Find Firewall Projects on Upwork Efficiently

My KVM VPS is already running Ubuntu and I now need a rock-solid WireGuard installation on it. I want to be certain that the tunnel comes up every time the server reboots, routes traffic correctly, and maintains full privacy. Once you finish, I also need a concise, step-by-step guide so I can reproduce the setup on future machines and quickly troubleshoot if something goes wrong.

Scope of work
• Install and configure the latest stable WireGuard on the Ubuntu VPS.
• Enable autostart, IPv4/IPv6 forwarding, and basic firewall rules so the interface survives kernel upgrades and reboots.
• Supply at least one working client profile (wg-quick format) that I can import into a desktop or mobile device and connect immediately.
• Produce a short document covering: prerequisites, each command you ran with a brief explanation, how to add additional peers, and a checklist of common issues with their fixes.

Acceptance criteria
The VPN must connect from my side without packet loss, leak tests must return no public IP, and a simple restart of the VPS should bring WireGuard back up automatically. also I need instruction how to install by myself for next time if I need for other servers.
Once those checks pass and your documentation is clear, the job is done.

Skills: System Admin, Linux, Troubleshooting, VPS, Ubuntu, Documentation, Network Security, VPN, System Administration

The primary objective of my project is to fix CVE-2024-3661. Said CVE was first described by Leviathan Security Group.

My project consists of two main tasks. They are:

Task #1

(a) Learn how to create a namespace in Debian GNU/Linux.

(b) Learn how to run an OpenVPN and Wireguard VPN tunnel in it.

I have a rudimentary knowledge of Debian and expect that the hired freelancer can write explanations for the relevant steps.


Task #2

Create a script that will run *automatically* after each and every reboot of Debian GNU/Linux.

Said script will create a namespace so that I can run a VPN tunnel in it.

*Automatically* because namespaces in Linux exist in memory only and are destroyed each time the device shuts down or reboots.



Skills required:

Expert-level knowledge of the following:

1. How the Linux kernel works

2. Linux networking such as routes, routing tables, DHCP, DHCP Option 121, iptables, nftables etc...



I attach a screenshot of what your script will do. Please feel free to improve it.

In addition, you may wish to view the contents of the attached text file.


Please submit your first draft of your completed work within seven (7) working days of accepting my offer. The day on which you accept my offer is Day Zero. Saturdays, Sundays and public holidays in your country are not counted towards the 7-day deadline.

I’d like WireGuard installed on my Ubuntu server together with a lightweight, browser-based GUI so I can create and revoke peers without touching the command line.
The box is a clean Ubuntu instance with full root access waiting for you.

What I need from you
• Install the latest stable WireGuard kernel module and tools
• Deploy a GUI front-end (wg-dashboard, wg-ui, or any open-source alternative you recommend)
• Generate one initial client profile and verify connectivity end-to-end
• Harden the configuration (IP-forwarding, firewall rules, service autostart)
• Provide a brief README noting every command or setting you changed

Acceptance
The tunnel must come up from my test laptop, the GUI must list peers and allow new keys to be added, and all changes should survive a reboot.

When you apply, tell me about similar WireGuard setups you have completed—your hands-on experience is the single most important factor for selection.

Skills: PHP, Linux, Ubuntu, Debian, Documentation, Network Security, Network Monitoring, System Administration

I’d like WireGuard installed on my Ubuntu server together with a lightweight, browser-based GUI so I can create and revoke peers without touching the command line.
The box is a clean Ubuntu instance with full root access waiting for you.

What I need from you
• Install the latest stable WireGuard kernel module and tools
• Deploy a GUI front-end (wg-dashboard, wg-ui, or any open-source alternative you recommend)
• Generate one initial client profile and verify connectivity end-to-end
• Harden the configuration (IP-forwarding, firewall rules, service autostart)
• Provide a brief README noting every command or setting you changed

Acceptance
The tunnel must come up from my test laptop, the GUI must list peers and allow new keys to be added, and all changes should survive a reboot.

When you apply, tell me about similar WireGuard setups you have completed—your hands-on experience is the single most important factor for selection.

Skills: PHP, Linux, Ubuntu, Debian, Documentation, Network Security, Network Monitoring, System Administration

We are looking for an experienced Elementor and 10Web developer to rebuild a fully designed consulting firm website. The design is complete; 12 pages of pixel-accurate HTML files are provided as your reference. Your job is to transcribe this design into Elementor on 10Web, not to make creative or design decisions.

This is a precision build job, not a design job.

About the Site
PiGlobal Consulting is a B2B advisory firm providing services in Finance, Cybersecurity, and Business Operations. The site serves enterprise and SMB buyers across multiple jurisdictions. Design quality, professionalism, and accuracy to the provided HTML files are non-negotiable.

What You Will Be Building
• 12 pages total; homepage, 3 service pages, 8 industry pages, contact, proposal, about, and resources
• Global header and footer built as Elementor Theme Builder templates
• 2 forms; contact form and proposal form — via WPForms with SMTP email delivery
• Full backend setup including security hardening, performance optimisation, caching, CDN, and SEO configuration

A detailed developer brief document is provided covering every requirement; design system, page build order, form specifications, plugin stack, security checklist, performance targets, and a full go-live checklist.

Technical Requirements
• Page builder: Elementor specifically — not Divi, Gutenberg, or WPBakery
• Platform: 10Web (experience with 10Web is required, not optional)
• Forms: WPForms for both contact and proposal forms
• Email delivery: WP Mail SMTP connected to Google Workspace business email — default WordPress PHP mail is not acceptable
• Security: Wordfence — firewall active, login URL changed, wp-config hardened
• SEO: Rank Math; meta descriptions are provided for every page and must be populated
• Analytics: Google Analytics 4 and Google Search Console integration
• Cookie consent: CookieYes or Termly; GDPR-compliant banner required
• Performance target: Google PageSpeed score of 85 or above on mobile and 95 or above on desktop (this is a requirement, not a guideline)

Design System
The design system is fully defined. You follow it; you do not improvise or substitute.

What We Provide
• 12 complete HTML reference files; pixel-accurate design for every page
• Full developer brief document covering every page, form, plugin, and infrastructure requirement
• All copy, meta descriptions, and page content; ready to use
• 10Web account access once hired
• Prompt responses and clear feedback throughout the project

What We Need From You
• A portfolio showing Elementor builds for professional services or B2B firms; not ecommerce or event sites
• Demonstrated experience with 10Web specifically; a live example is required
• Proven ability to rebuild an existing design from HTML reference files with pixel accuracy
• Clean, maintainable Elementor structure; no bloated plugins, no shortcuts that create technical debt
• Professional written communication in English throughout the project

Screening Questions
Proposals that do not answer all three questions will not be considered. This is not optional.

Payment structure 25% on start - 25% after header/footer approved - 25% after all pages built - 25% on full go-live

We had a previous developer complete a version of this site and was not satisfied with the result. We have since rebuilt the design from scratch in HTML. We are looking specifically for a developer who takes design accuracy seriously, reads the brief fully, and follows instructions precisely. If that describes you, this is a well-paying, well-documented, and straightforward job with everything you need provided upfront.

• 1. Have you built a site on 10Web before? Please share a live example.
• 2. Have you rebuilt an existing HTML or CSS design into Elementor before? Describe the project briefly.
• 3. What is your process for matching a pixel-accurate design in Elementor? How do you handle custom spacing, global fonts, and a defined colour system?

Fractional IT Security Engineer
Path: Fractional now — full-time as we scale

OVERVIEW
We are a growing payments company running a multi-agent AI system across a local hardware cluster (Mac Mini x3 + Nvidia DGX Spark) and a Webflow-hosted public website. We are looking for a fractional IT Security Engineer to own security across our entire operation — website, cloud infrastructure, and physical AI execution hardware.

WHAT YOU OWN
Cloudflare + Website Security

Full Cloudflare configuration and ongoing management for our domain
DNS, SSL (Full Strict), WAF, Bot Fight Mode, HTTP/3, Brotli
Cloudflare Tunnel setup and management for all local machine exposure
Cloudflare Access / Zero Trust policies
Cloudflare Workers security — API gateway hardening, rate limiting, WAF rules
Ongoing monitoring of WAF alerts, bot traffic, and anomalous patterns
Webflow DNS integration and security validation

Physical Infrastructure Security

Security architecture for a local AI execution cluster:

3x Mac Mini — Sales, Routing, and Analytics/Dashboard functions
Nvidia DGX Spark — orchestration hub (arriving shortly)


Network segmentation and access controls
Zero open inbound ports — all external traffic routes through Cloudflare Tunnel only
One machine is strictly internal only — no public exposure under any circumstance
Security review and sign-off required before DGX connects to any live data

Credential + Secret Management

Own the full credential and secret lifecycle across all platforms and devices
Cloudflare tokens, API keys, tunnel tokens, endpoint credentials
Implement and maintain a secrets management system — no hardcoded credentials anywhere
Define and enforce rotation schedules
Maintain an access inventory — who has credentials to what, at what permission level

Ongoing Monitoring + Incident Response

Security monitoring across website, cloud layer, and local machines
Alert thresholds and escalation paths
First responder for security incidents — on-call availability for urgent issues
Monthly security review summary
Proactive vulnerability assessment as infrastructure evolves


WHAT WE'RE LOOKING FOR
Required:

Cloudflare — deep working knowledge of DNS, WAF, Tunnel, Workers, and Access/Zero Trust
Experience securing local/on-premise infrastructure alongside cloud security layers
Credential and secrets management — practical experience with secrets vaults or equivalent
Comfortable working independently and owning security decisions end to end
Clear communicator — able to explain security decisions in plain language

Strongly preferred:

Experience securing AI infrastructure — local model serving, API gateway security, data boundary enforcement
Payments or fintech background
Experience building security monitoring from scratch


TO APPLY
Please share:

Relevant experience — Cloudflare, local infrastructure, and secrets management specifically
Examples of similar fractional or retainer security engagements
Your retainer structure and on-call rate
Availability and earliest start date
Any questions before you quote

I need a seasoned tester to run a full-scale penetration test on my production website. This is not a simple vulnerability scan—I’m after a true adversary-style assessment that digs into every layer of the stack. Please probe the application itself, the underlying network paths, and the database environment so I can see how each tier stands up to real-world attack techniques.

Scope
• Web application: session handling, business logic, input validation, file upload points, and any third-party integrations
• Network layer: open ports, firewall rules, lateral movement potential, VPN or cloud perimeter controls
• Database layer: authentication controls, injection resistance, privilege escalation paths, and data-at-rest exposure

Deliverables
• A concise executive summary that highlights overall risk posture
• A detailed technical report outlining each discovered vulnerability with CVSS score, proof-of-concept steps, and clear remediation guidance
• Annotated screenshots or recordings that demonstrate exploitation where relevant
• A debrief call (or written Q&A) to walk me through findings and recommended next steps
• Optional: one round of retesting after fixes to confirm closure

Tools and methodology are up to you—Burp Suite, Nmap, Metasploit, SQLmap, custom scripts—so long as your approach follows industry best practices (OWASP, PTES, NIST). All testing must respect legal boundaries; I will supply explicit written authorization before you begin.

Let me know your estimated timeline, any prerequisites you’ll need from me (credentials, staging URLs, whitelisted IPs), and a brief outline of your past work that shows you can safely execute a comprehensive penetration test across application, network, and database layers.

Skills: Web Security, Testing / QA, Software Testing, Website Testing, Usability Testing, Penetration Testing, Network Security, Risk Assessment

My Droplet on DigitalOcean hosts several client-facing sites and has been completely unreachable for the past few hours. No configuration or code changes were made before the outage, so I need an experienced Linux admin to jump in, pinpoint the cause, and bring the sites back online fast.

You’ll receive root SSH access along with any control-panel credentials you need. I’m expecting:

• Immediate investigation of networking, firewall, and service status
• Restoration of HTTP/HTTPS access to every hosted domain
• A brief rundown of what went wrong and the steps you took so I can prevent repeat incidents

The stack is a standard Nginx–PHP–MySQL setup on Ubuntu, managed through the DigitalOcean dashboard. If you’ve handled similar downtime incidents on this platform, your expertise will be invaluable. Let me know your availability and an estimated timeframe for getting everything operational again.

Skills: PHP, System Admin, Linux, Apache, MySQL, Web Hosting, Ubuntu, DigitalOcean

You will be required to take a coding and systems logic test. It will be very hard to pass using AI, unless you truly understand the subject matter and are an expert in the fields described below:

We're an AI-powered content distribution platform.

Behind the scenes, this means: distributed device infrastructure, complex proxy/VPN networks, multi-provider data scraping pipelines, real-time metric reconciliation, and dashboards that brands rely on for decision-making. When our data is wrong, our clients make bad decisions. When our infrastructure breaks, content stops publishing.

We need an engineer who treats every failure as a data integrity problem and every script as production code.

What You'll Own
Data Pipeline & Integrity

End-to-end ownership of the scrape-to-dashboard data pipeline: ingestion, normalization, reconciliation, storage, and reporting
Metric reconciliation across multiple scraping providers (Apify, custom scrapers), including mismatch resolution, deduplication, merge conflicts, and provider failover

Historical data persistence. Designing and maintaining immutable snapshot tables so all-time metrics never silently degrade

Post-matching logic: URL normalization across platforms (mobile vs desktop vs share URLs, redirects, query params), caption-based fuzzy matching as fallback, platform post ID linkage
Attribution integrity. Ensuring metrics stay tied to the correct client, agent, and account through reassignments, rotations, and account migrations

Data model health: orphan detection (posts without queue rows, queue rows without agents), relationship integrity checks, cascade handling

Building observability into every pipeline stage. Monitoring, alerting, and anomaly detection so broken pipelines never go unnoticed

API & Backend Systems

REST and/or GraphQL API design and maintenance for internal services and client-facing dashboards

Queue/worker architecture (Redis + Bull/BullMQ or equivalent). Ensuring every enqueued task completes, failures retry correctly, and partial runs are flagged

Scheduler reliability: cron jobs, task orchestration, environment parity between manual and automated runs

Database design and optimization in PostgreSQL: schema evolution, indexing strategy, query performance, migration safety
Third-party API integration management: handling rate limits, schema changes, authentication rotation, provider failover logic
Webhook and event-driven architecture for real-time data sync between services

Device Infrastructure & Automation

Automation scripts for configuring and validating a distributed fleet of Android devices at scale

Anti-detection engineering: VPN/proxy architecture, device fingerprint management, network configuration validation
Device compliance systems. Automated checks for locale, timezone, IP, carrier status, app versions, naming conventions, and security settings

Account health monitoring, ban rate analysis, and mitigation strategies

Coordination with distributed on-site hardware teams across timezones

Quality & Reliability Engineering

Every script tested against real-world device and data states before production deployment

Sandboxed rollouts. Small batch validation before fleet-wide execution

Automated regression testing for known failure modes across the full pipeline

Version pinning for app packages, OS versions, script versions, and provider schemas

CI/CD pipeline maintenance and deployment safety (canary deploys, rollback procedures)


Required Technical Skills
Core Stack

PostgreSQL: advanced (schema design, window functions, CTEs, index optimization, migration strategies, JSONB handling)
Redis: caching patterns, pub/sub, queue backends (Bull/BullMQ or similar)

Node.js and/or Python: production scripting, async patterns, error handling at scale

REST API design: versioning, authentication, rate limiting, error contracts

Git: branching strategies, code review, CI/CD integration

Data Engineering

ETL pipeline design: extraction from flaky third-party sources, transformation with validation, loading with idempotency
Data reconciliation and deduplication across multiple sources with conflicting schemas

Time-series data handling: snapshots, monotonic metric enforcement, backfill strategies

Schema evolution and migration patterns without downtime
Data quality monitoring: drift detection, anomaly alerting, completeness checks

Infrastructure & Automation

Linux systems administration: networking, DNS, firewall rules, process management

VPN/proxy architecture: debugging routing, DNS leakage, IP validation

ADB and Android device management (or equivalent embedded/IoT fleet management)

Container orchestration basics (Docker, or willingness to learn)
Monitoring stack experience (Grafana, Prometheus, Datadog, or similar)

Testing & Quality

Test-driven development: unit, integration, and end-to-end testing patterns

Edge case identification as a core engineering discipline, not an afterthought

Defensive programming: input validation, graceful degradation, fail-loud design

Load testing and performance profiling for APIs and data pipelines


You're a Strong Fit If

You have 4+ years building backend systems, data pipelines, or infrastructure automation

You've worked with physical or cloud device management at scale (BrowserStack, AWS Device Farm, Sauce Labs, mobile CI/CD, IoT fleet management)

You instinctively think about what breaks before what works
You've debugged silent data drift, the kind where numbers look plausible but are quietly wrong

You're comfortable owning a system end-to-end: from the cron job that triggers it, to the worker that processes it, to the database that stores it, to the dashboard that displays it
You write tests that cover the cases nobody thought of, not just the happy path

You communicate clearly in writing. Design docs, incident postmortems, code comments that explain "why"

Bonus Points

Experience with social media platform APIs and data quirks (TikTok, Instagram, YouTube)

Scraping infrastructure experience (Apify, Puppeteer, Playwright, headless browsers)

Experience building internal tools and admin dashboards (React preferred)

Background as an SDET, QA Platform Engineer, or Reliability Engineer

Familiarity with content distribution, influencer marketing, or creator economy platforms


How We Work

Async-first with overlap during US business hours
Direct access to the CEO. Zero management layers
Full ownership and autonomy over your domain
We ship fast but we ship right. "Works on my machine" isn't acceptable when it needs to work at scale across devices and data pipelines

Job Description:
We are a cybersecurity consulting firm seeking a hands-on Security Engineer with experience implementing NIST eight hundred-one seventy one, CMMC, or FedRAMP security controls.

This role focuses on technical implementation of security controls, not policy writing.

You will work with our consulting team to implement, configure, test, and validate security controls across cloud and enterprise environments.

Responsibilities:
• Implement NIST / CMMC security controls
• Configure security settings in Microsoft 365, Azure, AWS, or Google Cloud
• Implement MFA, access controls, logging, encryption, and system hardening
• Validate controls through testing and evidence collection
• Assist with remediation and compliance readiness

Required Skills:
• Experience with NIST eight hundred-one seventy one, CMMC Level 2, or FedRAMP controls
• Strong security engineering experience
• Microsoft 365 / Entra ID security configuration
• Azure / AWS cloud security
• Identity & Access Management
• Logging / SIEM / monitoring
• Strong communication and organizational skills

• (1) Describe a NIST or CMMC control you personally implemented and how you validated it.
• (2) What security tools or platforms have you configured? (M365, Azure, AWS, SIEM, EDR, etc.) ?
• (3) How do you collect evidence to demonstrate that a security control is implemented?

I've relocated my sippy softswitch behind the firewall NAT.

Sippy's private IP address is 172.16.16.16, and it is natted from the public IP address 102.XXX.174.XXX. I wish to configure opensips and rtpproxy to rewite SDP with the public IP instead of the private IP, but after a few minutes or every reboot, Sippy reverts to the default setup.
I’m looking for OpenSIPS expert to help me create proper configuration file for use with Sippy B2BUA.
Scenario is really simple, but configuration files that I found as examples on the net doesn’t work 100% as expected. Tried to use configuration from the official OpenSIPS book but with no success. There are issues with NAT’ed BYE requests and with ACK’s, so some modification is needed

Project Scope of Work: Magnus Strategic Advisory Web Overhaul
1. Project Overview
• Domain: www.magnus.company (Active)
• Objective: Complete brand transformation and technical overhaul. The site must transition from its current state to a high-end, C-suite advisory platform for Magnus Strategic Advisory.
• Target Audience: CEOs, Board Members, and U.S. Tech Firms, international tech firms, etc.
• Style Reference: Industrial Sophistication (McKinsey/BCG style).
2. Sitemap & Page Architecture (6 Total Pages)
The freelancer will develop the following pages using the provided executive-level copy:
1. Home Page: Hero section, Trust Bar (Partner Logos), 4 Service Cards, Global Bridge Hook, and Leadership Teaser.
2. The Global Market Bridge: Specialized page for international expansion (USA to EMEA/Asia/Europe).
3. P&L Diagnostic & Turnaround: Specialized page for business recovery and the "14-Day Audit."
4. Sales & Commercial Governance: Page focused on Miller Heiman and Strategic Account Management.
5. About Magnus (Leadership): Detailed executive profile of Founder (Talha Syed).
6. Contact & Diagnostic: Professional lead intake page.
3. The "Strategic Health Check" (Interactive Component)
The developer must implement a 2-part diagnostic questionnaire (using Typeform, Jotform, or a WordPress Multi-step form) that serves as a lead magnet.
• Conditional Logic: The form should allow users to choose their path: "Scale Globally" or "Good to Great (Optimization)."
• Key Fields: Pain points, current 12-month strategy, challenges (Scaling, Margins, Innovation), and the "2:00 AM Headache" open-text box.
• Notification: Completed forms must trigger an immediate email notification to email.
4. Design & Aesthetic Guidelines
• Color Palette: Deep Navy Blue, Charcoal Grey, Slate, and Crisp White.
• Typography: Bold, clean Sans-Serif headers (e.g., Montserrat, Inter, or Roboto).
• Imagery: Developer to source high-end, abstract industrial/financial photography. No generic "handshake" stock photos.
• Logo Treatment: All partner logos (NCR, Glory, Diebold-Nixdorf, De La Rue, Hitachi) must be rendered in grayscale/monochrome to ensure a premium, unified look.
5. Technical Requirements
• Platform: WordPress (Elementor Pro/Divi) or Webflow.
• Staging Environment: The project must be built on a development sub-domain or staging site. Do not work live on the active magnus.company domain.
• Migration: Upon approval, the freelancer is responsible for a clean migration to the live domain with 301 redirects for any existing URLs.
• Speed & SEO: Optimized for 2-second load times. All Meta-titles, Descriptions, and Alt-tags must be implemented based on provided keywords.
• Security: SSL Certificate (HTTPS) configuration and basic firewall installation.
6. Milestones & Deliverables
• Milestone 1: Mood Board & Home Page Wireframe approval.
• Milestone 2: Full site build on Staging Link (Mobile + Desktop).
• Milestone 3: Integration of the "Strategic Health Check" Questionnaire.
• Milestone 4: Final QA, Domain Migration, and Handover of credentials.
• Specify which platform (WordPress/Webflow) you recommend for this specific project and why.

I’m looking for OpenSIPS and RTPproxy expert to help me to configuration file for use with Sippy softswitch

I've relocated my sippy softswitch behind the firewall NAT.Sippy's private IP address is 172.16.16.16, and it is natted from the public IP address 102.XXX.XXX.XXX. I wish to configure opensips and rtpproxy to rewite SDP with the public IP instead of the private IP, but after a few minutes or every reboot, Sippy reverts to the default setup.

Skills: Asterisk PBX, VoIP, UNIX, Network Administration, Network Security, Network Engineering, SIP

We need a wordpress security expert who can audit our website thoroughly, some of our website buttons are redirecting to other websites.
This is our live website, we want to solve it urgently.

In the first phase we want to remove malicious code from our website and make its operations normal.

And the next phase will be about security hardening to prevent future malicious code attacks.
Write "urgent" at the top of your proposal.
We want someone who can complete the first phase urgently.

Please apply only if you can start quickly.
In your proposal we expect:

-A detailed strategy to clean our website from malicious code/attacks.

-which tools you'll use.

- how you'll satisfy us at the end that all the malicious code has been removed

We are seeking a local (Lausanne area) experienced IT consultant to configure and support a Windows PC environment for secure day-to-day business use.

The initial work includes setting up a Windows-based system with VPN-based internet access, reliable access to local network resources, remote desktop capability, and appropriate internet security measures. We are looking for someone practical and reliable who can both implement the initial setup and provide ongoing ad hoc support as needed.

This is expected to be a continuing relationship rather than a one-off task.

Scope of work
Configure a Windows PC for secure and reliable operation
Set up VPN for internet access
Ensure continued access to required local network resources
Configure remote desktop access/services
Review and strengthen internet and endpoint security settings
Advise on best practice for secure remote use, access control, and system hardening
Troubleshoot connectivity, access, and security issues as they arise
Provide ad hoc ongoing support when required

Ideal freelancer
* Strong experience with Windows administration and configuration
* Proven background in VPN setup, remote access, and local network integration
* Familiarity with Remote Desktop, firewall/security settings, endpoint protection, and secure access practices
* Able to diagnose and resolve practical system and networking issues efficiently
* Comfortable providing ongoing support on an ad hoc basis

Deliverables
* Fully configured and tested Windows PC setups VPN, local network, and remote desktop functioning correctly
* Security settings reviewed and implemented
* Simple documentation of configuration and operation
* Availability for follow-on support as needed

To apply
* Please share relevant experience with Windows systems, VPNs, secure remote access, and ongoing IT support engagements, and be located in Lausanne area

I woke up to an unexpected “your password has been changed” email from my WordPress installation. Within hours the homepage went totally blank and overall performance slowed to a crawl. I’ve already reached out to my hosting provider, but their generic scan hasn’t fixed anything, so I need an experienced WordPress security specialist to take it from here.

What I need you to do
• Perform a complete malware audit, identify every infected file, and safely remove the malicious code.
• Restore the homepage so it displays normally and make sure all other pages load without errors.
• Resolve the current slowdown by clearing any backdoors, suspicious cron jobs, or resource-hungry scripts introduced by the attack.
• Harden the site: update core, plugins, themes, adjust file permissions, and set up a reliable security plugin or firewall so this doesn’t happen again.
• Provide a short report explaining what you found, what you removed, and any preventive steps I should keep following.

Acceptance criteria
1. Homepage renders correctly on desktop and mobile.
2. Site speed returns to pre-infection levels (or better).
3. No malware flags after running a reputable scanner (Sucuri, Wordfence, or similar).
4. Backups, security plugin, and basic hardening measures are in place.

I can supply cPanel, FTP, and WordPress admin access as soon as we start. Looking forward to getting the site clean and fast again, ideally within the next 48 hours.

Skills: PHP, Web Security, WordPress, Website Management, Web Hosting, Internet Security, Web Development, Website Optimization

I’m running two Windows 11 VMs side-by-side in UTM and have already given each of them a static IPv4 address on the same bridged interface. Even so, neither machine will reply to ping requests and I can’t get a simple shared folder to appear between them.

Here’s what I need:

• Diagnose and correct the bridged-network setup inside UTM as well as any Windows network or firewall settings so VM-1 and VM-2 can ping each other reliably.
• Create a persistent shared folder (SMB is fine) that shows up in File Explorer on both machines and allows drag-and-drop file transfer in either direction without extra login prompts.
• Document the exact steps, commands, or screenshots so I can reproduce the configuration if I rebuild the VMs later.

Acceptance criteria:
1. Running “ping ” from either guest returns continuous replies.
2. A test.txt file copied into the shared folder on one VM is immediately visible and editable on the other.

We’re sticking with bridged networking—no NAT or internal network—and both guests already use fixed IPs. If guest agents, SPICE tools, or additional drivers are required, please point me to the lightest option and include the install steps.

Ready to get this wrapped up quickly; just let me know what you need to start.

Skills: System Admin, Linux, Windows Server, Network Administration, Virtual Machines, Virtualization, Documentation, Network Security

Job Description:
I am looking for a networking expert to assist with a hardware migration and optimization of my home network. I am moving from a Netgate 1100 to a Netgate 6100 and integrating new high-speed switching.
Current Environment:
Gateway: Netgate 1100 (being retired)
Switching: Existing 24-port managed switch
Segmentation: 3 existing VLANs (Home, Business, Guest) already configured.
Project Scope:
Hardware Migration: Migrate configuration from the Netgate 1100 to the Netgate 6100. Note: The 6100 has discrete (unswitched) ports; I need the LAN/Trunk ports correctly assigned to maximize the 2.5Gbps capabilities.
Switch Integration: Add a new 8-port 2.5Gbps switch to the existing 24-port switch infrastructure.
VLAN Extension: Ensure all 3 existing VLANs are correctly tagged across the new 2.5Gbps switch and the legacy 24-port switch.
Wireless Upgrade: Configure and provision 2 new WiFi Access Points (replacing old units) ensuring they broadcast the correct SSIDs mapped to the existing VLANs.
Throughput Optimization: Configure the 6100 and 2.5Gbps switch to ensure maximum throughput for streaming devices and APs.
Shared Resources: Configure Avahi/mDNS or firewall rules to allow cross-VLAN printer access from all segments while maintaining security boundaries.
Requirements:
Deep expertise in pfSense Plus and Netgate hardware.
Strong understanding of 802.1Q VLAN tagging and Inter-VLAN routing.
Experience with L3/L2 switching and mDNS/Avahi for printer discovery.
Available for a remote session to verify the configuration.

We are looking for an experienced Sipwise MR14 / Kamailio / VoIP engineer to help troubleshoot and resolve a call teardown issue on a registration trunk in our Sipwise MR14 environment.

Environment:
• Sipwise NGCP MR14
• Registration trunk to external PBX
• UDP SIP signaling
• Production telecom environment
• PBX behind external IP endpoint
• We also work with FreeSWITCH / PBX platforms, so experience there is helpful

Issue Summary:
Inbound and outbound call setup is working, but on certain calls the carrier sends a BYE, Sipwise receives it, but the PBX never receives the BYE. Sipwise eventually returns 408 Request Timeout, and later sends its own BYE which receives a 481 Unknown Dialog from the far end.

This appears to be related to one or more of the following:
• dialog routing
• Record-Route / Route handling
• Contact header or remote target issues
• registration trunk behavior
• SIP signaling path between Sipwise and PBX
• possible NAT / firewall / trunk config issue

What we need:
We need someone who can:
• review SIP traces and determine root cause
• identify whether the issue is on Sipwise, Kamailio/B2BUA behavior, registration trunk config, PBX contact handling, or network/firewall path
• recommend and implement the fix
• verify the fix with live call testing
• document what was changed

I have developed a commerical plugin for Jenkins that helps Jenkins users get a much better build, test, admin experience with Jenkins.

There are two flavors of this plugin
1. cloud: we collect all your jenkins data and host in a dedicated postgres instance
2. local: you specify your own postgres instance and data never leaves your firewall.

Ask
- You introduce Build Butler to your organization or others in your network and get it adopted / purchased.
- You will get 20% commission in annual recurring sales. Roughly
- Some of our reps have sold for $10K+ and this amount to $2000/year

I run a busy cybercafe in the United States and rely on a Cisco hardware firewall to keep hundreds of customer devices safe each day. The base configuration is already in place; what I need now is a knowledgeable U.S.-based network administrator to take a fresh, expert look at the security and firewall settings, confirm everything lines up with best practice, and point out any blind spots I may have missed.

Here’s the flow I have in mind:

• You receive a sanitized copy of the current running-config (or, if you prefer, we can schedule a live screen-share session over SSH/CLI or ASDM).
• You review access-control lists, NAT rules, VLAN separation, logging, firmware level, and any hardening features that should be enabled on a Cisco device in a public-access environment.
• If changes are required, we agree on them, you guide me through implementing them, and we verify everything together.

This is strictly about security and firewall configuration; routing, switching, and performance tuning are outside the scope unless they directly affect the firewall’s protective role.

Deliverables
1. Completion of the task remotely

I’m ready to start as soon as we can align on a time—preferably during U.S. business hours.

Skills: System Admin, Linux, Cisco, Network Administration, Internet Security, Penetration Testing, Security, Network Security, Firewall, Network Monitoring

I’m currently living behind Iran’s ever-tightening firewall. Virtually every international site or service is unreachable, yet I do have a single VPN profile that still punches through. I don’t know whether it relies on residential IP routing, a stealth transport layer, custom TLS camouflage, or something else entirely—but it works, and I need to understand why so I can keep reliable access going forward.

Here’s what I’m hoping you can do for me:
• Examine the configuration file and any accompanying certificates or keys I supply, reverse-engineer the protocol or obfuscation technique in use, and clearly document the mechanics in plain language.
• Show me how to replicate the same approach on my own infrastructure (VPS or residential tunnel—whichever the method requires). I’d like a step-by-step deployment guide plus ready-to-import config files.
• Produce working client profiles for the major platforms I rely on—Windows, Android, and ideally a generic OpenVPN/wireguard/outline or similar build so I can adapt it to other devices later.
• Validate the solution by demonstrating a stable connection from inside Iran (I can help test) with speeds comparable to the original profile and with deep-packet-inspection evasion intact.

For transparency: I’m only after uncensored, secure access to information; no illegal usage is intended. If you have prior experience defeating SNI filtering, TLS fingerprinting, or building stealth proxy chains for restricted regions, please mention it—real-world results matter more than theory here.

Deliverables will be accepted once the new configuration consistently connects from Iran for at least 48 hours under normal browsing and streaming loads and your documentation lets me rebuild it from scratch if needed.

Looking forward to working with someone who enjoys the cat-and-mouse game of censorship circumvention as much as I need the freedom it brings.

Skills: System Admin, Linux, VPS, Network Administration, Internet Security, OpenVPN, Network Security, VPN

We are seeking an experienced IT professional to migrate our existing firewall rules to a FortiGate firewall. The project will also involve creating an updated network diagram that includes VLANs, NAT, and routing configurations. The ideal candidate will have a strong understanding of network security protocols and experience with FortiGate devices. This project is crucial for enhancing our network security and performance, so attention to detail and accuracy are essential.

• What FortiGate models and FortiOS versions have you worked with?
• What tools do you use to create network diagrams?
• Describe your recent experience with similar projects

The ZXA10 C320 is already racked, powered, and reachable over the management network; what I still need is a clean, production-ready configuration and the supporting tools around it.

ZTE OLT
• Bring the firmware up to the latest stable release.
• Build an intuitive, comment-rich start-up config that includes all required VLANs and properly provisioned PON ports so that adding new ONUs is a one-command job.
• Document every step so future changes remain “copy-and-paste” simple.

NetNumen
NetNumen will run on a fresh Windows Server VM. I need full installation and initial setup, role-based user access, and the monitoring / management views tuned for the C320 so alarms, traffic stats, and firmware backups flow automatically.

MikroTik Edge
Downstream subscribers terminate on a MikroTik router. Please create:
• IP routing that aligns with the new VLAN plan.
• Firewall rules that protect both the OLT and customer subnets.
• Bandwidth queues to enforce the service profiles we sell.

Acceptance
I will consider the job complete when:
1. ONUs authenticate, get the correct VLAN tags, and pass an end-to-end bandwidth test.
2. NetNumen shows real-time alarms, inventory, and traffic graphs for the C320.
3. The MikroTik passes a security scan and applies the correct bandwidth caps per profile.

All work must be performed via SSH/Winbox over a VPN I provide; I’ll supply read-only access first, then full credentials once we schedule the cut-over window.

Skills: System Admin, Linux, Cisco, Network Administration, Network Security, Network Engineering, Firewall, Network Monitoring

Install Fortinet firewall
• Remote configuration support
• German language required
• 4 short onsite visits

Project Overview
We are a digital agency delivering a Microsoft Power Platform automation project for a fuel distribution company in the Channel Islands (Jersey & Guernsey).

The client currently runs 100% paper-based field operations – worknotes, delivery tickets, expense claims – and we are building a bespoke digital solution using Power Apps, Power Automate, SharePoint, and Power BI.

The client uses Microsoft Dynamics NAV (Navision) as their core ERP for billing, invoicing, and delivery job management. The project has strong management buy-in but the critical dependency is integrating with NAV – both reading data out (for delivery dispatch) and writing data back in (for billing and worknote processing).

We need a NAV expert to assist me in a focused discovery engagement to assess the client’s NAV environment, determine the best integration approach, and produce a clear technical recommendation we can execute against.

What We Need
Phase 1: Discovery & Assessment (Primary Scope)

NAV Environment Audit: Help me determine the exact NAV version, edition, service tier configuration, and whether OData/SOAP web services are currently enabled or can be enabled.

Data Model Mapping: Help me identify the relevant NAV tables, pages, and fields for delivery tickets/jobs, sales orders, customer records, and worknote-related data. Help me document the data model for the specific entities we need to read and write.

Integration Feasibility Assessment: Help me evaluate which integration method is viable for this specific NAV installation – OData web services, SOAP web services, custom Codeunits, XMLports, direct SQL, or RPA (Power Automate Desktop) as a fallback.

Network & Security Review: Help me assess whether the NAV server is accessible from Power Automate cloud flows (directly or via an on-premises data gateway) and document any firewall, VPN, or authentication constraints.

Technical Recommendation Document: Help me produce a written recommendation covering the recommended integration architecture, any NAV-side development required (e.g., publishing pages as web services, building custom Codeunits or XMLports), estimated effort, risks, and dependencies.

Phase 2: Implementation Support (Optional Extension)
If the discovery confirms a viable path, we may extend the engagement.

Specific Integration Points
The following table summarises the two core data flows that need to be solved:

Data Flow 1: Export from NAV ... [NAV → SharePoint]
Data Flow 2: Import into NAV ... [SharePoint→NAV]

Purpose
Pull delivery jobs/tickets from NAV so drivers receive jobs on their phones via Power Apps (delivery dispatch system)

Push completed worknote and delivery data back into NAV for billing, invoicing, and record-keeping

Required Skills & Experience
Must-Have
Deep hands-on experience with Microsoft Dynamics NAV (any version from NAV 2013 through NAV 2018 / Business Central)

Proven experience exposing NAV pages, queries, and codeunits as SOAP and/or OData web services

Understanding of NAV’s data model – tables, pages, posting routines, number series, and how data flows through the system for sales orders, invoices, and service management

Experience building custom Codeunits and/or XMLports for automated data import/export

Ability to assess a NAV environment remotely (via screenshare/remote access) and produce a clear, written technical recommendation

Nice-to-Have
Experience with Microsoft Power Platform (Power Automate, Power Apps) integration with NAV

Experience with on-premises data gateway setup and configuration

Knowledge of NAV to Business Central migration paths (the client may migrate in future)