This post will be edited over time, please feel free to come back and check for new content. Last edit: 11-25-2024 Goal: A HomeLab setup that protects itself This example HomeLab has at its core an OPNSense Router, smart switches with subnet zones, several VMs, a few Docker environments, and specifically for this version of…
Are you interested in Elasticsearch, Logstash, Kibana, and Rivers (JDBC+MySQL)? Then this ELK guide is for you. We are building this with Scientific Linux 7.1 and the latest versions of each available at the moment. I sourced information on how to do this from: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-4-on-centos-7 http://www.elastic.co/guide/en/elasticsearch/reference/current/setup-repositories.html https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/sec-Using_Firewalls.html https://github.com/jprante/elasticsearch-jdbc Install SL 7.1 Find your local mirror:…
Let’s say you wanted to forward a port to another host that has an external IP (public facing like yours), this is how you would do that: sudo iptables -t nat -A PREROUTING -i eth0 -p tcp –dport $port -j LOG –log-prefix=”PreRouting $port..:” sudo iptables -t nat -A PREROUTING -i eth0 -p tcp –dport $port…
Edit: Next day, it was stalled again, either my MTU isn’t actually low enough, or, after talking to a huge letter certified Cisco Engineer buddy at the $DayJob, it might be a memory leak in my eBay purchased D-Link device. Going to try to get a better firmware for it after I go ahead and…
Re-edit: the IPSet wasn’t working the way it should’ve on further inspection, I’ve fixed that, plus, some of my rules were hastily copied and I’ve fixed that too. Edit: I had the order of this incorrect in the beginning, for that I appologize, it is correct now. If you don’t have your IPSet list setup,…
