Firewallemplois

Je souhaite établir une collaboration sur la durée avec un(e) spécialiste capable de renforcer la sécurité de nos réseaux d’entreprise, de nos environnements cloud et de notre parc IoT. Objectifs prioritaires • Mettre en place une protection active contre les intrusions (IDS/IPS, segmentation, règles firewall affinées). • Sécuriser les données en transit et au repos : chiffrement, gestion des clés, politiques de sauvegarde vérifiables. • Structurer la gestion des accès : Zero-Trust, MFA, revues de droits périodiques. Défis actuels – Menaces internes : droits excessifs, shadow IT, comportement à risque. – Attaques externes : ...

...(WEB) for: , , , (optional) IP2 (WireGuard) 2) VPS Debian 12 (Docker) — 3 IP Best Practice Use the 3 IPs like this: IP1 = WEB/public: only ports 80/443 IP2 = VPN/WireGuard: only 51820/UDP IP3 = ADMIN/private: SSH + admin panels VPN-only (recommended) Tasks: System hardening + firewall (UFW strict rules) Install/configure WireGuard server on VPS Tunnel: (VPS , home gateway ) Install/configure Nginx Proxy Manager (Docker): Bind 80/443 to IP1 Bind Admin UI (81) to IP3 (VPN-only) 3) Home Side: TrueNAS + WG-Gateway VM Create a small Linux VM (Debian/Ubuntu) on TrueNAS as WG-Gateway Configure WireGuard client + routing/NAT so VPS can reach my

...(WEB) for: , , , (optional) IP2 (WireGuard) 2) VPS Debian 12 (Docker) — 3 IP Best Practice Use the 3 IPs like this: IP1 = WEB/public: only ports 80/443 IP2 = VPN/WireGuard: only 51820/UDP IP3 = ADMIN/private: SSH + admin panels VPN-only (recommended) Tasks: System hardening + firewall (UFW strict rules) Install/configure WireGuard server on VPS Tunnel: (VPS , home gateway ) Install/configure Nginx Proxy Manager (Docker): Bind 80/443 to IP1 Bind Admin UI (81) to IP3 (VPN-only) 3) Home Side: TrueNAS + WG-Gateway VM Create a small Linux VM (Debian/Ubuntu) on TrueNAS as WG-Gateway Configure WireGuard client + routing/NAT so VPS can reach my

...(WEB) for: , , , (optional) → IP2 (WireGuard) 2) VPS Debian 12 (Docker) — 3 IP Best Practice Use the 3 IPs like this: IP1 = WEB/public: only ports 80/443 IP2 = VPN/WireGuard: only 51820/UDP IP3 = ADMIN/private: SSH + admin panels VPN-only (recommended) Tasks: System hardening + firewall (UFW strict rules) Install/configure WireGuard server on VPS Tunnel: (VPS , home gateway ) Install/configure Nginx Proxy Manager (Docker): Bind 80/443 to IP1 Bind Admin UI (81) to IP3 (VPN-only) 3) Home Side: TrueNAS + WG-Gateway VM Create a small Linux VM (Debian/Ubuntu) on TrueNAS as WG-Gateway Configure WireGuard client + routing/NAT so VPS can reach my

...(NVENC) - 4K HEVC 10bit support 8. VIRTUAL MACHINES (OPTIONAL) Enable KVM Use pool “nvme_vm” for VM disks Create Windows, Debian, Ubuntu VMs as needed 9. SNAPSHOTS & BACKUP Enable automatic ZFS snapshots: - Frequency: hourly or daily - Retention: 1–2 weeks Enable replication or external USB backup 10. SECURITY HARDENING - Enable 2FA - Disable root SSH login - Use SSH keys - Block WAN access in firewall - Local network access only 11. CLOUDFLARE SECURE ACCESS (NO OPEN PORTS) Requirements: - Domain name (ANY domain) - Cloudflare account (free) A. Add domain to Cloudflare B. Open Cloudflare → Zero Trust → Tunnels → Create Tunnel C. Install cloudflared on TrueNAS: curl -L -o sudo dpkg -i

Le budget maximum pour ce projet est fixé à 40€. Toute proposition > à 40€ sera automatiquement supprimée sans être lue. Temps estimé pour le projet : 1 à 2 heures pour une personne qui connait proxmox. Proxmox est déjà installé et opérationnel sur les 3 machines donc il ne vous reste que paramétrer le réseau et le firewall. Projet demandé : Configurer un cluster Proxmox composé de 3 nodes (« proxmox1 », « proxmox2 » et « proxmox3 ») sur le cloud Hetzner, permettant une communication optimale entre les nodes, les conteneurs (CTs) et les machines virtuelles (VMs). Cahier des charges voir

...il est impératif de parler parfaitement le français Missions : Au quotidien, épaulé par notre équipe technique terrain, vous participez à la maintenance des infrastructures de nos clients, au support utilisateurs et à la mise en œuvre des projets informatiques de nos clients PME. Vous intervenez à distance pour nos clients et prenez en charge : • Administration des serveurs, postes de travail, firewall, sauvegardes, switchs… • Administration Microsoft 365 & Microsoft Intune • Assistance utilisateurs par téléphone, mail et prise en main à distance, • Résolution des tickets d'incidents niveau 1 et 2 • Conseil et accompagnement des clients, Vous assurez...

...configuration des environnements (Démo, recette, production) Mise en place de supervision / alertes / sauvegardes Résolution des incidents en production Mise en place des différents niveau de sécurité Outils de supervision Test de charge et analyse de performance Le candidat doit bien maîtriser les outils suivants : Centos Apache Tomcat MySql Sauvegardes Supervision/Alertes En optionnel : Jmeter Firewall / iptable Blockchain et application décentralisées Conditions requises : Une expérience de plus de 4 ans dans une équipe d'infrastructure/exploitation informatique. Un esprit professionnel et sérieux Capacité d’anticipation et de prévention des problèmes pour assurer la ...

Déploiement un serveur de messagerie avec Bluemind Sécurisation complète du serveur (firewall, certbot pour le ssl, dkim, spf, etc...)

je veut mettre 2 serveur pbx derriere 2 routeur mikrotik ccr1009 avec vrrp. je veut configurer les pbx avec des ip public avec le mikrotik comme gateway pour permettre de filtrer et bloquer avec le firewall. je veut mettre les mikrotik en mode transparent, comme on peut faire avec les firewall sonicwall. voici le plan. I want to put 2 pbx server behind 2 mikrotik ccr1009 router with vrrp. I want to configure the pbx with public ip with the mikrotik as a gateway to allow filtering and blocking with the firewall. I want to put the mikrotiks in transparent mode, as we can do with sonicwall firewalls. here is the plan.

Bonjour, Nous sommes un petit serveur FIVEM, et nous subissons d'énormes attaques DDOS. J'ai commencé par bloquer les pays étrangers, bloquer les requêtes en fonction du nombre etc, mais ce n'est pas suffisant (via iptables). Je recherche quelqu'un en capacité de bloquer ces attaques sur le long terme. Notre serveur est chez OVH, et c'est principalement du DDOS UDP. Merci

Bonjour, Suite à une modification inconnue, les ports 80 et 443 du serveur sont fermés. Probablement par le Firewall ou iptable. Nous avons besoin d'un technicien pour rouvrir les ports et vérifier le bon fonctionnement de tous les services web Apache, etc.

Bonjour, Actuellement mon entreprise commercialise des solutions pour les TPE / PME. Je souhaite mettre en place un site Internet pour la revente de l’ensemble de mes solutions. Je souhaite mettre en place un portail pour revendeur. Les solutions : - CRM / Devis / Facturation / POS : Dolibarr et Odoo - Drive : Nextcloud - Appliances configurables en fonction de critères : o FireWall o IPBX o Sauvegarde o Serveur de Fichier o PC portable + PackOffice + Antivirus + Anti-Spam - Nom de domaines - Site Internet - Messagerie / Agendas - Anti-virus / anti-Spam / Anti-Ransomware - Ticket de service - Maintenance - Support - Formation Je souhaite pouvoir vendre et supporter l’ensemble des solutions ci-dessous sur mon site Web. Je souhaite u...

Installation et configuration du firewall opnsense sur un machine virtuelle

JOB LE DOMAINE DE RESTAURATION FIXE DOMAIN RESTORE 5, PROBLEME RESTOR domaine, probleme Domaine https LE SERVEUR SECURITE FIXE VPS CPANELWHM Services de sécurité: Iptables Configurations de pare-feu Installer et configurer CSF Firewall Installer et configurer Mod_Security Installer et configurer Rootkit / Virus. Installez et configurez l'analyse du journal de détection de force brute et la rotation du journal Secure / tmp partition et d'autres binaires sur le serveur. Virus et Malware Scanner Shell Protection contre les Bombes Fourrure FTP Renforcer SMTP Renforcer la Sécurité OpenSSH. !!!!!!!!job maxi me paye 30$ !!!!!!!!!!!!!!

...logiciels nécessaires o Les disques nécessaires et leurs caractéristiques (volume, performances minimales, redondance, …) o Dimensionnement des liens réseau nécessaires pour répondre aux engagements de performance (description des flux de..vers.., protocole, configuration des ports particulière, ..) o Matériels permettant la sécurisation de l’infrastructure et des flux (+ description), par ex firewall o La description des bases de données attendues, et les modèles de données nécessaires (logique et physique) o Préconisation matérielle en lien avec les exigences deperformance globale de la solution Les manuels d’exploitation liés à ces env...

Sur un Fortigate 300A en production, vous devez créer une règle de routage NAT. Il faut utiliser l'adresse IPv4 public déjà configurer et lui ajouter un port derrière, afin de rediriger le trafic spécifique (adresse:port) vers une adresse ip local de notre réseau. En télé-travail uniquement, et via Teamviewer avec enregistrement de la solution, pour nos archives. Aucun mot de passe du firewall / réseau ne sera fournis. Merci de prouver de vos compétences.

Mission Gestion des firewall hardware Gestion des software Gestion des antivirus et VPN Profil Vous devrez être capable de gérer des problématiques aussi bien techniques que fonctionnelles. Excellente capacité à communiquer, Etes force de proposition, Autonome, Forte capacité d'adaptation.

Domaine Audio Visuel : * ... * Diagnostiquer, Installer et configurer des matériels micro-informatiques (SCSI, RID). * Diagnostiquer, Installer et configurer des logiciels (MS-DOS, Ghost, Windows, VMware, VirtualPc, Antivirus, etc.). * Assister les utilisateurs bureautiques (Works, Word, Excel, PowerPoint, Publisher, etc.) * Mettre en œuvre une infrastructure de réseau, (TCP/IP, Hub, Switch, Routeur, Nat, Dmz, Firewall, VPN) * Diagnostiquer un dysfonctionnement, sécuriser un réseau et les données informatiques (NTbackup, Magic) * Traiter un appel et résoudre un problème à distance (VNC, PcAnywhere, TeamViewer, NTR, FileZilla) * Administration systems Windows XP Pro, Vista, Seven Serveurs Windows 2003...

Veuillez vous inscrire ou vous connecter pour voir les détails.

Nous avons besoin d'une personne qui pourrait intervenir sur nos serveurs situés en région Parisienne le weekend. La mission : Configuration du routeur Cisco et du firewall. Mise en place d'un VPN. Synchronisation de 2 NAS Overland Storage (possibilité d'être accompagné du SAV)

Nous sommes éditeur d'une solution SaaS utilisée par des grands comptes. L'objet de cette 1ère mission vise à améliorer la sécurité de notre environnement avec : - restriction de l'accès à l'environnement de développement via un firewall installé sur une Debian - restriction de l'accès à l'environnement de production via un firewall installé sur une Debian - restriction de l'accès à un serveur MySQL et à la page d’administration du serveur Tomcat Une seconde mission sera à évaluer à l'issue de cette 1ère mission pour réaliser divers tâches d'administration...

SISAS (Sécurité d'accès aux réseaux) SENSS (Firewall Appliance & IOS) SIMOS (VPN,VPN SSL sur Firewall et Routeur) SITCS (Nouvelle génération de Firewall & IPS) SESA (Email Security Gateway) SWSA(Web Security Gateway) ISO 27001 Lead Implementer FORMATION : DATA CENTER DCICT (Technologie de Data Center) DCICN FORMATION : MANAGEMENT RESEAUX CiscoWorks LMS

SISAS (Sécurité d'accès aux réseaux) SENSS (Firewall Appliance & IOS) SIMOS (VPN,VPN SSL sur Firewall et Routeur) SITCS (Nouvelle génération de Firewall & IPS) SESA (Email Security Gateway) SWSA(Web Security Gateway) ISO 27001 Lead Implementer FORMATION : DATA CENTER DCICT (Technologie de Data Center) DCICN FORMATION : MANAGEMENT RESEAUX CiscoWorks LMS

SISAS (Sécurité d'accès aux réseaux) SENSS (Firewall Appliance & IOS) SIMOS (VPN,VPN SSL sur Firewall et Routeur) SITCS (Nouvelle génération de Firewall & IPS) SESA (Email Security Gateway) SWSA(Web Security Gateway) ISO 27001 Lead Implementer FORMATION : DATA CENTER DCICT (Technologie de Data Center) DCICN FORMATION : MANAGEMENT RESEAUX CiscoWorks LMS

Linux Server Configuration - mail - firewall - openvpn - IPS - Apache Server

...necesarios (webmail, calendarios, contactos, ActiveSync si corresponde) y crear un dominio de prueba para verificar el envío y la recepción. • Aplicar una configuración básica —puertos, certificados TLS, ajustes de DNS como SPF, DKIM y DMARC— para que el correo se entregue sin problemas de reputación. • Endurecer la instalación con foco específico en la seguridad del servidor de correo: reglas de firewall acordes, protección frente a fuerza bruta, filtros antivirus/antimalware y cualquier otra medida que consideres imprescindible para un entorno productivo. Entrego acceso root por SSH y, al finalizar, necesito un breve documento con los comandos ejecutados y los ficheros modificados para poder reprod...

You are a senior cybersecurity + machine learning engineer. Build a practical, runnable, end-to-end Transformer-based Web Application Firewall (AI-WAF) prototype suitable for Smart India Hackathon / ISRO SIH demonstration. The system must implement the full pipeline: Log Ingestion → Parsing → Normalization → Tokenization → Transformer Training → Multi-Class Attack Classification → Anomaly Scoring → Real-Time Non-Blocking Inference → Alerting & Logging → Incremental Fine-Tuning ======================================== 1. CORE FUNCTIONAL REQUIREMENTS ======================================== A. Multi-Class Attack Detection The Transformer model must classify HTTP requests into: - BENIGN - SQL_INJECTION - XSS - COMMAND_INJECTION - ...

...already sign firmware; the server simply has to enforce signature checking before rollout. • fail2ban on the host should block any source IP after three bad login or certificate failures (SSH, Mosquitto, and Mender’s API). • Everything lives on the same VPS yet stays logically isolated—Docker or systemd-managed services are fine as long as configuration remains readable and easy to back up. • Firewall rules (UFW or iptables) expose only the essentials: 8883 for MQTT, 443 for Mender/HTTPS, and 22 for SSH. • I want clean deployment scripts or a single so I can rebuild the environment in minutes. Acceptance checks 1. A shell script or compose stack that fully provisions Mosquitto and Mender on a clean Ubuntu image. 2. Successful TLS publ...

...tested on my MacBook • API access enabled for future AI integration 4. DOCKER INFRASTRUCTURE • Docker Engine + Compose + Portainer • Clean project structure, isolated networks per service • Watchtower, health checks, log rotation • Well-commented Compose files, extensible for AI containers 5. NETWORKING & VPN • Tailscale mesh networking • WireGuard VPN (Dockerized) • Connect to my cloud server • Firewall hardening (Docker-aware) • Wake-on-LAN if supported 6. 5 DOMAINS • Dockerized reverse proxy (Nginx Proxy Manager/Traefik/Caddy) • Auto SSL, all 5 domains routed • Easy to extend for future AI endpoints 7. KALI LINUX • Kali metapackages on host + Kali Docker containers • No conflicts with production...

...is in the incident report I will share once we start). At the moment I have zero hardening in place—no firewall rules, no SSL, nothing—so the attacker clearly found an easy way in. I do have a recent full backup, so you can work safely and roll back if needed. Your mission is to identify the entry point, remove any malicious code or files, close the vulnerability, and leave the server in a state that convinces the host to lift the ban. You are welcome to use tools such as fail2ban, UFW/iptables, ClamAV, rkhunter, ModSecurity, or any other utilities you normally rely on. Deliverables • Clean, uncompromised web root and services reinstated • Detailed hardening steps applied (firewall, SSL/TLS, updated packages, secure SSH settings, etc.) &bull...

I need Grafana and Prometheus installed and fully configured from scratch, then Prometheus (with the usual Node Exporter) deployed on my remote Linux server so it can scrape the host and forward data. Once data is flowing, I want a clean, responsive Grafana dashboard that shows at a glance: CPU load, memory usage, disk space, inbound/outbound network traffic and total server...data collection and target health in Prometheus • Grafana dashboard (modern layout, dark theme) visualising the five core metrics listed above • Document Full setup so If need to setup again or add other remote servers I can and add extra panels or data sources later Everything should be set up using best practices—systemd services, persistent storage paths, clear job labels, and minimal fi...

...need Cloudflare configured so my site automatically blocks malicious or nuisance traffic rather than legitimate visitors. The immediate headache is spam-driven form submissions and crawlers hammering the same pages hundreds of times a minute, so the goal is to stop those two behaviours without slowing genuine users. I already have a Cloudflare account in place; what I’m missing are the right firewall rules, bot management settings, and rate-limiting thresholds. You’ll review my current WAF/Bot Management setup, identify the loopholes that allow automated form posts and excessive page requests, then implement Cloudflare features such as Bot Fight Mode, custom WAF rules, Challenge or Turnstile for forms, and sensible request limits. Deliverables • Documented ...

...explained in plain English Requirements and experience You must have proven experience with most of the following: GoHighLevel API ServiceM8 API Webhooks, scheduled jobs, and robust integration patterns VPS deployment and basic DevOps Logging, monitoring, and alerting If you also have experience with Zapier, Make, or GoHighLevel workflows, include that in your proposal. Security requirements Firewall and SSH hardening Secrets management approach (no keys stored in plain text) Least privilege access where possible Costs and ongoing costs (must be included) Your proposal must clearly separate: A One off setup cost (fixed price) Includes server provisioning, middleware deployment, configuration, logging and monitoring setup, testing support, and documentation handover. B O...

...(Nginx is preferred, but Apache is acceptable). 2. Deployment: Upload the production build files to the server. 3. Configuration: Configure the web server to serve the static files and handle Client-Side Routing (ensure refreshing pages doesn't result in 404 errors). 4. Domain & SSL: Point my domain to the VPS and install a free SSL Certificate (Let's Encrypt/Certbot) for HTTPS. 5. Security: Basic firewall setup (UFW) to secure the server. Deliverables: • The website must be live, secure (HTTPS), and fully functional on my domain. • A brief document or text file explaining where the files are located on the server and the command to restart the web server if needed. Required Skills: • Linux System Administration (Ubuntu/Debian) • Web Server Con...

We are seeking an experienced freelance developer (or small team) to build a cross-platform application using AWS Amplify that integrates a frontend interface with a backend AI system. The app will feature real-time network visualization, an LLM-powered...network traffic. Three traffic levels: low, medium, high, controlled by the backend and varying over time (these three levels is an input parameter by the backend). Visualization of cyber attacks using a red bug approaching devices, invoked by the backend. Backend-controlled variables for different cyber-attack flows, similar to traffic patterns (low, medium, high). Bugs must hit a blue shield/firewall symbol and disappear before reaching devices. Reference visualization example:

I’m looking for an online tutor based in India who can guide me through intermediate-level administration of both Linux and Windows Server environments. On the Linux side I want practical, session-based coaching in system administration, security and firewall management, and shell scripting. For Windows Server, the focus should be Active Directory management, server configuration and deployment, plus security and patch management. Each topic needs to be demonstrated live, with time for me to replicate the steps on my own lab machines during or immediately after the call. We can meet on Zoom or Google Meet for 2–3 hours a week, preferably evenings or weekends. Deliverables • A structured lesson plan that maps out the sequence of sessions • Recordings ...

Description I’m hiring an experienced Open Tibia developer to deploy a modern 13+/14.12 stack using Canary (OTBR) and deliver a complete working foundation: server + client + website accounts, with proper backups and rollback. This is an assets-based 13+/14+ project (not 8.6 / legacy). 1) Server (Ubuntu 22.04 VPS) Install/configure Canary (OTBR 14.12+) MariaDB setup Proper config + ports + firewall systemd services with auto-restart Confirm clean restarts and stability Start with a standard map base (I’ll move to a custom map later) 2) Client (Windows) Compile OTClient Redemption (Windows) Preconfigured connection (no IP editing) Basic branding (name/logo) Package as downloadable ZIP Auto-update setup for client files/modules/assets (versioned) 3) Website...

Dispongo de un servidor anfitrión y necesito que quede operativa una máquina virtual con Windows Server 2016. Den...Alcance de trabajo 1. Crear y configurar la VM en Windows Server 2016 (Hyper-V u otra tecnología disponible en el host). 2. acompañamiento para que la APP funcione dentro de la VM. 3. Generar el paquete de instalación/exportación. 4. Publicar el paquete en el dominio mediante GPO, SCCM o el mecanismo que sugieras para que cada equipo lo instale con un clic. 5. Configurar las reglas de firewall, DSN o cadena de conexión que requiera la base de datos. 6. Entregar un breve documento con pasos, credenciales de servicio y pruebas de funcionamiento. Acepto propuestas que incluyan mejores prácticas de Active...

...retention/cleanup. Model routing (cheap / balanced / premium) + spend caps (daily/weekly/monthly). Integrations: OpenRouter + optional Syntx for cost-efficient content generation. Powerful models with minimal false refusals for legitimate business tasks. Security Infra/accounts/keys owned by me. Temporary developer access only; full revocation after handover. SSH keys only, baseline hardening (firewall/fail2ban), secure secret handling. Full delivery package: codebase, docker-compose, runbook, backup/restore, access map. Deliverables Working MVP + demo. Repo + deployment/update instructions. Security/operations documentation. 30/60/90-day improvement roadmap. Proposal Requirements Please send a non-template proposal with: your architecture (specifically for OpenCl...

...sysctl tweaks, AppArmor (or comparable MAC), DNS proxy with encrypted queries, and a firewall configured to best practice levels. I did not select a specific firewall in the form, so feel free to recommend whether UFW, iptables or firewalld is the right fit for an always-on laptop that roams between trusted and untrusted networks. Deliverables I will sign off on: • Debian (stable or testing – your call with rationale) installed and fully updated • Libreboot or equivalent coreboot/firmware hardening applied, with clear notes if any T480 limitations arise • Firefox and Brave installed and hardened (add-ons, about:config, Brave Shields settings documented) • Encrypted DNS proxy running system-wide • Firewall ruleset active on all...

...una migración limpia, sin pérdida de datos ni de posicionamiento, y una configuración que garantice seguridad y buen rendimiento desde el primer día. Alcance principal • Clonar la instalación actual y moverla a una instancia Vultr que crearé (o que puedes recomendarme). • Instalar y ajustar el stack necesario (Nginx o Apache, PHP, MariaDB/MySQL, Let’s Encrypt SSL). • Configurar seguridad y firewall (UFW/iptables, Fail2ban o similar) para proteger el servidor y el panel de WordPress. • Optimizar velocidad: caché a nivel de servidor, compresión, ajustes de base de datos y recomendaciones de CDN si aplica. • Pruebas finales para confirmar que todo funciona (URL, enlaces permanentes, plugi...

I’m seeing legitimate human visitors locked out of my blog articles because some of my current Cloudflare firewall rules are too aggressive. While the bad-bot and scraper filters must remain in force, I need every other rule reviewed, trimmed, or rewritten so only real threats are challenged or blocked. Here’s what I need from you: • Audit all existing Cloudflare WAF, custom firewall, rate-limiting, and bot-management rules. • Identify why human traffic is getting blocked, especially on blog article URLs. • Propose and implement precise rule adjustments or new rules that restore access for real users without weakening security. • Preserve—or improve—protections that block or challenge excluded/bad bots responsible for high se...

...Could not connect to server Status: Waiting to retry... Credentials are correct, so the problem is likely buried in network settings, passive vs. active mode, firewall or port-forwarding issues. I cant find the solution for two days it drives me crazy. I need someone with clear, hands-on FTP troubleshooting experience to pinpoint the cause, walk me through the adjustment, and leave me with a repeatable fix. Deliverables 1. Live or recorded demonstration that FileZilla successfully connects and lists the remote directories. 2. Short, step-by-step summary of the exact changes made (ports opened, mode switched, firewall rules, etc.). Acceptance criteria: FileZilla connects within the normal timeout window, shows the remote file list, and I can upload a small ...

I’m looking to embed an AI-powered tutor directly into our internal web portal so...cases showing the bot guiding a student through a sample math and language-arts problem Acceptance criteria – Answers are age-appropriate, step-by-step, and never reveal full solutions on first request – Profanity, personal data, and unsafe content are blocked or redacted – Average response time < 3 s in staging with 20 concurrent users – Code passes our security scan and runs behind our firewall with no external callbacks other than the model API If you’ve built educational chatbots before—especially ones that sit inside a corporate portal—I’d love to see a quick example. Let me know how you would tackle prompt design, moderation, an...

We need an expert Odoo + DevOps engineer to migrate our existing Odoo 18 environment from to a Quebec-based private cloud. This project involves strict compliance, hardened security, and zero-data-loss migration. What You’ll Do Provision production & staging servers in Quebec Harden Ubuntu (firewall, Fail2ban, SSH, auto security updates) Deploy Odoo 18 Enterprise with Nginx, SSL/TLS, secure headers Configure PostgreSQL (encryption, tuning) Migrate database, filestore, and ~13 modules from Ensure full functionality across Accounting, CRM, HR, Sales, Inventory, Website, Manufacturing, etc. Implement encrypted daily backups (30-day retention) Provide DR and technical documentation Support testing and final production cutover Experience working in environments aligned wit...

...plugin or a guided script that I can install for you). What I expect • Identify every malicious file or database entry • Eliminate the malware and close whatever vulnerability let it in • Submit the reconsideration request to Google and confirm the warning disappears • Supply a brief post-clean report outlining what was found, what was fixed, and any hardening steps I should keep in place (firewall, auto-updates, etc.) Acceptance criteria • Site loads normally with no Safe Browsing or similar security alerts • Admin area functions without injected redirects or code • Your final report lists the cleaned items and recommended ongoing security measures If additional temporary dashboard-level access or plugin installs are required, ...

...IP allowlisting with proper access controls • Zero-trust network access implementation • Deliverable: Secure access solution with documented procedures 6. Open Ports Security Audit • Task Type: Network security assessment and hardening • Requirement: Review and secure network port exposure • Process: • Comprehensive port scan and service audit • Close unnecessary open ports • Implement proper firewall rules and security group configurations • Document justified open ports with security rationale Required Qualifications Essential Experience: • in web application security and DevOps/infrastructure security • Proven track record with penetration testing remediation projects • Strong understanding of OWASP security principle...

...IP allowlisting with proper access controls • Zero-trust network access implementation • Deliverable: Secure access solution with documented procedures 6. Open Ports Security Audit • Task Type: Network security assessment and hardening • Requirement: Review and secure network port exposure • Process: • Comprehensive port scan and service audit • Close unnecessary open ports • Implement proper firewall rules and security group configurations • Document justified open ports with security rationale Required Qualifications Essential Experience: • in web application security and DevOps/infrastructure security • Proven track record with penetration testing remediation projects • Strong understanding of OWASP security principle...

...long as the result is stable, efficient, and well documented. Once everything is set up, my ASIC miners should be able to connect via Stratum and begin hashing without issues. The pool must fully support SHA-256 mining in both solo and merged modes and expose a standard Stratum interface compatible with common ASIC miners. DDoS protection should be built directly into the setup, whether through firewall rules, reverse proxies, rate limiting, or another proven method you prefer. The project should also include a clean and simple web dashboard that displays worker statistics, pool hashrate, and payout history. An automatic payout system is required, with configurable payout thresholds. All configuration files should be clearly structured and well commented so I can easily make fut...