security

Simple OpenVPN profile generator

Few month ago i learned that OpenVPN support profiles. Before that i generate config for every client, create keys and certs with easy-rsa, tar it’s all together and put on client. Now i can create profile that will contain all necessary keys, certs and config in one file, so i write simple script that generate […]

Tags: , ,

Posted in Linux related, Security related | No Comments »

Zoneminder jitter

After several years of torture with easycap i realize that it is time to change capture device. I found that other usb capture device that supported by linux cost to high, also i can not use PCI or full height PCI-e devices because of mATX form factor of my server.  Suddenly i found ImpactVCB 1381, […]

Tags: ,

Posted in Linux related, Security related | No Comments »

You IP

Since the idiots in the Russian government passed a law similar to ‘SOPA’ i started to modify routing scheme at my home. Many times i used internet.ya.ru to determine my current outgoing IP address, but i wanted to use more minimalistic tool for this purpose. So i created my own tool with blackjack and hookers, […]

Tags: , , , ,

Posted in Linux related, Security related, Web related | No Comments »

Addresses of TOR relays

Some time ago i wrote about how to block access from TOR network. Few days ago i observed, that file with addresses of TOR relays (http://exitlist.torproject.org/exit-addresses) not available anymore, i did not found similar list, so i wrote my own script with blackjack and hookers. Output of this script not compatible with format of “exit-addresses”, […]

Tags: ,

Posted in Linux related, Security related | 2 Comments »

Kali linux on LiveUSB with working persistent partition

Few days ago i wanted to make liveusb with kali linux (i had backtrack before). I used this guide to install kali, but i observed, that persistence partition does not work. There is partitions on my usb drive: When init script found persistent partition and tried to mount  their return error “mount: mounting /dev/sdaX on […]

Tags: , ,

Posted in Linux related, Security related | 22 Comments »

Failsafe zoneminder with gluster and geo-replication.

Near year ago i configured zoneminder for monitoring my approach. But i got one problem, host that running zoneminder placed in same approach, so, if it will be stolen, it will be stolen with recordings. I spend a lot of time while choosing solution to organize replication on remote server. Most solution that i found […]

Tags: , ,

Posted in Linux related, Security related | 3 Comments »

How to block large ip subset on the example of TOR

I wrote before how i blocked TOR exit nodes by iptables, disadvantages of method that i used before – big amount of rules (one per each ip). This solution easy and obvious, but had speed penalty. Today i want write about more effective solution that use ipset, let’s see what is ipset: IP sets are […]

Tags: , ,

Posted in Linux related, Security related | 1 Comment »

How to transfer data between hosts securely.

From time to time i faced with task how to transfer important data between servers securely (ie over ssl or something similar). I do not use passwords for remote access and do not have private keys on remote systems, so i can not use ssh for this purposes. First i wanted to write about solution […]

Tags: , ,

Posted in Linux related, Security related | 6 Comments »

Tor blacklist

Few month ago i was interested in how to block incoming traffic from Tor network. Tor network have finitely numbers of exit nodes, so the solution is to block traffic from this nodes. I see two solutions how to block exit nodes.  First use TorDNSEL service, in brief you can check that connection comes from […]

Tags: , ,

Posted in Linux related, Security related | No Comments »

Password protected access to “/wp-admin” on nginx

Here i found advice how to make wordpress more securely, idea is to protect access to “/wp-admin” by http auth, but “/wp-admin/admin-ajax.php” must stay available for everyone, same is true for some .css files. I spend some time to research solution, it was a bit complicated: location /wp-admin { location ~ /wp-admin/admin-ajax.php$ { # Php […]

Tags: , , ,

Posted in Web related | No Comments »


Powered by WordPress. Designed by Försäkra Online.