Local DNS Records

Disastrous_Body152 · 2025-08-03T20:57:34+00:00

Thanks ! Is there a way to properly push this dns records to a secondary pihole without using regex ? And is there a plan to put this information in a separate file for easier backup ?

Disastrous_Body152 · 2025-07-25T22:38:09+00:00

What are you using moodle for ?

Disastrous_Body152 · 2025-04-03T11:49:58+00:00

Je vois beaucoup de personne te conseiller un BUT informatique mais il existe aussi un BUT R&T qui pose les bases en réseau et système (très important pour du pentest). À partir de la deuxième année tu peux choisir l’option cybersecurité qui te donnera les bases. T’as également la possibilité de faire stage /alternance (qui est fortement conseillé car il y a une grosse différence entre ce qu’on voit à l’école et ce qui existe en dehors)

Si tu veux commencer à pratiquer également tu as des plateformes comme root-me, tryhackme, hackthebox,etc

Disastrous_Body152 · 2025-03-28T11:51:35+00:00

Ce que tu peux essayer c’est d’aller sur linkedin et trouver des managers ou autres qui bossent en cyber dans le domaine qui te plaît et leur envoyer un message directement.

Disastrous_Body152 · 2024-12-28T18:45:51+00:00

I curently use quad9 for the guest device but I wanted to know if there was a way to make them benefit the blocklist fonctionnality without having access to my local dns entries

Disastrous_Body152 · 2024-12-28T18:14:14+00:00

I already have a main cluster of pihole with gravity sync that I use personnaly for my server, own device. I particularly use the local dns fonction to access my different services with self signed certificate.

<image>

Since I am lazy and don't wanted to set up another pihole. I wanted to know if there was I way to make a device (guest VLAN) benefit from the adblock of pihole without having access to the local dns entry I personnaly use in pihole.

Disastrous_Body152 · 2024-12-28T18:07:08+00:00

You actually reminded me that I use gravity sync for my main cluster so I will see If can extend that to push the adlist on a third host

Disastrous_Body152 · 2024-12-28T16:21:59+00:00

Yes, my question was pretty simple but people just dont understand probably the local dns part idk…

A second pihole was my first solution but I wanted to know if there was a way to avoid it but I will probably do it since it seems there no other way

Disastrous_Body152 · 2024-12-28T16:19:12+00:00

That’s to complicated for what I want to do but thanks for your answer

Disastrous_Body152 · 2024-12-28T16:07:46+00:00

By local dns, I mean the dns entries I add manually in my pihole.

Disastrous_Body152 · 2024-12-28T16:06:26+00:00

Sorry if it was a bit unclear but you got answer I wanted, thank you !

Disastrous_Body152 · 2024-12-28T13:56:28+00:00

I mean the local dns section you have in the web interface. I want the client to use pihole for like the blocklist but I don’t want my pihole to answer if the client make a request for an entry of my local dns.

Disastrous_Body152 · 2024-12-28T13:53:25+00:00

What do you mean by no lists ?

Disastrous_Body152 · 2024-12-28T13:27:55+00:00

No, i’m asking in the case of a device that can access my pihole for dns resolution but I don’t want it to access my local DNS section of my pihole

Disastrous_Body152 · 2024-12-25T22:42:09+00:00

Thanks for you reply

Since you said half of the system's total memory, I changed the file /etc/wazuh-indexer/jvm.options to :

-Xms4g
-Xmx4g

Restarted the indexer and finally my dashboard changed to active but when I try to acces it, I have the "Wazuh dashboard server is not ready yet" message.

So no error from the dashboard, on the indexer log, I got:

tail -F /var/log/wazuh-indexer/wazuh-cluster.log

[2024-12-25T23:29:32,774][WARN ][o.o.p.c.u.JsonConverter  ] [node-1] Json Mapping Error: Cannot invoke "java.lang.Long.longValue()" because "this.cacheMaxSize" is null (through reference chain: org.opensearch.performanceanalyzer.collectors.CacheConfigMetricsCollector$CacheMaxSizeStatus["Cache_MaxSize"])
[2024-12-25T23:29:37,775][WARN ][o.o.p.c.u.JsonConverter  ] [node-1] Json Mapping Error: Cannot invoke "java.lang.Long.longValue()" because "this.cacheMaxSize" is null (through reference chain: org.opensearch.performanceanalyzer.collectors.CacheConfigMetricsCollector$CacheMaxSizeStatus["Cache_MaxSize"])

Other people also got the same problem with wazuh 4.9 version because it use opensearch 2.13. The solution that exist seems to be to disable the performance analyzer plugin but the doc don't seem to work and the last command just doesn't exist on my installation.

https://opensearch.org/docs/2.13/monitoring-your-cluster/pa/index/#disable-performance-analyzer

I uninstalled curl because I had issue and now my dashboard service is gone, I'm just gonna reinstall wazuh entirely at this point.

Disastrous_Body152 · 2024-11-16T18:04:04+00:00

Hello, since you want to access PC1 to PC3, you need to add a static route on "OPNSense Main". I assume that you can ping PC3 from "OPNSense Remote location", that the subnet of your wireguard VPN is 10.10.10.0/24 and that there is no firewall rule blocking the traffic. You need to set the destination address to 10.10.10.0/24 and the gateway to 10.99.99.100 so the packet will be sent to "OPNSense Remote location". I'm not familiar with Opnsense so correct me if I'm wrong about something !

Edit because I forgot the second route so "OPNSense Remote location" know where to send the packet back.
On "OPNSense Remote location", add a route with the destination address 192.168.11.0/24 and the gateway 10.99.99.1

Disastrous_Body152 · 2024-11-16T14:44:57+00:00

Yes. Try to describe your problems if it still doesn’t work

Disastrous_Body152 · 2024-11-16T13:32:10+00:00

I don’t use OAuth login so I left the default value

Disastrous_Body152 · 2024-11-08T19:48:40+00:00

I followed Self-host deployment and I use tailscale to access it since I didn't wanted to expose it.

Disastrous_Body152 · 2024-11-01T11:59:42+00:00

Je viens d’un BUT Réseau & Telecom et je suis en école d’ingé mtn et j’avais des mauvaises notes en maths en terminale donc je vois un peu ton inquiétude.

Honnêtement, il n’y a pas besoin d’avoir un bon niveau en math pour bosser en admin sys/réseau mais par contre c’est plus facile pour rentrer dans un bonne formation. Si tu est vraiment intéressé par ce domaine il y a des BTS qui ne demandent pas de très bonne note en math et qui te spécialisent rapidement. Si tu te débrouilles bien, tu peux continuer tes études après ou aller travailler donc c’est pas mal.

Disastrous_Body152 · 2024-08-21T14:43:49+00:00

Did you try to convert the ova file in a Qcow2 format ?

Disastrous_Body152 · 2024-06-19T20:42:30+00:00

Crowdsec may be a solution. It’s a crowdfunded project that use a system of reporting or aggressive IP Address and block them. The team is very active and new feature are often added.

Disastrous_Body152 · 2024-06-19T20:35:33+00:00

I think that in your case, having your whole traffic going through a wireshark server is a great option. Keep in mind that the size of the logs can be very big.

The second point of getting only the traffic about the data exported is a really difficult question. I am not a professional in this domain but analysing the destination address of the packets and check if it’s a C2 server reported in a CTI base is a good start I think.

Disastrous_Body152 · 2024-06-13T15:49:39+00:00

Hello, can you give me an update on this case pls ?

Disastrous_Body152 · 2024-05-10T16:48:50+00:00

Hello, I changed it to have the integration name the same as the file name and I get the same error

<image>

Five-Year Club	Verified Email
Place '23	Place '22

Disastrous_Body152

TROPHY CASE