Featured
How this site is built
A static Astro site on Cloudflare, with local search, opt-in comments and a strict Content-Security-Policy.
Notes on security leadership, infrastructure and architecture
I’m Greg, a security leader and engineer. I write here about running security programmes, building infrastructure that lasts, and the technology underneath both.
Recent articles
-
Deploy the Zscaler ZPA App Connector with Docker
A working docker run command for the Zscaler Private Access App Connector, what each flag does, and what to check before you put it into production.
-
Relay SMTP through Microsoft Graph with SMTP2Graph
Exchange Online is retiring Basic Authentication for SMTP AUTH. SMTP2Graph accepts mail locally and sends it through the Microsoft Graph API, with no user license needed.
-
Restrict SSH access to trusted networks with firewalld IPSets
Allow SSH only from a list of trusted networks with a firewalld IPSet and a rich rule, then remove the default rule that leaves SSH open to the whole internet.
-
Load balancing Exchange with HAProxy
During a migration to Exchange Online, our load balancer could not take the extra traffic without a costly upgrade. HAProxy on a small Debian VM did the job: the full configuration.
-
Build VPP Debian packages from source
The steps I use to build FD.io VPP from source into .deb packages on Debian 12, from cloning the repository to make pkg-deb.
-
Erase a Windows-formatted USB stick on macOS
Disk Utility often cannot erase a USB stick that held a Windows installer or uses an MBR layout. diskutil eraseDisk in Terminal wipes and reformats it in one step.
Browse by topic
Frequent tags
- #95th (1 articles)
- #astro (1 articles)
- #bgp (5 articles)
- #centos (2 articles)
- #cisco (1 articles)
- #cloudflare (1 articles)
- #csp (1 articles)
- #debian (2 articles)
- #exchange (4 articles)
- #exchange-online (1 articles)
- #ip-transit (2 articles)
- #junos (2 articles)
- #linux (15 articles)
- #microsoft (15 articles)
- #mikrotik (2 articles)
- #network (13 articles)
- #openssl (2 articles)
- #pki (4 articles)
- #proxmox (4 articles)
- #qfx (2 articles)
- #routeros (2 articles)
- #security (5 articles)
- #virtual-chassis (2 articles)
- #virtualization (3 articles)