Implementing WireGuard VPN on OPNSense for Secure Remote Access

2024-10-12 00:00:00 -0600

Securing remote access to your home or server network is essential, and WireGuard VPN offers a robust, high-speed, and easy-to-configure solution. In this guide, we’ll walk through setting up a WireGuard VPN server on OPNSense, and configuring clients (peers) on Android, iOS, and Linux. Additionally, we’ll discuss how to use WireGuard for securing a server environment versus remote user connections.

read more

Using DNS to Protect Your Website and Domain

2024-10-04 00:00:00 -0600

DNS (Domain Name System) is often viewed as the phonebook of the internet. DNS translates domain names into IP addresses. However, it can also be a powerful tool for enhancing security. Here is how to use DNS to protect your domain.

read more

Guide to DNS Records That Help Secure an E-Mail Server

2024-09-26 00:00:00 -0600

E-mail servers rely on various DNS records to ensure proper function, security, and deliverability. Configuring these records correctly can protect your domain from spoofing, phishing, unauthorized use, improve e-mail deliverability, and protect your reputation. This article provides an in-depth explination of the DNS records which are crucial for e-mail server operations and security, including newer standards, like BIMI and MTA-STS.

read more

Citadel Email Server

2016-12-18 00:00:00 -0700

Recently, I needed to redo my email server. The mail reasons for this were that I was finding it hard to control spam, and I could not send email. As I was looking around for a guide, or for examples I found the Citadel software. Citadel is a one stop solution, so rather than installing multiple pieces of software for different aspects of a mail server I install, and secure one. Citadel has a long heritage coming out of the BBs scene of the 1980s and 1990s.

read more

SSH Banners and MOTDs

2016-10-30 00:00:00 -0600

A while ago, I wrote about some fun things to do to help secure your servers. Among the things I included was information about SSH banners, and Message of the Day files. At the time, I was not able to generate dynamic content for the Message of the day. Recently, I learned how to accomplish dynamic content on CentOS/Redhat based Linux systems. My goals for this project was to show the following:

read more