Firewall jobs

...though nothing has been modified recently on my end. I need someone who understands routing, firewalls, and the way Elasticsearch nodes communicate over TCP/HTTP to jump in, trace the packets, and pinpoint the bottleneck. You should be comfortable running curl queries, checking transport and HTTP ports, reviewing DNS or load-balancer rules, and adjusting any mis-configured security groups or firewall rules if we discover them. The task ends when queries to the cluster return the expected JSON instead of an empty payload and you can clearly explain the root cause so I can avoid it in the future....

Implement Cloudflare WAF on Website Project Description: Configure Cloudflare WAF to protect the website from cyberattacks. Tasks to Be Done: Configure Cloudflare and connect the website. Update DNS records and enable proxy protection. Enable Web Application Firewall (WAF) managed rules. Configure security rules to block malicious traffic. Enable DDoS protection and bot protection. Configure rate limiting to prevent excessive requests. Test firewall rules and monitor security events. Verify website functionality and document the configuration.

...whatever door was used to plant them. I will provide SSH access (root or sudo as needed) along with the original alert logs so you can reproduce the symptoms. Please be thorough: scan the entire file-system, investigate running services, cron jobs, startup scripts, containers—anything that could relaunch the miner. Once clean, harden the box by patching packages, tightening SSH, and adjusting firewall rules so the problem does not return. Deliverables • Clean server with all mining code, binaries, and persistence hooks fully removed • Brief security hardening checklist applied and documented • Log/report summarising what you found, what you removed, and recommendations for ongoing monitoring I value clear communication and expect periodic updates w...

...videos. - Manage affiliate links and campaigns. - Nine advertising placement zones. - Automatic banner rotation and priorities. - Visual placement management and live previews. - Real click/impression statistics. - Separate management for both websites. - French-language administration. ## 5. CRITICAL — EMAIL SERVER SECURITY **Email security is the highest priority.** - Secure Ubuntu, SSH, firewall and Docker. - Strong isolation between Mailcow and advertising websites. - No ADS access to email databases, mailboxes or server secrets. - HTTPS, strong authentication and supported 2FA. - Brute-force, spam, antivirus and intrusion protection. - Security alerts for SSH, login attempts and service failures. - Protection against SQL injection, XSS and malicious uploads. - Autom...

...supply, mount, cable, and configure cameras with recording and remote-view access. • Access Point deployment – place and tune APs so employees and guests enjoy stable, building-wide Wi-Fi. • Server dasar on VMware – install ESXi, create initial VMs, configure and test the RAID array, then document the build. • Router and Switch setup – rack, cable, and configure routing, VLANs, and essential firewall rules. Manage service requirement I want ongoing monitoring, preventive maintenance, and rapid troubleshooting for every installed device. Please outline the tools you use for 24/7 alerting and how you handle incident response. Deliverables 1. Fully installed and tested hardware with clean cable management. 2. Documentation for CCTV layout, ...

Please Sign Up or Login to see details.

I need reliable, hands-on help getting a small Local Area Network running smoothly. The environment is straightforward—just a mix...using standard diagnostic tools (ping, traceroute, Wireshark, etc.) as well as your own proven workflow. • Produce clear, step-by-step documentation of the final topology, addressing scheme, and any command-line or GUI steps taken. I’ll use this for future maintenance, so plain language and screenshots are welcome. A solid grasp of TCP/IP fundamentals, routing and switching basics, and common firewall principles is essential. If you notice anything that could be tightened up—DHCP reservations, firmware updates, security hardening—feel free to suggest and, once approved, implement it. Once everything is stable and properly...

...remove every piece of malicious code or file, whether it’s buried in the database, core, theme, or plugin folders. • Restore proper core files and update WordPress, themes, and plugins to their latest safe versions. • Reinstate full admin functionality so I’m no longer locked out of settings or plugin pages. • Harden the installation (security keys, file permissions, .htaccess rules, malware firewall such as Wordfence or Sucuri, regular backups) so the same exploit cannot happen again. • Provide a brief post-cleanup report outlining what was found, what was fixed, and recommendations for ongoing security. I’m ready to hand over hosting credentials right away so you can start scanning with tools like WP-CLI, Maldet, or your preferred ...

...clear that it isn’t as secure or as maintainable as I need. I now want to rebuild it from the ground up so I can confidently manage every aspect—front end and back end—without worrying about vulnerabilities or clunky workflows. Security is my top priority. The finished site must run with end-to-end data encryption, enforce solid user authentication, and sit safely behind a properly configured firewall. Once these protections are in place I also need a flexible admin area where I can: • Manage users and their roles (Administrator, Editor, Viewer) • Publish, edit, and organize content easily • Track performance through an integrated analytics dashboard You are free to recommend best-practice frameworks, plug-ins, or custom code so long as t...

I run FreePBX 15 on a Debian server and need a full tidy-up so the platform behaves reliably and works the way the business requires. First, the system drops calls or unregisters extensions now and then. I would like the root cause identified (SIP keep-alive, NAT, firewall, transport, or anything else that proves to be the culprit) and a permanent fix applied so the SIP peers stay registered and calls no longer cut out. Once stability is in place, the default extensions must register flawlessly on Linphone. At the moment Linphone connects, but not always cleanly. A working, repeatable configuration profile for Linphone is part of the deliverable. The installation then needs to be re-pointed to Telecomsxchange. Instead of my current default trunk, outbound and inbound routes shoul...

...integrate our existing hardware, and establish a secure, TrackNova-branded platform. ### Scope of Work **Phase 1 — Server Assessment and Installation** - Audit our Bluehost VPS, including operating system, CPU, RAM, storage, and networking. - Verify compatibility with CMSV6/CMSV9. - Install and configure the licensed server software on a compatible Linux environment. - Configure our domain, HTTPS, firewall, and administrator access. **Phase 2 — Hardware Integration** - Connect one existing GPS tracking device. - Connect one existing 4G AI dash camera. - Demonstrate live GPS tracking and vehicle location history. - Test live video streaming and supported remote playback. - Verify available ADAS/DMS safety alerts. **Phase 3 — Branding and Customer Management...

My small WordPress site – – runs on the free “The Church Lite” ...and unfortunately no usable backup exists. I therefore need an experienced WordPress security specialist who can: • Locate and remove every trace of malware from files and database • Restore the site and admin dashboard so events, images and the slider all function exactly as before • Update WordPress core, theme and any plugins to their safe, current versions • Harden the installation (firewall, file-permissions, brute-force protection) and configure an automated off-site backup plan • Provide a brief cleanup report outlining what was infected and how it was fixed The job is complete when the site loads normally, the admin area is fully usable, and a first s...

...brought back online, but more importantly I want to stop this from ever happening again. The immediate focus is firewall and server-side security; user authentication tweaks and data-at-rest encryption can follow once the house is no longer on fire. There are no security plugins installed yet, so you’ll be working from a clean slate. Feel free to recommend and configure the tools you trust most—Wordfence, Sucuri, ModSecurity, Fail2Ban, or a custom stack—as long as the final setup keeps attacks out and performance intact. Acceptance criteria • Every malicious file and injected line of code is removed, with the site fully functional and reachable. • A Web Application Firewall is in place, properly tuned for WordPress traffic. • Server...

...replicate the essential firewall rules we use to keep the apps locked down. Both sites need to be fully functional behind Cloudflare once you are done. Each application also requires its own R2 bucket. One will store user-uploaded content; the other will host a set of static HTML files. Please create the buckets, set the correct CORS and access policies, and update the applications so they read and write to R2 seamlessly. Finally, I need to move off Resend. Spin up a new mail server, migrate the existing Resend domain settings, templates, and any other configuration, and verify SPF, DKIM, and DMARC all pass. Mail must send and land in a Gmail or IMAP inbox without hitting spam. Deliverables / acceptance: • Cloudflare active on both domains with strict SSL and replicated...

I have a brand-new Ubiquiti Dream Machine that I need fully configured alongside several attached devices—specifically a group of Acc...so the controller shows real-time status alerts • A quick hand-over call and a short document summarising the key settings so I can maintain the system confidently You’ll need proven UniFi controller experience and the ability to connect remotely (SSH and UniFi UI). I can open VPN access or temporarily expose the controller, whichever you prefer. If you see a smarter way to structure VLANs, firewall rules, or camera storage, I’m open to suggestions—just keep the network secure and easy to manage. Let me know your earliest availability and how long you’ll need for the initial configuration session; I’m kee...

...Prerequisite for everything below and for the purchase list 14 Directory Two writable Samba AD domain controllers — one in the Ouagadougou office so logons and policy survive an Internet outage, one at the German secondary. SYSVOL replication handled 15 Domain join Every eligible machine joined. Windows Home cannot join a domain, so the Pro upgrades precede this 16 Group Policy baseline Password policy, firewall, application control, and the USB layers of §37.3: default deny on removable storage, approved hardware IDs only, BitLocker To Go required 17 BitLocker Enabled, recovery keys escrowed in the directory rather than on the machine 18 Endpoint telemetry Wazuh agent on every managed device; removable-storage and Plug-and-Play events collected and alerting 19 Local a...

I need a fluent Arabic-speaking Enscape specialist from Egypt to get the full Enscape asset library working on my Windows workstation. I’m running a slightly older build of Enscape and linking it with Rhino, and the assets refuse to download or show up inside Rhino’s asset browser. Here’s what I expect from our session: • Identify why the existing library path, proxy or firewall settings are blocking downloads. • Install or relocate the offline assets so that they load instantly inside Rhino. • Verify that vegetation, people, lamps—every category—renders correctly in a quick test scene. • Leave me with clear, written steps so I can repeat the process after future updates. We can work through AnyDesk or Zoom; I’ll shar...

...gateway registered, trunks and routing rules created, and a quick test call flow that proves inbound and outbound calling works end-to-end. Security is a must-have from day one. I want a properly hardened VPS firewall and strict IP whitelisting so only approved addresses can reach SIP, SSH and the Magnus web interface. If you have additional best-practice suggestions, I’m open to them, but IP whitelisting is non-negotiable. Deliverables • MagnusBilling installed, updated and secured on my VPS • Dinstar DGW-8XX gateway fully integrated (SIP registration, trunks, routes) • Firewall rules with IP whitelisting applied and documented • Successful test calls demonstrating two-way audio Please reply with a brief summary of similar Magnus, Free...

My SonicWall firewall needs its VPN function brought back to life, but I no longer have an active licence or support contract to lean on. The goal is simple: Windows-based staff must be able to connect reliably, without drops, and at normal speeds. I can give you full remote access to the appliance, the current configuration file, and a test Windows machine. What I need from you is a clean diagnosis, the necessary CLI or GUI tweaks, and any creative work-arounds that avoid licence-gated features while keeping security tight. If firmware needs to be upgraded or rolled back, please guide me through a safe procedure so we don’t lock ourselves out. Deliverables: • Restored, stable VPN access from at least one Windows PC (I’ll supply the test credentials). • A b...

...while the application itself presents an API key on every call—no OAuth2 refresh tokens or certificates for this project. Every request must travel over TLS 1.2+ and be logged for audit purposes. The API will expose read, write and update operations. It must connect to SQL through a system-assigned Managed Identity; no connection strings or passwords are to be stored in code or configuration. Firewall rules must be ignored, as the API will need to be accessed from any IP address in the world. The database sits behind a Private Endpoint, so the API hosting service (App Service or Function App—your call) needs VNet integration to reach it. Deliverables • Source-controlled C# (.NET 6/7) API with endpoints for read, write, update • Azure infrastructure scr...

...development server. Your job starts with the clean installation itself—downloading the correct installer, choosing the right configuration options for a single-instance environment, and making sure the service starts automatically with Windows. Once the database engine is in place, please secure it by setting a strong root password, removing test databases, and enabling any recommended Windows firewall rules so it is not exposed beyond the host PC. I will also need one non-root user created with full privileges for development purposes, plus a short verification script or command-line check that confirms connections work from MySQL Workbench and the native mysql client. Deliverables: • Running MySQL service on Windows with latest stable build • Root credentia...

...Baggage tracking and gate access control mechanisms. - Interactive user interfaces developed with Java GUI (Swing/JavaFX) following Event-Driven Programming principles. 3. Network Infrastructure & Security (Cisco Packet Tracer) - End-to-end Network Topology design simulating airport communications. - Advanced routing and switching configurations. - Implementation of Access Control Lists (ACLs) and firewall boundaries to isolate operational networks from public traffic. 4. Database Architecture & Analytics (MySQL) - Fully normalized relational database structure (3NF) with ERD design. - Optimizing complex SQL queries for fast execution and data integrity. - Automated tracking for billing, maintenance logs, and fuel consumption records. 5. Cybersecurity & Risk Mitiga...

...brand. The job covers every layer of configuration—network setup, routing, security hardening, firewall rules, and wireless optimisation—so the unit ships with best-practice performance and rock-solid protection. Alongside the technical build I also want it re-branded: a custom RouterOS build that shows our logo on boot, a web interface reskinned in our colours, and a repeatable set of configuration scripts that already include our company name, contact banner, and standard VLAN/DHCP scheme. I should be able to flash a new device in minutes and have it come up with the same look, feel, and settings you create here. Deliverables • Complete live configuration on the 5009B, fully tested (routing, firewall, wireless) • Custom firmware image with emb...

...documentation and provide knowledge transfer to the IT team. Required Skills Strong hands-on experience with Omnisa/VMware Workspace ONE UEM / AirWatch. Experience with enterprise MDM/UEM implementation and administration. Good knowledge of Windows, iOS, Android and macOS device management. Experience with AD, Exchange, PKI, certificates, VPN and endpoint security. Knowledge of HA/DR, networking, DMZ and firewall requirements. Strong troubleshooting and communication skills. Preferred: Workspace ONE / VMware certifications and experience with large enterprise deployments....

...architecture through steady-state support. The environment spans Windows, iOS, Android and macOS devices, so you must be equally comfortable writing custom profiles for iOS as you are managing Windows patch rings or Android Work Profiles. Beyond the core console work, deep integration with the following is critical: • AD, Exchange, PKI, certificates, VPN High-availability design, DMZ and firewall rule-sets, unified application cataloguing, device enrollment flows, compliance policies and large-scale production rollouts all fall inside the scope. You will document everything you build and walk my internal admins through the solution so we can maintain it long term. Engagement can be full-time, contract or freelance; I’m flexible as long as you bring 8+ years of ...

...security specialist to scan the entire server for malware and set up ongoing monitoring so this doesn’t resurface. Scope of work • Remove every trace of the current infection from both codebase and filesystem. • Audit the full stack, server configuration, and access logs to pinpoint the exact attack vector. • Patch or re-architect the vulnerable component you identify, then harden the server (SSH, firewall, file permissions, intrusion detection, etc.). • Deploy continuous monitoring and alerting so future anomalies are flagged immediately. • Provide a concise report explaining findings, actions taken, and recommended next steps. Acceptance criteria Clean security scans, no reinfection after 14 days of monitoring, and clear documentation delivered....

...network-security skills and I could use practical support to complete it on time. The lab breaks down into three hands-on tasks: • Configuring firewalls – I’ll provide the topology and required rule set; I need the final rule base, screenshots (or export file) showing the configuration, and a short note explaining why each rule is placed where it is. • Monitoring traffic – a capture that proves the firewall is behaving as expected, plus a brief interpretation of what the packets reveal about possible threats or misconfigurations. • Setting up VPNs – step-by-step commands or GUI walkthrough for building a secure site-to-site or remote-access VPN (whichever fits the lab instructions), finished with connectivity tests that demonstrate encr...

...report. • Tweak every on-page element—titles, meta descriptions, headings, internal links, schema—so the site is search-ready. • Address technical SEO: improve Core Web Vitals, fix crawl / index issues, optimise sitemaps, configure and structured data, and connect everything cleanly to Google Search Console. • Harden security: apply best-practice hardening, set up a dependable firewall (e.g., Wordfence or similar), configure regular backups, remove vulnerabilities, and document the steps taken. • Optimise our Facebook Page: audit current setup, refine page info and CTA, create a posting template aligned with the keyword strategy, and ensure Open Graph tags on the site pull through perfectly when links are shared. I’m comfortable wit...

...secured. Here’s what I need completed today: • Identify and delete every phishing redirection file, injected script, and malicious plugin/theme component. • Restore normal site operation so the public domain loads correctly without warnings. • Patch WordPress core, themes, and plugins, and apply hardening measures such as file-permission tightening, .htaccess rules, and a Web Application Firewall where practical. • Run a final scan (e.g., Wordfence, Sucuri CLI, ImunifyAV, or your preferred tool) and supply the clean report. • Provide a brief write-up recommending a more secure hosting or managed security plan so this incident isn’t repeated, noting that I’m unsure whether an up-to-date backup exists. Acceptance criteria: site ...

...whatever is blocking delivery. What I need from you: • Review the existing hybrid connectors, accepted domains, send/receive connectors, and any related transport rules. • Analyse the trace and protocol log snippets I’ll provide, identify the exact failure point, and explain it plainly. • Apply or guide me through the corrective steps—whether that’s certificate re-binding, connector tweaks, firewall or smart-host changes—until test messages from Exchange Online land successfully in an on-prem mailbox. • Supply a short hand-over note summarising what was fixed so I can document it for future audits. I’ll give you remote screen-share access (or run commands you specify) in PowerShell, the Exchange Admin Center, and the Offic...

I have a brand-new Windows-based server that needs to be fully configured and made production-ready. The core objective is twofold: establish a stable, secure server environment and implement a reliable email solution on top of it. Here is what I expect: • Clean installation and hardening of Windows Server (latest supported edition). • DNS, firewall and remote access settings tuned for security and performance. • Email service installed and configured—please recommend the best route (Exchange on-prem, Microsoft 365 hybrid, or a lean IMAP/POP setup) and explain licensing or MX record changes I should plan for. • All necessary roles and features enabled so the machine is ready to add web, database or file services later without rework. • Clear...

...my Ubuntu VPS. ## Main Work BUDGET 80$ - Latest stable **Mailcow Dockerized** - SOGo Webmail - Postfix / Dovecot - Rspamd / ClamAV - SPF / DKIM / DMARC - PTR / Reverse DNS - SSL/TLS - MTA-STS / TLS-RPT where appropriate - Gmail + Outlook/Hotmail delivery tests - Private/random email aliases - Create / enable / disable / delete aliases - Reply/send from alias where technically possible - Firewall + Fail2ban - Strong SSH key security - WireGuard VPN - 2FA where supported - Anti-spam / phishing / malware protection - Encrypted automatic backups - Off-server backup + restore test - Server/security monitoring - Final security and reboot tests ## CRITICAL – SECURITY ALERTS I require an **IMMEDIATE security notification whenever a successful SSH login occurs**, even when a...

...installation – design the layout, select appropriate switches, routers, cabling/Wi-Fi gear (Cisco, Ubiquiti or similar), install and configure everything on-site or guide us remotely. • Network troubleshooting – diagnose any bottlenecks, mis-configurations or connectivity drops during roll-out and after go-live, providing swift fixes and clear explanations. • Network security setup – implement VLANs, firewall rules, secure Wi-Fi, strong authentication and up-to-date firmware, and verify the setup with penetration or vulnerability tests. Deliverables will include the fully functioning network, a concise topology diagram, and hand-off documentation detailing all settings so my in-house team can maintain it confidently. I’m ready to start as so...

I’m ready to launch a new social-networking web application and need a solid technical foundation first. Your main focus will be designing and configuring the complete network environment that will host the platform—router and switch selection, VLAN design, firewall rules, VPN access, redundancy strategy, and clear diagrams so the setup can be replicated or scaled later. Once the backbone is defined, we’ll move straight into the web application itself. I want a browser-based social network built with a modern, well-documented stack; feel free to recommend React, Vue, Node.js, Django, or whatever you’re most efficient with, as long as it is secure, modular, and future-proof. Core features include user registration/login, profile management, friend/follow me...

...a reliable, secure infrastructure for my small business. The core of the work revolves around hands-on router and switch configuration as well as a smooth, business-grade wireless network rollout. Here’s what I need from you: • Assess the current layout, cabling, and internet feed and propose an optimal topology. • Configure routers and layer-2/3 switches for VLANs, QoS, DHCP, and basic firewall rules. • Design and deploy a secure Wi-Fi network with appropriate SSIDs, encryption, and guest access segregation. • Document the final configuration and provide a simple, step-by-step guide for routine maintenance. • Offer post-deployment support for any tweaks or troubleshooting during the first month. Experience with Cisco, MikroTik, Ubiq...

...database to isolate and remove any malicious files, scripts, or backdoors. • Restoration of all legitimate core Joomla files, followed by version updates and any necessary patches to ensure the store can securely accept orders again. • Verification of full end-to-end functionality following the cleanup. • Implementation of additional security measures directly on the production server (e.g., firewall rules, permission restrictions, custom admin URLs, two-factor authentication, and any other standard best practices you employ). • A final security report summarizing the vulnerabilities found, the solutions implemented, and clear recommendations for next steps. I will provide FTP access and Joomla administrator credentials. I value clear and frequent communi...

...verification that no backdoors remain. • Restoration of the original theme, pages, media, and menus from working copies you locate or rebuild manually if backups prove unusable. • Repair of database tables so the defaced content is fully replaced with authentic data. • A concise report outlining what was found, the exact steps you took, and recommendations for ongoing security (updates, hardening, firewall or security plugin configuration, and routine backup strategy). You will receive full cPanel/FTP and wp-admin credentials to carry out the work in a staging environment before pushing the clean site live. Once clean and stable, please double-check that core, themes, and plugins are patched to current versions without breaking functionality. Successful del...

...resurfacing. I need an experienced security specialist to: • Perform a deep scan to identify all malicious code, backdoors, and database injections. • Safely remove every infection without disrupting existing content or functionality. • Patch core, theme, and plugin vulnerabilities, replacing compromised files where needed. • Harden the installation—strong login rules, file permissions, firewall or reputable security plugin configuration, and any other best-practice measures. • Provide a concise post-cleanup report summarizing what was found, what was fixed, and actionable steps I can take to prevent future attacks. You should be comfortable working with cPanel/FTP, phpMyAdmin, and common WordPress security tools such as Wordfence, S...

...application-level firewall suited to WordPress (e.g., Wordfence, Sucuri, or your preferred equivalent) with sensible rate-limiting rules. • Scan the core, theme, and plugin files for vulnerabilities, remove anything suspicious, and ensure all components are updated safely. • Configure secure headers (HSTS, X-Frame-Options, X-Content-Type-Options, CSP) and tighten file permissions on the server. • Set up automated backups and real-time monitoring/alerts so I’m notified immediately of unusual activity. • Provide a brief hand-over document summarising the changes and any ongoing tasks I should schedule (log reviews, future audits, etc.). Acceptance criteria 1. No mixed-content warnings or certificate errors on any page. 2. OWASP top-10 checks p...

...in mind: • Full visual redesign that feels modern and responsive on all devices. • Plugin audit and replacement where necessary so everything runs efficiently on the latest WordPress and PHP versions. • Content restructure: migrate what still works, clean out what doesn’t, and set up easy-to-use blocks or page-builder sections for future updates. • Security hardening as the top priority: firewall rules, malware scanning, secure login, backups, and any best-practice measures you recommend. • Performance optimisation (caching, image compression, CDN setup if suitable) so the revamped site loads fast. • A smooth migration plan that keeps the current site online until the new version is ready, then flips over with minimal downtime. Af...

...the tablet tries to reach the network; the job never even reaches the printer. The connection itself seems fine, yet the tablet is hit with permission errors at the network layer. I suspect a mis-configured network permission that blocks the tablet’s traffic to the POS service. Here’s what I need: • Pinpoint why network-level permissions are refusing the tablet’s requests. • Adjust the router, firewall, VLAN or Wi-Fi ACLs so the tablet can reach the ERP POS endpoint without drops. • Validate that receipts print reliably from the tablet afterward. You may use any packet-capture or remote-diagnostic tools you like—Wireshark, nmap, router logs, ERP POS diagnostics—so long as the result is clear: the tablet communicates and prints withou...

I’m running a Fortigate 400E on firmware v7.2.12 (Build 1761). An IPsec tunnel is already in place for Android handsets and is performing flawlessly, but our iPhone users still can’t connect. I’d like you to create the corresponding IPsec profile, test it on current iOS versions and provide concise deployment instructions for end-users. I don’t hav...the internal network exactly as our Android profile allows. Deliverables • Fortigate CLI / GUI configuration steps (ready to paste or apply) • Tested connection from at least one iPhone (screenshot or log excerpt) • Short user guide for additional staff phones • Brief note on split-tunnel recommendation and any follow-up adjustments Everything must remain compatible with the existing ...

...ISP, so the problem appears to be somewhere in the current router or switch configuration. You’ll receive full remote access to the MikroTik router and, if necessary, winbox/terminal credentials for the rest of the network gear. The task focuses purely on troubleshooting: pin-point the fault, correct it, and make sure the fix survives a reboot. If during the process you identify mis-configured firewall rules or routing loops, feel free to tidy them up, but the priority is to get the network reliably online again. Deliverables • Diagnosis summary outlining root cause • Step-by-step record of the changes applied (export scripts or commands) • Confirmation that all users experience stable connectivity after the fix I expect the whole exercise to be co...

...implementation services with the below scope of works: 1. Assessment & requirement gathering for existing endpoint and server protection architecture and running OS compatibility 2. Proposed & design architecture for approval. 3. Provide full system requirement including firewall policy. 4. Setup and configure AO server, central, console & database with latest stable version. 5. Advice & setup AO security policies, up to 5 pilot policies, not limit to endpoint / server anti-virus / malware, behavior monitoring, web reputation, firewall & DLP. 6. Deploy AO pilot agents. 7. Leverage native API integrations between Trend Vision One and existing SIEM for real-time telemetry, alert ingestion, and incident context (for DUN only). 8. Rollback plan must be prov...

...development using React / Vite Backend development using Python / FastAPI or similar technology Database design and integration using MySQL REST API development and integration User authentication and authorization Input validation and secure API implementation Perform security assessment and identify vulnerabilities Implement OWASP security best practices Linux server setup and hardening Configure firewall and secure SSH access Deploy the frontend, backend, and database to the server Configure Nginx as a reverse proxy Configure domain and HTTPS/SSL Docker/containerization where required GitHub/Git-based deployment and version control Basic monitoring, logging, backup and security configuration Perform security testing after deployment Provide complete source code and deployment ...

...DevOps/SecOps engineer to lock down the production environment on my existing Ubuntu VPS. Treat the box exactly like a mini-bank: the wallet will hold live funds once we go live, so every step must follow security best practice and be documented. Scope of work • Hardening – Close all unnecessary ports, apply least–privilege permissions, configure SSH keys (no passwords), enable a restrictive firewall (UFW/iptables) and add fail2ban or equivalent. • Process management – Run the bot under its own user with PM2 or systemd so it auto-starts on reboot and restarts on crash. • Litecoin Core – Compile or install the latest stable Litecoin full node, prune if needed, and sync on an encrypted volume. RPC must bind only to localhost and require...

...adds more blocking rules or installs another security plugin. We need an experienced security engineer who can perform a proper root-cause investigation. Required investigation: * Apache/cPanel raw access log analysis * Cloudflare Security Analytics / Traffic / WAF review * Cloudflare audit/change history * check whether the Linode origin can be accessed directly and bypass Cloudflare * Linode firewall / CSF / server network configuration * WordPress and WooCommerce plugin review * REST API / AJAX / cron / generated action URLs * Google Tag Manager / Google Ads / tracking / Pixel Manager changes * DNS, , sitemap and feeds * malware / backdoor / file integrity review * timeline comparison: what changed immediately before the abnormal traffic started * identification of the actu...

...best—AWS, DigitalOcean, Vultr, or another—as long as it delivers consistent 24/7 uptime at a reasonable price. Server hardening & base build • Configure the OS with firewall rules, SSH key authentication, and disabled password/root logins. • Enable unattended-upgrade or an equivalent mechanism so security patches install automatically. • Set up automated, encrypted off-site backups for both the wallet and any database files. Litecoin full node • Install and fully sync litecoind. • Expose RPC only to the bot host (localhost or a fixed private IP), locking it down with proper rpcuser/rpcpassword credentials and a firewall whitelist. • Store wallet seeds and API keys in an encrypted secrets vault so nothing ever sits...

...training environment for approximately 50 students. Requirements: * SAP HANA training/practice environment * Cloud deployment on AWS, Azure or another suitable provider * Around 50 individual student users * Separate schemas/permissions where appropriate * Remote access for students * HANA Database Explorer / SQL / SQLScript access * User creation and password reset procedure * Security and firewall configuration * Backup and recovery setup * Start/stop automation to reduce cloud costs * Basic monitoring * Documentation so a non-technical administrator can manage daily tasks * Occasional remote support after setup Please specify: 1. Your SAP Basis/HANA experience 2. Experience deploying SAP on AWS/Azure 3. Recommended server configuration 5. Expected SAP licensing requirement...

I have a brand-new Proxmox Mail Gateway standing in front of my self-hosted Postfix server on Linux, and I want it locked down and tuned so far less spam ever reaches the inbox. I’m looking for someone who already knows PMG inside out—its GUI and CLI—plus the usual mail-flow companions such as SpamAssassin, ClamAV, RBLs, DKIM, SPF and DMARC. The job in a nuts...critical findings. 2. MXToolbox reports DKIM, SPF and DMARC alignment as “Pass.” 3. Test messages from common spam test suites are stopped or quarantined, while legitimate mail from Gmail/Outlook arrives untouched. 4. A concise change log and a one-page “next steps” guide are delivered. You will have SSH and GUI access to both the gateway and the Postfix box; I’ll handle DNS ch...