Security ⁽⁹⁾

TailScale is a Wireguard-based hosted SDN and VPN provider with a per-user per-device business model. They have a free tier that enables up to three users access to 100 devices each in a device-to-device virtual mesh network. However, TailScale can be levered in a system,…

I've previously written about why your network needs Protective DNS to protect your privacy and security. Nevertheless, from time to time you may wish to relax privacy protections for selective URLs in order to enable services or applications that are of value to you. If…

Here is a technique to permanently enable SSH access on ESXi hosts. VMWare warns against leaving SSH access enabled on production servers due to security concerns. However, in my homelab this is an acceptable risk. Using the VMWare Web Interface, do Host > Services >…

A recent experience demonstrated how Denial of Service countermeasures in network switches can prevent VMWare ESXi NFS datastores working. I recently upgraded the network switches in my home lab. By default, my new switches have a denial of service prevention feature that detect the following…

Two fobs along with packaging, picture (c) IT Infrastructure Architect Can a £3 Bluetooth tracking fob from Poundland really be a credible proposition? Perhaps, but only by swerving the official app. I decided to buy a couple of Track-Me Smart Tracker Bluetooth tracking fobs from…

If you have a restrictive outbound firewall on your network and you wish to enable WhatsApp on connected devices then you will need to permit the following outbound ports and protocols. Typical problems If you find WhatsApp presence and signalling work, but call setup fails,…

All networks can benefit from Protective DNS and Outbound Firewalling to protect users and content from an increasingly sophisticated Internet threat landscape. Protective DNS Protective DNS intercepts name resolution requests to locations known to be involved in crime, malware, and distribution of undesirable content. It…

Outbound firewalling is an important step towards improving the security of your network, data and users, but common consumer and SME router devices cannot block outbound traffic, leaving many at risk. If commercial solutions are not an option then free open-source firewall software can run…

A significant proportion of your Internet traffic is likely to be concerned with tracking you to serve you with ever more intrusive adverts. Use an Ad Blocker like PiHole to firstly block ads and tracking, and then to build a Protective DNS service to protect…