Security - rootDB

For IT Users and Developers

Become part of a new community that brings together IT professionals, developers and administrators from around the world to share knowledge and find innovative solutions. From cloud computing and DevOps to cybersecurity, you can benefit from proven experience and expertise at the highest level.

colinardo 2 days agoMikroTikFirewallDevelopment

Mikrotik Scripting: Using the "place-before" parameter to place fw rule "after" other rule

This is a quick trick to programmatically place firewall rules after specific rules, not before. Normally you already have the place-before parameter when adding firewall ...

firefly on Nov 27, 2024Windows 11Viruses, TrojansWindows 10Windows Server

Malware Romcom exploits zero-day vulnerabilities in Firefox and Windows

Security researchers at Eset have discovered a serious threat that is currently being exploited in Germany and in US: A Russian hacker group is currently ...

rcdevs on Nov 14, 2024SecuritySecurity BasicsSecurity Tools

How about swapping password rotation fatigue for real-time leak detection?

Hi there! Traditional password rotation policies, while meant to enhance security, can lead to user fatigue and even weaker security as users struggle to keep ...

pegnose on Oct 20, 2024FirewallWindows 10

RDP connection to Windows 10 client fails with code 0x904

I have a Win10 workstation to which I cannot RDP. I use the built-in RDP client from Win11. The connection fails with the following message ...

TobiasG on Jul 03, 2024Security Tools

1Password share password vault between companies

Hello everyone, I would like to share a password vault in the Password Manager 1Password between two user accounts that are in different company environments. ...

firefly on May 16, 2024MicrosoftSecurityWindows Server

Windows zero-day vulnerability CVE-2024-30051

CVE-2024-30051 is a zero-day privilege escalation vulnerability discovered by Kaspersky Lab in April 2024 while researching CVE-2023-36033. It is a critical vulnerability in Windows (CVSS ...

Linuxero on May 11, 2024FirewallNetwork ManagementLAN, WAN, WirelessRouters, Routing

EdgeRouter Lite 3 IPv6 configuration

Hi; I am trying to configure the EdgeRouter Lite 3 with two subnets on eth1 and eth2. The router is behind a Cable Fritzbox. So ...

Linuxero on May 04, 2024Linux NetworkVPNFirewall

Wireguard with systemd and nftables

Hi; I am trying to configure Wireguard VPN using systemd.networkd on a Server with NFTables as a firewall. These are the files of my configuration: ...

gleixnerd on Apr 19, 2024Firewall

Check of ZFW Firewall

Hi together, I will post my running cisco config below. I have an external modem on my cisco router, which gets an fixed IP-Adress from ...

colinardo on Aug 28, 2023Windows NetworkEncryption, CertificatesWindows ServerRouters, Routing

NPS 802.1x Radius Authentication with EAP-TLS and strong certificate mapping for non domain joined devices

Introduction This tutorial describes the procedure how to use 802.1x EAP-TLS strong authentication especially for non domain joined devices on your LAN. So your device ...

Unshipped9220 on Apr 28, 2023IT Safety tipsServer Hardware

Grounding my server rack

Hi! I will soon get a server rack, namely the 25U Open Frame Rack from StarTech . This will house my UPS , a pfSense ...

Dymion on Apr 19, 2023Outlook MailEncryption, Certificates

Outlook encrypts messages that are only signed? Lock icon on just signed mails?

Hello, recently I've set up Outlook to send always signed mails. But not encrypted ones. Everything worked fine so far, since today I received feedback ...

jimmmy on Mar 28, 2023NAS systemsBackupServer HardwareNetworks

Network (windows server + backup server) on NAS?

Hey there! I think, it makes more sense to post in english instead of german, for it's international community. I need some advice for setting ...

colonel on Mar 25, 2023Storage systemsBackup

(File-)System for versioning and organizing

I'm searching for a solution to organize photos, documents, audio, video, in a way so that each file only exists once on a hard drive, ...

Frank on Feb 15, 2023macOSSecurityAppleiOS

Emergency patch: Zero Day security update for all Apple platforms

Apple released an urgent security update for all its platforms on Feb. 13, 2023 CVE-2023-23529. The vulnerability is in Apple's browser engine WebKit. Using specially ...

aqui on Jan 10, 2023FirewallSecurityNetworksRouters, Routing

Cisco router with zone based firewall and port forwarding

This tutorial is a short extension to the more comprehensive local . Due to several requests regarding port forwarding and combination with a secure DMZ ...

expone on Dec 15, 2022Windows 11SecurityWindows 10Security Tools

How to list installed security appliances?

I do look for a tool that identifies all installed security appliances (antivirus, firewall, thread-protection, application proxy e.g. ZScaler Client) on a Windows Client computer. ...

kamaradski on Sep 14, 2022FirewallNetworks

OPNsense and Telekom fiber at home without modem

Hello Administrator community, After a long time of only reading posts here, it's time for my first real posting. Sorry that I have to do ...

colinardo on Aug 05, 2022SecurityServer HardwareRouters, Routing

CISCO Small Business RV Router Series severe vulnerabilities

Several security vulnerabilities threaten CISCO's RV router series, which is often used by small/medium-sized companies. The web interface has several flaws which allow an attacker ...

Frank on Aug 05, 2022SecurityIT Safety tips

Lighttpd, Rewrite and a strange Error-handler

From the everyday life of an admin: Actually I wanted to do something completely different, but when I got a mail with an update request ...

colinardo on Jul 20, 2022FirewallSecurity

Zyxel Firewalls security alert!

A serious vulnerability in Zyxel firewalls has been discovered, which in the worst case, can be used to execute local commands with root privileges. Security ...

colinardo on Jul 06, 2022Security

OpenSSL version 3.0.4 affected by serious security vulnerability

Admins/users running OpenSSL version 3.0.4 dated June 21, 2022 should update their systems to version 3.0.5 as soon as possible. The vulnerability allows remote code ...

colinardo on Jun 07, 2022MikroTikSecurityOther systems

Mikrotik SSH Public Key Authentification with modern OpenSSH Versions 8.2+ (now solved in ROS 7.4beta2)

#edit 07.06.2022 18:09# Just wrote the post and Mikrotik has already acted, wow that's fast :-)! RouterOS version 7.4beta2 has been released the "v7 testing" ...

Dani on May 13, 2021Security

DST Root CA X3 Expiration (September 2021)

On September 30 2021, there will be a small change in how older browsers and devices trust Let’s Encrypt certificates. If you run a typical ...

C.R.S. on May 01, 2021SecurityDetection, blocking

Defenseless: Spectre Mitigations Leveraged

A team of University of Virginia School of Engineering computer science researchers has uncovered a line of attack that breaks all Spectre defenses, meaning that ...

Dani on Nov 23, 2020SecuritySecurity Tools

The Bastion powered by OVH

Bastions are a cluster of machines used as the unique entry point by operational teams (such as sysadmins, developers, database admins, ) to securely connect ...