In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into TCP Wrappers — a classic host-based access control system for Linux servers. They explain how TCP Wrappers work with the libwrap library, how to configure /etc/hosts.allow and /etc/hosts.deny to permit or deny connections by IP address or hostname, and the security implications for services like SSH and vsftpd. Lucas shares a real-world scenario from a university server environment where TCP Wrappers prevented an automated scanning attack. The hosts compare TCP Wrappers to modern alternatives like nftables and SELinux, and discuss why it's still relevant for legacy systems and simple perimeter control. Listeners will walk away understanding how to implement a fast, lightweight access control layer on their Linux servers today.

#LinuxServerAdmin #TCPWrappers #HostBasedAccessControl #LinuxSecurity #Sysadmin #libwrap #hostsAllow #hostsDeny #AccessControl #SSHSecurity #ServerHardening #NetworkSecurity #LinuxServer #Bash #ServerEngineering #FexingoBusiness #TechPodcast #Technology

Keep every episode free: buymeacoffee.com/fexingo

Episode 86 of Linux Server Admin with Fexingo dives into disk quotas on Linux servers. Lucas and Luna walk through setting up user and group quotas with the classic quota tools, configuring quota on an ext4 filesystem, using repquota and warnquota for monitoring and enforcement, and best practices for multi-user environments. They discuss real-world tradeoffs like performance overhead, NFS compatibility, and when to use filesystem-level quotas vs. container-level limits. Perfect for sysadmins managing shared server storage.

#LinuxServerAdmin #DiskQuotas #Sysadmin #Bash #ServerEngineering #Technology #Linux #Ext4 #QuotaTools #Repquota #Warnquota #StorageManagement #MultiUserServer #Fexingo #FexingoBusiness #Podcast #LinuxSysadmin #ServerStorage

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into systemd-journald as a centralized logging solution. They explain how to configure journald to forward logs to a remote server using systemd-journal-upload, enabling secure, encrypted log aggregation across your fleet without third-party tools. The hosts walk through setting up the receiving server with systemd-journal-remote, configuring TLS certificates with Let's Encrypt, and practical tips for log retention and storage. They also discuss common pitfalls like certificate renewal and network reliability. By the end, you'll know how to build a lightweight, built-in central logging system using only systemd components.

#Linux #Systemd #Journald #CentralizedLogging #SystemdJournalUpload #SystemdJournalRemote #LogManagement #ServerAdministration #Sysadmin #DevOps #TechPodcast #Technology #FexingoBusiness #BusinessPodcast #LogForwarding #TLS #LetEncrypt #Infrastructure

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into logrotate, the indispensable tool for managing server log files. They explain why log rotation prevents disk-full disasters, break down the configuration syntax with a real-world example from an Nginx server handling 50,000 requests per day, and show how to set compression, retention policies, and post-rotation scripts. Lucas shares a tip for testing logrotate with debug mode, and Luna warns about the pitfalls of missing copytruncate for busy services. Whether you're a sysadmin managing hundreds of servers or just running a single Raspberry Pi, this episode gives you a concrete, repeatable method to keep logs under control without losing historical data.

#Logrotate #LinuxServerAdmin #Sysadmin #LogManagement #Nginx #ServerOps #Bash #Linux #TechPodcast #FexingoBusiness #BusinessPodcast #ServerEngineering #LogRotation #Compression #DevOps #Automation #DiskManagement #SystemAdministration

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into Tailscale as a modern solution for secure remote access to Linux servers without traditional VPN complexity. They walk through setup on Ubuntu 24.04, discuss subnet routing for reaching devices behind a server, and compare Tailscale's approach to WireGuard and OpenVPN. The conversation covers authentication via SSO providers, ACLs for access control, and practical considerations like exit nodes and MagicDNS. By the end, you'll understand how Tailscale simplifies zero-trust networking for sysadmins. The episode also includes a brief, sincere moment about listener support keeping the show ad-free.

#Tailscale #WireGuard #OpenVPN #LinuxServer #RemoteAccess #VPN #ZeroTrust #Networking #Ubuntu #SSO #ACL #Sysadmin #MagicDNS #SubnetRouting #ExitNode #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Learn how to use Falco, the open-source runtime security tool, to detect threats on Linux servers in real time. Lucas and Luna walk through installing Falco, writing custom rules, and interpreting alerts to catch suspicious behavior like reverse shells or privilege escalation. They use a concrete example of a compromised web server to show how Falco's output can be integrated with systemd journal for centralized alerting. This episode is for sysadmins who want proactive security monitoring without a full SIEM. Perfect for anyone running Linux in production and wanting to detect intrusions faster.

#Falco #LinuxSecurity #RuntimeSecurity #ThreatDetection #Sysadmin #ServerSecurity #OpenSource #CNCF #Containers #IntrusionDetection #LinuxServer #InformationSecurity #DevSecOps #SecurityMonitoring #Technology #FexingoBusiness #BusinessPodcast #Podcast

Keep every episode free: buymeacoffee.com/fexingo

In episode 81 of Linux Server Admin with Fexingo, Lucas and Luna explore Logwatch, the lightweight log analysis tool that sends daily server reports via email. They walk through installation, basic configuration, service-specific filtering for SSH, Apache, and fail2ban, and tuning report verbosity. Lucas shares a real-world example where Logwatch caught a brute-force attack on a staging server before it escalated. They also discuss alternatives like lnav and Graylog, and when Logwatch makes sense versus a full SIEM. Perfect for sysadmins who want a quick daily health check without deploying heavy monitoring.

#Logwatch #LinuxServer #Sysadmin #LogAnalysis #ServerMonitoring #DailyReport #Security #BruteForce #OpenSource #Bash #Technology #Podcast #FexingoBusiness #BusinessPodcast #ServerAdmin #Linux #FailedSSH #LogManagement

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna dive into HashiCorp Vault for Linux server secret management. They cover initializing and unsealing Vault, setting up a secret backend for database credentials, and integrating with applications via the Vault Agent. Using a concrete example of rotating PostgreSQL credentials, they explain why Vault is essential for modern server security — especially in multi-server environments. They also touch on the trade-offs versus simpler tools like encrypted config files, and share a practical workflow for dynamic secrets. Whether you're a sysadmin looking to eliminate hardcoded credentials or just exploring secret management, this episode gives you a clear, actionable starting point.

#HashicorpVault #LinuxServerAdmin #DevOps #SRE #SecretsManagement #CyberSecurity #PostgreSQL #SystemAdministration #Technology #ServerSecurity #DynamicSecrets #InfrastructureAsCode #VaultAgent #DatabaseCredentials #Linux #Sysadmin #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 79 of Linux Server Admin with Fexingo digs into network bonding — combining multiple physical NICs into a single logical interface for failover and increased throughput. Lucas and Luna walk through the main bonding modes: active-backup for simple redundancy, balance-xor and 802.3ad for load balancing, and balance-alb for adaptive load balancing without switch support. They explain how to configure bonding using the /etc/network/interfaces file and the ifenslave package, verify the bond status via /proc/net/bonding/bond0, and test failover by unplugging cables. The episode covers real-world use cases including critical server uplinks, virtualization hosts, and storage networks. Specific commands and config examples are given throughout. By the end, listeners will know how to set up a bonded interface that survives a NIC or cable failure without dropping connections.

#LinuxServerAdmin #FexingoBusiness #BusinessPodcast #Sysadmin #ServerEngineering #Bash #NetworkBonding #NICTeaming #LinuxNetworking #ActiveBackup #8023ad #LACP #LoadBalancing #Failover #ifenslave #UbuntuServer #RedHatEnterpriseLinux #DataCenter

Keep every episode free: buymeacoffee.com/fexingo

Episode 78 of Linux Server Admin with Fexingo dives into VLAN tagging on Linux servers using systemd-networkd. Lucas and Luna walk through a real-world scenario: a multi-tenant web host needing to isolate customer traffic without buying new hardware. They explain how to configure 802.1Q VLANs on a single physical interface, assign IPs, and verify connectivity — all with systemd-networkd's clean .network and .netdev files. No more legacy ifcfg scripts or manual vconfig commands. By the end, you'll know how to carve a single NIC into multiple logical networks in under ten minutes.

#Linux #Sysadmin #SystemdNetworkd #VLAN #8021Q #ServerAdmin #Networking #Bash #MultiTenant #NetworkIsolation #Technology #FexingoBusiness #BusinessPodcast #LinuxServer #Systemd #NetworkConfig #DevOps #ITInfrastructure

Keep every episode free: buymeacoffee.com/fexingo