networking

[warm dove]

or will it only increase slightly

[polar obsidian]

Hello, i'm trying to port forward on my router to host a server but no matter what i do the port isn't visible. I've checked tracert in cmd and it only does 1 hop so i assume that means i'm not under cgnat, and the ip adress isn't in the range thats typicaly under cgnat either. I've even tried enabling dmz which from what i know would make all the ports visible but that doesn't work either. I'm not using two routers or anything similar, just the isp router connected directly to my pc.

[silent flax]

you are still most likely CG-NAT. IPv6 DS-Lite for example

[polar obsidian]

Anything i can do to circumvent this? Just contact my isp and ask?

[silent flax]

yes, my ISP can put me on IPv4 if requested

[polar obsidian]

Alright, thank you!

Though, wouldn't the protocol type in my router say ipv6 then?

[silent flax]

if you go to your ISP router, see if you can see stuff like

[silent flax]

or maybe tell us what is your countr, ISP and maybe internet type

[polar obsidian]

Serbia, ISP is MTS

Optic fiber if thats what you're asking?

[silent flax]

https://forum.benchmark.rs/threads/port-forwarding-u-mts-u-ne-radi.483875/ ?

[polar obsidian]

checked that thread, some are cgnated but some aren't for the same provider

i've tried every way i've found online to see if im cgnat but all of them indicate that i am not

[silent flax]

you can still just call the ISP and ask, that is the simplest solution. Worst case they will say it is not possible or they wont enable it, and you are in same spot you are now. It won't get worse 😄

best case scenario they will help or enable it

[polar obsidian]

Maybe im just forwarding it incorrectly? My previous isp's router had a different looking forwarding window

[silent flax]

we can't see what you see 🤷‍♂️

[polar obsidian]

Under forward rules all i have is DMZ, IPv4 Port mapping and Port triggering

Though i assume activating DMZ and trying a port would then work

Which i've tried

[silent flax]

DMZ is putting whole PC on internet, but not sure how they handle it.
Port mapping is forwarding

[polar obsidian]

The port mapping window however has nowhere to input the ports, not sure if i did this correctly

port trigger window looks like this

[silent flax]

port trigger is "Lan device connects to trigger port(s)", which opens the reqeusted open ports

[silent flax]

imo you need to press Add to add a port mapping secgtion

similar UI

[polar obsidian]

I might've missed that, i'll try adding the ports and then check on canyouseeme.org

[silent flax]

unfortunately Huawei website is down ("upgrades"), so ican't check the topic

external source port number is probably not needed

[polar obsidian]

just tried both with and without the external port, still not showing

[wind current]

lmfao

[peak cloak]

another LLM wrapper?

[opal pagoda]

who?

[tropic saffron]

My dudes, I got a folder full of hundreds of tiny system utils/programs on my nas. Is there any kind of software that basically creates a readonly static version of them and then keeps any changes as a snapshot just for them? That way when they connect over lets say... smb they get their own version they can make changes to.

[plain siren]

Wait so what you want is a way to say "These files are static, they do not change, but if you make changes to them a copy is made and you see your version only with the changes"

Am I correct?

[tropic saffron]

Yeah basically, right now my solution is to just.... make like 8 copies of everything which seems like a huge waste of space when you could just keep modifications.

[plain siren]

The term you are looking for is "Deltas"

A delta of a file is just the changes to a file

[tropic saffron]

Yeah I was trying to figure it out what that was even called but without knowing google wasn't really sure about what the heck I was even asking about 0.o

[plain siren]

There is no current native or even custom way I know of to achieve this and the only way I know to do what you want is kinda how you are doing it now. When a user is made, a copy of the static files is generated in the "Users home folder" or their share, and then they just modify those. Now the question becomes, are these text files like source code or are these binary executable files?

If they are binary files, then delta's wont work

if they are like source code, well then you could actually use a git server

basically what patch files are are deltas

--- sources-orig/officespace/interest.go    2018-08-10 16:39:11.000000000 -0400
+++ sources-fixed/officespace/interest.go    2018-08-10 16:39:40.000000000 -0400
@@ -11,15 +11,13 @@
   InterestRate float64
 }

+// compute the rounded interest for a transaction
 func computeInterest(acct *Account, t Transaction) float64 {

   interest := t.Amount * t.InterestRate
   roundedInterest := math.Floor(interest*100) / 100.0
   remainingInterest := interest - roundedInterest

-  // a little extra..
-  remainingInterest *= 1000
-
   // Save the remaining interest into an account we control:
   acct.Balance = acct.Balance + remainingInterest

This would be a patch file that adds lines and removes some lines

you can apply this to a file and itll patch it with the changes

[tropic saffron]

Its mostly just tons of utilities they can run, sort of like the ultimate usb utility drive but on a nas. The problem is having to reconfig the program everytime someone changes something, or a image program caching someone elses files which would be.... not good.

[plain siren]

ah so configuration files

not the binaries themselves

in that case, what I would do would actually be linking the static files to the users share so they get access to the source binary but the "run in" context (the directory its executing in) will be the users share which doesnt have a shared config file

instead it only has their own

share the binaries, copy the configs

dont let the binaries be changed

like a symlink

[tropic saffron]

Yeah thats what I was originally thinking, just seemed like a pita to manually go though every single program.

[plain siren]

/tmp/binaries/something.exe
/tmp/binaries/somethingConfig.cfg
/tmp/user1/something.exe -> /tmp/binaries/something.exe
/tmp/user1/somethingConfig.cfg -COPIED FROM-> /tmp/binaries/somethingConfig.cfg (NOT LINKED)

[plain siren]

you would setup an automation script to do all the linking and copying upon creation of a user

how you manage that depends on your setup and your intent

[tropic saffron]

Yeah I'll start with a few and see how bad getting just those set up first. Just need to figure out whats getting changed for each one.

[pseudo blade]

Have a look at OverlayFS, though it's not going to offer you per-user isolation and you might have to invent that yourself

Train of thought around an SMB reverse proxy and multiple backend SMB servers attached to overlay filesystems

Using it or other union filesystems lets you have a readonly filesystem then another filesystem "on top of it" that contains only stuff that's modified, with the user seeing what appears to be a single read-write filesystem with all files from both

[wise kernel]

I'm working on the last few units for my networking 1 class and look who randomly shows up lol.

[coarse rapids]

I'll be moving into an apartment with ethernet pre-wired from the room where internet comes in to all other rooms (with ethernet ports in the wall), they don't know if cat5e or cat6. Any way to test without having a 1Gbit+ internet connection? (I would use this for 2.5Gbit NAS and 2.5Gbit LAN on PC)

To be clear I don't have any 2.5Gbit hardware other than my desktop, don't want to spend money on that unless I know the cables can do 2.5Gbit

[strange jolt]

You can do a speed test between two LAN devices but if they dont have NICs faster than 1Gbit then you wont see any benefit. Either that or buy, rent, or borrow an ethernet testing tool

[coarse rapids]

My PC already has 2.5Gbit LAN

[strange jolt]

You can test it up to 2.5Gbit if you have a switch or similar that can handle that, and another device to receive it. you can use iperf to do the test or just transfer a big file between the two devices and watch the transfer speed, provided both ends have storage to keep up with it

[coarse rapids]

A switch can do that? I thought I'd need a device connected to the switch

there's only a wall socket on the receiving end, not the distributing end, so I'm hoping the cables are labeled

[silent flax]

considering Cat5E is still able to do unofficially 10Gbe over short distances, it is all kind of pointless to even try to figure it out

[coarse rapids]

I was told that it using a wall socket could have a negative effect

[strange jolt]

you would need your pc, a capable switch, and another device

[silent flax]

told by who ? Only issue i know with ethernet in any form is if someone uses unshielded ethernet cables and runs them along the power cables in the walls

[wheat jewel]

why is my wifi so slow on my computer but its fast on my phone

[ornate jungle]

Short answer: because difference devices may contain different WiFi hardware capable of different connection specifications, which in turn can affect speed, connectivity, range, etc.
Long answer: Spend a weekend or two reading every word on https://www.wiisfi.com/

[wheat jewel]

my pc is sometimes fast and then other times its very slow. idk if its like the wifi antennas or something

[ornate jungle]

Sounds like it could be hopping between the 2.4GHz and 5GHz WiFi bands.

• 2.4GHz is slower, but capable os longer ranges, especially if it has to penetrate objects.
• 5GHz can be much faster, but doesn't go through objects as well nor have the range.

[wheat jewel]

uh huh. sooo how do i keep it at the 5GHz

i want to use ethernet but then i would have to run the cable all the way from my room to my attic

oh ok i just watched some video on how to make it be 5GHz

that worked its much faster now thanks for the help

[waxen scroll]

@clear igloo

[fiery halo]

what am i meant to do here?

trying to portforward my server (port 25565)

first time doing anything like this, my router is a DGA0122 from technicolour, and im using deco x20 wifi boosters (192.168.68.x)

[peak cloak]

double nat

[fiery halo]

ive tried that

[fiery halo]

get this

[peak cloak]

you don't want double nat

you have two options

either get rid of nat on the deco so everything is on one subnet

or port forward to the deco and then on the deco port forward to the server

first option would be better

[fiery halo]

im trying the second one atm but im not sure if its right

[peak cloak]

assuming 192.168.1.216 is deco router IP then yes

try https://mcsrvstat.us/ to check if it's working

[fiery halo]

server isnt running atm, but i cant see the port using https://canyouseeme.org

[peak cloak]

you won't

until server is running

how would you get a response if there is no server

[fiery halo]

i guess 😭

ill start the server up and see if it works

what would the port be to join the server?

address*

[peak cloak]

your public IP address

[fiery halo]

public:25565?

or just public ip address

D:

i forgot how long modded servers take to start

[peak cloak]

25565 is default port so you can just put your public

[fiery halo]

alright

can i password protect the minecraft server so i dont just have randoms joining it?

[peak cloak]

also on your main router, not deco, what are the first two digits of what it says for public IP

[peak cloak]

use a whitelist

[peak cloak]

alright, good

[fiery halo]

?

how would i add people to the whitelist? throught the CLI?

[peak cloak]

yeah or ingame

[fiery halo]

so just /whitelist (my user)?

[peak cloak]

technically you can edit the txt file manually, but it requires the uuid

[peak cloak]

yeah, somewhat https://minecraft.fandom.com/wiki/Commands/whitelist

[fiery halo]

alright, thanks

[peak cloak]

@fiery halo also generally if you are running a server publicly make sure to stay on top of updates

[fiery halo]

alright

@peak cloak ?

[peak cloak]

btw you just leaked ip

[fiery halo]

thanks

[peak cloak]

you also may need to add firewalls rules to windows

[fiery halo]

firewall is off

[peak cloak]

oh hmm

[topaz patrol]

Maybe fix that 😉

[fiery halo]

too lazy

i just want to get this running

ill bother with security later

[peak cloak]

that's what they always say

[fiery halo]

besides ive had the firewall off for like a year and its been fine

[peak cloak]

anyway in theory this should work, but it's really hard to troubleshoot with consumer hardware, just have to try different things basically

[fiery halo]

🫠

what else can i try
cant really change the network all too much since my dad is big on "oo consumer hardware knows whats its doing dont change it"

[peak cloak]

could try the first method of getting rid of nat on deco

or move the server to connect to the first router and then just port forward to it

[fiery halo]

no NIC, no ethernet cable long enough

how would i do the first method

[peak cloak]

see if there is an option in the UI for access point mode

idk since I never used decos

[fiery halo]

on the deco or my router?

also yeah, there is on the deco, extension or router mode

[dusty stream]

sup with minecraft server?

[peak cloak]

yeah deco

[naive nest]

Can I mix the Ubiquiti nano access points with the standard ones? Will any performance issues arise as a result?

[dusty stream]

important is port forwading dont forget

[peak cloak]

deco right now is acting as a router, and you don't want that

[fiery halo]

if i switch it to extension mode, will it boot everyone off the network

[dusty stream]

i wouldn’t recommend default port tbh, bunch of attack or whatever

[peak cloak]

yeah probobly

[dusty stream]

sometimes you cant join with 25565 i forgot reason, try different port

[peak cloak]

what?

[fiery halo]

yeah i cant do that

[peak cloak]

should be temporary but idk

[topaz patrol]

How many APs are you using

[naive nest]

planning to use 3

[dusty stream]

i don’t know why i couldn’t join :25565

[topaz patrol]

Have you done a simulation?

[dusty stream]

just try different port

[naive nest]

I haven't yet

[topaz patrol]

Do a simulation in UBNTs design thingo

[peak cloak]

won't change a thing in this situation

[topaz patrol]

Chances are, you don't need 3 APs

[dusty stream]

mostly it will

[naive nest]

2 would probably do it, but I think if I get more APs and lower the transmission power on each then I can potentially attain better speeds

[peak cloak]

go ahead try it, but I'm certain nothing will change.

unless ISP blocks it for some reason. I only heard of isps blocking inbound SMTP and sometimes HTTP

[dusty stream]

i don’t have pc here

[fiery halo]

i mean i can use a VPN connection fine

[topaz patrol]

TCP 25 
Inbound
TCP 80
TCP 443
TCP 25
UDP 135
UDP 137-139```

This is pretty standard

[peak cloak]

ah yeah, I have a large ISP and they don't even block SMTP

was suprised to find a proxmox notification in my gmail

[topaz patrol]

But also

You are solely responsible for any loss or damage to your equipment, device or to any information or other data that may result from your use of the service```

People getting haxx0red isn't too fun

[topaz patrol]

It's funny because I know of at least 5 ISPs who use this exact wording in their ToS

https://tenor.com/view/fb-f-band-i-gdown-gif-23334383

[dusty stream]

i wonder how does ISP domain works i can make domain with it or wot

oh gosh i still haven’t learned about domain

[peak cloak]

?

[dusty stream]

agh i hate myself, anyway forget it

[fiery halo]

i figured why it wasnt working!!

(im a fooken idiot)

[peak cloak]

it was off right?

just realized it said off in the screenshot as well

[fiery halo]

yup 😭

[fiery halo]

oh my god your right its off here too

[dusty stream]

are you leaking again?

[fiery halo]

i am infact leaking again

[dusty stream]

[fiery halo]

im going insane

[dusty stream]

don’t

[fiery halo]

its 3am

i have physics homework and i have 6 lessons tommorow

[dusty stream]

bruh

[fiery halo]

tommorow is in 3 hours

[dusty stream]

to be honest tomorrow is today

[fiery halo]

its not tomorrow until i say so

[dusty stream]

well good luck with that

[fiery halo]

okay I give up its tomorrow

[warm dove]

guys i just switched to a new mesh router from my old router but for some reason only 1 device can connect at a time, on other devices it will say failed to connect. Any idea why?

[pseudo blade]

Not in the slightest but if it's a consumer device I'd be reaching out to their support

[warm dove]

should i contact my isp or the router brand

but the thing is the support is notoriously bad, like wait 5 hours to get told no type shi

[topaz patrol]

Did you buy it from the ISP?

Also check it's in router mode, and not AP mode

[warm dove]

errr whats that

[warm dove]

nope they're from a diff brand my friend gave em to me

[topaz patrol]

Is it a Deco?

[topaz patrol]

Then contact the manufacturer

[warm dove]

its a mesh wifi from singtel, model is ap5690w

its an askey mesh router but singtel slapped their branding onto it or smt

[topaz patrol]

Yeah good luck with that one bud

[warm dove]

😭

whats ap mode and router mode

[topaz patrol]

It's not a router

[warm dove]

erm ill use my old router then, can you help me w another issue?

[topaz patrol]

It's a mesh satellite for the RT5703W

[warm dove]

my router is dual band and the 5ghz one is much faster than the 2.4ghz for my PC (2.4 gets me 40/40 mbps and 5ghz gets me 300/300), but then one day my PC cant find my 5ghz wifi anymore

it can find my neighbours 5ghz wifi but not mine and my phone can find it

[warm dove]

wha

[random siren]

just an accesspoint. not a router

[random siren]

accesspoint = connects to existing network and provides a wifi signal to connect to
router = create a new network and provide routing for the network

most consumer routers also have an accesspoint built in

[topaz patrol]

Technically most home "routers" aren't really routers...
But I digress

[random siren]

most home routers absolutely are routers, wdym? what definition for router are you using?

[topaz patrol]

The term router isn't properly defined... But I would argue home gateways are not routers

There is no packet routing happening in there

[random siren]

but they are still capable of doing so afaik

[topaz patrol]

Some

[clear igloo]

yah, they stopped about a year ago iirc

[warm dove]

the videos online from the company themself show em using the extenders for the wifi

use 1 as a router and 1 as a 2nd point

[random siren]

yes, that is how you have to use an accesspoint. it always needs a connection to a router, either via wifi (worse performance but easier setup) or cable (better performance but setup is more work)

[warm dove]

how do i set it up then?

for better performance

if you dont mind helping

[topaz patrol]

Connect your Mesh Extender to a power point close to your router and turn on. Depress the
power button on the back of the device if it does not turn on.
Press and hold the WPS button at the back of your router for 2 seconds, then press and hold the WPS button on the Mesh Extender and wait up to 5 minutes for the Mesh LED to turn solid white on both Mesh Extenders.
Re-position the new Mesh Extender to a location in-between your original Router / Mesh Extender and the area in your home with weak WiFi signal and switch on.

[warm dove]

works with any router?

[topaz patrol]

Probably

Give it a try, only one way to find out

[warm dove]

alright tysm!!

ill try it out

[warm dove]

after i pair them i can unplug from power and place at a new location and replug it in there right

[topaz patrol]

Yes

[warm dove]

they didnt pair but ill try again

just flashes white for a couple minutes and then nothin

[random siren]

the router or extender?

[cinder plank]

I have now got the option to go with FTTP so I'm looking at plans to upgrade to. The one I have found has the option for £5/mo (£60) for a cheap TP-Link router I think it is a Archer VR1210v . (only wifi 5). They give the option to not get a router and use your own would something like this https://www.mercusys.com/en/product/details/mr60x for only £28 be better?

[warm dove]

sflr again, the router doesnt have a mesh light so idk but the extender

[peak cloak]

Don't rent one

Idk about that one, no experience with that brand

[celest salmon]

Can you just give me an assumption how I avoid Roskomnador - https://www.google.com/search?q=Roskomnadzor&oq=Roskomnadzor&gs_lcrp=EgZjaHJvbWUyCQgAEEUYORiABDIHCAEQABiABDIHCAIQABiABDIHCAMQABiABDIHCAQQABiABDIHCAUQABiABDIGCAYQRRg8MgYIBxBFGDzSAQgyMzQwajBqN6gCALACAA&sourceid=chrome&ie=UTF-8. Except renting the vpn server to make your own fast vpn

if not why

(desirable)

[opal pagoda]

i know a easy way
move out

maybe you could use tor

[fiery halo]

it wasnt working still
someone asked if i had turned it off and on again...
i just needed to start the router and the deco 🫠

[copper ginkgo]

replacement HDDs for my NAS arrived but i don't have any more SATA ports; should i plug the old HDD into a USB enclosure temporarily for resilvering?

[copper ginkgo]

okay i don't understand what i'm doing here

[opal pagoda]

what nas os?
what hardware?

[copper ginkgo]

trueNAS scale, built from old spare parts

[opal pagoda]

if it is a replacement then take out old drive and swap it for a new one

[copper ginkgo]

did that

[opal pagoda]

then what is the issue?
you want to upgrade it?

[copper ginkgo]

nah, i'm just a bit confused on how to do it

[opal pagoda]

tipicaly if hdd fails you take the defective one out, install new one of same capacity
run resilvering and it is done.

[copper ginkgo]

ya not sure where to find the resilvering option

[opal pagoda]

https://www.truenas.com/docs/scale/scaletutorials/storage/disks/replacingdisks/

[copper ginkgo]

okay found it

it took a second to poll for the disk that was my problem

got it

i also have a degraded drive in the pool; should i replace it now or wait until it's faulted?

[opal pagoda]

i belive degraded means pool is degraded (you had a hdd failoure) and that should go away after new drive is added and pool is resilvered

[copper ginkgo]

nah this is specific to another drive

sde and sdf were degraded and faulted respectively; i'm replacing sdf right now

[untold elbow]

i'd replace sde as soon as possible also

[copper ginkgo]

good thing i ordered two drives then; i'll replace them one at a time

[untold elbow]

usually if zfs is seeing errors, the drive is running on fumes

that works

[copper ginkgo]

well all the drives were seeing errors but after a restart they aren't saying that anymore

[untold elbow]

if they're all seeing errors, it could be a faulty HBA

are they all connected to a single HBA?

[copper ginkgo]

HBA?

ah

[untold elbow]

do you have the drives plugged into SATA ports on the motherboard? or into a pcie card with SATA/SAS ports?

[copper ginkgo]

into the motherboard directly

[untold elbow]

ok. if you start to see events where all the drives suddenly rack up errors at the same time, i'd start to suspect the motherboard

[copper ginkgo]

it is an 8-year-old mobo...

this NAS was built out of my PC's old hand-me-downs

that said all these drives were purchased and installed at the same time

i'll watch over the next week to see if the new drives get errors too

...come to think of it i did get some alerts for bad sectors on sdc and sdd

[untold elbow]

SMART errors? or ZFS errors?

[copper ginkgo]

i guess SMART

[untold elbow]

welp i'd plan on replacing sdc in the near future as well

[copper ginkgo]

ya

good thing ironwolves are on sale

[forest stream]

Any specific brands good for Ethernet cables between 100-200 feet?

[copper ginkgo]

i can't change any settings with my time machine share without getting this error

[rocky badge]

@waxen scroll @clear igloo I fucking hate this damn apartment's internet lol

[waxen scroll]

Order Comcast

[rocky badge]

I can't get any ISP in here

[topaz patrol]

Building to DC dark fibre

Problem solved

[waxen scroll]

Tell them vendor lock in for apartments is illegal

[rocky badge]

I don't even mind the ISP they have

its just their shitty networking kills the internet so often

Its also pretty consistent on when it happens too lol

9am, 11pm, 1am, 3am every day

[warm dove]

im using a usb 3 wifi adapter rn, shld i upgrade to powerline or pcie wifi

[pseudo blade]

"Maybe"

Are you hitting any particular limitation of the USB adapter?

I much prefer the stability and functionality of the PCIe ones myself

But really it should depend on what's causing any issues you're having, if any

[mystic latch]

You should immediately invest in multi-report. Gotta have email set up in the system settings, but it's a really good tool
https://forums.truenas.com/t/multi-report/1302

[fickle lily]

fk isp roiuter that i cant set static IP

should i risk and get the super admin account of the router ? lol

they need me to sign an agreement that they dont give a shit if i break my modem lol

[celest salmon]

By the way -- about google's "Privacy" what would I do if I want the search engine to have results the same as google's, do you know what I need to do or use (except of google search engine)

[opal pagoda]

duckduckgo is deacent search engine that doesent collect user data

[peak cloak]

Static public IP?

[thick minnow]

My PC's TP-Link TL-WN727N adapter is dying; is it worth going for couple bucks more expensive TP-Link TL-WN722N or 10 bucks more expensive TP-Link Archer T3U Plus?

[copper ginkgo]

how do i install scripts

[opal pagoda]

get archer one, atleast it has AC wifi compared to old af adapters mentioned previously

[thick minnow]

the first one, is dying so thx

[low furnace]

Hi, is anyone familiar with docker desktop and immich?

[dusky zealot]

I’ve got an issue with my network. ONT>multigig switch>Router,Xbox,PC. Everything has internet except for PC. Is there anyway to fix without having to buy some stupid expensive router?

[topaz patrol]

Why is there a switch before the gateway (router)

[dusky zealot]

Not enough 2.5 ports on the router 😅

[topaz patrol]

So the switch is connected directly to the ONT?

[dusky zealot]

Correct

[topaz patrol]

Put the router inbetween the switch and ONT

ONT --> router --> other things (including switches)

[dusky zealot]

Got it

[thorny osprey]

Is tp link archer ax15 gud? Its going for 34 dollars in stores

[worn gate]

So, I'm curious and also slightly lazy, in Cisco ios, I'm setting up ospfv2, and when I do "show ip route" I'm not getting any routes showing up via ospf, could the cause of that be my cable becoming unplugged
The context to this is i just got out of a networking final where ospf wouldn't work, and when I went to tear all my networking down I seen a cable was unconnected completely from one device that was meant to have ospf routes

[fickle lily]

no just local like set your IP to static so it wont change on local

[clear igloo]

OSPF needs a neighbor to form an adjacency

[copper ginkgo]

okay i seriously don't know how to fix this

i can't change any of the settings on any of my SMB shares without getting this error

[copper ginkgo]

wtf

okay i think the issue might be that i tried jumping from 22.10 to 24.10

[copper ginkgo]

yep we're good on that front

[copper ginkgo]

still need to fix this

[fringe wagon]

i used to have it in my Laptop because the wifi card was not quite working how it should, after like a year the thing didnt get recognized by my pc anymore and it was running way hot. opened it up and had 2 Caps loose in there and the IC melted a hole into itself.

[mental rose]

building a pi 5 nas, running the install script for OMV and it's stuck connecting to github

[covert sleet]

Huh can it ping other services?

[mental rose]

let me see if it can ping 1.1.1.1

yep

it's doing it

[covert sleet]

can you ping githubusercontent.com?

[mental rose]

my desktop won't do it either

[covert sleet]

Yeah mine either

[mental rose]

ok hang on

[covert sleet]

Ah I can ping raw.githubusercontent.com

[mental rose]

desktop will ping that site, pi will not

it's stuck in limbo

[covert sleet]

Try doing a traceroute from both?

[mental rose]

I'm gonna reboot it and see what happens

[covert sleet]

See what step it gets stuck on.

[covert sleet]

That could work too lol

[mental rose]

I'm excited tho, never had a nas/server before

[covert sleet]

Nice! I miss my Synology nas

[mental rose]

did I seriously just forget the password to login via ssh

I swear to god I was just in this before

I'm not going crazy am I?

[covert sleet]

Huh does the script set a password or something?

[mental rose]

openmediavault's default settings are admin/openmediavault

I guess I'm recreating this shit

[covert sleet]

Also didn't work?

[mental rose]

I'm wiping the SD card right now

no it didn't work either

the ssh I'm trying is for the debian piOS, I don't see how that could possibly change

I tried sshing into my pi 0 2 that I use as a CUPS server, that worked perfectly

[covert sleet]

Yeah so something happened.

[topaz patrol]

Why aren't you using an SSH key pair?

[covert sleet]

I mean it is local and hadn't being finished setup yet

No need to go straight to ssh key pair in that enviroment

[topaz patrol]

It's easier

[covert sleet]

I don't disagree but it is a step deeper then most are comfortable with at least out of the gate.

[mental rose]

alright rewriting, this time with a shorter password

different question, I need to set up a separate VLAN on OPNsense later

do I plug the two different LAN ethernet cables into the same switch?

[covert sleet]

I am a bit confused.

Like are you trying to have one device on both VLANs?

[mental rose]

using the same router and same switch for both vlans, yeah

[covert sleet]

You just need to allow access to both VLANS, ingress and egress.

[mental rose]

so I don't need to do anything with a 3rd port on my router?

[covert sleet]

If you are wanting a device to access both VLANS but have an IP in one DHCP range then you will need to allow routing between them. So you would have to that up as well.

I am not sure how that is done in OPNsense, only Merraki and UniFi.

[mental rose]

no, one client device will only access one vlan at a time

but I want to use the same switch and WAP for both vlans so I don't need to buy another switch and WAP

[covert sleet]

Is it a smart switch?

Like Managed?

[mental rose]

no, it's unmanaged

[covert sleet]

So then you would need to do it from the router side. It would be a bit more complicated since you can't set access at the port level.

[mental rose]

sounds like I need to get another switch regardless then

[covert sleet]

Why only 1 VLAN at a time?

[mental rose]

security

I don't want one of my computers to interact with the other ones on the network

[covert sleet]

If you have untrusted endpoint inside of your network that is already not good. Is this a company or your house?

[mental rose]

home

[covert sleet]

So why the client isolation?

[mental rose]

like you know how IoT devices should be on their own VLANs?

[covert sleet]

What are you trying to stop from happening

[mental rose]

same thing

[covert sleet]

Right so what you want to have your computer to be able to access either VLAN through switching a cable was the original Idea?

[mental rose]

no, hang on

like this

[covert sleet]

Oh okay, you should be able to set 1 VLAN as the default and then have the other be based on MAC Address filtering or the like. So your WAP supports multiple wifi's with different VLANs?

[mental rose]

TP Link EAP 610

I think it does, but I'm not sure

[covert sleet]

You should be able to do access-lists or radius auth if it doesn't either way

Multi wifi is just easier.

[mental rose]

I'm wondering if I can just plug in two different cables from my router directly into my unmanaged switch like in the left side of the picture

[covert sleet]

You should only need one. You would just have to set it to accept tags from either VLANs.

Now it does get weird at the device level using the same 1 unmanaged switch but it is possible. You have to setup a default VLAN and an access list for the other VLAN.

Then the router should be able to adjust and tag as you go.

Mac based VLANs is what you would need

[mental rose]

funky is not what I need in my life

[covert sleet]

Lol then two switches each set to one VLAN if your router supports port based VLAN tagging.

Then a cable direct to the WAP

[mental rose]

I think it does, there are 4 ports coming off the router

eth0 is current LAN, eth1 is WAN, and eth2 would be the next VLAN

[covert sleet]

I mean honestly Mac based VLANs is pretty straight forward

Only tursted devices get into the 2nd mac address based VLAN

[mental rose]

ok well I'll look more into it later

I'm back in the pi rn and I've rebooted it and the password still works

ok it's installing openmediavault rn, let's see if it works this time

[covert sleet]

Banning all the IPs!!!

[mental rose]

what am I looking at?

[covert sleet]

My bans by reason

[mental rose]

what software is this that does the banning?

[covert sleet]

I manage a bunch of severs and I have software that scans their logs and looks for bad actors and bans them

[mental rose]

nice, I just use zenarmor

[covert sleet]

It is built ontop of crowdsec but customized a bunch

[mental rose]

I should probably setup suricata at some point but eh

and then what are some of the reasons you're banning IPs for?

[covert sleet]

I mean I do this as it is a bunch of servers directly connected to the internet

The #1 is http-bad-user-agent

So just bots

[mental rose]

oh there's no router or firewall protecting these servers?

[covert sleet]

Yeah there is a firewall but these are bots connecting to webservers and dicking around

[mental rose]

mmmm

[covert sleet]

So I ban em, for scanning for admin portals or wordpress php files

[mental rose]

alright, here we go again

now I am scared that zenarmor and adguard home are preventing this from working

but I've put the former in bypass mode and the latter's protection disabled

yeah the connection just timed out again

I did notice this:

[covert sleet]

Well looky there

[mental rose]

just skip it I guess?

[covert sleet]

Not sure, :/

[mental rose]

worth a shot

nope, it only did the first line of wget and then went right back to it

that uh

that explains what happened to my ssh

I also didn't set the locale settings which might be why it's throwing a shit fit

[covert sleet]

Ah that makes sense

[mental rose]

well, third time's the charm right?

[mental rose]

that's it, I'm confused

[topaz patrol]

Have you tried disabling IPv6

[mental rose]

oh I think it's trying to do it via ipv6

I think I blocked ipv6 on my router cause it was giving me problems

[topaz patrol]

Yeah

It's always DNS or IPv6

[mental rose]

good lord, the shirt isn't a meme??

holy shit it did it, I had to reenable ipv6

if anyone is able to identify what's going on with my router, I'd love to hear suggestions

[topaz patrol]

What's happening

[mental rose]

it's opnsense, and I get fatal trap 12: page fault

the router restarts about once a week

in the general log, the router is failing to forward some ipv6 packet somewhere and it seems to be causing the crashing

[topaz patrol]

Is this in a VM?

[mental rose]

no, bare hardware

[topaz patrol]

What hardware

[mental rose]

here's an example of the packet loss that I would keep seeing repeat if ipv6 is enabled

[mental rose]

https://www.youtube.com/watch?v=bM6Ivy_KLR4&list=PLwtmM-ZjmTtF0iZTCxjsrRknS6Mzt0mKz&index=60&t=2s

[topaz patrol]

N305?

[mental rose]

yes

these are the two settings I turn off in opnsense

[topaz patrol]

And when those are disabled there's no crashing?

[mental rose]

exactly, it's so weird
the error message goes away too

[topaz patrol]

Probably not a hardware issue then

[mental rose]

it can't be, cause I've run memtest on it

[topaz patrol]

I'll leave this one to someone smarter than me lol

Is there a reason you can't just leave the settings like that?

[mental rose]

yeah if you don't know, it's ok

well, you just saw the one time something needed to access something via IPv6 and it didn't work

otherwise, yeah I just leave the settings like that

[topaz patrol]

If you disable IPv6 on the clients it shouldn't be a problem

But that isn't a proper solution

[mental rose]

what's funny is that I've made a forum post on the opnsense forums and no one has ever answered it lmao

I should update it with what I've found

@covert sleet you got any clues as to why my opnsense router is crashing when I have ipv6 enabled?

[haughty latch]

any sysadmin here knows a good tool to map out tree architecture network using spanning tree protocol so i can map out all switches and stuff the stupid monitoring software unifi uses can't recognise all switches sadly so i have a hard time to figure out what devices connect were in the serverrack of my company and i have to move a group of devices into their own vlan for security

[topaz patrol]

Lol UBNT

[topaz patrol]

LibreNMS?

[haughty latch]

will take a look thanks

[covert sleet]

@mental rose Maybe this? https://forum.opnsense.org/index.php?topic=43800.0
I don;t use Opnsense

[mental rose]

TY, I appreciate you looking

[covert sleet]

Other options. 🙂
https://netdisco.org/ - Open Source
https://www.solarwinds.com/network-topology-mapper free trail
https://nmap.org/ - Might work as well.

[mental rose]

what the fresh hell is this now? I'm just trying to create a ZFS pool here

[fallow pulsar]

Any sugestions on a dynamic DNS provider. Preferably free

Using with unifi

[untold elbow]

did you try running modprobe zfs? you may not have the zfs kernel modules loaded

[violet osprey]

Has anyone had experience with Huawei routers? How good are they?

[worn gate]

disabling ipv6 is always a proper solution

[opal pagoda]

for remote access purposes?
i wouldnt do port forwarding at home, just use cloudflared

[opal pagoda]

consumer ones are trash like everything else ment for isp
enterprise ones are copies of cisco routers with a dash of backdoors

[silver pilot]

My uncle uses one in modem mode for fibre, works well

[opal pagoda]

when router is in "modem mode" it is doing basically zero processing

just a media converter

[south gull]

i have 400 mbps upload speed but the latnecy is 150, any way i can fix that>?

[opal pagoda]

sonds like bufferbloat
https://www.waveform.com/tools/bufferbloat

[south gull]

how would one mitigate bufferbloat

[opal pagoda]

there are some methods mentioned on the site

[mental rose]

I think you might be right, I get this:
modprobe: FATAL: Module zfs not found in directory /lib/modules/6.6.62+rpt-rpi-2712

how do I load it?

[fiery halo]

what does this mean?

theres no mapping for Y: atm

[mystic robin]

Does net use in command prompt/powershell list it? Use net use <drive-letter>: /delete if it shows connected there and you want it gone.

[radiant gale]

Was my tech last week full of crap?

Story time: scheduled time between 1-5. He finally shows up at around 8, after calling Brightspeed to see what was up. Well he then took a Quick Look around the yard and claimed we needed to get ahold of city utilities to get a sub pole put in closer to the road because our drop point is across the street. After talking to city utilities and them having no clue what he was talking about, I’m assuming he was just being lazy and not wanting to do an install that late. Would I be correct in that assumption ?

[pseudo blade]

*The words of every legacy network admin ever

[topaz patrol]

Absolutely

[radiant gale]

Any feedback on my post above?

[topaz patrol]

Unless you’re in Australia, I have nothing to say

[violet osprey]

What would you recommend? I wanted to buy a tp link, but they doubled the price, and aren't worth the money right now. I need to buy a gigabit router for 40-50$

[untold elbow]

id probably reinstall zfs and try again

[opal pagoda]

Do you want a integrated device or a dedicated router

[thorny osprey]

Which app on android is best to see which channel has da least traffic?

[violet osprey]

Dedicated

[torn moth]

I got my NAS parts minus the PSU and drives for storage. Was thinking of useing my old psu that I used when I had new 1060 ti but haveing second thoughts about it. Would be ok or should I get a newere one?

Its 550 W and not modular

[hallow tusk]

I use WiFiMan from Ubiquiti personally. It has some pretty nice integrations with the rest of the UniFi system if you use it, but it'll work just fine on non-Ubiquiti gear too.

[thorny osprey]

and how do i do it on windows?

[opal pagoda]

I have a tp link er605 and it is a decent router

For full gigabit it might be a little underpowered

[hallow tusk]

I don't have an app I use on Windows for this that works with general WiFi cards. What little I have done was with inSSIDer/Chanalyzer and the Wi-Spy USB dongle. Looks like that solution does still exist, though you still need dedicated scanning hardware: https://www.metageek.com/chanalyzer/

[thorny osprey]

also

this is before installing openwrt (ethernet)

after installing openwrt (ethernet)
tf happened?

[viscid nebula]

damn

mb not the right cable?

[thorny osprey]

same cable

[viscid nebula]

yh mb its not opted for it yk

[thorny osprey]

? wdym?

[viscid nebula]

like model yk

if its a cat5 or cat6

[thorny osprey]

openwrt does support my model

[viscid nebula]

mhm ok then thats weird

[thorny osprey]

idk i forgor

[thorny osprey]

dis 1

[thorny osprey]

and dis 1
r same cable

[opal pagoda]

My guess
Openwrt doesn't support hardware acceleration on your specific model

So all traffic goes through the weak cpu

[thorny osprey]

how do i see dat

[opal pagoda]

What hardware are you running it on?

[thorny osprey]

TP link archer AX23

[thorny osprey]

any idea?

[peak cloak]

hardware acceleration prob gone

I just stick to supported software, don't want to deal with all of that

[coarse rapids]

Is mercusys hardware reliable?

They currently have the cheapest 6ghz wifi & 2(+) 2.5gbit ethernet router

[silent flax]

i will start using IPv6 when IPv6 starts working correctly with an idea of local DNS hostnames and when ISPs start handing out bigger segments than /64. Right now if i enable IPv6, my ISP will push their DNS down my throat with no way to modify it, thus i can't have local hostnames, unless i put them in the public DNS

[thorny osprey]

How to kno

Openwrt says it supports my roter

[peak cloak]

maybe look at router CPU usage while running a speed test

[thorny osprey]

If its not 100% it means its not using hardware accel? @presentmonkey

[peak cloak]

CPU usage will be near or at 100% if it's not using hardware acceleration

[thorny osprey]

oh

[peak cloak]

hardware acceleration means the packets bypass your CPU basically

[thorny osprey]

how do i see my cpu usage?

[peak cloak]

idk

never used openwrt

[violet osprey]

Thanks! And it also has OpenVPN support, which might be useful for me

[opal pagoda]

load balancing works really well on it

better than on fortigates lmao

[silent flax]

If you have OpenWRT installed, it should be at LuCI > Firewall > General Settings > Routing/NAT Offloading ?

[silent flax]

it's linux, so SSH in, then top, or if you install it, htop

[thorny osprey]

its off

[thorny osprey]

i turned it on and now i got full speed tyyy

[opal pagoda]

hypotesis was correct

[silent flax]

be aware that HW offload means you lose some firewall/QoS functionality, cause you now let the networking chip do the routing/firewalling. But if you didn't use QoS features, you are most likely just fine

[torn moth]

For a NAS does it matter if I go WD blue instead of red even thou they say the red ones are for NAS and similar thing with other brands?

[silent flax]

until the drive starts acting up, no. If it starts to have issues, that is where the difference comes. Red drives have TLER, that is Time Limited Error Recovery. In short, Red drives will try to read/write for max 8 seconds and then gives up; non-TLER drives like Blue could hang on such issue for tens of seconds, or even minutes. As you can image, that is a bad thing in a RAID array.

Plus Red possibly have better resilience against vibration, but i have no experience with that

[topaz patrol]

Put them in the public DNS
Makes things so much easier imo

[torn moth]

So if I want bit piece of mind and sleep bit better I should go with drives meant for NAS but its nothing I need seriously?

[silent flax]

personally i am buying Seagate Exos X16 16TB drives, cause they are big and also relatively cheap for the capacity, but haven't bought one in last year or so, i might get a bigger drive now

but yeah, if you have a backup solution, then i would say buy whatever you want

i mean have a secondary storage for the important things if drives in your NAS fail. But it's up to you, as always

[torn moth]

I dont have a nother NAS nor do I have subcription to cloud but I will have multiple drives in the NAS

[silent flax]

in any case, you want multiple levels of backup for the important stuff. Just in case something happens, cause anything can happen

you could have your house burn down or flood, which is why offsite or cloud backups are recommended

[peak cloak]

https://www.backblaze.com/blog/the-3-2-1-backup-strategy/

[torn moth]

My job is gig based and I get paid by the hour so my income isnt stable so I cant do subcriptions based storage

[peak cloak]

it could be another nas in a different location

[silent flax]

but you can still do something like backing up the most important things on hard drive once a week you keep elsewhere ?

[peak cloak]

or that for the most important things ^

[torn moth]

I literally just said I have bearly money

[silent flax]

well maybe not now, but down the line

[peak cloak]

good data backup isn't cheap

[torn moth]

I could get extra external hdd later

[torn moth]

Yes ofcourse

[silent flax]

i mean your situation is still better than the "I had my very important documents on this USB flash drive that just died, can we rescue them somehow?" 😄

[peak cloak]

the usb drive in question

[torn moth]

80 TB storage of Teemu

[silent flax]

and sometimes, you can use services you would pay for anyway. For example if you got Microsoft 365 Personal, that is 1TB of Onedrive storage. Or if you got Microsoft 365 Family, that is 6 users, each 1TB, so 6TB total of Onedrive storage.

And as a bonus you get MS Office apps 😄

but again, you don't have to do it right away. Just keep it in mind that for safety, you might want to have a plan for extra offsite copy in future.

[torn moth]

To connect my pc and the NAS I am guessing i need a small switch between them?

[peak cloak]

you can connect it to your router

but if you just want communication between nas and computer, you can wire it directly

[torn moth]

The router is in a nother room and I am already useing the eathernet port on my pc

[peak cloak]

put nas next to router

[pseudo blade]

Yeah my ISP and my last ISP hand out /48's like they're supposed to (/56 is honestly OK too for consumers)

[topaz patrol]

Ew IPv6

[plain siren]

[clear igloo]

How DARE you speak ill of our lord and savior IPv6!!!

[topaz patrol]

Fuck IPv6

[topaz patrol]

Exactly

[dusty stream]

ipv6 is random ngl

[topaz patrol]

Like they're supposed to?

I'm pretty sure APNIC recommends a /64 or /56 for residential and SMB

[pseudo blade]

/64 breaks stuff, including slaac

[clear igloo]

smaller than /64*
(/65 to /127)

ISPs should hand out up to /56s though if requested by home users at least

but I can see the vast majority of home users only needing a single /64 since they don't do VLANs where multiple /64s are needed

[silent flax]

/64 is literally the smallest, indivisible size. There is no smaller IPv6 segment than /64. Thus you can't have your own router behind an ISP router which gives out only /64

[topaz patrol]

The vast majority of residential subscribers and SMBs will only have one network

[silent flax]

they might still want to add own router behind the ISP router for stuff the ISP router doesn't allow. My ISP router is so locked down it is not even funny

[topaz patrol]

BYO router. Problem solved.

[silent flax]

all i can change for IPv4 for example is DHCP range. turn off DHCP range ? Not possible. Custom DNS entries ? Not possible...

[silent flax]

you can't use your own router at pretty much any ISP here, certainly not for our cable ISPs

maybe for VDSL, but even there it is problematic

[topaz patrol]

Sounds like those ISPs need to adjust their BYO policy or allocate a larger prefix if requested

[topaz patrol]

Yes this is exactly what APNIC recommends

[opal pagoda]

it is great that last year our communications regulators mandated isp-s to allow byo router

[cinder sapphire]

Would a VPN mask data travel if someone accesses my server?

Or would it need to be active on both host and client

[thick minnow]

Is D-Link wifi card any good?

[plain siren]

its really not

2600:1702:1c31:6c10:721a:b8ff:fe06:d673 is my current IPv6
2600:1702:1c31:6c10 is the network
721a:b8ff:fe06:d673 is my host piece of the IP
70:1A:B8:06:D6:73 is my Mac Addr
If we add 2 to the first hex to indicate this was an EUI-64 Generated Addr, we get 72:1A:B8:06:D6:73
Now lets add FF:FE to the middle of it to get 721a:b8ff:fe06:d673 which happens to the be the second half of my IPv6. That means IPv6 addresses are generated based of the Mac Address of your network card (assuming you dont have randomized ipv6 enabled)

[dusty stream]

holy shit

do you even remember that?

[plain siren]

we can take it even further

[plain siren]

I do have it memorized yes

[dusty stream]

damn nice

[plain siren]

lets say I was to take my device to another network... if i knew what the network's first half of the IPv6 is, I already know the devices IPv6

Also without the need of NAT, I dont need to port forward. The Internal IPv6 is the External IPv6 so long as I open the firewall

[topaz patrol]

Until iPhones fuck everything up with randomised MAC addresses

[plain siren]

With this knowledge, we really only need the first 3 octets in order to know "where in the public network to go". We have the internal knowledge of the "subnet ID" (VLAN) since we set that (usually, some ISPs only give you a smaller piece and use part of the subnet id to indicate local geo area)

2600:1702:1c31:6c is actually my AT&T Assigned network prefix

the 10 after it is VLAN 10 for me.

01 is VLAN 1. 02 is VLAN 2... etc

6b, 6c, 6d is assigned in dallas (mostly)

so if I knew "AT&T, Dallas, VLAN 10, The Device MAC Addr", I can generate the IPv6 with that information

2600:1702:1c31 6b/c/d 10 721a:b8ff:fe06:d673

[dusty stream]

https://tenor.com/view/worried-scared-oh-no-stop-it-fearful-gif-12534009

nah, i’d better stuck with IPv4

[peak cloak]

it's the same as ipv4 just hex

and bigger

just that ipv4 ran out of ips and started NATing

[opal pagoda]

exactly

just bigger nuber = harder to remember

[plain siren]

If I have to remember an IP, its getting a DNS name

also the conversion from IPv4 to a Number if you wanna try the above is;
(16777216 * First Octet) + (65536 * Second Octet) + (256 * Third Octet) + Fourth Octet

so it would be (16777216 * 127) + 0 + 0 + 1 = 2130706432 + 1 = 2130706433

and if you do http://2130706433/ you get http://127.0.0.1

LOL discord converted that

[silent flax]

until stateless/statefull switch in IPv6 settings throws wrench into that math 🙂

[torn moth]

What sites can I learn about networking at home? I wanna connect two computers

[thick minnow]

Is D-Link wifi card any good?

[peak cloak]

If it's just to connect 2 computers just run Ethernet between the two

They'll setup linklocal ips automatically

[torn moth]

Cant cause already useing it on my main pc for internet

[peak cloak]

If you are trying the nas to the network you need a switch

[torn moth]

Yeah I got that

[peak cloak]

Then just connect the Ethernet going to PC to the switch then switch to PC and switch to nas

[torn moth]

Damm plug and use has gotten really good

[clever tartan]

anyone know any good options for quieter fans for my switch? its a cisco sge2000 (and no im not changing it out) and uses 2x40mm fans, ideally i want to keep the cost low but anything under 40db would be really really good as my switch is 55db at the moment and is right next to my bed and desk

[peak cloak]

I mean it's a switch, it doesn't require config

[opal pagoda]

how jank do you want to go?
no jank: noctua swap
yes jank: 140mm fan hot rod

something like this
pic from https://www.instructables.com/Quietening-an-ethernet-switch/

[clever tartan]

i would do that but

i would prefer to keep the use of the rack unit above it

and i have no means of cutting into metal

i also dont have £30 to throw at this £30 switch

[opal pagoda]

then remove fans compleatly and if it dies it dies

[clever tartan]

would one of those 1u fan things pointed at the bottom/top of it help with the cooling? the bottom is warm to the touch with the fans starved of airflow

[opal pagoda]

if you have a spare 1u below the switch for that just mount the switch upside down

and do that mod

[clever tartan]

i have a spare u on both the top and bottom but i just cant put a hole in the switch because i cant cut metal with the stuff i have

[opal pagoda]

all you need is a drill and tin snips

[clever tartan]

would the 1u fan thing help at all though, i really dont want to cut my switch

[opal pagoda]

i dont really know what layout that switch is internaly

[tight pecan]

Noctua fans!

[clever tartan]

too expensive, i got the switch for £30 and dont want to spend £30 on fans for it

[tight pecan]

Idk then

The only way to make it quieter is to replace the fans.

Or remove them completely

[clever tartan]

might get a generic fan on amazon with decent reviews, one here is claiming to be 17.5dB(A) so might be a good bet

[clever tartan]

that would be ideal but i need the switch to work haha

[opal pagoda]

cheap way might be to just vibration dampen and undervolt current fans

[clever tartan]

undervolting would be ideal but how on earth would i do that, management interface is as good as gone because its got no options for fans and only works in IE5 and firefox 37 and below

[clever tartan]

ill take it down and see what reaction it has to having no fans

[opal pagoda]

are the fans 2 pin or 3/4 pin?

[clever tartan]

no clue

ill have a look

[clever tartan]

they are 3 pin

and i just realised that its probably best to just replace the fans because one is responsible for cooling the PSU

replacing the fans because people say that they are basically inaudible and they are only £12 for 3

[plain siren]

Stateful IPv6 = you are doing it wrong

DHCPv6 shouldnt even be considered except for when you are using DHCP Options and DNS Server assignment.

SLAAC is the only way to go

[topaz patrol]

IPv4 is the only way to go

[plain siren]

bleh

[topaz patrol]

The IPocalypse is a lie

[plain siren]

I wish it was

I cant buy a block of ipv4 without loosing an arm and a leg. And my boss who has a massive ipv4 block they are sitting on is slowly selling it for tons of money

tons of money

[topaz patrol]

IPv4 space is still pretty cheap

[peak cloak]

You need it though

Sometimes

Things like android not implementing DHCP6 ruins v6 implementation and adoption

[plain siren]

Ive never used it

And I would prefer people didnt.

Even for v4v6 or v6v4

[peak cloak]

My understanding is that it's heavily needed in a corporate environment

[plain siren]

It is only when IT just straps IPv6 on top instead of actually deploying it

but I havent seen a corporate environment use DHCPv6 in years

Many years

now most routers actually have sane defaults that allow for just flick on and go

blast prefix and have a nice day

[peak cloak]

¯_(ツ)_/¯

I don't really play with networking anymore, but I heard of some vendors giving entire /64s to Android devices because they didn't support it

[thorny osprey]

how to have tp link cloud services in my openwrt tp link router?

[ornate jungle]

? https://www.tp-link.com/us/support/faq/1366/

[ornate jungle]

Though I don't understand what you mean by "openWRT TP-Link router" in this context... elaborate.

[thorny osprey]

I installed openwrt on my router

But i still want da tp link tether n cloud stuff

[ornate jungle]

Not possible. OpenWRT won't have any of TP-Link's cloud features baked in. If you want to use TP-Link's cloud stuff, you need to be using their firmware.

[thorny osprey]

Anyway to somehow get it on openwrt? Any linux shenanigans?

[ornate jungle]

Sure - ask TP-Link for the source code to their firmware, extract the bits and pieces that make tether work, then add those features into your own version of OpenWRT's source code, compile it, and bam! Done.

[thorny osprey]

O h.

[peak cloak]

Is that like a VPN?

Use something like tailscale

[regal plover]

should i enable or disable ipv6

[topaz patrol]

It’s remote management for the router and a smartphone app

TUAC with less bells and whistles

[topaz patrol]

https://cdn.discordapp.com/attachments/387022787480387605/1317458100852228219/io45wpcapjj61.webp?ex=6760bc38&is=675f6ab8&hm=d7c4d2b39e6355dfadfdff1f1bc14ad12634e69c471f5a6987d84230730a9d2d&

[random siren]

skill issue

[topaz patrol]

IPv6 is satanic

[steady yacht]

so i can now do 10gig networking for no reason other then the network card was cheap

[thorny osprey]

i dont think so

[silent flax]

but it can't do 2.5G or 5G

[onyx wasp]

I want to upgrade my home network setup.

I going to get some Unifi APs (Probably U6 Pros)
I need to filter traffic (block certain sites, stop some ips pinging others)
I also want to host a samba server (or whatever its called)

I need to know what to use for the firewall. A Unifi Cloud Gateway Ultra or A NUC
If I should get a NUC which should I get? It needs to have 2 ethernet ports

[pseudo blade]

You can buy "low noise fan adapters" for PC case fans which just sit inline and drop the voltage. Seems like I can buy the Noctua ones 3 for $6USD or so

If you take the fans off, you REALLY SHOULD take the top off and give it some space, the older switch chips run hot and often need the cooling

Putting a 120mm over the fan heatsink would be ideal and costs nearly nothing except a bit of space

[pseudo blade]

A NUC will cost more and take more effort but let you do other things/things the way you might want.

So pick your poison I guess lol

[onyx wasp]

I would like to host a NAS as well (a samba server) so probably should go with a nuc

What nuc would you recommend

I want to buy second hand probably off of ebay

[pseudo blade]

They make kinda awful NASes unless a few TB is all you want

[onyx wasp]

I have a hard drive

I just want to host a samba server

[pseudo blade]

¯_(ツ)_/¯

Go look at ServeTheHome reviews of mini PCs and pick one you like reviewed in the last year or so

[torn moth]

I am trying to access my tp link browser manager but I cant connect to it

[thick minnow]

Is there an actual way to improve ping?

[dusty stream]

live near server

[thick minnow]

hard

[clear igloo]

fiber all the things

[ornate jungle]

Those pings are on average what most people I know (who don't live in the same city as one of the datacenters OR who don't have fiber) receive - they're definitely playable. My ping to their Oregon server instances is between 40-85ms depending on a wide variety of factors, and I'm ~250km away.

[silent flax]

to be fair, in Europe on better internet connections (that is anything better than VDSL) it is usually up to 40ms, 40-60ms is reserved for xDSL or more remote locations in Europe

like let's say Greece to Germany etc

[ornate jungle]

Oh for sure - the distances are also usually half that compared to North American internet connections, so makes sense that one might see ~20-40ms in Europe.

[silent flax]

in Overwatch or Marvel Rivals i have <40ms ping even on crappiest VDSL

(when visiting mom, she can't get anything better than this 😦 )

15/3 is literally the best VDSL internet she can get - but it is still miles better than the wireless slower one she had before

[tired raft]

Can anyone help me decode some internet/isp connection issues. What is SNR/MER, what is OFDM and what does "Corrected" and "Uncorrected" mean. My speed/connection keep crashing to some kind of limp mode of 30Mbps. When its working ok, it's normally a pretty quick 500Mbps. I can reset the modem, either by cord pulling or by using my ISP's website to send a reset signal, and then it goes back to working for a short amount of time. Sometimes minutes, sometimes hours, before going back to this 30Mbps mode.

[opal pagoda]

SNR is signal to noise ratio
MER is Modulation error ratio
OFDM is Orthogonal frequency-division multiplexing
you as a service consumer cannot fix any of these as this is mostly affected by cabling outside

you should call isp and get them to diagnose and fix it

[tired raft]

Can it be caused by my devices? Maybe its a placebo, but it sure feels like disabling the wifi on my router helps.

[opal pagoda]

it is always possible that router is so badly made its own wifi causes interferance with its onboard modem

what modem/router do you have?

[tired raft]

Maybe though its some piece of IOT garbage one of my roommates has trying to phone home? Screaming into the void? My router is an asus brand with AC in the model name, I don't think its that old or poorly made, though I do hate the GUI, maybe its time to upgrade.

RT-AC68U

[opal pagoda]

what about your modem?

[tired raft]

The modem is an arris SB uhhh.... idr, but it was docsis 3.1

SB8200 I think, according to this bestbuy email

Also not ancient, also hate the GUI, also maybe time for an upgrade.

[thick minnow]

1300km from frankfurt i a m

[opal pagoda]

while distance does matter isp with bad peering make things much worse as packets travel on non optimal paths that are "cheapest" to them

[thick minnow]

well if it matters anything, my isp doesn't provide me optical wifi, instead its old phonelies

[random siren]

there is no consumer optical wifi. you probably mean fiber

[opal pagoda]

It doesn't matter much
At home i have vdsl and i have checked ping with that website and have gotten 36ms
At work few km away with dia (much better than consumer PON fiber) i get 32ms

[silent flax]

either the signal is too strong or too weak, or being interrupted. None of that is user fixable. Call your ISP, ask them to look at it

[severe hatch]

Has anyone here a Unify A7 Pro access point and would like to share their opinion? I've read mixed comments in forums and on reddit, so I'm unsure, if I should go with the A6 Pro instead

[waxen scroll]

Why not buy it and return it if you don't like it 😘

I returned the a6 for being too buggy

Maybe they fixed it since idk

My bad it was the u7 pro max I returned

I had issues with both 6ghz dropping out and the injector was failing too

[severe hatch]

You're not wrong. Trial and error is probably the best way

[thorny osprey]

how do i turn my windows machine into a nas? (on windows NOT linux)

[tacit rivet]

right click on the drive and click share

[thorny osprey]

shows stuff liek dis

[opal pagoda]

same machine or a diffrent one?

you need to put in a dns name/ ip address

[thorny osprey]

Diff machine

[thorny osprey]

wdym

[opal pagoda]

example:
\\10.10.1.1\d

[thorny osprey]

liek dis?

[opal pagoda]

Y

[thorny osprey]

still same error

[opal pagoda]

have you checked firewall rules on host machine?

[thorny osprey]

i turned it off

[opal pagoda]

try just puting the ip address inside file explorer directory bar

with \\ in front

[thorny osprey]

nothing happens

nvm dis happens

[dusty stream]

https://tenor.com/view/tyler1-dead-ko-faint-gif-17440398

[rare sierra]

Did you set the permissions correctly and made sure u selected the right folder to search for. For example //IP address/folder. And make sure you're on the same network and you have the right ip address

[thick minnow]

Go to Control Panel > Programs > Turn Windows features on or off.
Check SMB 1.0/CIFS File Sharing Support.
Click OK and restart your machine.

The format should still be \<IP address><shared folder>.

[thick minnow]

Open a Command Prompt (Windows + R, type cmd, and press Enter).
Type ping 192.168.1.3 and press Enter. This will check if the remote machine is reachable on the network.
If the ping is successful, it means the remote machine is online.
If it fails, you may need to fix network settings like IP addressing or firewall issues.

On the remote machine (192.168.1.3), check the shared folder settings
Right-click the folder you want to share
Click Properties > Sharing tab.

if that doesn't work here is a powershell script to do it for you https://pastebin.com/raw/283AY03x

[random siren]

if smb 1 does not work deinstall it immediatly again. that thing is filled to the brim with vulnerabilities and shouldnt be used anymore in normal circumstances

[topaz patrol]

You shouldn’t be using SMB1 in 2024

[thick minnow]

I agree

[topaz patrol]

Yet you are recommending they turn it on

[thick minnow]

it could fix the problem they were having

why you would want to share drives over the network

idk

[random siren]

using smb or any other network file sharing protocol such as nfs is normal. but there are 3 version of smb. smb2 is still used but technically superseded by smb3. smb1 should not be used for any reason anymore

[thorny osprey]

home nas xd

[thick minnow]

?

[thorny osprey]

im trying to use my old laptop as a nas server

[thick minnow]

oh

[thick minnow]

python -m http.server 8080 --bind 0.0.0.0

[thick minnow]

use https://git-scm.com/downloads/win or https://www.mingw-w64.org/ to help you set it up easy

and use this for the python server https://devguide.python.org/

you could always just set up docker too

[clear igloo]

They want to share files with Samba, why are you having them setup python?

[thick minnow]

he said he wants to use his laptop as a server ?

[clear igloo]

A NAS

[thick minnow]

oh

nvm then

https://www.geeksforgeeks.org/understanding-network-attached-storage/

[random siren]

bro if you arent taking the piss, just stop responding if you arent sure what you are talking about. most if not everything you posted is not what was asked for or is harmful

[opal pagoda]

Why are you trying to do that on windows?
If it will be a dedicated nas just use linux or freebsd based os

[thorny osprey]

it aint a dedicated nas

im also gonna run mc server on it lol

[opal pagoda]

You can do that on linux too

Arm even

You also avoid pain of windows updates shutting down your machine

[delicate yew]

Hey all
Anyone know of some good POE cameras I can use for inside surveillance
Something that doesn’t require a monthly subscription

[peak cloak]

I have reolink cameras, they are descent for the price, but I have issues with the video freezing every so often

[delicate yew]

do they have a desktop app?

[peak cloak]

I think they actually do, but I don't use that. They have a viewer in browser as well as RTMP and RTSP support

I use synology surviellence to actually record and view

[delicate yew]

Oh what? I didn’t know synology had a system

Aight bet

[novel marsh]

could i ask someone for a network tip on a problem im having?

i have a 1gbps internet connection, with wifi works perfectly, with my ethernet its locked at 100mb, i have an asus tuf gaming b650 plus mobo and the only ethernet port is 2.5gb, i updated drivers, unlocked the 1gbps full duplex from the internet settings, the cable is a cat5e wich should be good up to 1gb but still in status it shows "100mbps"

[wheat dome]

Does your router have 1Gbit/s LAN ports?

[novel marsh]

not really sure how to check but it should be

[novel marsh]

.

[wheat dome]

Well, what is the model number?

[novel marsh]

its the tim hub+ zte zxhn h388x and from what i've read on the site it has 3 lan ports at 1gbps

[peak cloak]

it's probobly your cable

can be bad crimp or something, try a different cable

[wheat dome]

Was just about to say mabye you rolled over the cable with your office chair

Buy a real cable next time
Like Cat 7 S/FTP

[novel marsh]

it come directly from the wall behind the desk into the port, i dont even see it

[wheat dome]

Cat 5e reverts back to 100mbit if damaged

[novel marsh]

but it supports to at least 1gbps so i dont understand how it could be the problem, and it passes through the wall so i don't think its damaged

[peak cloak]

could be in wall cabling or wall connections

without a cable tester we are speculating here

[peak cloak]

no, cat 7 is a scam

[novel marsh]

when the techs came to install the optic fiber they tested the cable and it was good

[wheat dome]

Tsk. Cat 7 superior

[peak cloak]

good as in it works, or good as in it's gig

if you have a laptop or can move, try the cat 5e cable from router directly to computer

that will isolate the wall calbing and just test that one cable

[novel marsh]

not even a month ago, we thought it was a mobo issue since i had a noname mobo, but now that i have an asus tuf b650 plus idk

[novel marsh]

it reached 700mb

[peak cloak]

the in wall cabling?

[novel marsh]

ill try the cat5e with a laptop and a cat6

[novel marsh]

i guess

[wheat dome]

[Tsk. You Clearly need Cat 7.
https://www.amazon.se/Goobay-92664-kabel-dubbel-skärmad/dp/B0759T3SBY

[peak cloak]

anything more than 6a is a waste of money. Cat 7 spec technically doesn't even specify 8p8c connectors but TERA connectors which no one has

[wheat dome]

My Cat 7 cables does support my 1Gbit internet speed, just saying.

The cables are pink even!

[peak cloak]

cat 5 can support 10gig over short distances as well, your point?

[wheat dome]

Nvm, the cables are magenta. Day ruined.

[delicate yew]

Really? I thought it was 500mb

[peak cloak]

they are all 4 pair wires

it's just a matter of signal integrity

stuff like Power Sum Equal-Level Far-End Crosstalk (PS-ELFEXT), Near-End Crosstalk (NEXT), Attenuation and Return Loss (RL)

[delicate yew]

Ah
Imma have to come here when I Rewire the houses internet
But that’s gonna be a couple years till my parents retire or get another house

[peak cloak]

right now the default is cat 6

6a if you really want to futureproof

[wheat dome]

isn't CAT 7 S/FTP cable more stress resistant?

Which cable can survive most cars running over it

[peak cloak]

https://tenor.com/view/bunny-wth-confused-huh-what-gif-6154003038879814

also that would be fatigue not stress fyi

[wheat dome]

Maybe it's a SFTP CAT 6 outdoors cable I should be looking for.

[peak cloak]

armoured

[wheat dome]

Like 85$ per meter, now we're talking

[novel marsh]

i have a cat6 cable in my main pc, and i've tried it on a laptop and still shows 100mbps so i think its the router

[peak cloak]

you did router -> Laptop directly and it's still 100mpbs?

[novel marsh]

i want to try to update my modem but i have no idea how o

[novel marsh]

yes

i turned off every power saving options too

[peak cloak]

and on wifi it's >100mbps?

[novel marsh]

yup

[peak cloak]

try a different cable or device

the router shows it supports gig

[topaz patrol]

At that point just go like 12 core fibre

[thorny osprey]

I tried installing da snapshot build of immortalwrt (fork of openwrt) but it shows dis
can any1 help

oh

[thorny osprey]

whyyyyy is da intenret led of my router glowing red 💀

[lavish relic]

Would this be the place to ask about land lines

[ornate jungle]

Probably the most relevant place to ask.

[lavish relic]

I need to get a phone jack on the other side of the house but can't run cables

And these wireless adapters seem out dated and expensive

[ornate jungle]

Yes, because analog phone systems are dated and expensive to maintain. What is your end goal here? Why do you need a phone jack elsewhere? What is plugging into it?

[lavish relic]

This will sound dumb but a wireless phone system

[thorny osprey]

guys i uh tried to force sysupgrade a firmware to my router and now its WAN LED is glowing red
am i cooked?

[lavish relic]

I know the obvious answer is put the main answering machine with the modem but I would rather die then have it in my room

[ornate jungle]

No idea. I don't even know what router you have, nor what "sysupgrade a firmware" means. Could be cooked, or might just need a factory reset / recovery procedure completed.

[ornate jungle]

You're gonna need to elaborate... What devices do you have in the home that require analog phone? (How many need to plug in?) If it's just an old school answering machine and a cordless phone base station, you can get RJ-11 splitters... or get a cordless phone system with an answering machine built-in?

[thorny osprey]

I have a archer AX23 and I previous had a snapshot build of immortalwrt (fork of openwrt) but that build doesnt even have opkg so I tried to go to a lower and stable firmware build by sysupgrade thingy thru SSH and now the wan led is glowing red

[lavish relic]

Actually I fell kinda slow I forgot they make wireless kits like this

[ornate jungle]

Sounds like it's time to recover the router.

• https://www.tp-link.com/ca/support/faq/1482/
• https://openwrt.org/toh/tp-link/archer_ax23_v1#oem_bootloader_webrecovery_installation

[lavish relic]

We all have our moments lol

[ornate jungle]

All good. This is why I encourage people to fully list everything about their problem / issue when posting, cause more often than not, we're trying to achieve something the hard way when there's an easier / simpler solution out there. 👍

[thorny osprey]

TY

[thorny osprey]

can i overclock my archer ax23

[topaz patrol]

You can buy WiFi ATAs

But DECT is a better option

[pseudo blade]

I don't think you can usually just get two ATAs and have them bridge like that

It's all good if you run a PBX but that's not exactly common for most users here

[pseudo blade]

...What would be the point?

Looks like both versions are based on the Mediatek MT7621 which... isn't exactly fast. (880mhz*2 MIPS, yay....)

You'll get significant (several times throughput multiple) performance improvements if you enable offloading+fastpath and they aren't presently enabled.

Beyond that the answer is simple: "buy a router capable of your expected throughput with your desired feature set"

[topaz patrol]

You very much can

It’s a horrible way of doing things, but very possible

[thorny osprey]

cant
dis rotuer was already expensive xd

[thorny osprey]

idk

[thorny osprey]

any1

[topaz patrol]

Even if you did, it wouldn't provide any tangible benefit

[thorny osprey]

i know

but how do i still do it

[topaz patrol]

You obviously don't have the knowledge to do it at the moment

[thorny osprey]

how do i get dat knowledge

[dusky ice]

Maybe time to ditch your tplink router
https://www.bleepingcomputer.com/news/security/us-considers-banning-tp-link-routers-over-cybersecurity-risks/

[hallow tusk]

Nah, just flash it with OpenWRT - The threat they are worried about is compromised units being used in botnet attacks, and it's not only TP-Link units that are being compromised/zombified; They just get the headlines because they're making up nearly 2/3rds of consumer routers these days.

(Ironically there was an OpenWRT zero-day that led to a bunch of units being compromised anyways, so the age-old adage applies: Patch yer stuff.)

[clear igloo]

Why patch when we can ignore old devices and sell new ones 😛

[hallow tusk]

lol I wish that wasn't so true...

[pseudo blade]

If you can't afford >$50 routers you definitely can't afford to kill one

I'm also mystified how you call that expensive, it's about as cheap as they get

I guess it's twice the price of a hAP lite

[naive nest]

Does anyone know why my upload speed is better than download on WiFi?

[pseudo blade]

Antenna problems, congestion at the ISP level

Saw it a lot on NBN co.'s old oversold fixed wireless services

[naive nest]

Just using the default signal settings at the moment on the AP

[pseudo blade]

Doesn't mean much for either of those two hypotheses

[naive nest]

I doubt it's the ISP since all my wired devices get symmetrical speeds

Might just be interference because I have three wireless networks