pfSense Firewall

pfSense - Firewall

• Introduction - Topology - Features
  • Enumerate important pfSense features
  • Explore network topology
  • Identify key systems to be used
•  
• pfSense Installation
  • Identify target platforms
  • Locate and obtain packages
  • Install pfSense on target system(s)
  • Confirm initial installation
  • Explore installation footprint
  • Peruse $SHELL management interface
•  
• WebConfigurator Interface
  • Discuss features and benefits
  • Identify target URLs
  • Authenticate and update basic credentials
  • Explore interface
  • Identify key menu items
•  
• Basic Routing
  • Identify default configuration
  • Route traffic based on default configuration
  • Update routing to handle new subnet
  • Confirm packet routing through routed interfaces
  • Evaluate results
•  
• NAT Table
  • Extend Routing discussion and consider NAT
  • Cover default NAT configuration
  • Create custom NAT configuration
  • Observe packet mangling across interfaces
  • Evaluate results
•  
• Firewall Rules | Schedules
  • Identify and test default rules
  • Tweak rules and observe impact on packets
  • Handle various types of common traffic patterns
  • Move packets between subnets across rules interfaces
  • Evaluate various tweaks to firewall rules
  • Schedule rules and evaluate impact
•  
• Firewall LOGs | Reports
  • Explore considerable LOG data
  • Generate traffic and observe LOG entries
  • Enable rules based on LOG entries
  • Alter traffic according to desired result
  • Explore various in-built Reports
  • Evaluate results
•  
• Packages | Extensibility
  • Explore pfSense default Packages
  • Implement add-on packages
  • Correlate new packages to interface
  • Use add-on to accomplish various tasks
•  
• DHCP | DNS Services
  • Explore defaults
  • Influence DHCP Server configuration
  • Set Reservations
  • Configure DNS servics
  • Evaluate performance
•  
• DMZs | VLANs
  • Provision additional networks
  • Allocate networks to DMZs | VLANs
  • Configure Routing | Filtering between networks
  • Confirm packet flows
  • Evaluate results
•  
• Miscellaneous
  • Explore various areas
  • Administer Users
  • Test access
  • Use Backup | Restoration services
  • Confirm results
•  
• Firmware Upgrade
  • Identify current version
  • Perform upgrade
  • Check packet-flow during upgrade
  • Process post-upgrade error
  • Confirm functionality
  • Perform minor firmware upgrade
  • Snapshot VM instance
  • Backup configuration
  • Confirm upgrade
•  
• NTP Config
  • Explore interface and default behavior
  • Add NTP Peers
  • Query NTP via various interfaces
  • Restrict NTP to desired networks
  • Apply ACL - Test queries
  • Update server configuration
•  
• DNS | Forwarder | Resolver
  • Enable Forwarder
  • Issue queries - analyze results
  • Enable mini tables for DHCP nodes
  • Include domain override
  • Migrate to Resolver config
  • Peruse settings
  • Confirm resolution
  • Debug resolution-issues
•  
• SSH PKI Firewall Access
  • Explore default configuration
  • Connect to firewall as various users
  • Enable PKI access across accounts
  • Compound PKI access and test
  • Remove | Replace PKI access and confirm
  • Disable Password-based access
•  
• Useful Interfaces | RAM Disk Configuration
  • Use Edit Files interface to manipulate file
  • Explore Command Prompt interface
  • Execute various commands via interface
  • Migrate to RAM Disk configuration
  • Ensure SYSLOG configuration
  • Expand Firewall RAM via Hypervisor
•  
• Web Configuration - Force SSL
  • Explore default configuration
  • Test using 'curl' redirects
  • Disable clear-text access
  • Test connectivity - 'curl' && browser
  • Confirm results
•  
• WAN-Side Block Config Access
  • Explore default access
  • Test WAN | LAN access
  • Write rules blocking WAN config access
  • Test configuration
•  
• Anti-Lockout Configuration
  • Discuss applicability
  • Explore firewall rule
  • Disable Anti-Lockout
  • Discuss residual access
  • Write rules to permit configuration
•  
• Condense Rules via Aliases
  • Explore default rule-set
  • Define useful Aliases
  • Apply aliases to existing rules
  • Disable superfluous rules
  • Confirm packet-flow
  • Remove superfluous rules
•  
• SMTP Outbound Restriction
  • Identify default rule-set
  • Source outbound SMTP traffic
  • Define Alias to house trusted SMTP nodes
  • Write rules to Allow | Block SMTP accordingly
  • Confirm results
•  
• Performance Check
  • Install iperf
  • Explore interface
  • Setup iperf server - remote
  • Use iperf to generate and measure performance
  • Consider results as baseline
•  
• Bandwidth Monitor
  • Install Darkstat
  • Configure with appropriate settings
  • Launch and generate traffic
  • Monitor conversations
  • Look for anomalies
•  
• Squid Proxy
  • Install Squid
  • Configure with appropriate settings
  • Route HTTP client traffic via Squid
  • Blacklist domain
  • Exempt IP
  • Test proxy communications
  • Self-signed CA
  • Transparent Proxy
  • Test HTTP[s] comms
•  

Sums

• Various Tools
• Remote Confirmations
• File Metadata
• File Fragments
• Compress Content
• Archive Content
• DIR Hierarchy
• Password Sums
• Shared Secret
• Restrict History
• Downloaded Content
• Encrypt Content
• Site Credentials
• Site COOKIE
• Site COOKIE - Unique

CentOS9x Stream Administration

• Initial Environment
• ls, pwd, cd, cp, mv, rm, mkdir, rmdir, whoami
• alias, cat, file, chmod, chown, history
• STD(IN|OUT), Pipes, Redirection, Command Chaining
• ps, df, top, free
• Pagers, W-Commands
• Checksums
• Awk | Sed | Grep Usage
• BASH SHELL Environment
• Compression | Archival Tools
• SSH Equivalence
• SHELL Quoting
• Propagate Environment
• Secure Clients

• Identify Standard File Types
• Standard File Permissions
• Symbolic Links
• Transfer Permissions

• Identify SWAP environment
• Provision dedicated SWAP partitions
• Add | Remove SWAP from pool as needed
• Provision File System-based SWAP
• SWAP Share
• SWAP Persistence
• Identify default storage configuration
• Provision new storage as needed
• XFS - File System
• XFS - Grow File System
• Identify LVM defaults
• Add new partitions to LVM management
• Allocate storage to LVM Volume Groups
• Create Logical Volumes (LVs) as needed
• Overlay File System and mount where applicables
• LVM - Resize
• LVM - Mixed FS
• LVM - SWAP

• Features
• Install
• Defaults
• General Usage
• Update Accounts

• Defaults
• Shared PASS Gen
• Unique PASS Gen
• Encrypted PASS Gen
• Update Accounts
• Groups

• Discuss features | limitations
• Identify default system-wide schedule
• Peruse various default Cron Jobs
• Schedule simple job and monitor recurrence
• Evaluate results

• Peruse Default CONF
• Discuss Syslog Rules
• Explore Log Rotate defaults
• Ensure rotated logs are compressed
• Extend default retention scheme
• Force Log Rotation as needed

• Explore Default environment
• Install PKGs
• Dump important metadata from packages
• Apply Updates

• Default CONF
• Add | Confirm IPs as needed

• Install
• Copy Configuration
• SELinux - Confirm
• TLS | SSL Services
• cURL Client Tests
• Virtual Hosts
• ENC Sites Only

• SFTP Only USER
• SFTP Only USER - NOLOGIN
• SFTP Only Group - Control
• NMap Intro

SysLOG with rSysLogD

• Discuss Features
• Default Environment
• Kernel Firewall LOG
• Split LOGs by Priorities
• UDP | TCP Logging
• Dual L4 Logging
• Multiple Hosts
• Basic Queueing
• Reliable Event Logging Protocol (RELP)
• RELP - Remote Only
• RELP Only
• Traditional to RELP
• SysLOG Clear-Text - Confirm
• Property Filters
• Expression Filters
• Relay Chain

Netfilter Tables

• Features
• SSHGuard
• Ruleset Basics
• Persistence
• Sample Rules
• Inbound Filtering
• Dormant Table
• Manage Tables | Chains | Rules
• Counters
• Sets
• LOG Basics
• LOG with Sets
• Closed-Port LOGs
• LOG Options
• Re-Route LOGs
• Jump Targets
• Chain Jumping
• GoTo Chains
• Meta Selectors

Debian 12x Administration

• Features
• Download
• Graphical Install
• Text Install
• Post-Install Tweaks

• Explore usage of the following useful commands
• tty | /dev/pts | w | whoami | who
• set | env | export | unset
• cat | echo | touch | rm
• pwd | ls | cd | mkdir | alias | umask
• head | tail
• dd
• find
• history
• STDIN, STDOUT, STDERR, UNIX Pipes, Redirection, Command Chaining
• ps, df, free, top, dd
• stat, which, w, who
• tar | gzip | bzip2 | xz
• ZSH Setup

• Network Tools | IP Configuration
• Examine default IP configuration
• Extend IP configuration to facilitate additional addresses
• Static IP Config
• Dual: Dynamic | Static Config
• Multiple Interfaces
• Dual Network Services
• Confirm communications

PHP One-Liners

• General Usage
• Count Lines
• Word Count
• Count Chars
• Split Lines into ARRAY
• Count Instances of Fields
• Transform Delimiters
• Anonymize LOGs
• Extract Unique SRCs
• Lines by Error Code
• LOG By Code
• Summarize Error Codes
• Pre-Seed Error Codes
• Random Strings
• Varied Passwords
• Expose Undefined Passwords
• Outdated Passwords
• Hash | Un-Hash

Cloud Storage with GlusterFS

• Discuss Features:
• Default Volume Type
• Common Volume Types
• Transport Types
• File System Support
• Storage Model

• Features
• Provision Storage
• Allocate GlusterFS Brick
• Persistence
• Generate IO
• Multiple File Systems
• Various Sizes
• Stop | Remove Volume
• Reconstitute Volume
• Server Mount
• Evaluate

OpenPGP with GPG

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Signing | Verification

• Features
• General Usage
• Create Content
• Encrypt
• PassPhrase Protect
• Binary | Text Encryption
• Share
• Decrypt

SSL-TLS with OpenSSL

• Discuss Features:
• Primary Tool
• Private | Public Keys
• Certificate Signing Requests (CSRs)
• Self-Signed Certificates
• Public Key Cryptography Standards (PKCS)
• Encryption | Decryption
• Random String Generation
• Message Digests
• SSL-TLS Client

• Features
• General Usage
• Retrieve Site Certificates
• Determine OCSP Configuration
• Probe supported TLS Versions
• Extract Certificate for local usage
• Retrieve Certificate with NMap
• Retrieve Certificate Chain

• Discuss
• Generate Private Keys
• Generate Correlating CSRs
• Confirm Keys | CSRs
• Self-Signed Certificates

SSH Variables

• Discuss Features
• Bare VARs
• SSH Client
• Double Quotes
• Single Quotes
• SSH Environment

SHELL Variables

• Discuss Features
• Terminal (TTY)
• CLI Arguments
• Process ID
• Backgrounded
• SHELL Local
• Environment
• Persistence
• Aliases
• Command Substitution
• Increment | Decrement
• Dynamism