rieskaniemi.com - yet another it blog

Azure MFA NPS extension with Sophos UTM Firewall.

kimmo / 01/10/2018

Sophos UTM firewall can be configured to use Azure MFA for Two-Factor authentication. After installing MFA extension with the help of great guide from Microsoft: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension you only need to define couple of settings in UTM and enable policies in NPS server to get it working. Unfortunately I only were able to set it up using …

Continue reading “Azure MFA NPS extension with Sophos UTM Firewall.”

SMTP Relay to SendGrid with IIS SMTP server

kimmo / 13/09/2018

Until recently I used my internet service providers SMTP servers to deliver windows update reports from lab computers. I started to notice that some hosts did not report correctly and after some investigation I discovered that some of the SMTP servers in the pool were blacklisted. As I had previously had good results with SendGrid …

Continue reading “SMTP Relay to SendGrid with IIS SMTP server”

Protecting ISPConfig server with Fail2ban

kimmo / 30/05/2018

By default fail2ban rules do not apply for virtualhosts generated by ISPConfig as log files are located on non default path. To fix this you only need to add ISPConfig virtual hosts logs path to jails you want to use. For example: [apache-postflood] enabled = true filter = apache-postflood port = http,https logpath = /var/log/apache2/access.log …

Continue reading “Protecting ISPConfig server with Fail2ban”

802.1x authentication with Unifi controller and Ubiquiti access points

kimmo / 24/05/2018

Ubiquiti seems to be common hardware around homelab users on reddit. I also decided to go with Ubiquiti some years ago as I were interested on the enterprise grade hardware and software they offer for marginal price compared to big vendors like HP, Ruckus, Cisco Meraki etc… I have also used Ubiquiti on customer installations …

Continue reading “802.1x authentication with Unifi controller and Ubiquiti access points”

FreeNAS acting as a bridge for two EXSi hosts.

kimmo / 14/05/2018

I run couple of VMware EXSi hosts in a cluster as test benches for virtualization and for hosting my homelab servers. As I did not want to spend on a loud and expensive 10GB switch I decided to configure my FreeNAS server as a bridge. This way I have 10GB connectivity to FreeNAS for shared …

Continue reading “FreeNAS acting as a bridge for two EXSi hosts.”