MAC Address Filtering as a First Guard Even if someone manages to brute-force or sniff my WPA2/WPA3 password, they are stuck at the gates if their Hardware Address (MAC) isn't on my "Allow List." While MAC spoofing is possible for a sophisticated attacker, denying all
Agenda 1. GeoIP DenyList (MaxMind, Tor, Individual IP ,etc.) * Attack Surface Reduction * Resource & Noise Reduction 2. Intrusion Detection (Suricata) * Deep Packet Inspection (DPI) & Threat Response * Suricata Enabled Rulesets * abuse.ch Rulesets (Feodo Tracker, ThreatFox, URLhaus) * Emerging Threats (ET) Rulesets 3. OPNsense Firewall * Port forwarding strategy 4. NGINX Ingress
OPNsense Router/WAF It all starts with good networking Solid networking is the silent backbone of a modern high-performance and general computing environments. It is the backbone of the internet. True enterprise-grade networking provides three essential pillars: * Zero Bottlenecks: It ensures your internal 10Gbps transfers and external fiber speeds are
Blog setup complete! This is my first public post for the world to see. Since we're still suffering from snowmageddon in the NorthEast I thought you might enjoy this one. This is a ghost blog hosted in my k8s cluster. I have a static ip through my ISP.