After my first successful implementation of Foomuuri on a server with an IPv4 connection, I wanted to try Foomuuri in a different environment. This time I choose to implement it on my IPv4/IPv6 dual stack Wireguard VPN server. I originally set up this system with Shorewall, so let’s see how we should configure this with Foomuuri.| Frederik Himpe
PHP-FPM is an ideal candidate to secure with AppArmor. Not only can the security of a web server be endangered by security bugs in PHP itself, it can also be affected by security holes in PHP applications. By confining PHP-FPM with AppArmor, we can limit abuse when a security hole is exploited, by preventing PHP-FPM for example from reading arbitrary files on your system or executing random binaries, which may contain a Linux backdoor or crypto-miner malware.| Frederik Himpe
How to configure a dual stack IPv4 and IPv6 Wireguard VPN gateway with systemd-networkd and the Foomuuri NFTables firewall on Debian GNU/Linux.| Frederik Himpe
Configure a Wireguard VPN tunneling IPv6 traffic on Linux by setting up an NDP proxy with Shorewall.| Frederik Himpe
Configuration guide explaining how to set up Foomuuri firewall and how to tune Apache and configure mod_qos to mitigate DDoS attacks.| Frederik Himpe
How to configure Foomuuri firewall to protect your server from known malicious IP addresses attacking your services.| Frederik Himpe
How to secure your system from exploits in PHP applications by confining them with an AppArmor profile, separating different sites with AppArmor hats.| Frederik Himpe