Blog | Fleximus

FreeBSD

HardenedBSD: An interview with the core developers

2015-10-09 Felix Ehlers

We are pleased to interview Oliver Pinter and Shawn Webb, the core developers of the HardenedBSD project.

Founded in 2014, the project aims to be a security enhanced FreeBSD, with modern technologies like exploit mitigation known as PAX and ASLR but also introduces a bunch of new sysctls to the …

FreeBSD

freebsd-update fails on systems before 9.0

2014-02-20 Felix Ehlers

You want to upgrade your FreeBSD system before 9.0 through freebsd-update and it fails, showing the following error message:

The update metadata is correctly signed, but
failed an integrity check.
Cowardly refusing to proceed any further.

The problem lies in a broken version of freebsd-update(8) which got fixed …

FreeBSD

Switching into a jail by name

2013-04-18 Felix Ehlers

Let's learn how to execute commands in a jail by referring to the jail name instead of the jail number.

Suppose you have set up two jails, namely "mail" and "www". The first is to run your mailserver, the second to run your webserver in a secure jail environment. Each …

Squid

Convert squid timestamps

2011-07-17 Felix Ehlers

When you work with a squid access log file you sometimes want to know when a site or resource was accessed. Squid does not store the date and time information for that in a human readable format.

It is stored as <unix timestamp>.<centisecond> so you can use a command …

Nginx

Nginx file extension whitelisting

2011-06-23 Felix Ehlers

Nginx is a great webserver that is flexible, feature rich and fairly well documented. But have you ever wanted to whitelist files upon their extensions and did not find a solution in the documentation reference? The bad answer is you will not find it. The good answer is: It is …

Fleximus Blog