many notes to commit
This commit is contained in:
110
.obsidian/workspace.json
vendored
110
.obsidian/workspace.json
vendored
@@ -37,7 +37,7 @@
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "diary/2025-02-08.md",
|
||||
"file": "diary/2025-02-24.md",
|
||||
"mode": "source",
|
||||
"source": true,
|
||||
"backlinks": true,
|
||||
@@ -52,7 +52,7 @@
|
||||
}
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "2025-02-08"
|
||||
"title": "2025-02-24"
|
||||
}
|
||||
},
|
||||
{
|
||||
@@ -79,37 +79,13 @@
|
||||
"title": "sbx-unattendedWinstall"
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "1dee9428b4f80387",
|
||||
"type": "leaf",
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "projects/neosphere/firewall_webfilter-network.md",
|
||||
"mode": "source",
|
||||
"source": true,
|
||||
"backlinks": true,
|
||||
"backlinkOpts": {
|
||||
"collapseAll": false,
|
||||
"extraContext": false,
|
||||
"sortOrder": "alphabetical",
|
||||
"showSearch": false,
|
||||
"searchQuery": "",
|
||||
"backlinkCollapsed": false,
|
||||
"unlinkedCollapsed": true
|
||||
}
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "firewall_webfilter-network"
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "a396fa1332bcdbde",
|
||||
"type": "leaf",
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "projects/radiochemie/ovpn-mixed-otp.md",
|
||||
"file": "projects/bvv/bind-manual.md",
|
||||
"mode": "source",
|
||||
"source": true,
|
||||
"backlinks": true,
|
||||
@@ -124,35 +100,11 @@
|
||||
}
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "ovpn-mixed-otp"
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "466bf81b71b4c9ee",
|
||||
"type": "leaf",
|
||||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "projects/discopharma/reverse-proxy.md",
|
||||
"mode": "source",
|
||||
"source": true,
|
||||
"backlinks": true,
|
||||
"backlinkOpts": {
|
||||
"collapseAll": false,
|
||||
"extraContext": false,
|
||||
"sortOrder": "alphabetical",
|
||||
"showSearch": false,
|
||||
"searchQuery": "",
|
||||
"backlinkCollapsed": false,
|
||||
"unlinkedCollapsed": true
|
||||
}
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "reverse-proxy"
|
||||
"title": "bind-manual"
|
||||
}
|
||||
}
|
||||
],
|
||||
"currentTab": 3
|
||||
"currentTab": 1
|
||||
}
|
||||
],
|
||||
"direction": "vertical"
|
||||
@@ -297,10 +249,10 @@
|
||||
"state": {
|
||||
"type": "file-properties",
|
||||
"state": {
|
||||
"file": "diary/2025-01-13.md"
|
||||
"file": "diary/2025-02-13.md"
|
||||
},
|
||||
"icon": "lucide-info",
|
||||
"title": "File properties for 2025-01-13"
|
||||
"title": "File properties for 2025-02-13"
|
||||
}
|
||||
},
|
||||
{
|
||||
@@ -333,54 +285,54 @@
|
||||
"templater-obsidian:Templater": false
|
||||
}
|
||||
},
|
||||
"active": "1dee9428b4f80387",
|
||||
"active": "08af676996feb317",
|
||||
"lastOpenFiles": [
|
||||
"projects/radiochemie/ovpn-mixed-otp.md",
|
||||
"projects/discopharma/reverse-proxy.md",
|
||||
"projects/neosphere/firewall_webfilter-network.md",
|
||||
"projects/bvv/bind-manual.md",
|
||||
"projects/sbx/sbx-unattendedWinstall.md",
|
||||
"diary/2025-02-24.md",
|
||||
"projects/neosphere/20250502-storage-cluster.md",
|
||||
"projects/neosphere/firewall_webfilter-network.md",
|
||||
"diary/2025-02-21.md",
|
||||
"diary/2025-02-20.md",
|
||||
"projects/radiochemie/ovpn-mixed-otp.md",
|
||||
"projects/bvv",
|
||||
"projects/Untitled.md",
|
||||
"diary/2025-02-19.md",
|
||||
"todo.md",
|
||||
"diary/2025-02-14.md",
|
||||
"diary/2025-02-13.md",
|
||||
"diary/2025-02-12.md",
|
||||
"diary/2025-02-10.md",
|
||||
"projects/discopharma/reverse-proxy.md",
|
||||
"files/neosphere/firewall-appfilter.png",
|
||||
"files/neosphere/firewall-ips.png",
|
||||
"files/neosphere",
|
||||
"files/New folder",
|
||||
"files/kwa/kwa-pp-admin.png",
|
||||
"diary/2025-02-08.md",
|
||||
"diary/2025-02-07.md",
|
||||
"todo.md",
|
||||
"projects/ssr-kwa/mail-migration/20250206-KWA-Meeting.md",
|
||||
"diary/2025-02-06.md",
|
||||
"projects/ssr-kwa/manual/Checkliste-apple-geraete.md",
|
||||
"projects/neosphere/20250502-storage-cluster.md",
|
||||
"diary/2025-02-05.md",
|
||||
"projects/neosphere",
|
||||
"diary/2025-02-03.md",
|
||||
"diary/2025-02-04.md",
|
||||
"projects/blocherer/sg125-to-opnsense.md",
|
||||
"archive/blocherer/sg125-to-opnsense.md",
|
||||
"diary/2025-01-31.md",
|
||||
"diary/2025-01-30.md",
|
||||
"diary/2025-01-29.md",
|
||||
"diary/2025-01-28.md",
|
||||
"diary/2025-01-27.md",
|
||||
"diary/2025-01-23.md",
|
||||
"diary/2025-01-26.md",
|
||||
"diary/2025-01-24.md",
|
||||
"diary/2025-01-17.md",
|
||||
"diary/2025-01-22.md",
|
||||
"projects/sbx/knowledgebase.md",
|
||||
"projects/blocherer",
|
||||
"archive/blocherer",
|
||||
"projects/discopharma",
|
||||
"ressources/windows",
|
||||
"ressources/macOS",
|
||||
"files/sbx/important.png",
|
||||
"projects/beta",
|
||||
"projects/radiochemie",
|
||||
"files/kwaANDssr/~$schreiben KWA.docx",
|
||||
"files/kwaANDssr/Anschreiben KWA.docx",
|
||||
"files/Create macOS User.fileset/Create macOS User.fileset/Contents/Files/FW781340D",
|
||||
"files/sophos/vpn-portal-manual_02.png",
|
||||
"files/hannes_roessler/20241118_switch-mac-addresses.png",
|
||||
"files/apsa/pfsense_ppp-setup.png",
|
||||
"files/apsa/pfsense_wan_interface_conf.png",
|
||||
"files/sophos/vpn-portal-manual_06.png",
|
||||
"files/sophos/vpn-portal-manual_05.png",
|
||||
"files/sophos/vpn-portal-manual_04.png",
|
||||
"files/sophos/vpn-portal-manual_03.png",
|
||||
"files/sophos/vpn-portal-manual_01.png",
|
||||
"Untitled.canvas"
|
||||
]
|
||||
}
|
||||
78
diary/2025-02-10.md
Normal file
78
diary/2025-02-10.md
Normal file
@@ -0,0 +1,78 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:00 - 08:15: Ankunft, Apfel essen, Kaffe trinken und nachdenken
|
||||
- 08:15 - 08:45: Ticketpflege
|
||||
- 08:45 - 09:15: Vorebreiten fuer Meeting mit DiscoPharma
|
||||
- 09:15 - 09:30: Bitlocker ausschalten
|
||||
- 09:30 - 10:00: Meeting mit Lukas Maas von DiscoPharma zu Reverse Proxy Loesung
|
||||
- 10:00 - 10:15: Gespraech mit Oli zu Windows 11 Installation bei der VZ
|
||||
- 10:15 - 10:30: Mail verfassen an Nina Schiffel wegen Telefonie
|
||||
- 10:30 - 11:00: PP Problem bei KWA. Telefonat mit Frau Blackwella
|
||||
- 11:00 - 11:45: Recherche zu Windows 11 Autodeployment - Windows Configuration Manager
|
||||
- 11:45 - 12:45: Meeting mit Hannah und Oliver zu VZ Win11 Installation
|
||||
- 12:45 - 13:00: Pause
|
||||
- 13:00 - 14:15: Win11-autoinstall
|
||||
- 14:15 - 15:15: NeoSphere WebFilter Dokument
|
||||
- 15:15 - 15:45: Pause
|
||||
- 15:45 - 16:00: Autotask Mail mit Anhang versendt Problem
|
||||
- 16:00 - 18:00: PXE Boot config
|
||||
|
||||
|
||||
## Friday
|
||||
|
||||
- 11:00 - 12:00: KWA - kack Projekt Pro
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] radiochemie - vpn + otp aufsetzen fuer fremde
|
||||
- [ ] discopharma weitermachen
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
95
diary/2025-02-12.md
Normal file
95
diary/2025-02-12.md
Normal file
@@ -0,0 +1,95 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:00 - 08:45: Mails Ordnen, Ticketpflege
|
||||
- 08:45 - 09:15: DiscoPharma Mail beantworten, IT-glue fuer neosphere anpassen
|
||||
- 09:15 - 09:30: Mailverkehr DiscoPharma.
|
||||
- 09:30 - 10:15: Kommunikation mit Martin zu VZ. Meeting mit Michael zu VZ, iso install, ninjaone sw install und powershell agent pull from net
|
||||
- 10:15 - 11:15: Telefonat mit fucking Projekt Pro
|
||||
- 11:30 - 12:00: Installiere Windows ADK and Windows PE
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:00 - 15:30: netboot. pxe. win11. iso. winpe hat kein netzwerk haha
|
||||
- 15:30 - 16:30: Windows unattended.xml
|
||||
- 16:30 - 17:00: netboot. try to install drivers manually.
|
||||
- 17:00 - 17:30: Windows unattended.xml
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 10:00 - 18:00: NeoSphere Einsatz
|
||||
|
||||
## Moday
|
||||
|
||||
- 08:00 - 08:15: Ankunft, Apfel essen, Kaffe trinken und nachdenken
|
||||
- 08:15 - 08:45: Ticketpflege
|
||||
- 08:45 - 09:15: Vorebreiten fuer Meeting mit DiscoPharma
|
||||
- 09:15 - 09:30: Bitlocker ausschalten
|
||||
- 09:30 - 10:00: Meeting mit Lukas Maas von DiscoPharma zu Reverse Proxy Loesung
|
||||
- 10:00 - 10:15: Gespraech mit Oli zu Windows 11 Installation bei der VZ
|
||||
- 10:15 - 10:30: Mail verfassen an Nina Schiffel wegen Telefonie
|
||||
- 10:30 - 11:00: PP Problem bei KWA. Telefonat mit Frau Blackwell
|
||||
- 11:00 - 11:45: Recherche zu Windows 11 Autodeployment - Windows Configuration Manager
|
||||
- 11:45 - 12:45: Meeting mit Hannah und Oliver zu VZ Win11 Installation
|
||||
|
||||
- 13:00 - 14:15: Win11-autoinstall
|
||||
|
||||
- 15:45 - 16:00: Autotask Mail mit Anhang versendt Problem
|
||||
- 16:00 - 18:00: PXE Boot config
|
||||
|
||||
## Friday
|
||||
|
||||
- 11:00 - 12:00: KWA - kack Projekt Pro
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] radiochemie - vpn + otp aufsetzen fuer fremde
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
106
diary/2025-02-13.md
Normal file
106
diary/2025-02-13.md
Normal file
@@ -0,0 +1,106 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Thurday
|
||||
|
||||
- 08:00 - 08:15: Linux Desktop einrichten
|
||||
- 08:15 - 09:00: NeoSphere untersuche smb und nfs share Berechtigungen und Ownership. Slurmctld down. Kill alle Jobs und starte neu
|
||||
- 09:00 - 09:15: Rauchen
|
||||
- 09:15 - 09:30: Telefonat mit Bjoern: gitlab down. redis server braucht neustart
|
||||
- 09:30 - 10:00: Ticketpflege
|
||||
- 10:00 - 10:30: Diskussion mit Max zu optimaler Win11 Autoinstall Loesung, Mails schreiben
|
||||
- 10:30 - 12:00: radiochemie - otp sache, setze zweiten openvpn server auf mit otp only auth, macht probelme, jeder server braucht eigenen port und eigenes netzwerk
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:00 - 13:30: Radiochemie - openvpn otp - setze server neu auf, pruefe alles, teste nochmal, scheint zu funktionieren wobei der zweite server immer versucht sich als cleint am ersten zu koppeln?
|
||||
- 13:30 - 14:00: neosphere server machen wieder probleme, telefonat mir holger, telefonat mit bjoern und abstimmung ueber verlauf, schalte ubt01 aus, ubt03 noch nicht im einsatz
|
||||
- 14:00 - 14:30: Telefonat mir Sebasitan. Anleite in ersetllung des otp client zertifikats
|
||||
- 14:30 - 16:30: starte fsck.ocfs2 -fy gegen erster partion auf ubt02
|
||||
- 16:30 - 17:00: Tum public ip adressen mit philipp und oli
|
||||
- 17:00 - 18:00: neosphere nic driver
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 08:45 - 09:15: DiscoPharma Mail beantworten, IT-glue fuer neosphere anpassen
|
||||
- 09:15 - 09:30: Mailverkehr DiscoPharma.
|
||||
- 09:30 - 10:15: Kommunikation mit Martin zu VZ. Meeting mit Michael zu VZ, iso install, ninjaone sw install und powershell agent pull from net
|
||||
|
||||
- 11:30 - 12:00: Installiere Windows ADK and Windows PE
|
||||
|
||||
- 13:00 - 15:30: netboot. pxe. win11. iso. winpe hat kein netzwerk haha
|
||||
- 15:30 - 16:30: Windows unattended.xml
|
||||
- 16:30 - 17:00: netboot. try to install drivers manually.
|
||||
- 17:00 - 17:30: Windows unattended.xml
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 10:00 - 18:00: NeoSphere Einsatz
|
||||
|
||||
## Moday
|
||||
|
||||
- 08:45 - 09:15: Vorebreiten fuer Meeting mit DiscoPharma
|
||||
|
||||
- 09:30 - 10:00: Meeting mit Lukas Maas von DiscoPharma zu Reverse Proxy Loesung
|
||||
- 10:00 - 10:15: Gespraech mit Oli zu Windows 11 Installation bei der VZ
|
||||
- 10:15 - 10:30: Mail verfassen an Nina Schiffel wegen Telefonie
|
||||
|
||||
- 11:00 - 11:45: Recherche zu Windows 11 Autodeployment - Windows Configuration Manager
|
||||
- 11:45 - 12:45: Meeting mit Hannah und Oliver zu VZ Win11 Installation
|
||||
|
||||
- 13:00 - 14:15: Win11-autoinstall
|
||||
|
||||
- 16:00 - 18:00: PXE Boot config
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
- [ ] tum homepage
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] radiochemie - vpn + otp aufsetzen fuer fremde
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
95
diary/2025-02-14.md
Normal file
95
diary/2025-02-14.md
Normal file
@@ -0,0 +1,95 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:00 - 08:15: Ankunft, Trauern, Kaffee
|
||||
- 08:15 - 08:30: Veruschen ice driver zu installieren. Kernel locked. Kein erfolg
|
||||
- 08:30 - 09:00: Ticketpflege
|
||||
- 09:00 - 09:15: Jan unterstuetzen bei 2fa problem
|
||||
- 09:15 - 09:45: Resignation
|
||||
- 09:45 - 10:00: DiscoPharma - Pruefe nochmal das Ansible Skript und die Zertifikat Anforderung
|
||||
- 10:00 - 10:30: Recherche zu Secure Boot und Linux
|
||||
- 10:30 - 11:30: Labor aufraeumen, anfangen neue Switch aufzesetzen und schoene arbeitsumgebung zu haben, recherche insatallation omada controller
|
||||
- 11:30 - 13:00: Lukas Maas Meeting - metabase maschine gehackt
|
||||
- 13:15 - 13:30: Philipp unterstuetzen bei mailout Problem - Es war DNS hahaha
|
||||
- 13:30 - 14:30: Pause
|
||||
- 14:30 - 15:30: Cazadora Meeting mit Max
|
||||
- 15:30 - 17:00: Mit Alija versuchen Sophos Home auf XG125 zu installieren
|
||||
|
||||
## Thursday
|
||||
|
||||
- 08:00 - 08:15: Linux Desktop einrichten
|
||||
- 08:15 - 09:00: NeoSphere untersuche smb und nfs share Berechtigungen und Ownership. Slurmctld down. Kill alle Jobs und starte neu
|
||||
- 09:00 - 09:15: Rauchen
|
||||
- 09:15 - 09:30: Telefonat mit Bjoern: gitlab down. redis server braucht neustart
|
||||
- 09:30 - 10:00: Ticketpflege
|
||||
- 10:00 - 10:30: Diskussion mit Max zu optimaler Win11 Autoinstall Loesung, Mails schreiben
|
||||
- 10:30 - 12:00: radiochemie - otp sache, setze zweiten openvpn server auf mit otp only auth, macht probelme, jeder server braucht eigenen port und eigenes netzwerk
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:00 - 13:30: Radiochemie - openvpn otp - setze server neu auf, pruefe alles, teste nochmal, scheint zu funktionieren wobei der zweite server immer versucht sich als cleint am ersten zu koppeln?
|
||||
- 13:30 - 14:00: neosphere server machen wieder probleme, telefonat mir holger, telefonat mit bjoern und abstimmung ueber verlauf, schalte ubt01 aus, ubt03 noch nicht im einsatz
|
||||
- 14:00 - 14:30: Telefonat mir Sebasitan. Anleite in ersetllung des otp client zertifikats
|
||||
- 14:30 - 16:30: starte fsck.ocfs2 -fy gegen erster partion auf ubt02
|
||||
- 16:30 - 17:00: Tum public ip adressen mit philipp und oli
|
||||
- 17:00 - 18:00: neosphere nic driver
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 10:00 - 18:00: NeoSphere Einsatz
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] optimiere labor netz mit pxe boot auf dedizierten proxmox server auf dem alten laptop
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
- [ ] tum homepage
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] radiochemie - vpn + otp aufsetzen fuer fremde
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
94
diary/2025-02-19.md
Normal file
94
diary/2025-02-19.md
Normal file
@@ -0,0 +1,94 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
|
||||
## Last Week
|
||||
## Friday
|
||||
|
||||
- 08:00 - 08:15: Ankunft, Trauern, Kaffee
|
||||
- 08:15 - 08:30: Veruschen ice driver zu installieren. Kernel locked. Kein erfolg
|
||||
- 08:30 - 09:00: Ticketpflege
|
||||
- 09:00 - 09:15: Jan unterstuetzen bei 2fa problem
|
||||
- 09:15 - 09:45: Resignation
|
||||
- 09:45 - 10:00: DiscoPharma - Pruefe nochmal das Ansible Skript und die Zertifikat Anforderung
|
||||
- 10:00 - 10:30: Recherche zu Secure Boot und Linux
|
||||
- 10:30 - 11:30: Labor aufraeumen, anfangen neue Switch aufzesetzen und schoene arbeitsumgebung zu haben, recherche insatallation omada controller
|
||||
- 11:30 - 13:00: Lukas Maas Meeting - metabase maschine gehackt
|
||||
- 13:15 - 13:30: Philipp unterstuetzen bei mailout Problem - Es war DNS hahaha
|
||||
- 13:30 - 14:30: Pause
|
||||
- 14:30 - 15:30: Cazadora Meeting mit Max
|
||||
- 15:30 - 17:00: Mit Alija versuchen Sophos Home auf XG125 zu installieren
|
||||
|
||||
## Thursday
|
||||
|
||||
|
||||
- 09:15 - 09:30: Telefonat mit Bjoern: gitlab down. redis server braucht neustart
|
||||
- 09:30 - 10:00: Ticketpflege
|
||||
- 10:00 - 10:30: Diskussion mit Max zu optimaler Win11 Autoinstall Loesung, Mails schreiben
|
||||
- 10:30 - 12:00: radiochemie - otp sache, setze zweiten openvpn server auf mit otp only auth, macht probelme, jeder server braucht eigenen port und eigenes netzwerk
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:00 - 13:30: Radiochemie - openvpn otp - setze server neu auf, pruefe alles, teste nochmal, scheint zu funktionieren wobei der zweite server immer versucht sich als cleint am ersten zu koppeln?
|
||||
- 13:30 - 14:00: neosphere server machen wieder probleme, telefonat mir holger, telefonat mit bjoern und abstimmung ueber verlauf, schalte ubt01 aus, ubt03 noch nicht im einsatz
|
||||
- 14:00 - 14:30: Telefonat mir Sebasitan. Anleite in ersetllung des otp client zertifikats
|
||||
- 14:30 - 16:30: starte fsck.ocfs2 -fy gegen erster partion auf ubt02
|
||||
- 16:30 - 17:00: Tum public ip adressen mit philipp und oli
|
||||
- 17:00 - 18:00: neosphere nic driver
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] bind/named anleitung schreiben
|
||||
- [ ] optimiere labor netz mit pxe boot auf dedizierten proxmox server auf dem alten laptop
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
- [ ] tum homepage
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] radiochemie - vpn + otp aufsetzen fuer fremde
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
79
diary/2025-02-20.md
Normal file
79
diary/2025-02-20.md
Normal file
@@ -0,0 +1,79 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:15 - 08:45: Linux Server manuell updaten und reboots planen
|
||||
- 08:45 - 09:45: Ticketpflege
|
||||
- 09:45 - 10:15: was machen sachen?
|
||||
- 10:15 - 11:15: Pause
|
||||
- 11:15 - 12:00: Pause
|
||||
- 12:00 - 12:45: Nextcloud fortsetzung aufsetzen und konfigurieren fuer Phytron, WebServer Protection auf Sophos konfigurieren, Einstellungen anapassen fuer php und apache
|
||||
- 12:45 - 13:30: Recherche Installation GitLab, Recherche LDAP Integration in Nextcloud
|
||||
- 14:15 - 15:00: dns bvv - anleitung schreiben zur fachgerechten anpassung der konfiguration
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 09:00: Ankunft
|
||||
- nextcloud aufsetzen fuer phytron
|
||||
- telefonat mit oli: anleitung schreiben fuer bind dns server beim bvv
|
||||
- tum reverse proxy konfigurieren
|
||||
- 11:00 - 12:00: Pause
|
||||
- 16:30: Abfahrt
|
||||
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] bind/named anleitung schreiben
|
||||
- [ ] optimiere labor netz mit pxe boot auf dedizierten proxmox server auf dem alten laptop
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
- [ ] tum homepage
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
89
diary/2025-02-21.md
Normal file
89
diary/2025-02-21.md
Normal file
@@ -0,0 +1,89 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:15 - 08:30: Phytron mount fehler bei nextcloud
|
||||
- 08:30 - 09:00: NeoSpehere - folge der [anleitung](https://forum.endeavouros.com/t/intel-e810xxv-25g-network-card-not-working-no-ice-driver/39633/6), sr-iov auschalten hat es gebracht
|
||||
- 09:00 - 09:30: Kommunikation mit Holger zu NeoSphere, Rauchen
|
||||
- 09:30 - 10:00: NeoSphere - Im IT-Glue qumulo daten hinterlegen
|
||||
- 10:00 - 17:00: NeoSphere - Setup Netplan LACP Bonding for 25Gbit Interfaces - 1h Pause
|
||||
|
||||
## Thursday
|
||||
|
||||
- 08:15 - 08:45: Linux Server manuell updaten und reboots planen
|
||||
- 08:45 - 09:45: Ticketpflege
|
||||
- 09:45 - 10:15: was machen sachen?
|
||||
- 10:15 - 11:15: Pause
|
||||
- 11:15 - 12:00: Pause
|
||||
- 12:00 - 12:45: Nextcloud fortsetzung aufsetzen und konfigurieren fuer Phytron, WebServer Protection auf Sophos konfigurieren, Einstellungen anapassen fuer php und apache
|
||||
- 12:45 - 13:30: Recherche Installation GitLab, Recherche LDAP Integration in Nextcloud
|
||||
- 14:15 - 15:00: dns bvv - anleitung schreiben zur fachgerechten anpassung der konfiguration
|
||||
- 15:00 - 17:00: NeoSphere - Intel NIC - Secure Boot ausschalten, Driver signed now but other error, BAR error, Recherche wie das Problem behoben werden kann
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 09:00: Ankunft
|
||||
- nextcloud aufsetzen fuer phytron
|
||||
- telefonat mit oli: anleitung schreiben fuer bind dns server beim bvv
|
||||
- tum reverse proxy konfigurieren
|
||||
- 11:00 - 12:00: Pause
|
||||
- 16:30: Abfahrt
|
||||
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] bind/named anleitung schreiben
|
||||
- [ ] optimiere labor netz mit pxe boot auf dedizierten proxmox server auf dem alten laptop
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
- [ ] tum homepage
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
92
diary/2025-02-24.md
Normal file
92
diary/2025-02-24.md
Normal file
@@ -0,0 +1,92 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:45 - 09:00: Ankunft, TUM Homepage Bug beheben
|
||||
- 09:00 - 09:30: ticketpflege
|
||||
|
||||
## Friday
|
||||
|
||||
- 08:15 - 08:30: Phytron mount fehler bei nextcloud
|
||||
- 08:30 - 09:00: NeoSpehere - folge der [anleitung](https://forum.endeavouros.com/t/intel-e810xxv-25g-network-card-not-working-no-ice-driver/39633/6), sr-iov auschalten hat es gebracht
|
||||
- 09:00 - 09:30: Kommunikation mit Holger zu NeoSphere, Rauchen
|
||||
- 09:30 - 10:00: NeoSphere - Im IT-Glue qumulo daten hinterlegen
|
||||
- 10:00 - 17:00: NeoSphere - Setup Netplan LACP Bonding for 25Gbit Interfaces - 1h Pause
|
||||
|
||||
## Thursday
|
||||
|
||||
- 08:15 - 08:45: Linux Server manuell updaten und reboots planen
|
||||
- 08:45 - 09:45: Ticketpflege
|
||||
- 09:45 - 10:15: was machen sachen?
|
||||
- 10:15 - 11:15: Pause
|
||||
- 11:15 - 12:00: Pause
|
||||
- 12:00 - 12:45: Nextcloud fortsetzung aufsetzen und konfigurieren fuer Phytron, WebServer Protection auf Sophos konfigurieren, Einstellungen anapassen fuer php und apache
|
||||
- 12:45 - 13:30: Recherche Installation GitLab, Recherche LDAP Integration in Nextcloud
|
||||
- 14:15 - 15:00: dns bvv - anleitung schreiben zur fachgerechten anpassung der konfiguration
|
||||
- 15:00 - 17:00: NeoSphere - Intel NIC - Secure Boot ausschalten, Driver signed now but other error, BAR error, Recherche wie das Problem behoben werden kann
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 09:00: Ankunft
|
||||
- nextcloud aufsetzen fuer phytron
|
||||
- telefonat mit oli: anleitung schreiben fuer bind dns server beim bvv
|
||||
- tum reverse proxy konfigurieren
|
||||
- 11:00 - 12:00: Pause
|
||||
- 16:30: Abfahrt
|
||||
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] bind/named anleitung schreiben
|
||||
- [ ] optimiere labor netz mit pxe boot auf dedizierten proxmox server auf dem alten laptop
|
||||
- [ ] vz autoinstallation win11 Meeting organisieren
|
||||
- [ ] neosphere - smb issue
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [=] zkv festplatte - mit kunden getelt. sie wissen bescheid - kontaktieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
|
||||
### BVV
|
||||
|
||||
- [ ] Veeam Hardened Repo: Server jetzt in VLAN 60, Konfig muss angepasst werden
|
||||
|
||||
BIN
files/kwa/kwa-pp-admin.png
Normal file
BIN
files/kwa/kwa-pp-admin.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 203 KiB |
BIN
files/neosphere/firewall-appfilter.png
Normal file
BIN
files/neosphere/firewall-appfilter.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 185 KiB |
BIN
files/neosphere/firewall-ips.png
Normal file
BIN
files/neosphere/firewall-ips.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 116 KiB |
10
projects/bvv/bind-manual.md
Normal file
10
projects/bvv/bind-manual.md
Normal file
@@ -0,0 +1,10 @@
|
||||
|
||||
## Intro
|
||||
|
||||
Goal: Have a detailed manual for making changes at a running bind server without destroying it.
|
||||
Motivation: The bind config had been successfully destroyed by accident. (by leaving out a \$-symbol)
|
||||
|
||||
## Receipt
|
||||
|
||||
|
||||
|
||||
@@ -5,7 +5,8 @@
|
||||
|
||||
## Todo next appt
|
||||
|
||||
- [ ] 5 green cable - ilo server
|
||||
- [ ] 10 kaltgeraetestecker - strom
|
||||
- [ ] locally mount and setup 3rd computing node
|
||||
- [x] firewall rules are weird
|
||||
- [x] 5 green cable - ilo server
|
||||
- [x] 10 kaltgeraetestecker - strom
|
||||
- [x] locally mount and setup 3rd computing node
|
||||
- [ ] REMOTE - 25 GB network card issues - try to install driver or update firmware
|
||||
@@ -1,3 +1,4 @@
|
||||
# NeoSphere Firewall
|
||||
|
||||
## Intro
|
||||
|
||||
@@ -38,23 +39,52 @@ Spaeter gehen wir drauf ein wie die Sicherheitsfunktionen auf die einzelnen Netz
|
||||
|
||||
*Quelle: <https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/IntrusionPrevention/index.html>*
|
||||
|
||||
#### Intro
|
||||
Im Allgemeinen, ueberwacht ein Intrusion Prevention System (IPS) den Netzwerkverkehr auf potentielle Gefahren und blockt diese automatisch, indem es Meldungen raussendet, gefaehrliche Verbindungen unterbricht, boeswilligen Content entfernt oder andere Sicherheitsaktoinen triggert.
|
||||
|
||||
Sophos ueberwacht den Verkehr speziell auf Anomalien, um DoS (Denial of Service) Attacken und andere Spoofing (Taeuschung/Verschleirungs) Attacken abzuwehren. Man kann spezifisch Policies setzen, welche Handlungen vorgeben bei zutreffenden Kriterien im Netzwerkverkehr.
|
||||
|
||||
|
||||
### Web Filter
|
||||
|
||||
*Quelle: <https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Web/index.html>*
|
||||
|
||||
#### Intro
|
||||
Web Filter schraenkt den Verkehr ein beim Web Browsing. Es koennen Einschraenkungen gesetzt werden mit _Kategorien_, _URL Gruppen_ und _Datei Typen_, um das Web Browsing zu limitieren.
|
||||
Dadurch koenne Webseiten komplett geblockt werden oder Warnmeldungen iniziert werden beim Besuch bestimmte Seiten (zum Beispiel das koennen ganze Social Media Plattformen geblockt werden).
|
||||
Dadurch koenne Webseiten komplett geblockt werden oder Warnmeldungen injiziert werden beim Besuch bestimmter Seiten (zum Beispiel das koennen ganze Social Media Plattformen geblockt werden).
|
||||
|
||||
|
||||
### Application Filter
|
||||
|
||||
*Quelle: <https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Applications/index.html>*
|
||||
|
||||
#### Intro
|
||||
Der Applikationsfilter hilft Malware und Attacken resultierend aus dem Netzwerkverkehr von Applikationen zu verhindern. Zusaetzlich kann damit die Bandbreite und der Netzverkehr einzelner Applikationen eingeschraenkt werden.
|
||||
|
||||
|
||||
### Web Server Protection
|
||||
*Quelle: <https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/WebServer/index.html>*
|
||||
|
||||
#### Intro
|
||||
Hier kann man gezielt Web Server im Netzen vor "Level 7" Sicherheitsluecken schuetzen. Das beinhaltet zum Beispiel cookie, URL und Form Manipulation. Hier kann auch der Web Server konfiguriert werden, wen man schuetzen moechte, verschieden Schutz- und Authentizierungs Policies einbinden. Die web server protection entspricht einem Reverse Proxy in seiner Funktion.
|
||||
|
||||
|
||||
### Einbindung ins Netzwerk
|
||||
|
||||
| Firewall Regel | IPS | Web Filter | App Filter | Web Server | Notizen |
|
||||
| --------------------------------------- | --------------- | ---------------------------------------------------------------------------------------------------- | ---------------------------- | ------------------------------- | --------------------------------------------------------------------------- |
|
||||
| Reverse Proxy apps.neospherebiotech.com | 'generalpolicy' | n/a | n/a | https zertifikat bereitstellung | Reverse Proxy fuer ubt02 Server. |
|
||||
| Wlan_NEO-Guest -> WAN | 'generalpolicy' | Blocke Expliziten Content | Blocke 'very high risk apps' | n/a | Erlaubter Verkehr ins offene Internet von Wlan_NEO-Guest aus |
|
||||
| Wlan_NEO-Mobile -> WAN | n/a | Blocke Expliziten Content, </br> scan http Verkehr und decrypte https Verkehr, </br> zero-day Schutz | n/a | n/a | Erlaubter Verkehr ins offene Internet von Wlan_NEO-Guest aus |
|
||||
| Wlan_NEO-Intern -> WAN | 'generalpolicy' | Blocke Expliziten Content | Blocke 'very high risk apps' | n/a | Erlaubter Verkehr ins offene Internet von Wlan_NEO-Intern aus |
|
||||
| LAN -> WAN | 'generalpolicy' | Blocke Expliziten Content, </br> scan http Verkehr und decrypte https Verkehr, </br> zero-day Schutz | Blocke 'very high risk apps' | n/a | Erlaubter Verkehr von allen internen (nicht-wifi und nicht mgmt) Netzwerken |
|
||||
|
||||
#### Erklaerung der Begrifflichkeiten
|
||||
|
||||
*IPS:* Die 'generalpolicy' umfasst ueber 7000 signaturen bei welchen es reagiert. Hier ein kleiner Auszeig als Beispiel. Leider kann ich keine Liste alles Signaturen erzeugen.
|
||||
|
||||
|
||||
*Web Filter:* _Explicit Content_: 'Deny access to sexually explicit sites.' _Scan http traffic and https decryption_: Malware und Content scanning by Sophos: Blockt malware, wenn gefunden. HTTPS decryption and scanning: Ueberprueft ssl Zertifikat von Internetseiten und blockt invalide Zertifikate
|
||||
|
||||
*App Filter*: Alle geblockten Applikationen sind im folgenden Bild dargestellt.
|
||||
|
||||
@@ -7,8 +7,59 @@
|
||||
## Meeting Michael (17.01.2025)
|
||||
|
||||
The steps we want to implement:
|
||||
|
||||
1. Win 11 OS autoinstall - the idea is to use Microsoft's own "Answer files"
|
||||
2. AD coupling - it probably possible to also use the Answer files for this
|
||||
3. Ninja Agent Installation - again, use answer file
|
||||
4. SW Installation - User NinjaOne
|
||||
5. OS and SW Configuration and Personalization - Use NinjaOne
|
||||
4. SW Installation - Use NinjaOne
|
||||
5. OS and SW Configuration and Personalization - Use NinjaOne
|
||||
|
||||
## Meeting (10.02.2025)
|
||||
|
||||
#### Teilnehmer
|
||||
|
||||
- Hannah Bischof
|
||||
- Oliver Kaspar
|
||||
- Petar Cubela
|
||||
|
||||
### Takeaway
|
||||
|
||||
- pxe boot optimal (falls moeglich)
|
||||
- generische Win11 Installation
|
||||
- mit Kunden abgestimmte software auf allen Rechner installieren, welche benoetigt wird (NinjaOne)
|
||||
|
||||
- im Buero Loesung haben und potentiell bei groesseren Kunden, wo es sich lohnt
|
||||
|
||||
## Options - autoinstall
|
||||
|
||||
#### pxe
|
||||
- Linux netboot.xyz Server (should work)
|
||||
- SCCM - Configuration Manager
|
||||
- Intune (expensive)
|
||||
|
||||
#### other
|
||||
- boot stick and iso +unattended.xml (Microsoft's answer file)
|
||||
|
||||
|
||||
## Gespraech mit Martin
|
||||
|
||||
- ablauf und termin muss mit vz geklaert werden. auch in bezug zu unsere ressourcen
|
||||
- idee: pxe-boot einer praeparierten iso+xml welche sich automatisch installiert (samt ninja agent) und darauf folgende Installation aller sw pakete via ninja
|
||||
|
||||
## Meeting Vorbereitung unattende.xml 20250212
|
||||
|
||||
### Open Questions
|
||||
|
||||
- time zone: test automatic time zone settings using the language settings
|
||||
- wherer should windows explorer be displayed: quick access or _this pc_
|
||||
- hide the _task view_ button?
|
||||
- configure wifi interactively or skip it???
|
||||
- how to inject script? (for instance to install ninja agent)
|
||||
|
||||
|
||||
### mandatory manually for now
|
||||
|
||||
- change computer name
|
||||
- add to domain (domain join)
|
||||
- ninja agent install
|
||||
- trigger software installation via ninja
|
||||
Reference in New Issue
Block a user