Catching an Attack in Progress: Deploying Wazuh HIDS and Watching It WorkEvery firewall lab I'd worked through up to this point answered the same basic question: was a connection allowed or blocked? This lab asked a different one entirely: if an attack gets through anyway,5h ago · 8 min readmuhakeem.hashnode.dev
Network-Level Filtering with pfSense: Aliases, Port Blocking, and Time-Based RulesHost-based firewalls, the kind I'd worked with in earlier labs, protect one machine at a time. Network-based firewalls work at a different point entirely, sitting between an entire network segment and1d ago · 7 min readmuhakeem.hashnode.dev
Blocking RDP and FTP with Windows Firewall: Why Blocking a Service Isn't One RuleIt's tempting to think of blocking a network service as a single switch: RDP off, FTP off, done. This lab made clear that's rarely how it actually works. Both Remote Desktop and FTP, it turns out, are1d ago · 7 min readmuhakeem.hashnode.dev
Blocking a Single User's Internet Access with iptables: A Lesson in Scoped Firewall RulesMost firewall thinking defaults to the network level: which IPs, which ports, which subnets. This lab worked at a different, more granular layer entirely, blocking internet access for one specific use2d ago · 7 min readmuhakeem.hashnode.dev
Managing Access Control in Linux: Users, Groups, Ownership, and PermissionsWindows Active Directory makes access control visible through a GUI, OUs, group membership dialogs, policy editors you click through. Linux strips that away and leaves you with the raw mechanics: a ha2d ago · 7 min readmuhakeem.hashnode.dev