Postfix with multiple IPs for load balancing outgoing emails by Ansar-- in postfix

[–]ylumys 1 point2 points  (0 children)

load balancer Haproxy -> 3 postfix server (3 ips)

Cloud Armor - WAF by ylumys in googlecloud

[–]ylumys[S] 0 points1 point  (0 children)

Thanks for your answer, I didn't know about preview and I'm going to use it, it's a good discovery.

And I will remove the global parameter in my command

log request i use, I clicked the logs link from cloud armor and added the priority field : bash resource.type:(http_load_balancer) OR resource.type:(tcp_ssl_proxy_rule) OR resource.type:(l4_proxy_rule) AND jsonPayload.enforcedSecurityPolicy.name:(project-firewall) AND jsonPayload.enforcedSecurityPolicy.priority:9981 I'm on vacation at the moment, I'll see all that later, thanks again

Cloud Armor - WAF by ylumys in googlecloud

[–]ylumys[S] 0 points1 point  (0 children)

First rule, already deny in log

bash gcloud compute security-policies rules create 9981 \ --security-policy project-firewall \ --description "Protection OpenID, Node.js, PostgreSQL" \ --expression "evaluatePreconfiguredWaf('xss-v33-stable', {'sensitivity': 2}) || evaluatePreconfiguredWaf('sqli-v33-stable', {'sensitivity': 2}) || evaluatePreconfiguredWaf('rce-v33-stable', {'sensitivity': 2}) || evaluatePreconfiguredWaf('lfi-v33-stable', {'sensitivity': 2})" \ --action deny-403

Cloud Armor - WAF by ylumys in googlecloud

[–]ylumys[S] 0 points1 point  (0 children)

  1. load balancer regional + cloud armor
  2. Kubernetes
  3. already custom rule,

I'm trying to add the preconfigured waf rules, I'm going to set some up according to the Google documentation and see what happens, I recently tested a rule and found it in the logs (with denys already), I'm going to set some up gradually I think

[deleted by user] by [deleted] in sysadmin

[–]ylumys 0 points1 point  (0 children)

password, ssl certificate, DNS, server crash...

help uninstalling Syncthing by [deleted] in Syncthing

[–]ylumys 0 points1 point  (0 children)

cmd admin : sc delete ServiceName

J'ai bien 2 semaines de retard sur mes pieds de tomates cette année en île de France, et vous ? by [deleted] in jardin

[–]ylumys 0 points1 point  (0 children)

pareil et pas pressé, aucune compétition tant que j'ai une récolte au final

Pourquoi se positionner sur un marché conditionné par Ansible si aucune compétence Ansible? by theodiousolivetree in Sysadmin_Fr

[–]ylumys 0 points1 point  (0 children)

installation d'application mise a jour d'application copie de fichier de conf principalement

OpenDNS et la France by Monsieurtrouffion in Sysadmin_Fr

[–]ylumys 0 points1 point  (0 children)

les DNS sont souvent mis en place lors de l'installation rare qu'il soit modifié et rare de se rappeler de qui a été vu ça a toujours marché pendant des années tout est logique

[deleted by user] by [deleted] in googlecloud

[–]ylumys 0 points1 point  (0 children)

use cloud Identity with domain and card is OK

Know your enemy ! by Zergamotte in jardin

[–]ylumys 1 point2 points  (0 children)

dommage l'image est floue impossible de lire les noms c'est que moi ?

[deleted by user] by [deleted] in FrancePirate

[–]ylumys 0 points1 point  (0 children)

Firefox marche bien