Managing Network Access in CentOS with Firewalld Zones
Learn how to manage network traffic in CentOS using Firewalld zones, including the critical difference between runtime and permanent rules to prevent configuration loss.
Loading…
ReadMeFeed / Community knowledge
#network-security
Real questions. Useful conversations. Find the people who know your stack.
centosChoosing the Right Transfer Protocol in FileZilla: FTP, FTPS, and SFTP
A technical guide to choosing between FTP, FTPS, and SFTP in FileZilla, focusing on security trade-offs, firewall traversal, and verification of encrypted connections.
filezillaHardening TLS: Using OpenSSL to Implement Public Key Pinning
Learn how to use OpenSSL to extract public key fingerprints for TLS pinning, mitigating MitM attacks by bypassing the system trust store.
openssl
Private Link for Azure Storage: when to isolate and how to avoid DNS failures
Security teams want storage traffic off the public internet. Private Link can deliver isolation, but DNS misconfiguration is the common failure. Here is a practical decision framework and a worked example for locking down Azure Storage with a Private Endpoint.
PuTTY SSH Proxy (Jump Host) Architecture Note
An architecture note on PuTTY's SSH proxy (jump host) implementation, covering nested SSH transport, trust boundaries, and operational failure modes.
puttyUnderstanding the Architecture of Opera's Integrated VPN
Opera's VPN is technically a secure HTTPS proxy. Learn how it differs from a system-wide VPN and how to verify its scope using simple network tests.
operaTaming Firewall Chaos: Using pfSense Aliases for Scalable Rule Management
Stop managing dozens of identical firewall rules. Learn how to use pfSense Aliases to group IPs, ports, and networks into scalable, easy-to-audit configurations.
Cloudflare Access: Bypass policy exposure for health check endpoints
Cloudflare Access is designed to protect origin servers by enforcing identity-based policies. A common requirement is allowing external monitoring services or load balancer health checks to reach specific endpoints without triggering an authentication challenge. To achieve this, a Bypass policy is typically implemented for specific paths or IP ranges. Howeve
cloudflare