Blocking Countries on Nginx without the GeoIP Module
Sometimes blocking entire swathes of the world is the way to go if you truly want a defense in depth approach on your web apps,…
Bonding Interfaces on Ubuntu 12.04LTS
Having multiple interfaces on a server helps for a variety of reasons, and recently I had to get a server (a Sun Micrososystems X4100 incidentally),…
Setting up Nginx with Cloudflare
I’ve written about the very excellent Cloudflare CDN before. It’s a fantastic content delivery network with inbuilt security, I love it. This is another quick…
Useful SSH Commands (Including Mac OSX)
SSH Port Forwarding Examples SSH is a very flexible and very useful tool for those of us working across multiple systems sometimes in multiple locations. …
How to Install AVG Anti Virus on Ubuntu Server
Although in my experience Linux is much less susceptible to malware, it would be unfair to say that they are completely secure. Even if a…
A Tinyproxy Transparent Installation on Ubuntu 12.04 with HTTPS Support
[alert style=”red”]Update: It appears as of June 2013 that the Ubuntu repositories now have compiled Tinyproxy with transparent support. So unless you want to build from source…
Nginx Not Showing Client IP and Varnish Not Forwarding Client IP
I came across a setup using numerous Varnish front end cache servers with one Nginx backend server. All built on Ubuntu machines. It appeared that…
How to Log BIND Queries on Ubuntu 12.10
I’ve been troubleshooting some pretty large networks lately, and since DNS underpins most enterprise networks it’s very useful to see what traffic is going through…
How to Enable Squid Anonymous Stealth Mode
There are some times when you don’t want your proxy server announcing that it’s a proxy server to the world. Getting Squid to anonymise the…
How to Secure phpMyAdmin on Ubuntu
Looking through my servers logs I noticed that I was attracting quite a lot of vulnerability scanners trying to access my phpMyAdmin directory. Being ever the…