#firewall — Public Fediverse posts

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)

Cloud and on-prem don’t need separate solutions.
IPFire runs in both, making hybrid deployments easier to manage. Available now on AWS: https://www.ipfire.org/downloads/cloud
#HybridCloud #Firewall #AWS #OpenSource

Wieder Zero-Day Angriffe gegen Palo Alto Firewall

Und täglich grüßt das Murmeltier. Wieder ein amerikanischer Hersteller von proprietärer Netzwerktechnik, dessen Zero-Day "Sicherheitslücke" (Hintertür) von wahrscheinlich staatlich unterstützten Hackern angegriffen wird. Der Netzwerk-Ausrüster Palo Alto ist und ja schon öfter begegnet. Die CISA hat die Lücke CVE-2026-0300 bereits in den KEV Katalog aufgenommen. Normalerweise bedeutet das eine Anweisung an die Behörden, Updates gegen die betreffende Lücke innerhalb kürzester Frist einzuspielen. Nur dass im vorliegenden

https://www.pc-fluesterer.info/wordpress/2026/05/14/wieder-zero-day-angriffe-gegen-palo-alto-firewall/

#Allgemein #Empfehlung #Hintergrund #Warnung #0day #closedsource #cybercrime #exploits #firewall #foss #hersteller #hintertr #opensource #router #sicherheit #spionage #UnplugTrump #usa #vorbeugen

Wieder Zero-Day Angriffe gegen Palo Alto Firewall

Und täglich grüßt das Murmeltier. Wieder ein amerikanischer Hersteller von proprietärer Netzwerktechnik, dessen Zero-Day "Sicherheitslücke" (Hintertür) von wahrscheinlich staatlich unterstützten Hackern angegriffen wird. Der Netzwerk-Ausrüster Palo Alto ist und ja schon öfter begegnet. Die CISA hat die Lücke CVE-2026-0300 bereits in den KEV Katalog aufgenommen. Normalerweise bedeutet das eine Anweisung an die Behörden, Updates gegen die betreffende Lücke innerhalb kürzester Frist einzuspielen. Nur dass im vorliegenden

https://www.pc-fluesterer.info/wordpress/2026/05/14/wieder-zero-day-angriffe-gegen-palo-alto-firewall/

#Allgemein #Empfehlung #Hintergrund #Warnung #0day #closedsource #cybercrime #exploits #firewall #foss #hersteller #hintertr #opensource #router #sicherheit #spionage #UnplugTrump #usa #vorbeugen

Wieder Zero-Day Angriffe gegen Palo Alto Firewall

Und täglich grüßt das Murmeltier. Wieder ein amerikanischer Hersteller von proprietärer Netzwerktechnik, dessen Zero-Day "Sicherheitslücke" (Hintertür) von wahrscheinlich staatlich unterstützten Hackern angegriffen wird. Der Netzwerk-Ausrüster Palo Alto ist und ja schon öfter begegnet. Die CISA hat die Lücke CVE-2026-0300 bereits in den KEV Katalog aufgenommen. Normalerweise bedeutet das eine Anweisung an die Behörden, Updates gegen die betreffende Lücke innerhalb kürzester Frist einzuspielen. Nur dass im vorliegenden

https://www.pc-fluesterer.info/wordpress/2026/05/14/wieder-zero-day-angriffe-gegen-palo-alto-firewall/

#Allgemein #Empfehlung #Hintergrund #Warnung #0day #closedsource #cybercrime #exploits #firewall #foss #hersteller #hintertr #opensource #router #sicherheit #spionage #UnplugTrump #usa #vorbeugen

Wieder Zero-Day Angriffe gegen Palo Alto Firewall

Und täglich grüßt das Murmeltier. Wieder ein amerikanischer Hersteller von proprietärer Netzwerktechnik, dessen Zero-Day "Sicherheitslücke" (Hintertür) von wahrscheinlich staatlich unterstützten Hackern angegriffen wird. Der Netzwerk-Ausrüster Palo Alto ist und ja schon öfter begegnet. Die CISA hat die Lücke CVE-2026-0300 bereits in den KEV Katalog aufgenommen. Normalerweise bedeutet das eine Anweisung an die Behörden, Updates gegen die betreffende Lücke innerhalb kürzester Frist einzuspielen. Nur dass im vorliegenden

https://www.pc-fluesterer.info/wordpress/2026/05/14/wieder-zero-day-angriffe-gegen-palo-alto-firewall/

#Allgemein #Empfehlung #Hintergrund #Warnung #0day #closedsource #cybercrime #exploits #firewall #foss #hersteller #hintertr #opensource #router #sicherheit #spionage #UnplugTrump #usa #vorbeugen

Wieder Zero-Day Angriffe gegen Palo Alto Firewall

Und täglich grüßt das Murmeltier. Wieder ein amerikanischer Hersteller von proprietärer Netzwerktechnik, dessen Zero-Day "Sicherheitslücke" (Hintertür) von wahrscheinlich staatlich unterstützten Hackern angegriffen wird. Der Netzwerk-Ausrüster Palo Alto ist und ja schon öfter begegnet. Die CISA hat die Lücke CVE-2026-0300 bereits in den KEV Katalog aufgenommen. Normalerweise bedeutet das eine Anweisung an die Behörden, Updates gegen die betreffende Lücke innerhalb kürzester Frist einzuspielen. Nur dass im vorliegenden

https://www.pc-fluesterer.info/wordpress/2026/05/14/wieder-zero-day-angriffe-gegen-palo-alto-firewall/

#Allgemein #Empfehlung #Hintergrund #Warnung #0day #closedsource #cybercrime #exploits #firewall #foss #hersteller #hintertr #opensource #router #sicherheit #spionage #UnplugTrump #usa #vorbeugen

If you're building a hybrid network, why learn two systems?
With IPFire available as an AMI on AWS, your cloud firewall can be as familiar as your on-prem one.
#HybridCloud #Firewall #AWS #OpenSource https://www.ipfire.org/downloads/cloud

El test de buffer bloat da super bien, categoria A, lo que dice que la latencia no aumenta tanto bajo demanda. El pfSense rutea bien y mantiene la QoS razonablemente bien, ademas pasamos todas las listas de bloqueo a Quick Tables flotantes que con el doble de cache en el CPU se nota #undernet #pfsense #firewall #seguridad #mejoras #mantenimiento

El test de buffer bloat da super bien, categoria A, lo que dice que la latencia no aumenta tanto bajo demanda. El pfSense rutea bien y mantiene la QoS razonablemente bien, ademas pasamos todas las listas de bloqueo a Quick Tables flotantes que con el doble de cache en el CPU se nota #undernet #pfsense #firewall #seguridad #mejoras #mantenimiento

El test de buffer bloat da super bien, categoria A, lo que dice que la latencia no aumenta tanto bajo demanda. El pfSense rutea bien y mantiene la QoS razonablemente bien, ademas pasamos todas las listas de bloqueo a Quick Tables flotantes que con el doble de cache en el CPU se nota #undernet #pfsense #firewall #seguridad #mejoras #mantenimiento

El test de buffer bloat da super bien, categoria A, lo que dice que la latencia no aumenta tanto bajo demanda. El pfSense rutea bien y mantiene la QoS razonablemente bien, ademas pasamos todas las listas de bloqueo a Quick Tables flotantes que con el doble de cache en el CPU se nota #undernet #pfsense #firewall #seguridad #mejoras #mantenimiento

El test de buffer bloat da super bien, categoria A, lo que dice que la latencia no aumenta tanto bajo demanda. El pfSense rutea bien y mantiene la QoS razonablemente bien, ademas pasamos todas las listas de bloqueo a Quick Tables flotantes que con el doble de cache en el CPU se nota #undernet #pfsense #firewall #seguridad #mejoras #mantenimiento

How to Configure Additional #Firewall Rules on Rocky Linux VPS (5 Minute Guide)

This article provides a guide for how to configure additional firewall rules on Rocky Linux VPS for improved #security of your system.
How to Configure Additional Firewall Rules on Rocky Linux VPS
This tutorial will guide you through the process of configuring additional firewall rules on a Rocky Linux VPS using ...
Continued 👉 https://blog.radwebhosting.com/how-to-configure-additional-firewall-rules-on-rocky-linux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #sshcommands #rockylinux #serverhardening #vpsguide

How to Configure Additional #Firewall Rules on Rocky Linux VPS (5 Minute Guide)

This article provides a guide for how to configure additional firewall rules on Rocky Linux VPS for improved #security of your system.
How to Configure Additional Firewall Rules on Rocky Linux VPS
This tutorial will guide you through the process of configuring additional firewall rules on a Rocky Linux VPS using ...
Continued 👉 https://blog.radwebhosting.com/how-to-configure-additional-firewall-rules-on-rocky-linux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #sshcommands #rockylinux #serverhardening #vpsguide

How to Configure Additional #Firewall Rules on Rocky Linux VPS (5 Minute Guide)

This article provides a guide for how to configure additional firewall rules on Rocky Linux VPS for improved #security of your system.
How to Configure Additional Firewall Rules on Rocky Linux VPS
This tutorial will guide you through the process of configuring additional firewall rules on a Rocky Linux VPS using ...
Continued 👉 https://blog.radwebhosting.com/how-to-configure-additional-firewall-rules-on-rocky-linux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #sshcommands #rockylinux #serverhardening #vpsguide

How to Configure Additional #Firewall Rules on Rocky Linux VPS (5 Minute Guide)

This article provides a guide for how to configure additional firewall rules on Rocky Linux VPS for improved #security of your system.
How to Configure Additional Firewall Rules on Rocky Linux VPS
This tutorial will guide you through the process of configuring additional firewall rules on a Rocky Linux VPS using ...
Continued 👉 https://blog.radwebhosting.com/how-to-configure-additional-firewall-rules-on-rocky-linux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #sshcommands #rockylinux #serverhardening #vpsguide

I have a firewall rule which bans IPs sending UDP packets for a standard Wireguard port (51820), this activity is deemed port scanning.

When my server makes a DNS request from that UDP port (it just uses random port every time), upstream DNS was sending responses back to that port, triggering blocking :)

#Firewall #nftables #HomeLab

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The following features are included with ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #cagefs #cloudlinux #csf #cardav #lscache #imagemagick #caldav #malwarescanner #mailman #imap #gitversioncontrol #cloudsitebuilder #imunify360 #memcached #firewall #malwareremoval #ddosprotection

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The following features are included with ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #cagefs #cloudlinux #csf #cardav #lscache #imagemagick #caldav #malwarescanner #mailman #imap #gitversioncontrol #cloudsitebuilder #imunify360 #memcached #firewall #malwareremoval #ddosprotection

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The following features are included with ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #cagefs #cloudlinux #csf #cardav #lscache #imagemagick #caldav #malwarescanner #mailman #imap #gitversioncontrol #cloudsitebuilder #imunify360 #memcached #firewall #malwareremoval #ddosprotection

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our ... Continued 👉 #imap #lscache #ddosprotection #mailman #cardav #memcached #malwarescanner #firewall #gitversioncontrol #cloudlinux #csf #imagemagick #cloudsitebuilder #cagefs #caldav #imunify360 #malwareremoval

Mastodon Incident Report / Root cause analysis:

Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete.

Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) triggered a false-positive on internal traffic and aggressively blocked the VPS IP, severing the connection to the search database.

Resolution: We identified the false-positive, added the frontend IP to the whitelist, and traffic immediately normalized. Everything is back to green!

#mastodon #mastoadmin #burningboard #elasticsearch #firewall #opnsense #suricata #oopsie

Mastodon Incident Report / Root cause analysis:

Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete.

Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) triggered a false-positive on internal traffic and aggressively blocked the VPS IP, severing the connection to the search database.

Resolution: We identified the false-positive, added the frontend IP to the whitelist, and traffic immediately normalized. Everything is back to green!

#mastodon #mastoadmin #burningboard #elasticsearch #firewall #opnsense #suricata #oopsie

Mastodon Incident Report / Root cause analysis:

Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete.

Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) triggered a false-positive on internal traffic and aggressively blocked the VPS IP, severing the connection to the search database.

Resolution: We identified the false-positive, added the frontend IP to the whitelist, and traffic immediately normalized. Everything is back to green!

#mastodon #mastoadmin #burningboard #elasticsearch #firewall #opnsense #suricata #oopsie

Mastodon Incident Report / Root cause analysis:

Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete.

Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) triggered a false-positive on internal traffic and aggressively blocked the VPS IP, severing the connection to the search database.

Resolution: We identified the false-positive, added the frontend IP to the whitelist, and traffic immediately normalized. Everything is back to green!

#mastodon #mastoadmin #burningboard #elasticsearch #firewall #opnsense #suricata #oopsie

Mastodon Incident Report / Root cause analysis:

Earlier today, users experienced timeouts with Search, Hashtags, and Autocomplete.

Root Cause: Our setup separates the Mastodon frontend VPS (Hetzner) from backend services (for example Elasticsearch) via an OPNSense firewall. Suricata (our IPS) triggered a false-positive on internal traffic and aggressively blocked the VPS IP, severing the connection to the search database.

Resolution: We identified the false-positive, added the frontend IP to the whitelist, and traffic immediately normalized. Everything is back to green!

#mastodon #mastoadmin #burningboard #elasticsearch #firewall #opnsense #suricata #oopsie

Can someone tell me why a simple 5 port switch is in the top 5 of devices which communicates to home called Unifi?

Blocked it... no clue why, except for updates but not in this frequency.

Pi-hole makes you even more concerned about privacy. It's eye-opening to see how frequently my network makes calls to servers.

#PiHole #Blocky #unifi #firewall

Can someone tell me why a simple 5 port switch is in the top 5 of devices which communicates to home called Unifi?

Blocked it... no clue why, except for updates but not in this frequency.

Pi-hole makes you even more concerned about privacy. It's eye-opening to see how frequently my network makes calls to servers.

#PiHole #Blocky #unifi #firewall

Can someone tell me why a simple 5 port switch is in the top 5 of devices which communicates to home called Unifi?

Blocked it... no clue why, except for updates but not in this frequency.

Pi-hole makes you even more concerned about privacy. It's eye-opening to see how frequently my network makes calls to servers.

#PiHole #Blocky #unifi #firewall

Can someone tell me why a simple 5 port switch is in the top 5 of devices which communicates to home called Unifi?

Blocked it... no clue why, except for updates but not in this frequency.

Pi-hole makes you even more concerned about privacy. It's eye-opening to see how frequently my network makes calls to servers.

#PiHole #Blocky #unifi #firewall

Can someone tell me why a simple 5 port switch is in the top 5 of devices which communicates to home called Unifi?

Blocked it... no clue why, except for updates but not in this frequency.

Pi-hole makes you even more concerned about privacy. It's eye-opening to see how frequently my network makes calls to servers.

#PiHole #Blocky #unifi #firewall

#PaloAlto Networks #firewall zero-day exploited for nearly a month

https://www.bleepingcomputer.com/news/security/pan-os-firewall-rce-zero-day-exploited-in-attacks-since-april-9/

#cybersecurity #PAN

#PaloAlto Networks warns of #firewall RCE zero-day exploited in attacks

https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-actively-exploited-firewall-zero-day/

#cybersecurity #PAN

IPFire in the cloud? Yes.
It’s available as an AMI on AWS, giving you full control with none of the complexity of native cloud firewalls.
#CloudSecurity #OpenSource #AWS #Firewall https://www.ipfire.org/downloads/cloud

Enterprises need flexibility, not lock-in.
IPFire offers an open-source firewall platform that works across environments — including AWS.
#CloudSecurity #Firewall #OpenSource #AWS https://www.ipfire.org/downloads/cloud

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #cloudlinux #multiphp #mailman #imap #imunify360 #nodejs #cagefs #imagemagick #memcached #caldav #csf #cloudsitebuilder #gitversioncontrol #malwareremoval #pgadmin #ddosprotection #malwarescanner #cardav #firewall #modsecurity #lscache

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #cloudlinux #multiphp #mailman #imap #imunify360 #nodejs #cagefs #imagemagick #memcached #caldav #csf #cloudsitebuilder #gitversioncontrol #malwareremoval #pgadmin #ddosprotection #malwarescanner #cardav #firewall #modsecurity #lscache

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #cloudlinux #multiphp #mailman #imap #imunify360 #nodejs #cagefs #imagemagick #memcached #caldav #csf #cloudsitebuilder #gitversioncontrol #malwareremoval #pgadmin #ddosprotection #malwarescanner #cardav #firewall #modsecurity #lscache

cPanel Shared Hosting Server Specs This article provides an in-depth analysis of our #cPanel Shared Hosting server specs and features powering the 100%-SSD cPanel Hosting services.

cPanel Shared Hosting Server Specs
The ...
Continued 👉 https://blog.radwebhosting.com/cpanel-shared-hosting-server-specs/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #cloudlinux #multiphp #mailman #imap #imunify360 #nodejs #cagefs #imagemagick #memcached #caldav #csf #cloudsitebuilder #gitversioncontrol #malwareremoval #pgadmin #ddosprotection #malwarescanner #cardav #firewall #modsecurity #lscache

IPFire 2.29 Core Update 201 arriva con il DNS Firewall integrato

https://yoota.it/ipfire-2-29-core-update-201-arriva-con-il-dns-firewall-integrato/

IPFire 2.29 Core Update 201 arriva con il DNS Firewall integrato

https://yoota.it/ipfire-2-29-core-update-201-arriva-con-il-dns-firewall-integrato/

If your AWS networking setup feels overcomplicated, IPFire might be the alternative you’re looking for.
It's open source and familiar — available now as an AMI.
#AWS #Firewall #ITInfrastructure #OpenSource https://www.ipfire.org/downloads/cloud