Debian and Bluetooth Headphones
My default Debian install had an issue with the headphones not working. To resolve it I needed to install the pulse audio bluetooth module and restart the service:
Read moreCreate Loopback Interface with PowerShell
Some load balancers may require you to create a loopback interface on a Windows server or servers. The loopback device then gets the load balanced IP added to it; that IP is used for the inbound load balanced connections. The loopback adapter is used so that no ARP replies are […]
Read moreJuniper SRX Active Directory User Firewall
These are the steps I used to get the Juniper SRX user firewall feature working with Active Directory. The end result is I can apply firewall policies based on the username of a user or the group of a user. NOTE: JunOS 17.4R1 or above is required for this feature […]
Read moreJuniper vSRX Cluster Upgrade Procedure
These are the steps I used to upgrade a Juniper vSRX cluster with minimal downtime. The Juniper vSRX cluster was running on ESXi, the upgrade was from 15.1X49-D120.3 to 17.4R1. The upgrade was done to get some new features for the user firewall (IPv6 support). The basic cluster upgrade process […]
Read moreJuniper QFX TCAM Usage
The following commands will show you the current TCAM usage on a QFX series switch. Especially for QFX5100 devices, the TCAM is very small and only a limited number of firewall filters can be installed. If the TCAM is full you will have issues such as the loopback firewall filter […]
Read moreJuniper SRX IDP Packet Capture
My Juniper SRX devices are configured to send packet captures to a Linux server for further analysis. I have the Linux server exporting its share via NFS which I mount on my PC, that allows me to then browse through the packet captures of attacks using my PC directly and […]
Read moreJuniper vSRX ESXi 6/6.5 Installation
To install the Juniper vSRX appliance on ESXi 6/6.5, the following things needed to be done. Initial Installation/VM Setup Deploy the OVA file as usual. Once the OVA has been deployed, edit the VM settings (right click the VM -> Edit Settings). Make sure you are using the Flash client […]
Read moreJuniper vSRX Common Issues
There are a few common issues I have ran into when running the vSRX appliance. JunOS Console Doesn’t Show If the JunOS console does not show at all (all you see is a “Windriver Linux” screen on the console) usually the cause will be the VM’s CPU configuration. If the […]
Read moreJuniper SRX – IDP Rule – Block SSH Brute Force
The following IDP rule will block SSH brute force attacks. It will be triggered by more than 3 consecutive SSH connections in a row. After the rule has been triggered, the source IP will be banned for a period of 1 hour and the connection to both the client and […]
Read moreLinux SSD Configuration
The following settings should be used on Linux devices with a SSD. The instructions are Debian specific and taken from the SSDOptimization page on the Debian wiki. Automatic Trim/Mount Options Make sure the file system(s) are mounted with these options: discard,noatime,defaults As an example: Scheduler Set the scheduler for the […]
Read more