#zenarmor — Public Fediverse posts

I read a lot of #CyberSecurity #News and when I read about #Malware I'm see an increasing trend in #Telegram and #Discord often being used for command and control (C2) operations, data exfiltration and more.
This is happening so much I feel if you don't use them block them!!!
Block there domain-names & make firewall rules.
If you use #Zenarmor there are profiles already made to block just them.

#CyberSecurityTips #CyberSecurityNews #Telegram #Discord #Malware

I really hate the assholery out there on the #interwebs. If it weren’t for #fail2ban, I’d be facing even more aggressive daily denials of service attacks. I get these periods of times where shit slows down to a crawl and I get these random attacks. I’m almost certain that they’re happening on the SSH and WireGuard ports. Yes, changing the SSH port to a non-standard port does help some and I think I am going to do that when I get home to mitigate this somewhat. But it will be only a matter of time before a port scanner discovers the new SSH port and alerts the bots to the new port. I’m sure that the bots are also trying to attack WireGuard. WireGuard is damn near impossible so the bots are simply just trying to be assholes for the sake of breaking #Mastodon.

It wouldn’t surprise me if the Twitter, X, or whatever flavor of the month fuckers were behind it. WireGuard keeps no logs so I have no idea. I’d have to do a #wireshark and see what IP addresses are trying to break WireGuard. Bottom line is I think I need some more advanced routing capabilities.

I may look into adding #ZenArmor to my defensive tools. ZenArmor offers deep packet inspection. This would allow a little bit smarter blocking of the bots based on their traffic signatures. This way I whatever gets through the geoblocking, could potentially get nailed by ZenArmor. Then what gets missed by ZenArmor will get cleaned up by fail2ban. I’ll have to see how difficult ZenArmor is to configure. If it’s going to be a bitch, I’ll replace #AlmaLinux on my VPS with #OPNsense, a true router/firewall.

So here is my new #OPNsense Router.
My old router is a #Linksys WRT3200ACM running #DDWRT & it's blue, so I called it #Tachikoma from #GhostInTheShell.
So went with the same theme here.
I am really happy with it😁.
I'm still getting for feel for OPNsense & where everything is
I've been playing with Suricata & I got Zenarmor installed.

For more info about my network setup & more Pic's
Click The Link: https://pcpartpicker.com/b/sK3ypg

#Intel #OPNsense #Firewall #Router #Suricata #Zenarmor #FreeBSD #InFoSec

#FreeBSD 14 geht in die Beta Phase. Interessant sind die kommenden Änderungen und wer sie alles gesponsert hat. FreeBSD ist sehr lebendig und erfreut sich guter Unterstützung:

https://www.beckhoff.com/de-de/produkte/ipc/betriebssysteme-und-tools/twincat-bsd/

Sponsored by #OPNsense #Beckhoff #Dell #Zenarmor #Klara #Google #Netflix #Intel #Netgate #Microsoft

https://www.freebsd.org/releases/14.0R/relnotes/

When back and reconfigure my @opnsense box decided to add 2 drive and use #zfs with mirroring. A bit snapper on boot up. Next rearrange the dashboard, create vlan, and some firewall rules. Once everything is to my liken will backup the configuration.
#pumped #100DaysOfHomeLab #zenarmor #opnsense