Debian: Netdata Parent

Netdata is an open source tool designed to collect real-time metrics, such as CPU usage, disk activity, bandwidth usage, website visits, etc., and then display them in live, easy-to-interpret charts. This post will cover how to create a Netdata “parent’ for centralized collecting of all the children. In a later post this will be integrated …

Continue reading

Debian: Squid Block AdServers

Some us of don’t want to run PiHole, but do wish to run an AdBlock system either in DNS or integrated with our proxy server. https://pgl.yoyo.org/adservers/#plaintext provides a solution to both. This entry will describe how to integrate an Adblock list into a Squid proxy environment.

Continue reading

ESX supressing Log Messages

VMware Workspace One Access

Sometimes it is very useful to filter most of the data coming out of each ESXi host. The destination logging servers will have cleaner logs as most junk is filtered out. This post will define the current defined filters and the source is from the VMware site itself.

Continue reading

EdgeRouter / Wireless Radius Authentication

https://community.ui.com/questions/How-To-Configure-UBNT-Wireless-To-Use-RADIUS-Authentication-With-Windows-NPS-Walkthrough/65d103c1-398b-4cbf-a201-45bba84b6b5f

<work on this when i have time, as requested>

EdgeRouter / VPN – L2TP with Radius

Ubiquiti Edgerouter Remote VPN/L2TP client configuration on IPv4  using radius authentication.

Ubiquiti does not (yet) support IPv6 L2TP.

Continue reading

Freedom/KPN Glasvezel + EdgeRouter 4

Freedom Internet provides fibre optic (glasvezel) connections on various infrastructures, primarily the KPN network. This post will provides instructions to implementing a Ubiquiti EdgeRouter in combination with this service for IPv4, IPv6 and IPTV.

This instruction will skip multi network (WIFI, DMZ, etc) or separating IPTV into dedicated VLAN. That kind of stuff is unique …

Continue reading

Debian: HAProxy and Keepalived (LoadBalancer)

HAProxy is a free and open source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications that spreads requests across multiple servers. It is written in C and has a reputation for being fast and efficient.

Keepalived main goal is to provide simple and robust facilities for loadbalancing …

Continue reading

Debian: System Security Services Daemon (SSSD) and Active Directory

Debian 11 - SSSD

The System Security Services Daemon is software originally developed for the Linux operating system that provides a set of daemons to manage access to remote directory services and authentication mechanisms. The beginnings of SSSD lie in the open-source software project FreeIPA

Continue reading

Debian: AIDE (Advanced Intrusion Detection Environment)

AIDE (Advanced Intrusion Detection Environment, [eyd]) is a file and directory integrity checker.

It creates a database from the regular expression rules that it finds from the config file(s). Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (see below) that are …

Continue reading

Debian: RSyslog SSL Forwarding

If you have a central syslog environment which supports TLS/SSL (Splunk, vRealize LogInsight, RSyslog) might be appropriate to encrypt your logging output to these destinations.

Continue reading

Load more