Using systemd-resolved opens up some options that may be easier to configure then in the past. Enabling DNSSEC: systemd-resolve –status look for “DNSSEC setting: no” sudo mkdir -p /etc/systemd/resolved.conf.d sudo nano /etc/systemd/resolved.conf.d/dnssec.conf enter: [Resolve] DNSSEC=true sudo systemctl restart systemd-resolved systemd-resolve –status look for “DNSSEC setting: yes”
It’s not so simple as “cat /etc/resolv.conf” anymore. DNS is now handled by systemd-resolved in Ubuntu and Debian and their derivatives. This is easy to spot if you do check resolv.conf and it contains “nameserver 127.0.0.53”. The correct command now is “systemd-resolve –status”.
I’ve drafted but not published a long list of problems I’ve experienced with Ubuntu 18.04. In short it’s been one of the worst desktop releases of Ubuntu I’ve used. My experience on servers has been fine. Anyway I haven’t looked into the details of these patches but: libwebkit2gtk-4.0-37:amd64 (2.22.6-0ubuntu0.18.04.1) libjavascriptcoregtk-4.0-18:amd64 (2.22.6-0ubuntu0.18.04.1) These package releases seem …
Install uBlock Origin in all of your web browsers Configure uBlock Origin in each of your web browsers enable Fanboy’s Social Blocking List add the following to “My filters” disqus.com disquscdn.com instagram.com twitter.com facebook.com Enjoy a better internet
Rarely am I using ntpd to serve ntp information. It is more useful for clock-correction than a strict ntp/sntp client. Thus I don’t want the service listening on a wildcard address, even when there is certainly a firewall in place. I prefer the service to not be listening at all, or listening only to the …
There are many NTP server implementations now. Here are some: ntpd chrony ntpsec openntpd sntp clients systemd-timesyncd sntp also: ntimed – appears abandoned Resources: Securing Network Time A security review of three NTP implementations concludes chrony is probably the best choice of ntpd, ntpsec, and chrony A rift in the NTP world Chrony: Comparison of …
I’m quite happy with my initial use of Firefox Monitor. I’ve recommended it to family, friend, co-workers. I recommend signing up for continuous monitoring. Anyone who has had a password compromise should consider that password and permutations there-of to be public knowledge. https://monitor.firefox.com/ For me the near constant data breaches we’ve seen in recent months …
This is not exactly the best strategy given that malicious actors probably have access to IP addresses from other countries. I was asked to research this and this is what I found. Major IP Addresses Blocks By Country Block Visitors by Country Using Firewall https://www.countryipblocks.net/country_selection.php 8 Ways to Block Visitors to Your Website by Country …
I’ve mostly been using msmtp as a mail transport agent on my linux systems but I wanted to review what was available: nullmailer – 2.1 released 2017-Oct, nullmailer on github msmtp: 1.6.6 released 2016-Nov, msmtp on sourceforge dma – 0.11 released 2016-Feb, dma on github ssmtp – unmaintained esmtp – unmaintained My preference is something hosted on github …
s2n source s2n announcement I’m liking what I see, good design principles, aiming for simplicity and reviewability. I would not be surprised to see this become a huge success as people eschew the extra functionality of OpenSSL (and others) in favor of software with less security risk. Amazon’s backing is likely to propel s2n over …