I recently build my own Sophos UTM firewall based on the home license and wanted to get it under Zabbix monitoring. I’ve been using Zabbix for at least 8 years now and i recommend it as a (enterprise grade) monitoring system.
I’ve build an Template for public use, see: http://wouter.borremans.nl/computer-related-howto/programming/zabbix-monitoring-template-sophos-utm-firewall/
I wrote a quick article on how to remove the Google Authenticator function of your server when you’re using it logging in through SSH.
I added a small howto to add a Maginon IPC-10AC camera (sold at Aldi) to Synology Surveillance station version 7.
I often use a proxy server over a SSH tunnel when i’m in public places. I found it sometimes annoying to click through the dialogs Controlpanel -> Network -> Advanced -> Proxies. I thought i would create a script which enables or disables the proxy settings for me for either the Ethernet or Wireless adapter on my macbook.
The shell scripts uses the commandline tool “networksetup” to alter the settings.
The “enable proxy” script: (this script also builds the tunnel to a proxy server over port 443)
echo "Connecting to , provide password for firstname.lastname@example.org if prompted"
echo "Enabling proxy for HTTP (please provide admin password if prompted)"
sudo networksetup -setwebproxystate Ethernet on
sudo networksetup -setwebproxystate wi-fi on
echo "Enabling proxy for HTTPS (please provide admin password if prompted)"
sudo networksetup -setsecurewebproxystate Ethernet on
sudo networksetup -setsecurewebproxystate wi-fi on
ssh email@example.com -p443 -L3128:localhost:3128 -o TCPKeepAlive=yes -g
The “disable proxy” script:
echo "Disabling proxy for HTTP and HTTPS"
sudo networksetup -setwebproxystate Ethernet off
sudo networksetup -setsecurewebproxystate Ethernet off
sudo networksetup -setwebproxystate wi-fi off
sudo networksetup -setsecurewebproxystate wi-fi off
For a more secure terminal (SSH) environment, you can add a second factor to authenticate a user. I personally run Ubuntu and i implemented the Google Authenticator on my Ubuntu system using the Google Authenticator Library of Google in combination with my iPhone with the Google Authenticator App.
See the following howto:
I own a Synology DS211j. As i wanted to use an alternative DHCP mechanism to support custom nameservers i ran into the Synology DHCP Server package, straight-forward and easy to use. Additionally i’ve the Synology firewall configured to deal with a few ports that are opened to the Internet.
This quick howto gives you tips on how to configure your Synology firewall to work together with the DHCP server package:
Synology DHCP Server and Firewall
See this howto to get access to your shell (over SSL) without a password. This howto generates a certificate which is imported at both local and remote profile.
In some cases it may come in quite handy to empty your mail queue’s right away, this script which executes at your prompt clears (deltes) the messages which are in the queue.
See this http://wouter.borremans.nl/computer-related/how-to/empty-postfix-mail-queue/
I’ve added another quick how to on how to hide your user input while asking for a password fromout Bash.