Guides
Reflash Huawei E3372h USB modems for pfSense® & OPNsense®
Note: the minor version is important i.e. E3372h-153 vs E3372h-607 The 22.x series firmware is a NAT modem thingy. The 21.x series is "stick mode" where the network interface will have the "real" address on it. So stick mode is desirable. Load Generic Firmware. Log in to a Linux machine with a USB port available Open the modem's case Use "needle method" to have the device go into emergency recovery. Basically earth the recovery pin whilst plugging in the modem, a ttyUSB0 should appear Use balong-usbdload to feed the panicking e3372h a bootstrap firmware with: ./balong-usbdload -p /dev/ttyUSB0 usblsafe-3372h.bin The...
Best Practise: Securing IP Cameras with pfSense®
Run pfSense® in Proxmox
pfsense proxmox virtualization
Introduction Proxmox is an excellent virtualization platform based upon Debian Linux. pfSense® (and OPNsense®) will run nicely in a KVM based VM running on a Proxmox server. This guide will walk you through a simple install to get you started. Disclaimer There is a school of thought around if a VM can provide adequate isolation for a Firewall to provide network security. There is a similar school of thought as to if privileged and unprivileged VLAN's should share the same physical links and hardware. Flaws in the underlying software and hardware, as well as mis-configuration, can undermine the security of...
Run OPNsense® in Proxmox
opnsense proxmox virtualization
Introduction Proxmox is an excellent virtualization platform based upon Debian Linux. OPNsense (and pfSense) will run nicely in a KVM based VM running on a Proxmox server. This guide will walk you through a simple install to get you started. Disclaimer There is a school of thought around if a VM can provide adequate isolation for a Firewall to provide network security. There is a similar school of thought as to if privileged and unprivileged VLAN's should share the same physical links and hardware. Flaws in the underlying software and hardware, as well as mis-configuration, can undermine the security of...