkout my howto here ) 1.Download sshguard source and compile it (could also try yum install sshguard) # wget http://downloads.sourceforge.net/project/sshguard/sshguard/sshguard-1.5/sshguard-1.5.tar.bz2 Other downloads from here […]
NETFILTER PACKET FLOW
NETFILTER PACKET FLOW (kernel): DROP will not warn REJECT will let them know its closed example: (RULE CHECK CHAIN) (THE RULE, WHAT TO DO) iptables -t filter -A INPUT -s 192.168.0.1 -j DROP Notes: The default for -t is filter […]
How to setup Samba on CentOS
How to setup Samba on CentOS/RedHat etc… Reference to older post (Debian) Note: You can also login into to the server with # ssh -X user@server # yum install system-config-samba # system-config-samba Commands: Login in the server as root and […]
Squid howto
This week I setup a cool Squid Proxy for our network at the office. What it does? Follow also the HowTo Setup SquidGuard 1. Caches the websites people visit, so it usess less bandwith and improve performance 2. Allow managers […]