Find guides, tutorials, and documentation to help you get the most out of CubePath services.
Showing 15 of 15 guides
Create 802.1Q VLAN interfaces on Ubuntu 24.04 with Netplan, route between VLANs on a Linux gateway and restrict inter-VLAN traffic with UFW route rules.
Install CrowdSec on Ubuntu 24.04 from the official repository, protect SSH and Nginx, block attackers with the nftables bouncer and manage decisions with cscli.
Install Suricata on Ubuntu 24.04 from the OISF PPA, load the ET Open ruleset, write a custom rule, read EVE JSON alerts and switch to inline IPS mode.
Build Snort 3 and LibDAQ from source on Ubuntu 24.04, load the community ruleset and your own rules, log alerts to JSON and run Snort as a systemd service.
Install the OSSEC host-based intrusion detection system on Ubuntu 24.04, write and test custom rules, monitor file integrity and block SSH brute force attacks.
Run pfSense CE as a KVM virtual machine on an Ubuntu 24.04 host with libvirt: create WAN and LAN networks, install the firewall and finish the setup wizard.
Set up a fresh OPNsense firewall: assign interfaces, run the wizard, create aliases and rules, forward a port, add a WireGuard VPN and enable Suricata IPS.
Connect two private networks with a WireGuard site-to-site tunnel on Ubuntu 24.04: generate keys, configure peers, route LAN traffic and open UFW safely.
Build an IKEv2 site-to-site IPsec VPN on Ubuntu 24.04 with strongSwan and swanctl, using certificate authentication, UFW rules and tunnel status checks.
Install Zeek on Ubuntu 24.04 from the official repository, monitor an interface with zeekctl, read its logs and write a custom detection script with notices.
Deploy the OpenVAS vulnerability scanner on Ubuntu 24.04 with the Greenbone Community Containers, sync the feeds, run your first scan and review the report.
Install the Wazuh indexer, server and dashboard on Ubuntu 24.04, enroll Linux agents, write a custom detection rule and monitor file changes in real time.
Configure Fail2Ban on Ubuntu 24.04 with incremental bans, a hardened SSH jail, a custom Nginx filter tested with fail2ban-regex and a recidive jail.
Harden Ubuntu 24.04 against SYN and connection floods with kernel tuning, nftables per-IP rate limits and Nginx request limits, and learn to spot an attack.
Build the NAXSI web application firewall as a dynamic module for Ubuntu's Nginx, run it in learning mode, whitelist false positives and then block SQLi and XSS.
