Find the active forks of a project on GitHub

Podcasts pour donner les bases pour investir en bourse ou dans l'immobilier

Equivalent à Buildwise pour les particuliers.
Ca liste une série d'experts capables d'identifier des malfaçons.

Challenge sécurité annuel français

Quick summary:

As has already been stated, communication between devices on the same VLAN (or layer-2 segment) does not cross a router but only the switch(es) in between the devices.

Depending on the switches' capabilities, there are several methods to control traffic within a VLAN.

VLAN-based ACLs: packets are filtered when entering a certain VLAN from a port or by layer-3 switching
port-based ACLs: packets are filtered when they are received on a certain port
port-based filtering: packet flows are limited to certain ingress/egress port combinations

ACLs work by permiting or denying certain source/destination IPs, or TCP or UDP ports. E.g. you can permit all devices within the 10.1.2.0/24 to communicate with a server at 10.1.2.10 while denying all other inter-VLAN traffic:

1000 permit ip 10.1.2.0/24 10.1.2.10/32
1010 permit ip 10.1.2.10/32 10.1.2.0/24
1010 deny ip 10.1.2.0/24 10.1.2.0/24
9999 permit ip any any

Port-based filtering works by limiting the client ports to communication with the server and router ports and filtering all else. This is sometimes also called protected ports or source-port filtering where these ports are not allowed to communicate with each other. Port-based filtering doesn't work well across up and downlinks as they cannot distinguish between wanted server and unwanted peer traffic across multiple switches.

Guide to secure your KeePass Windows classic installation.
This includes noScreenShot, timeout, minimum key security level...

Astuces pour faire bien ses meubles soi-même

Discussion autour de fail2ban sur Synology DSM7

3-useful-links
https://blog.alexis.lc/docker-macvlan-network-synology
https://gist.github.com/xirixiz/ecad37bac9a07c2a1204ab4f9a17db3c
https://community.synology.com/enu/forum/1/post/120118
https://techoverflow.net/2022/03/27/a-working-traefik-docker-compose-minio-setup-with-console/
https://stackoverflow.com/questions/69385638/minio-install-behind-traefik
https://www.ipaddressguide.com/cidr

xmlrpc.php should be disabled in Wordpress except if specific use case.
In .htaccess file:

Block WordPress xmlrpc.php requests

<Files xmlrpc.php>
order deny,allow
deny from all
allow from xxx.xxx.xxx.xxx
</Files>