I very much enjoy my homelab projects, from VMware ESXi, Synology, FreeNAS, pfSense, MikroTik, Ubiquiti/Unifi, they all have played an important role in developing my skills in various facets of IT – networking, security, virtualization, storage, etc. I don’t use all of these technologies at the work place, but I …
It is a common security practice to setup a wireless guest network on a separate VLAN. This allows for complete isolation of traffic between your private and guest networks. This guide will only be covering how to implement this particular setup on MikroTik routers with built-in WiFi, such as the …
Pi-hole’s primary role within a private network (e.g. home network) is to act as a DNS sinkhole/DNS Blackhole for domain names. Pi-hole is used to block ads, trackers/telemetry, and malicious domains – just about anything one would want to block, as long as it’s a domain name. I’ve been using …
I’m a big advocate for the Raspberry Pi. There are numerous projects and applications that make this single-board computer a great value and worth your while should you find an application that can meet your needs. The Raspberry Pi can be setup for video surveillance, home automation, network security (DNS …
Now that we’ve completed the first part of this guide, MikroTik: Setup A Client-to-Site SSTP VPN (Part 1), we’ll be moving forward with the client-side setup & configuration for ClientX. I’ve chosen to utilize Microsoft’s Connection Manager Administration Kit (CMAK) to setup and configure the SSTP VPN for ClientX because it …
MikroTik: Setup A Client-to-Site SSTP VPN (Part 2) Read More »
Secure Socket Tunneling Protocol (SSTP) is a proprietary security protocol developed by Microsoft. SSTP operates in situations where most VPN connections would be blocked. SSTP uses port 443 – the same port used by Secure Socket Layer (SSL) and Transport Layer Security (TLS), both widely used protocols to establish secure connections …
MikroTik: Setup A Client-to-Site SSTP VPN (Part 1) Read More »
The majority of PC users with Nvidia graphics cards are probably not aware that they are being tracked by Nvidia via driver/software. The Nvidia driver installation package offers some flexibility as to what will be installed, however, it does not offer an option to exclude telemetry tracking as part of …
Earlier this year I started using both free and subscription-based blacklists from Squidblacklists.org. The blacklists were incredibly simple to implement into RouterOS and once configured, the lists can be scheduled to update at regular intervals via the RouterOS system scheduler. Squidblacklist.org provides a list of available blacklists, but make sure …
Earlier this year I started using both free and subscription-based blacklists from Squidblacklists.org. The blacklists were incredibly simple to implement into RouterOS and once configured, the lists can be scheduled to update at regular intervals via the RouterOS system scheduler. Squidblacklist.org provides a list of available blacklists, but make sure …
The following firewall rules will block port scanners and brute force login attempts for SSH, Telnet, and Winbox by creating a dynamically generated MikroTik address list for each respective protocol/port. Furthermore, each of the SSH, Telnet, and Winbox rules function by staging four address lists together in sequence, each consisting …