… or how to host a Dualstacked Public Website behind a IPv4 NAT Box without Reverse Proxy, Portforwarding and other ugly stuff … inspired by the following Post, i started a little project and redesigned the connectifity for my Hamster’s Webserver :) i wrote a mail to the guys from tetaneutral.net and asked them for the wireguard vpn service with public ipv4/ipv6 adresses for my server. as i didn’t get any feedback, i had to implement the “Server” on my own.
Bootstrapping Debian a little helper how to generate a Debian Template. This time, it’s a VM Hosted on Vultr New VM 1 CPU, 1GB RAM, 25GB Disk upload debian-10.9.0-amd64-netinst.iso boot from iso install: (text based) lang: english country: switzerland locale: US (en_US.UTF-8) keymap: Swiss German nic: ens3 hostname: template-25G domain: noflow.ch passwd: xxxxxx user: prename name / login passwd: xxxxxx disk: Guided - entire disk with LVM - (one partition | separate /home | separate /home, /var and /tmp) separate partition for large disks one partition for smaller disks write: yes disk: 20GB (for guided partitioning), 5GB for Spare write: yes another dvd: no mirror: switzerland, debian.
Dog (echo dig |sed ’s/i/o/') you know nslookup, dig, hosts, getenv and all the commans for the cli. but have you ever tried dog ? Website: https://dns.lookup.dog/ and their Doku: https://dns.lookup.dog/dns-in-five-minutes dog is an open-source DNS client for the command-line. It has colourful output, supports the DoT and DoH protocols, and can emit JSON. Install Package doas pkg_add dog Examples DNS over TLS $ dog example.com --tls @dns.google DNS Request over HTTPS $ dog -H @https://dns.
OpenBSD 6.9 and PHP 8 is out … Why not give a try ? list packages what PHP Packages are available with Version 6.9 ? root@host # pkg_info -Q php |grep '\-8' php-8.0.3 php-apache-8.0.3 php-bz2-8.0.3 php-cgi-8.0.3 php-curl-8.0.3 php-dba-8.0.3 php-dbg-8.0.3 php-enchant-8.0.3 php-gd-8.0.3 php-gmp-8.0.3 php-imap-8.0.3 php-intl-8.0.3 php-ldap-8.0.3 php-mysqli-8.0.3 php-odbc-8.0.3 php-pcntl-8.0.3 php-pdo_dblib-8.0.3 php-pdo_mysql-8.0.3 php-pdo_odbc-8.0.3 php-pdo_pgsql-8.0.3 php-pdo_sqlite-8.0.3 php-pgsql-8.0.3 php-pspell-8.0.3 php-shmop-8.0.3 php-snmp-8.0.3 php-soap-8.0.3 php-sqlite3-8.0.3 php-tidy-8.0.3 php-xsl-8.0.3 php-zip-8.0.3 add nginx, php8 add webserver, php8 and enable the services
OpenBSD 6.9 released This is the 50th Release of OpenBSD ! As they release twice a Year, must be around 25y ago since the fork of NetBSD started. Wikipedia has got a Comparison of the Different BSD Operating Systems … Upgrade to 6.9 i upgrade my systems twice every years. there is no need to reinstall as the upgrade works fine over year. please read the official upgrade guide carefully and then you may wanna use this script below.
just trying a new feature for leaving comments … it’s selfhosted, done with isso and quite painfull to install :( some people may like to provide feedback, ask questions, … sha256: 77e8157a850143fbc6ec418ef10c9a9e53040091604df1c9dbdd6e2d476d3c0e
as many of you, i’ve got different kind of stuff running, mostly internally, but also some public things. my Server is your Honeypot watch some live bruteforce attacks which happens to any public ip address on the internet … i get attacked with 10k/attemps per Day Hamsterwheel Counter my Daughter got a Hamster and he’s running every night in his Weel.. I built a small Wheel-Counter so we can see the Daily Stats an Performance of Cookie :).
some basic commands for branches. you can read the official page for more details create branch you wanna develope a feature, fix a bug, test some stuff … you need a branch ! git checkout -b feature1 push upstream if you have a central repo, push the feature upstream (so others can checkout as well) git push --set-upstream origin feature1 show branch you may have multiple branches, list them all
i like to run honeypots … ok, to be honest, it’s not a honeypot. It’s a productive maschine for me, but all the bots trying to get in get’s redirected to a Honeypot, the credentials were captured and last but not least, you can watch them live in your browser :) http://honeypot.nolink.ch btw. 100k failed login attempts in 10 Day … have fun ! sha256: 9d42ea2e3328469699053a8ccbc0bf1e6c5e3a62d7b9d07b18afc95fbb655762
Bootstrapping VM This is similar to the previous Post, but with a small difference. Here, we add an other Partition /jail with 2GB Size. On this Partition, we remove the nodev & nosuid Flag, so we can use this Partition as Root for some Jailed Users. And last but not least, we fireup a new VM, configure a Jailed User and make it Public Available … VM with 20G Disk *** Bootstrap OpenBSD 6.
i just like this Page … Faces of OpenSource. Thanks for all the fish, guys ! sha256: df162290d9004e5881b856b1efb2d2f91037837d6ba52a5b7059919a547a160e
Tshark Basic Commands tbd Extract Data from certain Timeframe editcap -A "2021-05-01 11:00:00" -B "2021-05-01 12:00:00" big_capture.pcap onehour.pcap sha256: d340a8a3a4bd5ba847670b233429b115f3e760b2ac84967c297f738cd8623d38
Managing VM’s on Hetzner Cloud with Terraform you may want to manage some vm in the cloud. webgui is nice, but a real nerd needs cli ;) some notes how to get terraform running with OpenBSD. add Packages (3min) $ time doas pkg_add git gmake go terraform 3m18.62s real 0m19.53s user 0m07.73s system set GO PATH echo "GOPATH=$HOME/go" >> ~/.profile echo "export GOPATH" >> ~/.profile . ./.profile echo $GOPATH build terraform provider for hcloud (2min) As the hcloud is not available for OpenBSD, we have to build it on our own.
Bootstrapping VM It’s always good to have Templates. Isn’t it ? Sometime, with a lot of stuff preconfigured and installed. Sometimes, a fresh install without anything (except syspatches). Here a little Helper, how to Build a OpenBSD Template with 20GB, resp. 40GB Disk Size. This stuff was tested on www.hetzner.de, so you should be able to reproduce it in a few minutes. Costs: CX11, 1 CPU, 2 GB RAM, 20 GB Disk, 20TB Traffic -> 2.
Resource Public Key Infrastructure you may know what RPKI is … It’s a PKI Framework for improving Security for the Internet Routing Infrastructure based on BGP. As a HomeUser or Small/Medium Size Company, you normally don’t have a Full BGP Table and multipe Upstream Providers. You have one Internet Router or Firewall and you get a Default Route from your ISP. With OpenBGPD and the current rpki extensions, you “just” need a Full BGP Feed and then, you can filter all invalid ROA’s and keep your Routing (and Internet Access) more Secure.