VirtualTam's bookmarks

1. Go Toolchain Telemetry 2023-11-18

   tags: compiler, observability/metrics, privacy, programming/go

   [ permalink ]

   • Go Telemetry Privacy Policy
   • golang/go #58894 - all: add opt-in transparent telemetry to Go toolchain
2. ssh_scan: A prototype SSH configuration and policy scanner 2019-10-24

   tags: cipher, cryptography/elliptic-curve, cryptography/rsa, mozilla, network/ssh, security

   [ permalink ]

   • https://mozilla.github.io/ssh_scan/
3. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management 2019-08-08

   tags: cloud/aws, programming/api, security, security/authentication, security/authorization, user

   [ permalink ]

   • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
   • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
   • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
4. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

   tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

   [ permalink ]

   • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
   • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
5. Creating a custom Nginx build for Ubuntu/Debian - JGuru 2018-07-13

   tags: linux, linux/debian, linux/ubuntu, network/http, network/http-server/nginx, package

   [ permalink ]

   • https://www.debian.org/doc/manuals/maint-guide/build.en.html
   • https://salsa.debian.org/nginx-team/nginx
   • https://www.debian.org/doc/debian-policy/#document-ch-controlfields
   • https://www.debian.org/doc/debian-policy/#document-ch-relationships
   • https://unix.stackexchange.com/questions/333603/debian-control-file-provides-does-not-satisfy-dependency
   • https://github.com/JayH5/nginx-modules
6. iptables 2018-07-04

   tags: linux, linux/iptables, network, network/firewall, network/router, sysadmin

   [ permalink ]

   Documentation:

   • https://www.netfilter.org/documentation/index.html
   • https://www.netfilter.org/documentation/HOWTO//netfilter-hacking-HOWTO.html
   • https://www.netfilter.org/documentation/HOWTO//networking-concepts-HOWTO.html
   • https://www.netfilter.org/documentation/HOWTO//NAT-HOWTO.html
   • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html
     • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-6.html
     • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-7.html

   Articles:

   • https://www.digitalocean.com/community/tutorials/how-the-iptables-firewall-works
   • https://www.digitalocean.com/community/tutorials/how-to-list-and-delete-iptables-firewall-rules
   • https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands
   • https://www.digitalocean.com/community/tutorials/a-deep-dive-into-iptables-and-netfilter-architecture
   • https://www.digitalocean.com/community/tutorials/how-to-choose-an-effective-firewall-policy-to-secure-your-servers

   How-tos:

   • https://wiki.centos.org/HowTos/Network/IPTables
   • https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-iptables-on-ubuntu-14-04

   Routing:

   • https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html
   • https://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg
   • https://www.frozentux.net/iptables-tutorial/images/table_subtraverse.jpg
   • https://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg

   RHEL Documentation:

   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-common_iptables_filtering
   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-forward_and_nat_rules
   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-malicious_software_and_spoofed_ip_addresses
   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-iptables_and_connection_tracking
   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-iptables
   • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-setting_and_controlling_ip_sets_using_iptables
7. How To Choose an Effective Firewall Policy to Secure your Servers | DigitalOcean 2018-05-15

   tags: linux, network, network/firewall, policy, security, server

   [ permalink ]

   • http://www.chiark.greenend.org.uk/%7Epeterb/network/drop-vs-reject
   • https://security.stackexchange.com/questions/22686/is-it-good-practice-to-manually-lock-down-ports-on-each-host
   • https://security.stackexchange.com/questions/22711/is-it-a-bad-idea-for-a-firewall-to-block-icmp/22713
   • https://serverfault.com/questions/84963/why-not-block-icmp/84981
8. Content Security Policy CSP Reference & Examples 2018-02-07

   tags: internet/browser, privacy, security, web, xss

   [ permalink ]

   • https://en.wikipedia.org/wiki/Content_Security_Policy
   • https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
   • https://www.owasp.org/index.php/Content_Security_Policy
   • https://developers.google.com/web/fundamentals/security/csp/
9. Configure SPF and DKIM in Postfix on Debian 8 2017-04-21

   tags: email, email/dkim, email/postfix, email/spam, email/spf, linux, linux/debian, security/authentication

   [ permalink ]

   DKIM

   • https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
   • https://wiki.debian.org/opendkim
   • https://help.ubuntu.com/community/Postfix/DKIM

   SPF

   • https://en.wikipedia.org/wiki/Sender_Policy_Framework
   • https://help.ubuntu.com/community/Postfix/SPF

   DMARC

   • https://en.wikipedia.org/wiki/DMARC
   • https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/
   • https://incenp.org/notes/2016/postfix-policydspf-opendmarc.html
10. OpenSCAP | Security Content Automation Protocol 2017-02-14

    tags: linux, microsoft/windows, policy, security

    [ permalink ]

    https://access.redhat.com/documentation/en-US/Red_Hat_Network_Satellite/5.5/html/User_Guide/chap-Red_Hat_Network_Satellite-User_Guide-OpenSCAP.html

11. RHEL - Linux Domain Identity, Authentication, and Policy Guide 2016-12-02

    tags: domain, kerberos, linux, network/ldap, security/authentication, sysadmin

    [ permalink ]
12. Debian New Maintainers' Guide 2016-10-27

    tags: linux/debian, linux/debian/lintian, package, source-code-management/git, static-analysis/lint

    [ permalink ]

    See also:

    • https://www.debian.org/doc/devel-manuals#packaging-tutorial
    • https://www.debian.org/doc/debian-policy/
    • https://www.debian.org/doc/manuals/developers-reference/
    • https://wiki.debian.org/PackagingWithGit
    • https://wiki.debian.org/HowToPackageForDebian
    • https://feeding.cloud.geek.nz/posts/whats-in-a-debian-directory/