Dropped calls, found in the firewall logs
The network side of a municipal VoIP rollout: a dedicated voice VLAN, WatchGuard rules, and a fault found in the logs.
Hiding my services behind a port knock planned
How I took RDP and SSH off the internet and hid them behind a knock of invalid TCP flags, and used it as my real remote access.
Keeping the streaming, fixing the network
Hunted a mystery slowdown to streaming eating the bandwidth, then fixed it with QoS instead of more pipe.
guide
Phase 3: fix the leaks
guide
Phase 5: traffic shaping
Proving WEP wasn't protecting us
Rather than just flag it, I proved our WEP wireless was crackable to make the case for replacing it.
Teaching networking by building it
A three-lab progression I built on my own evenings so students learned networking by building it.
projects
The NetState Lab Network planned
A firewall between a LAN and a DMZ, on one PC. Five phases: see what crosses the wire, a legacy port knock, fix the leaks, modern remote access, traffic shaping.
containers
The NetState Lab Network (Docker Compose) planned
The whole lab in one Compose file: the network (a firewall, two clients and a server) by default, and the AI agents from agent-lab and agent-workflow when you ask for them.
documents
The NetState Lab Network: design and runbook planned
The lab's topology, firewall policy, knock design and how to run every exercise, with the elevated permissions it needs and why.