Christoph - Security Blog

Christoph

pfSense on Azure

security Featured

pfSense on Azure

how to provision pfSense (Community Edition) on Azure.

Exchange Online: Tagging External Email Feature

Exchange Online

Exchange Online: Tagging External Email Feature

Phishing is a problem. One indicator that makes it easier for users to spot phishing emails is a clear indication when an email comes from external. External email tagging has been available on Exchange Online for some time. This article describes short and briefly how to activate External email tagging

Azure AD: PIM - modifying Azure built-in roles

Azure AD: PIM - modifying Azure built-in roles

modifying Privileged Identity Management (PIM) Settings of Azure built-in roles using powershell

Install NGINX with ModSecurity on Debian 11 (Bullseye)

Install NGINX with ModSecurity on Debian 11 (Bullseye)

Recently I decided to switch from NAXSI Web Application Firewall to ModSecurity. Not that I was unhappy with NAXSI - in opposite - everything went smooth. But NAXSI receives little support from the open source community. So I decided to go with the quasi standard. With this blog post I

The Imposter's Handbook

The Imposter's Handbook

viThe Imposter's Handbook The Imposter's Handbook covers many areas. The goal of the author was to give an overview about topics discussed while studying Computer Science. Topics discussed are among others: * Computation * Complexity * Big O * Data Structures * Algorithms * Compilation * Software Design Patterns * Functional Programming * Databases * Essential Unix The many subject

Azure and Pulumi

Azure and Pulumi

Get started with Infrastructure as Code (IaC) using python and Pulumi.

Configuring NAXSI (WAF)

Configuring NAXSI (WAF)

in my previous post [https://www.error.ch/securing-your-webapp-with-nginx-and-naxsi-on-debian-10-buster/] the installation of NGINX and NAXSI was described. After successful installation it is time to start the configuration. as a first step copy core rules, to Nginx config directory. Configring NGINX sudo /src/naxsi-0.56/naxsi_config/naxsi_core.rules /etc/

Securing your WebApp with NGINX and NAXSI on Debian 10 (buster)

Securing your WebApp with NGINX and NAXSI on Debian 10 (buster)

This website is running the free version of Ghost CMS [https://ghost.org/]. To increase the security of the website a NGINX reverse proxy including NAXSI web application firewall (WAF) is used. NAXSI (NGINX Anti XSS & SQL Injection) is a free, third-party NGINX module which complements the webserver with security