network security Archives - ITFROMZERO

Configuring 802.1X Wired Authentication on Linux with wpa_supplicant: Locking Down LAN Ports

By IT From Zero November 7, 2026

Does plugging in an Ethernet cable grant direct access to your core LAN? Learn how to configure 802.1X wired authentication with wpa_supplicant on Linux (PEAP and EAP-TLS) to block rogue devices.

Centos

How to Install and Configure Suricata IDS/IPS on CentOS Stream 9: Real-Time Network Attack Detection and Prevention

By IT From Zero November 5, 2026

A guide to installing Suricata IDS/IPS on CentOS Stream 9 for network intrusion detection and monitoring. Covers suricata.yaml configuration, disabling packet offload via ethtool/NetworkManager, and parsing eve.json logs with jq.

Network

Configuring a VPN Kill Switch with nftables on Linux: Completely Prevent IP and DNS Leaks

By IT From Zero November 4, 2026

Configure a VPN Kill Switch with nftables on Linux to lock down network traffic when a VPN drops. A detailed guide to writing rules that prevent IP and DNS leaks at the kernel level.

Network

Installing and Optimizing Suricata on Linux: A Battle-Tested Guide to Deploying IDS/IPS

By IT From Zero October 31, 2026

A battle-tested comparison of Snort, Zeek, and Suricata under heavy traffic. Step-by-step guide to deploying Suricata IDS/IPS on Linux, tuning AF_PACKET ring buffers, and blocking threats in real time.

Network

How to Install AdGuard Home on Linux: Block Ads Network-Wide and Secure Your Home Network

By IT From Zero October 17, 2026

A complete guide to installing AdGuard Home on Linux. Learn how to resolve systemd-resolved port 53 conflicts, set up encrypted upstream DoH/DoT, and secure your home network.

Ubuntu

How to Install and Configure WireGuard VPN Server on Ubuntu: Setting Up a High-Speed Virtual Private Network

By IT From Zero October 7, 2026

A step-by-step guide to building a WireGuard VPN server on Ubuntu. Master Cryptokey Routing, tune MTU to prevent packet bottlenecks, and generate QR codes for quick client setup.

Network

How to Configure DNSSEC on BIND9: Digitally Signing and Validating DNS Records to Prevent Cache Poisoning

By IT From Zero October 5, 2026

A step-by-step guide to configuring DNSSEC on BIND9: generate KSK/ZSK keys, enable automatic zone signing, and synchronize DS records to prevent DNS cache poisoning.

Network

Configuring a DNS Firewall with Response Policy Zones (RPZ) on BIND9: Block Malware and Phishing Effectively

By IT From Zero October 2, 2026

A detailed guide on deploying a DNS Firewall with Response Policy Zones (RPZ) in BIND9. Block malware and phishing directly at your internal DNS resolver with minimal overhead.

Security

A Guide to Network Packet Capture and Analysis with Tshark on Linux: Investigating Anomalous Traffic and Detecting Attacks from the CLI

By IT From Zero October 1, 2026

A practical guide to capturing and analyzing network packets from the Linux command line using Tshark to investigate port scans, detect DNS anomalies, and stop SSH brute-force attacks.

Network

Deploying FastNetMon: A Lightweight DDoS Detection Solution via NetFlow/sFlow

By IT From Zero September 23, 2026

Learn how to install FastNetMon for automated DDoS detection. An optimized NetFlow/sFlow analysis solution to protect your network without consuming CPU resources.