Security related topics, e.g. firewall, network, waf, vpn etc
I’ve been using wordpress and other services with backend area that is meant for administration for a very long time. Often, these backend areas become the target of brute force (or other smarter guesses) attempt to gain access. To prevent this, since I already have Cloudflare for WAF, I’ve decided to make use of Cloudflare
Read More »
Ever want to have your Radius sessions, user credentials, user groups etc stored in external MySQL (or Mariadb) database instead of in system level config files? You can easily configure MySQL (or Mariadb) as your data store for all these information for ease of management. To do so, I have freeRadius3 setup on my pfsense
Read More »
Enable key based authentication on your server Generate key-pair on your client machine Install key to your server Test your key-based authentication for ssh
Assuming you do not have freeradius3 installed on pfsense in the past Go to: Note: To help with troubleshooting, you can refer to logs in pfsense. However, I find the default logging which logs to System Log is not very friendly with search, therefore, I changed the setting for RADIUS to log to /var/log/radius.log instead
Read More »
Cloudflare is one of the great provider for services such as DNS, CDN, and many security related services, and they’ve even ventured into more on the application side. Most importantly, they have free tier that you can play around with. I’ve been using Cloudflare for a number of years, on their free services. I started
Read More »
Do you have any issues with your applications or curl command doesn’t work with error complaining about certificates? I’ve been using Let’s Encrypt for a while, and recently faced with issues after migrating my application to another host. Then I realised that it’s not trusting Let’s Encrypt generated certificates. For curl or other applications that
Read More »
It is very common that one system needs to talk to another in this digital era. Systems no longer exist in isolation. With the increasing number of systems integrated, the way of verifying if a system is who it claims to be has become important, especially with the increasing cyber security risk. From past experience,
Read More »
I’ve recently try to manage Let’s Encrypt certificates for my pfSense with acme package. My DNS is managed in CloudFlare. I was happy to see that Let’s Encrypt and CloudFlare are supported and tried it out. Unfortunately, I was stuck with error after error: ErrorError add txt for domain:_acme-challenge.xxx.yyy.com_on_issue_errPlease check log file for more details:
Read More »
Go to your pfsense console. Go to System->Package Manager, and look for pfBlockerNG, then click Install button Once installed, go to Firewall->pfBlockerNG Check the box for Enable pfBlockerNG, then scroll all the way down to the bottom of the page, and click Save Go to DBSBL, and check the box next to Enable DBSBL. Then
Read More »