Firewall Jobs

I need an EdgeRouter 6P expert to tighten security across all of my VLANs. The router is already running and the tagged networks are live, but the firewall rules are still permissive. Your job is to create a clear rule-set that isolates traffic where appropriate and still lets approved services flow smoothly. VLANs in scope • IoT cameras • IoT Smart Home (switches & outlets) • IoT non-camera sensors • Management • Guest users • Main data / “everything-else” segment What I expect 1. A revised configuration that can be pasted directly into the EdgeRouter CLI or loaded via the UNMS / UISP interface. 2. A short document (or annotated screenshot set) explaining the rule logic so I can maintain it later. 3. Brief remote walk-thr...

I have a fresh Proxmox installation that now needs to be turned into a production-ready virtualization cluster. The end goal is straightforward: host several public-facing services while keeping administration simple and repeatable. Scope of work • Provision 4-6 Ubuntu-based guests (mix of KVM VMs or LXC containers—whichever fits best per role). • Produce three reusable gold images: Web server template, Database server template, and Mail server template. Each must boot cleanly, auto-configure the network via DHCP or static values I supply, and be ready for apt updates. • Expose HTTP/HTTPS and SSH to the internet. You may rely on Proxmox built-in firewall, iptables/nftables, or an nginx/HAProxy reverse proxy—whichever you judge safest. All inbound rules sho...

Deseo contar con un servidor de correo Carbonio Community funcionando sobre Ubuntu. El VPS ya está provisionado con una instalación limpia de Linux; tu misión es: • Instalar la última versión estable de Carbonio Community, dejarla operativa con los servicios necesarios (webmail, calendarios, contactos, ActiveSync si corresponde) y crear un dominio de prueba para verificar el envío y la recepción. • Aplicar una configuración básica —puertos, certificados TLS, ajustes de DNS como SPF, DKIM y DMARC— para que el correo se entregue sin problemas de reputación. • Endurecer la instalación con foco específico en la seguridad del servidor de correo: reglas de firewall acordes, protecci&...

My provider has suspended my Ubuntu VPS after flagging a hack on the web-server layer (Apache/Nginx, exact stack is in the incident report I will share once we start). At the moment I have zero hardening in place—no firewall rules, no SSL, nothing—so the attacker clearly found an easy way in. I do have a recent full backup, so you can work safely and roll back if needed. Your mission is to identify the entry point, remove any malicious code or files, close the vulnerability, and leave the server in a state that convinces the host to lift the ban. You are welcome to use tools such as fail2ban, UFW/iptables, ClamAV, rkhunter, ModSecurity, or any other utilities you normally rely on. Deliverables • Clean, uncompromised web root and services reinstated • Detailed ...

I have a Lenovo ThinkPad T480 waiting for a fresh, security-first Debian installation. The goal is a fully hardened, privacy-respecting daily-driver that ships with BOTH Mozilla Firefox and Brave, each pre-tuned for strong tracking-protection and fingerprint-resistance. This is an ADVANCED hardening job. Beyond the base install I’ll need full-disk LUKS2 encryption, secure boot/Libreboot if the hardware permits, locked-down BIOS settings, kernel and sysctl tweaks, AppArmor (or comparable MAC), DNS proxy with encrypted queries, and a firewall configured to best practice levels. I did not select a specific firewall in the form, so feel free to recommend whether UFW, iptables or firewalld is the right fit for an always-on laptop that roams between trusted and untrusted networks. Delive...