Pragmatic IT Solutions
In this video, I will show you how to configure NTP Time Service centrally for vSphere 8 and vCenter 8 in your network. This is one of the first steps you need to take when setting up a VMware environment.
Reading Time: < 1 minuteIn this video, I will show you how to add custom domains to block when using pfBlockerNG and pfSense to keep away ads and tracking on your network. After all, what you do on the internet is nobody’s business.
Adding custom domains to block with pfBlockerNG and pfSense Read More
Reading Time: < 1 minuteIn this video, I will show you how to set up Policy Based Routing with pfSense based on destination. A destination can be a URL, hostname, FQDN, or even complete networks based on IP ranges or ASNs. I will show you how to set this up using aliases I create with the pfBlockerNG package on pfSense. To read more about using aliases on pfSense, click here. I am using pfSense 2.7.2 to do this, but the same idea applies to other versions of pfSense.
Set up Policy Based Routing with pfSense based on destination Read More
Reading Time: < 1 minuteIn this video, I will show you how to set up Policy Based Routing with pfSense based on client IP. I am using pfSense 2.7.2 to do this, but the same idea applies to other versions of pfSense.
The official documentation from Netgate, which I used as a basis, can be found here.
Set up Policy Based Routing with pfSense based on client IP Read More
Reading Time: < 1 minuteThis video will show real-world statistics of DNS-based adblocking and tracking protection based on Pi-hole.
Official Netgate DNS redirect article for pfSense: https://docs.netgate.com/pfsense/en/latest/recipes/dns-redirect.html.
Below are the blocklists that I use:
– https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
– https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/doh-vpn-proxy-bypass.txt
– https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
– https://justdomains.github.io/blocklists/lists/adguarddns-justdomains.txt
– https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/AmazonFireTV.txt
– https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt
– https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
– https://justdomains.github.io/blocklists/lists/easylist-justdomains.txt
– https://justdomains.github.io/blocklists/lists/easyprivacy-justdomains.txt
– https://adaway.org/hosts.txt
– https://v.firebog.net/hosts/AdguardDNS.txt
– https://v.firebog.net/hosts/Admiral.txt
– https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
– https://v.firebog.net/hosts/Easylist.txt
– https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts
– https://v.firebog.net/hosts/Easyprivacy.txt
– https://raw.githubusercontent.com/nextdns/cname-cloaking-blocklist/master/domains
– https://phishing.army/download/phishing_army_blocklist.txt
– https://raw.githubusercontent.com/klabacita/pmoreno-list/main/proxies.txt
– https://perflyst.github.io/PiHoleBlocklist/SmartTV.txt
– https://blocklistproject.github.io/Lists/tiktok.txt
– https://raw.githubusercontent.com/WindowsLies/BlockWindows/master/hostslist
– https://raw.githubusercontent.com/bambenek/block-doh/master/doh-hosts.txt
– https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains_abandoned.txt
– https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt
– https://raw.githubusercontent.com/oneoffdallas/dohservers/master/list.txt
– https://raw.githubusercontent.com/Sekhan/TheGreatWall/master/TheGreatWall.txt
– https://big.oisd.nl
– https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/tif.txt
– https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/ultimate.txt
DNS-based adblocking walktrough with real-world statistics based on Pi-hole DNS sinkhole Read More
Reading Time: < 1 minuteIn this video, I will show you how to protect the VMware vCenter management interface with a reverse proxy and LetsEncrypt certificate. To set this up, I am using pfSense as my firewall, HA Proxy, and Acme client on pfSense. The principle applies to other brands and vendors as well.