Advanced Plus Security Klepto's MSI Gaming Laptop 2020

[klepto]

I use this laptop for everything but I need it be malware free and remain fast.
Every six months I restore to my original backup where I had everything setup properly.
I use Autohotkey and CopyQ(clipboard manager) for macros and text dumps.
Former network administrator and BOFH.

 

[Vitali Ortzi]

Nice Config

 

[klepto]

Nice Config

Thanks, I think I've found many ways to ruin my backups. The saying that, "2 backups = 1 backup" is so true. I've found out the hard way

 

[Vitali Ortzi]

So the surface is for work and MSI laptop for gaming?

 

[klepto]

I'm really interested what kind of things you done to harden the network itself.

Nothing too fancy just dd-wrt and packet filtering.
EDIT: I was looking at some small 4 port routers that came with pfsense but still looking.

 

[Vitali Ortzi]

Nothing too fancy just dd-wrt and packet filtering.
EDIT: I was looking at some small 4 port routers that came with pfsense but still looking.

I don't have any background. But planing buying a used 24 port layer 3 used switch and build a Zeek + suricata machine for the gateway inspection + intrusion prevention (IDS/IPS).
Should I do so or go pfsense with something like sonar and some layer 7 inspection add-on?

 

[bayasdev]

Good config, simple but effective without over complicating things

 

[klepto]

I like having 2 different backup systems as well as putting those backups on a nas box and the cloud. Doing this makes me sleep better at night.

 

[klepto]

Oct/Nov 2020: Added Process Hacker
(If only Windows Defender didn't think it was malware...)
Sept 2020: Added NextDNS, just works and good privacy controls
Sept 2020: Bvckup 2 and Sync.com working together.

 

[LDogg]

Great setup, great updates. Advisory note, try Tinywall or Malwarebytes Windows FW Control, definitely better than the natives default.

~LDogg

 

[klepto]

Great setup, great updates. Advisory note, try Tinywall or Malwarebytes Windows FW Control, definitely better than the natives default.

~LDogg

Thanks, I am considering Tinywall. No flashing prompts, sounds great!

 

[LDogg]

Thanks, I am considering Tinywall. No flashing prompts, sounds great!

If you're about to use Tinywall, if you 100% know you have a clean and safe system. Make sure to start off on the "Autolearn" Change mode, then when you have opened all the software on your system Tinywall will remember this and you should have no problem with other software not connecting to the internet. Then "Change mode" back to "Normal Protection". Very easy and simple to do tbh.

~LDogg