Cloud Consultant
tldr, I used nginx! So since I have my VPS on anycasted IPs and I use ansible to deploy, I wanted to make 3 all servers nearly the same, minus their specific ‘mgmt’ public IPs, so moving squid to a new IP I wanted to use the standard https port but could NOT figure out a way to get squid Continue reading Squid bind specific IP Address (workaround)
Step 1) Download Nartac for IIS Step 2) Run and select Best Practices (Disables SSLv2/SSLv3) Step 3) Reboot That’s it, if you want the long and hard way, follow this technet article. What does this tool do? It makes registry changes to your schannel which applies to all TLS channels, either HTTPS, SMTPS, or STARTTLS (others if you have them)
While working on figuring out a way to block email sent to and from external users, without blocking email to or from internal domain and allowing relay…. I had this idea: What if I could check the SPF record of a domain when checking the from header of a domain. This would allow me to dynamically permit emails from any Continue reading Postfix Outbound SPF Checker Idea
Hey All, It’s been a while and I finally got around to updating my postfix cluster to send email over my OpenVPN tunnel with standard ports to my local zimbra server instead of using a non-standard port over the wan. While I was at it, I figured I’d trying pushing IPv6 and here’s how that went. A little backstory, my Zimbra Continue reading IPv6 OpenVPN Tunneling with Asus MerlinWRT and Postfix Smarthost over v6 Tunnels
Figured I’d do a quick post about this, I had the need to show my IP address (like https://www.icanhazip.com/ but internal). I didn’t really feel like adding php to my existing nginx server, so here’s what I did. First) I create a new virtual-host with the internal server-name (or ip) of my nginx server, new document root of “ip” and a Continue reading Get IP Address of client without web scripts (like php)
The internet is the second source of opinions (first being Politicians). But what does that have to do with Technical Blogs? Recently I embarked on a security focused project of adding 2 Factor authentication to the some network authentication systems at work. A few google searches later and you’ll find a bunch of results for ‘How to configure Radius with Google Continue reading Not all technical blog posts are created equal.