Exploring the Unseen:
Join My Journey Through the World of IT Administration
Apache2 als Reverse Proxy mit ModSecurity und OWASP Ruleset auf Debian
Hier werde ich beschreiben, wie man einen Reverse Proxy mit einer Web Application Firewall (WAF) basierend auf Apache2 installiert, wie im Artikel auf https://stangneth.com/2022/12/27/nginx-as-reverse-proxy-with-waf-modsecurity-on-debian/ erwähnt.
Installation
Um Apache2 auf Debian zu installieren, verwendet man den folgenden Befehl:
apt install apache2 -y
Als nächster Schritt sollen die erforderlichen Module aktiviert werden. Dabei wird das Modul proxy und proxy_http für die Konfiguration des Reverse Proxys verwendet und das Modul headers für das Hinzufügen benutzerdefinierter Header zum weitergeleiteten Datenverkehr.
VMware ESXi free backup with ghettoVCB
For some servers, which run in a development enviromente on a free ESXi, I needed a solution to backup them daily. I deciced to do it with https://github.com/lamw/ghettoVCB, because it is easy to handle. Unfortunately it only takes full backups, which can be a problem in the duration of a very large vm, but for the development system it works perfectly.
Prerequisites
The ssh services needs to be permanently activated on the ESXi Server.
FreeRadius, LDAP and dynamic VLAN assignment
A long time ago I was interested in find out how I can use my installed FreeRadius to dynamically assign a VLAN based on an Actice Directory Group. First I’ll show my current setup:
- Microsoft Active Directory Domain Controller (Windows Server 2012 R2)
- FreeRadius (openSUSE Leap 15.3) – Installation instruction https://stangneth.com/2021/05/26/freeradius-on-opensuse/
- HP ProCurve 2810-24G
- Client (Windows 10 21H2)
Active Directory group
After creating a local security group in Active Directory I assigned it to a User.
FreeRadius on openSUSE
I changed my private wifi from WPA2 to WPA2-Enterprise. I no longer have to enter a one-time password, but can enable authentication using a username and password. For this scenario I’m using my MS Active Directory and a FreeRadius Server. Following you can find my configuration. Feel free to write comments or corrections in the comment-section.
Requirements
- Static IP
- /etc/hosts is showing to the Hostname /etc/HOSTNAME
- DNS Server is an Active Directory Domain Controller or can dissolve all Active Directory entries
- Chrony configured
Keine Kommentare zu Apache2 als Reverse Proxy mit ModSecurity und OWASP Ruleset auf Debian