Introduction to DNS Security on Windows Server 2019 DNS is foundational infrastructure — every name resolution request on your network passes through it. A misconfigured or compromised DNS server can redirect traffic, enable phishing attacks, or facilitate data exfiltration. Windows Server 2019 includes several built-in features to harden DNS, including DNSSEC, Response Rate Limiting (RRL), […]
🟠 High ⏱ 5–30 min Last verified: 21 November 2019 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
How to Enable HTTP/2 with Nginx on RHEL 7 HTTP/2 is the major revision of the HTTP network protocol that brings multiplexed streams, header compression, and server push to web traffic. Compared to HTTP/1.1, HTTP/2 dramatically reduces page load times on sites with many assets by eliminating head-of-line blocking and reducing the overhead of repeated […]
Introduction How to Configure RAID with mdadm on Debian 9 is a fundamental operation for any administrator maintaining a Debian 9 Stretch server. Debian 9 Stretch ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 9. […]
HTTP security headers instruct browsers how to handle your site’s content and protect visitors from clickjacking, cross-site scripting, MIME sniffing, and other common attacks. Adding these headers to Nginx or Apache on RHEL 8 is a high-value, low-effort hardening step that improves both your security posture and your score on tools like securityheaders.com. This tutorial […]
How to Install Zabbix Agent on Windows Server 2016 Zabbix is a powerful open-source monitoring platform capable of collecting metrics from network devices, Linux and Windows servers, cloud instances, and applications. The Zabbix Agent runs on monitored hosts and reports data back to the Zabbix Server or Proxy. On Windows Server 2016, the Zabbix Agent […]
How to Configure syslog-ng for Centralised Syslog on RHEL 7 Every Linux system generates a continuous stream of log data from the kernel, system services, and applications. On a single host, rsyslog handles this adequately, but when you need to aggregate logs from dozens or hundreds of servers into a central repository, filter them intelligently, […]
WireGuard is a modern, high-performance VPN protocol built into the Linux kernel since version 5.6, offering significantly simpler configuration and better performance than older alternatives like OpenVPN or IPsec. On RHEL 8, WireGuard can be installed via the ELRepo kernel module or the wireguard-tools package from EPEL, with the kernel module provided by the elrepo-kernel […]
UFW (Uncomplicated Firewall или «простой брандмауэр») представляет собой интерфейс iptables, предназначенный для упрощения процесса настройки брандмауэра. Хотя iptables — надежный и гибкий инструмент, начинающим бывает сложно научиться использовать его для правильной настройки…
Introduction Deploying configure nginx rate limiting on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]
