Posts
All the articles I've posted.
SRX SSH Ciphers, Algorithms & Key Exchange
Updated:When doing a Nessus scan for the first time on the new SRX320 cluster it highlighted some weaknesses in the SSH protocol. This was due to arcfour, cbc and hmac being enabled by default.
Disaster Recovery Site and VRRP
We're currently working at putting in a new SIP based phone system that is externally hosted. As we already have a disaster recovery (DR) site with a netwo
JunOS SRX too clever for it's own good!
Updated:Today the planned migration from a Juniper ScreenOS SSG to a JunOS SRX didn't quite go as smoothly as I'd have liked. We spent many hours last night and th
OpenSSL and Subject Alternative Names
Updated:Now that Google chrome has started bitching about certificates not having Subject Alternative Names because the practice of using Common Names in certifica
Squid Kerberos Nightmare
What a terrible sequence of events we suffered today. Took quite a bit of head scratching, log reading and plenty of Google fu to resolve. We use Squid wit
Owncloud 10.0 Upgrade
Updated:This should have been easier, but I guess I missed a few things I shouldn't have. I took the opportunity to upgrade Owncloud to v10.0 and also upgraded fro
Remmina/xfreerdp Certificate Name Mismatch
Updated:When using Remmina to connect to some of our older Windows systems we're seeing a certificate problem that prevents it from connecting. Remmina pretty much
Squid3 changes for Debian Jessie
I upgraded our Squid3 proxy server to Debian Jessie today. The process as usual was pretty painless until the Squid3 service tried to restart. Then I saw w
Can't ping using FQDN
I've run across this a few times now. It seems every time I do a big Linux upgrade I lose the ability to connect to an internal server using its FQDN. I ca
Fail2ban - Quick Reference
List your jails: $ sudo fail2ban-client status Show a particular jails status: $ sudo fail2ban-client status [JAILNAME] Unban an IP Address from the jail: