Category: Debian

Pihole / DNSmasq

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application which acts as a DNS sinkhole and optionally a DHCP server, intended for use on a private network. It is designed for low-power embedded devices with network capability, such as the Raspberry Pi, but can be installed on almost any Linux machine. In my case primarily use it for protecting environment from ads, spam, malware …

Continue reading

Prometheus/Grafana – Pihole

Prometheus and Grafana support various integrations including Pihole, following guide will provide instructions on how to integrate these products for interactive statistics and reporting.

Continue reading

Debian 11: rkhunter

rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online databases, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD. …

Continue reading

Debian 11: nftables

nftables replaces the popular {ip,ip6,arp,eb}tables. This software provides a new in-kernel packet classification framework that is based on a network-specific Virtual Machine (VM) and a new nft userspace command line tool. nftables reuses the existing Netfilter subsystems such as the existing hook infrastructure, the connection tracking system, NAT, userspace queueing and logging subsystem.

Continue reading

Debian: Wazuh

Wazuh is a free, open source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response and compliance.

 

Continue reading

Debian: Prometheus SNMP

This exporter is the recommended way to expose SNMP data in a format which Prometheus can ingest.

Continue reading

Debian: Docker-CE

Docker is a set of platform as a service products that use OS-level virtualization to deliver software in packages called containers. Containers are isolated from one another and bundle their own software, libraries and configuration files; they can communicate with each other through well-defined channels.

Continue reading

Debian: LVS (Direct Route/DR)

Direct Routing: referred to as DR, adopts a semi open network structure, similar to the structure of TUN mode (IP tunnel), but the nodes are not scattered in different places, but located in the same physical network with the scheduler. The load scheduler connects with each node server through the local network, so there is …

Continue reading

Debian: Netdata Parent

Netdata is an open source tool designed to collect real-time metrics, such as CPU usage, disk activity, bandwidth usage, website visits, etc., and then display them in live, easy-to-interpret charts. This post will cover how to create a Netdata “parent’ for centralized collecting of all the children. In a later post this will be integrated …

Continue reading

Debian: Squid Block AdServers

Some us of don’t want to run PiHole, but do wish to run an AdBlock system either in DNS or integrated with our proxy server. https://pgl.yoyo.org/adservers/#plaintext provides a solution to both. This entry will describe how to integrate an Adblock list into a Squid proxy environment.

Continue reading

Load more