Obtuse Networking (Page 2)

More issues

Self Hosted: Episode 4 - Certificates

Software used: * FreeBSD 14.2 (jail) * Step CA 0.28.1 (from ports) Updated: 2026-02-14 Introduction If it isn't DNS... then it's certificates! Certificates are simple... but it's complicated! Certificates themselves are very simple... ignoring the all the crypto algorithms, hashes, etc. They are

Self Hosted: Episode 3 - DNS/DHCP/NTP

Used Software: * FreeBSD 14.2 (as jail) * ISC Bind 9.2.0 (from ports) * ISC DHCP 4.4 (from ports) Introduction It all begins with DNS... Building the Jail environment The DNS/DHCP server will be built using a FreeBSD jail. This is done for several reason. First, FreeBSD Jails

Self Hosting: Episode 2 - Firewall

Software Used: * OpenBSD 7.7 Introduction The firewall will separate the segments and provide protection for services that must cross the segment boundaries. To that end firewall will have several interfaces. To keep rules as manageable as possible we will treat all hosts behind each segment/interface the same. This

Self Hosting: Episode 1 - Hypervisor

Software Used: * FreeBSD 14.2 * Sanoid/Syncoid 2.3.0 Introduction Before we can deploy any services we need two things. First a place to store those services and two a place to run those services from (i.e storage and compute). These two requirements do not need to run

Self Hosting: Episode 0

As with all endeavors, success is not guaranteed. However, without a plan... failure is. In this series I hope to provide instruction on how to setup and self host an environment that can provide everything necessary to function in todays connected world. While I will be simplifying setups and configurations,

Password sensibilities...

Finally some password sense! NIST has released some updates for password verifiers (SP 800-63B). While this isn't everyones cup of tea, it is nice when things like this come out to with discussions around security best practices.

Notes on DPI...

Some quick notes on setting DPI for High Density Displays and X11.

HA @ Home

At work I had build a global, highly redundant, scalable network that always provided best experience no matter what was thrown at it. At home... well, you've heard of the cobblers children?

OpenBGPD + RTBH = dynamic PF rules

What if you could dynamically update PF tables across all your hosts? Here is one way you can...

"IT Security Is Broken?"

Great interview between Ethan Banks and Mick Douglas discussion some of the failures in approach to security in business protection.

Topics

DoH

Dovecot

FreeBSD

IMAP

IPv6

Jail

LAN

LDAP

Notes

Self Hosted

X11

anycast

autoinstall

automation

bgp

browser

canary

comment policy

cwm

dhcp