Excalibur's Sheath
Implementing WireGuard VPN on OPNSense for Secure Remote Access
2024-10-12 00:00:00 -0600Securing remote access to your home or server network is essential, and WireGuard VPN offers a robust, high-speed, and easy-to-configure solution. In this guide, we’ll walk through setting up a WireGuard VPN server on OPNSense, and configuring clients (peers) on Android, iOS, and Linux. Additionally, we’ll discuss how to use WireGuard for securing a server environment versus remote user connections.
read moreUsing DNS to Protect Your Website and Domain
2024-10-04 00:00:00 -0600DNS (Domain Name System) is often viewed as the phonebook of the internet. DNS translates domain names into IP addresses. However, it can also be a powerful tool for enhancing security. Here is how to use DNS to protect your domain.
read moreGuide to DNS Records That Help Secure an E-Mail Server
2024-09-26 00:00:00 -0600E-mail servers rely on various DNS records to ensure proper function, security, and deliverability. Configuring these records correctly can protect your domain from spoofing, phishing, unauthorized use, improve e-mail deliverability, and protect your reputation. This article provides an in-depth explination of the DNS records which are crucial for e-mail server operations and security, including newer standards, like BIMI and MTA-STS.
read moreCitadel Email Server
2016-12-18 00:00:00 -0700Recently, I needed to redo my email server. The mail reasons for this were that I was finding it hard to control spam, and I could not send email. As I was looking around for a guide, or for examples I found the Citadel software. Citadel is a one stop solution, so rather than installing multiple pieces of software for different aspects of a mail server I install, and secure one. Citadel has a long heritage coming out of the BBs scene of the 1980s and 1990s.
read moreSSH Banners and MOTDs
2016-10-30 00:00:00 -0600A while ago, I wrote about some fun things to do to help secure your servers. Among the things I included was information about SSH banners, and Message of the Day files. At the time, I was not able to generate dynamic content for the Message of the day. Recently, I learned how to accomplish dynamic content on CentOS/Redhat based Linux systems. My goals for this project was to show the following:
read more