yet another it blog
I have been running Raspberry Pi device on my summer cabin as an MotionEye server for multiple security cameras. From time to time I need to make some changes to settings on these cameras but I do not want to open remove management over public internet or use provided cloud services. Instead I decided to …
Continue reading “Raspberry PI as VPN endpoint for Sophos XG Firewall”
With version 18 Sophos brings changes to RADIUS settings on XG Firewall. We now have possibility to set timeout for authentication and this allows us to use Azure MFA for 2-factor authentication. Here is few simple steps how to enable this on network policy server and on XG Firewall. If you do not have MFA …
Continue reading “How to use Azure MFA With Sophos XG Firewall”
Postfix can be configured to relay outbound emails trough SendGrid service by adding few lines to postfix configuration. First create API key in SendGrid service. Go to API keys, crate new API key and set access permission to “Restricted Access” and only allow “Mail send” as we wont be needing any other access rights. Copy …
Sophos UTM firewall can be configured to use Azure MFA for Two-Factor authentication. After installing MFA extension with the help of great guide from Microsoft: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension you only need to define couple of settings in UTM and enable policies in NPS server to get it working. Unfortunately I only were able to set it up using …
Continue reading “How to use Azure MFA with Sophos UTM Firewall.”
Until recently I used my internet service providers SMTP servers to deliver windows update reports from lab computers. I started to notice that some hosts did not report correctly and after some investigation I discovered that some of the SMTP servers in the pool were blacklisted. As I had previously had good results with SendGrid …
Continue reading “SMTP Relay to SendGrid with IIS SMTP server”
By default fail2ban rules do not apply for virtualhosts generated by ISPConfig as log files are located on non default path. To fix this you only need to add ISPConfig virtual hosts logs path to jails you want to use. For example: [apache-postflood] enabled = true filter = apache-postflood port = http,https logpath = /var/log/apache2/access.log …
Continue reading “Protecting ISPConfig server with Fail2ban”
Ubiquiti seems to be common hardware around homelab users on reddit. I also decided to go with Ubiquiti some years ago as I were interested on the enterprise grade hardware and software they offer for marginal price compared to big vendors like HP, Ruckus, Cisco Meraki etc… I have also used Ubiquiti on customer installations …
Continue reading “802.1x authentication with Unifi controller and Ubiquiti access points”
I run couple of VMware EXSi hosts in a cluster as test benches for virtualization and for hosting my homelab servers. As I did not want to spend on a loud and expensive 10GB switch I decided to configure my FreeNAS server as a bridge. This way I have 10GB connectivity to FreeNAS for shared …
Continue reading “FreeNAS acting as a bridge for two EXSi hosts.”