ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Step‑by‑step guide to configure pfSense HA with CARP, including prerequisites, VIP configuration, XMLRPC sync, verification, and failover recovery.
Learn how to implement a default-deny network policy on Ubuntu Server using UFW to block unauthorized access while maintaining SSH and web service connectivity.
For some reason I have no such file on my server.. root@serv:~# uname -a Linux serv 5.4.0-87-generic #98~18.04.1-Ubuntu SMP Wed Sep 22 10:45:04 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux root@serv:~# cat /proc/net/stat/nf_conntrack cat: /proc/net/stat/nf_conntrack: No such file or directory But my conntrack is definitely enabled: root@serv:~# lsmod | grep connt
I used to operate a network with a single firewall (Sophos UTM) that had a foot in multiple VLANs and performed as router in between those where allowed. For more security I added a second firewall with another FW software (Opnsense). WAN - Firewall1 - Main LAN (FW1 as Default GW) - Firewall2 - Shielded VLANs FW1, Main LAN and FW2 all have a foot in the main
In OpenSUSE Leap 15.6 the YaST firewall module (YaST 3.3.1) presents an IPv6 checkbox that must be enabled manually. The module does not automatically detect whether the running kernel has IPv6 support, so the checkbox remains visible even when the kernel is compiled without IPv6. Enabling the checkbox in such a scenario has no effect and YaST logs a generic
With IPv4, you used to be able to give a host a static local IP address on the LAN, and use a firewall rule on the firewall/router to forward a port on the (possibly dynamic) Internet-facing IP used by the network to a port on tat particular host, using the host's static LAN IPv4 address as a stable way to identify the host in the firewall rule. But with IPv
The goal is to determine whether Artix Linux should apply a default network filter that limits incoming SSH connections to trusted interfaces or subnets while the OpenRC sshd service remains enabled by default. Currently, installing the openssh package starts sshd listening on 0.0.0.0:22 and :::22, and the base ISO does not activate nftables/iptables or a de
I'm trying to ping my Windows 11 machine from a Linux device. Here's what I've tried so far: Disabling Windows Defender Firewall Enabling inbound rules from the Advanced Options Restoring firewall & network settings Uninstalling VPNs I'm 99% sure the issue is in the Windows machine since they can both ping the router and I can also successfully ping othe
Context & issue We would like to do maintenance on one of our Compute Engine instance (update dependencies via apt update/upgrade), but said instance does not have access to the public internet, even if there is a NAT in the network: sudo apt update Err:1 http://security.ubuntu.com/ubuntu jammy-jellyfish-security InRelease Could not connect to security.u
ubuntu
opensuse
ssh
artixlinux