Firewall on sigtar.com

time to disable coinhive - hysteria ensues

Mon, 29 Oct 2018 00:00:00 +1300

See my previous post here - /2017/10/13/coinhive-alternative

So the trial of coinhive and associated monero browser mining has come to an end. It seems most corporate firewalls and security appliances detect and block access to my domain just being associated with the coinhive java-script.

Even though i was being a polite net citizen and disclosing it on the site - firewalls with strict polices dont give it a chance. Several public DNS servers have also block listed the site - hopefully this will be undone soon.

Ubuntu - Disable Firewall

Wed, 08 Nov 2017 00:00:00 +1300

if your working with Ubuntu in lab or test env, you may want to disable firewall…. two simple commands;

sudo ufw disable

sudo apt-get remove ufw

Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
ufw
0 upgraded, 0 newly installed, 1 to remove and 3 not upgraded.
After this operation, 838 kB disk space will be freed.
Do you want to continue? [Y/n] Y
(Reading database ... 64052 files and directories currently installed.)
Removing ufw (0.35-0ubuntu2) ...
Skip stopping firewall: ufw (not enabled)
Processing triggers for man-db (2.7.5-1) ...

pc engine - pfsense as router / firewall

Thu, 26 Feb 2015 00:00:00 +1300

Just built a pfsense router on a pc engine to replace my aging 7390 fritzbox…. Very very awesome and fast!

Perfect for UFB (ultra fast broadband) here in New Zealand - FTTH has arrived :)

I’m currently running these services on it (2 x 1GHZ cpu, 4GB RAM, 16GB msata SSD);

dhcpd - DHCP server
miniupnpd - UPnP server
ntpd - NTP server
squid - Transparent Proxy & Reverse Proxy
snort - IDS (Intrusion Detection System) / IPS (Intrusion Prevention System)
ssd - SSH server
unbound - DNS Server
ipsec - IPsec VPN (site to site VPN)
openvpn - Open VPN (client VPN)

Check these links for some great advise…

vyatta as a virtual router

Sun, 25 Jul 2010 00:00:00 +1200

Some very nice examples by Gene on how to setup vyatta as a router on this page;

http://www.sonoracomm.com/support/19-inet-support/233-vyatta-cable

Masquerade Natting;

set service nat rule 10 source address 192.168.77.0/24 set service nat rule 10 outbound-interface eth0 set service nat rule 10 type masquerade

set service nat rule 20 source address 10.200.88.0/24 set service nat rule 20 outbound-interface eth0 set service nat rule 20 type masquerade

Essentially every thing leaving from these two networks will be natted via the eth0 interface. i.e. they will be using the same IP as eth0 for their requests.

Corporate Firewall - SSH and port 443 goodness

Sun, 08 Feb 2009 00:00:00 +1300

Things you’ll need; (basic instructions) SSH - either Linux or Open SSH for windows (set this up first and ensure its working!). I have only used Linux, so i do not know the details of setting up a Open SSH box on windows (good luck).

Router with pinhole or port forwarding abilities. – forward your external 443 port to internal 22 on your SSH box

Putty.exe - use this to test your SSH connection locally (you should be able to connect on port 22 locally or 443 externally)