alienbaby

Projects · Builds · Field notes

Quiet tools for
loud networks.

VPN gateways and network tools, built in the dark and released when they work.

Browse projects Latest builds

Projects

Builds

Compiled Debian packages for projects still in progress land here first. They are test builds: expect them to change, and expect the source to follow on GitHub.

Open the package index

# download from the package index, then check and install
$ sha256sum package.deb
$ sudo apt install ./package.deb

Field notes

Check Point

NAT Architecture for Check Point Firewalls

A methodology for the long term management of large and small NAT rulebases: a decision table for where every rule goes, worked examples, proxy ARP and static NAT pairs.

Security Policy Best Practices for Check Point Firewalls

Firewall policy architecture: a consistent order for the major sections of a rulebase, with example rules for each, plus layers, review and upkeep.

About

Nearly 30 years deep in IT, most of it where systems, networks and security meet. I've engineered all three, designed the architecture for many datacenters, and mastered the services underneath, so troubleshooting is usually the short part.

Bring me a problem that crosses systems, networks and security and you won't need three people. I can design it, build it to fail gracefully, and keep it running. I can write applications too, but I'd rather build what they run on. The tools and notes here are the reusable part of that work.

Experience
Nearly 30 years
Disciplines
Systems, network and security engineering; network and security architecture
Works with
Linux and many other operating systems, BGP, DNS, authentication services, firewalls, VPNs, load balancers, VoIP, IPv4 and IPv6