Posts

Newest first.

Published on 2 min read

The rise of MITM SSL inspection

During my many trips, I’ve noticed that MITM SSL inspection by firewalls is increasingly common in companies and public organizations. So I decided to talk about it. Background Le…

Published on 1 min read

Samba4: password synchronization

Hello everyone, A quick post to announce that I finally looked again at password synchronization with Samba4. Password sync with Google Apps: https://github.com/sfonteneau/samba4-…

Published on 1 min read

Gitea: a simple self‑hosted Git service

A quick post to introduce a tool I’ve been discovering lately: Gitea . What is Gitea? A no‑nonsense, self‑hosted Git service. Why not GitLab? Sure, GitLab is more complete: https:…

Published on 1 min read

Seafile: a different approach

Recently I talked about Nextcloud. Today: Seafile . Seafile has a different vision. Where Nextcloud provides a plugin system and aims to be versatile, Seafile focuses on the core:…

Published on 2 min read

LAPS, PVLAN and admin shares: limiting lateral movement

Summary A new effective ransomware showed up: NotPetya . Let’s look at how it spreads and what we can do to harden networks accordingly. Microsoft article detailing the attack: ht…

Published on 1 min read

Apache Guacamole – a VPN alternative for your users

A quick introduction to a product that many blogs already talk about. Guacamole provides your users with a centralized web interface for RDP , VNC and SSH connections. In my case,…

Published on 3 min read

Security: my recommendations

Hello everyone… Here are some security recommendations for your networks. I’m aware not everything is applicable everywhere. Protection against Internet‑facing attacks Review your…

Published on 1 min read

A simple and effective firewall solution (Shorewall)

A quick post to introduce a simple and effective solution. In general we all agree iptables is reliable and powerful… but the syntax can be painful. I discovered Shorewall at my n…

Published on 1 min read

Managing WAPT with an all‑in‑one package

Hi — it’s been a while! Today, a WAPT post šŸ™‚ I’d like to manage WAPT in a different way. Let’s forget the console for 30 seconds and create a WAPT package that installs… WAPT pack…