#networking | Linus Tech Tips | Page 174

waxen scroll Nov 25, 2019, 2:41 PM

#

if the server is doing fileshares then thats when i might go "ok, perhaps keep that on the same network as the clients, as routing can be less performance than switching

#

oh, then keep what you did

quick hollow Nov 25, 2019, 2:41 PM

#

Okay thanks for the advice

#

I had the edgerouter plugged earlier but it broke our phone system because I guess I forgot to forward a few ports.

#

So i'm waiting for the phone company to call to give me the correct ports. They handle it as its all their equipment and I can't log into it.

#

So running on my ancient router again currently.

#

But when I put the edgerouter back in i'll test it for sure.

waxen scroll Nov 25, 2019, 2:44 PM

#

did you put rules in to stop the server from being able to open connections to the company LAN subnet unless a device on the company LAN asked to open the connection?

#

if you get hacked that will slow them down

quick hollow Nov 25, 2019, 2:45 PM

#

I have no clue how to do that tbh.

#

But i'm sure i'll figure something out

waxen scroll Nov 25, 2019, 2:46 PM

#

you make a rule that says from company LAN to game server allow NEW,ESTABLISHED. from game server to company lan, only allow ESTABLISHED

quick hollow Nov 25, 2019, 2:46 PM

#

I know very little about networks. I just follow tutorials I find online.

#

Ah okay. Ill set that up

#

I am just the IT assistant. I'm trying to learn these things while my manager does more important stuff.

quick hollow Nov 25, 2019, 3:11 PM

#

Where do I make these rules? In Firewall policies?

little schooner Nov 25, 2019, 3:41 PM

#

I'd make a great assistant to a company but I won't look for intern until next year

#

Right now it's fun to help with the lab at a college where basically IT politics are going on

#

@waxen scroll and those rules are needed because Edgerouter isn't stateful, right?

#

Stateful routers don't need such extra statements

#

If offloading is enabled, it makes it impossible. Correct me if I have the wrong idea

waxen scroll Nov 25, 2019, 3:47 PM

#

the term stateful is only a firewall term. edgerouter uses linux iptables. it can be considered as supporting state but it wont unless you program it that way. with iptables only the first packet in the connection is checked on the FW rules and further packets are not. if you were to put a deny statement in after the connection is established it wont deny it

#

@quick hollow apply an inbound rule on eth1 saying source = <company lan network>, destination = 10.0.0.0/24, allow state new.

#

apply an inbound rule on eth2 saying source = 10.0.0.0/24, destination = <company lan network>, allow state established, related.

#

i think i got this right. sometimes i confuse inbound and outbound lol

#

the point is to stop traffic as it comes into the interface of the edgerouter

#

closest to the source

little schooner Nov 25, 2019, 4:06 PM

#

Yeah I do something like that at home

#

Stop at their vlan interface

quick hollow Nov 25, 2019, 4:59 PM

#

Okay

#

Thanks so much for the help people. I know my ignorance must be annoying haha.

waxen scroll Nov 25, 2019, 7:52 PM

#

nah, the ignorance from LTT forums is more annoying

#

right, @clear igloo ?

#

ping linusPerfect

#

@little schooner azure is charging me $2/day to keep an idle vpn active

#

lol

#

i thought it was free

little schooner Nov 25, 2019, 7:54 PM

#

@waxen scroll yeah there's no way I could have that. Should be free

waxen scroll Nov 25, 2019, 7:55 PM

#

their free tier must be strictly internet only

sharp stone Nov 25, 2019, 8:13 PM

#

@vapid dune How much do you pay for that kind of speeds? 😂

#

Nearly on that 1Gbps

vapid dune Nov 25, 2019, 8:25 PM

#

a bit shy of 50/month @sharp stone but I'm on a bunch of promos and in Canada

#

regular is probably 130

little schooner Nov 25, 2019, 9:20 PM

#

@vapid dune it is 50 flat here but only for 150 down/up

#

Lack of competition

little schooner Nov 25, 2019, 10:28 PM

#

@waxen scroll just as I predicted, my prof from other college said everything in the classroom is down. No internet, no datacenter access

#

I told him this like days ago and the teacher in there (not my prof) is complaining now

#

I dont know what we're going to walk into tomorrow

#

I just hope student didn't take our pfsense router

waxen scroll Nov 26, 2019, 12:39 AM

#

why no cameras?

little schooner Nov 26, 2019, 1:17 AM

#

@waxen scroll no budget

ornate jungle Nov 26, 2019, 4:41 AM

#

@little schooner oof that sounds illegal - in Canada, the CRTC might not do any form of price regulation, but they sure as heck require that ISPs disclose both the upload, download, and data caps included with all plans, including if Unlimited isn't actually unlimited.

silk oracle Nov 26, 2019, 10:38 AM

#

at least it is better then where I am....

#

$100 45/15 DSL or bandwidth caps

#

and that is a biz connection

#

the non biz is 20/1 until recently

little schooner Nov 26, 2019, 5:43 PM

#

@waxen scroll false alarm. Gravity unplugged the routers power cable

clear igloo Nov 26, 2019, 5:53 PM

#

ooof

waxen scroll Nov 26, 2019, 6:35 PM

#

why couldnt the other IT professor diagnose a power cord?

#

@clear igloo the real oof is always in the comments

clear igloo Nov 26, 2019, 7:00 PM

#

yup

hallow nimbus Nov 26, 2019, 7:59 PM

#

LMAO unplugged powercord

little schooner Nov 26, 2019, 8:04 PM

#

@waxen scroll prof told the one lecturing that night to move to another room to teach. My prof was concerned that he would break the network more

waxen scroll Nov 26, 2019, 8:26 PM

#

@clear igloo

#

https://store.steampowered.com/app/353370/Steam_Controller/

Steam

Steam Controller

Experience a new level of precise control for your favorite games. The Steam Controller lets you play your entire collection of Steam games on your TV—even the ones designed without controller support in mind. The Steam Controller features dual trackpads, HD haptic feedback...

Price

$5.00

Recommendations

8124

▶ Play video

#

dat price

waxen scroll Nov 26, 2019, 10:51 PM

#

techquickie

little schooner Nov 26, 2019, 11:34 PM

#

I guess no one wants it

waxen scroll Nov 26, 2019, 11:48 PM

#

at that price plenty of people want it

median ore Nov 27, 2019, 10:46 AM

#

Hello guys, i need some advice... again 😄 I want to buy an ethernet switch to connect my bedroom and plug my desktop and my NAS to a Gigabit connection, and still have spare port to connect whatever device i need to connect to my router. I have 1 Cat6a ethernet cable to connect my room and my router have 1GbE ethernet ports. I was looking for a switch that can have at least two 10GbE port (to connect my NAS and my PC together [I would have to buy two 10GbE ethernet card though but it won't be a problem]) and all other ports on the switch would be 1GbE. But do i buy a unmanaged or a managed switch so i can have fun configuring it ? (it's also more expensive as i read)

clear igloo Nov 27, 2019, 12:14 PM

#

If you want to configure stuff then you need a managed switch of some capacity

median ore Nov 27, 2019, 12:37 PM

#

yes but if they are too expensive i might get a unmanaged one. What brand would you recommend ?

quick hollow Nov 27, 2019, 1:02 PM

#

@waxen scroll Okay im creating the ruleset. Source/desination I used the 'Interface Network' option. Correct?

#

Also I found State under Advanced

#

Under basic which action do I select?

waxen scroll Nov 27, 2019, 1:16 PM

#

correct. under basic you just say accept and enable

quick hollow Nov 27, 2019, 1:22 PM

#

The second IP is working great btw.

#

Do I need to do anything under Interfaces?

#

And configuration default action should be drop ye?

clear igloo Nov 27, 2019, 1:23 PM

#

@median ore if you want to keep it simple, get this
https://smile.amazon.com/dp/B07LFKGP1L/?coliid=I361WESB3IUL3Q&colid=WVY0CRAP8QC3&psc=1

median ore Nov 27, 2019, 1:24 PM

#

@clear igloo this is not an ethernet switch 🤔

clear igloo Nov 27, 2019, 1:24 PM

#

Yes it is, you just need these
https://smile.amazon.com/dp/B01KFBFL16/

#

or you go fiber 🙂

quick hollow Nov 27, 2019, 1:26 PM

#

@waxen scroll

📎 unknown.png

#

Correct?

#

Allow state new on 1 and allow state established on 2 as you specified.

waxen scroll Nov 27, 2019, 1:27 PM

#

should be good

quick hollow Nov 27, 2019, 1:27 PM

#

Under configuration its set to drop

#

And I haven't done anything under interfaces

waxen scroll Nov 27, 2019, 1:28 PM

#

actually no, its not good now that i think about it. it needs to be part of the rules you already have, otherwise all traffic except that will drop

quick hollow Nov 27, 2019, 1:29 PM

#

Good job I didn't save it yet then haha

waxen scroll Nov 27, 2019, 1:29 PM

#

😼

quick hollow Nov 27, 2019, 1:30 PM

#

Nevermind

#

I guess it automatically applies.

waxen scroll Nov 27, 2019, 1:30 PM

#

it shouldnt do anything though, you didnt assign it to interfaces

quick hollow Nov 27, 2019, 1:30 PM

#

Yeah

#

📎 unknown.png

waxen scroll Nov 27, 2019, 1:31 PM

#

ill need to think about how you can put it in further. i just got to work though and need to focus on some other problem that happened overnight

quick hollow Nov 27, 2019, 1:31 PM

#

Alrighty no problem.

#

Thanks for the help

#

At least the network is working properly

waxen scroll Nov 27, 2019, 1:32 PM

#

mines not!

quick hollow Nov 27, 2019, 1:33 PM

#

uh oh

waxen scroll Nov 27, 2019, 1:33 PM

#

a critical issue happened with a big switch last night and some how it "self healed" an issue that doesnt self heal

#

i call bullshit

quick hollow Nov 27, 2019, 1:35 PM

#

Sounds like when I tried to put the edgerouter in last week and it knocked our phone system offline. I put the regular router back and the phones were still offline. Found out there was a lifeline setting which pings every 1 minute and if it doesn't receive anything it shuts down the sip lines.

#

Stupid little issues which are a headache

#

btw under portforwarding I just add eth2 as a LAN interface right? Then I can port forward as usual.

#

📎 unknown.png

waxen scroll Nov 27, 2019, 1:37 PM

#

yes

quick hollow Nov 27, 2019, 1:37 PM

#

Awesome

#

My plan is coming together

waxen scroll Nov 27, 2019, 1:37 PM

#

📎 unknown.png

#

mine

quick hollow Nov 27, 2019, 1:37 PM

#

1.100

#

Interesting

#

Switch?

waxen scroll Nov 27, 2019, 1:38 PM

#

yes, its a vlan that separates my IoT devices so i can firewall them

quick hollow Nov 27, 2019, 1:38 PM

#

Nice

shrewd blade Nov 27, 2019, 6:50 PM

#

is this good for a remote SSH server with a raspberry pi?

📎 unknown.png

#

router is vodafone btw

little schooner Nov 27, 2019, 7:07 PM

#

I mean, you have to make sure that your ssh server is hardened because it would be open on internet for people to try scan and brute force

shrewd blade Nov 27, 2019, 7:07 PM

#

ik. i already have

#

just tried accessing the server from puTTy and got this message: https://gyazo.com/db7c708dc1def89571c61b528fc56bfc

Gyazo

#

that is with my public ip

waxen scroll Nov 27, 2019, 7:09 PM

#

because you have it set to udp

shrewd blade Nov 27, 2019, 7:10 PM

#

TCP then?

little schooner Nov 27, 2019, 7:10 PM

#

Ssh is a tcp thing

shrewd blade Nov 27, 2019, 7:10 PM

#

ah, ok

#

it is working now. thank you

shrewd blade Nov 27, 2019, 8:01 PM

#

now to work out how to set it to a domain so i dont have to remember my ip

vapid dune Nov 27, 2019, 8:41 PM

#

do you use a password or a certificate for ssh?

#

also maybe install fail2ban

little schooner Nov 27, 2019, 9:16 PM

#

its a risky move. better to just vpn into it first

vapid dune Nov 27, 2019, 9:21 PM

#

agree, I go with vpn first too

craggy parcel Nov 27, 2019, 10:24 PM

#

Another option is to disable password login, and use keys. That would help prevent bruteforce of the password. (But of cause, not if there's a bug in sshd)

vapid dune Nov 27, 2019, 10:25 PM

#

oh right, I was gonna say certificate only login is better than password

craggy parcel Nov 27, 2019, 10:26 PM

#

Yeah, and I would kinda go completely overkill, and make the key as large as possible. Last time I generated one, 2048 bits were recommended, and 4096 were the max.

#

Also use the newer keytypes, as they are more secure. (Or at least, supposed to be more secure)

rocky badge Nov 28, 2019, 12:12 AM

#

@waxen scroll @little schooner I'm doing a fiber run along with some Cat6 runs for the house 👀

little schooner Nov 28, 2019, 12:18 AM

#

@rocky badge now that's a great upgrade

rocky badge Nov 28, 2019, 12:19 AM

#

Ethernet run to the kitchen, put a UniFi in wall AP.
Ethernet run to the living room, use my existing UAP-AC-PRO there.
Ethernet run to the office, use my existing US-8-60W.
Ethernet and Fiber to my room, 10 Gigabit fiber to my PC.

vapid dune Nov 28, 2019, 12:59 AM

#

nice

#

what kind of router?

rocky badge Nov 28, 2019, 3:49 AM

#

Sticking with my USG, but getting a US-48, so it has two SFP+

#

@vapid dune

vapid dune Nov 28, 2019, 4:11 AM

#

ooo nice. I'm waiting to see if anything can do gigabit IPS @rocky badge

rocky badge Nov 28, 2019, 4:18 AM

#

the UDMP and USG XG @vapid dune

vapid dune Nov 28, 2019, 4:24 AM

#

hmm no interest in the UDMP unless they separate out the parts

#

and the XG is well above what I can budget for it lol

#

ideally they'd make some kind of v2 at some point

median ore Nov 28, 2019, 7:54 AM

#

@clear igloo wouldn't it be simpler to have 10GbE ethernet ports directly on the switch ? Or your way is cheaper ?

clear igloo Nov 28, 2019, 11:41 AM

#

@median ore Most copper 10Gb switches are usually going to be more expensive than an SFP based one + SFPs

#

Especially if you don't need many ports

little schooner Nov 28, 2019, 3:43 PM

#

I'm trying to look for a 24 port, 4sfp+, poe+ switch but its looking to be a hard search.

waxen scroll Nov 28, 2019, 3:52 PM

#

C1000-24FP-4X-L

#

i tried to get you a price but the quoting tool doesnt seem to know about a switch that exists? hashtag @clear igloo wtf

clear igloo Nov 28, 2019, 3:53 PM

#

Me feed server turkey!
Server go sleepy now

waxen scroll Nov 28, 2019, 3:54 PM

#

the tool literally has no idea cat 1000s are a thing

#

how are you gonna sell them

#

lol

#

maybe its mad and doesnt want me to buy the cheaper switches

little schooner Nov 28, 2019, 3:55 PM

#

I search for that on ebay to see if someone had it used but no results

waxen scroll Nov 28, 2019, 3:55 PM

#

thats cause its new

little schooner Nov 28, 2019, 3:55 PM

#

Oh

clear igloo Nov 28, 2019, 3:56 PM

#

Yah, they probably haven't officially launched or something stupid

little schooner Nov 28, 2019, 3:57 PM

#

In the moments since I last wrote, I stumbled upon a reddit post of people suggesting a Aruba S2500-24P switch since it became eos not to long ago.

#

I don't know how to remove the forwarder from the link but it's this one:
https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.com%2Fulk%2Fitm%2F153696869972

eBay

Aruba S2500-24P PoE 24-Port Mobility Access Switch S2500-24P-4x10G...

Power Cable is included. Used item, Tested, 100% working condition.

#

@waxen scroll

waxen scroll Nov 28, 2019, 3:59 PM

#

wow that looks old AF

#

but whatever works

little schooner Nov 28, 2019, 3:59 PM

#

Yeah I don't really like how it looks

#

Also for some reason it doesn't mention poe+

waxen scroll Nov 28, 2019, 3:59 PM

#

7 years old switch

little schooner Nov 28, 2019, 4:00 PM

#

When the data sheet online does

#

I'd like something newer lol

#

Maybe like at most $470 I can spend

clear igloo Nov 28, 2019, 4:00 PM

#

Catalyst 9600? 😛

little schooner Nov 28, 2019, 4:01 PM

#

Let's see

waxen scroll Nov 28, 2019, 4:01 PM

#

no, 9k are basically the same cost as 3800

little schooner Nov 28, 2019, 4:02 PM

#

I didn't see them on ebay

clear igloo Nov 28, 2019, 4:02 PM

#

@little schooner So you just need PoE+ and gig?

waxen scroll Nov 28, 2019, 4:02 PM

#

he needs 10g

little schooner Nov 28, 2019, 4:02 PM

#

Poe+, 4-10g sfp+, 24 port gig

clear igloo Nov 28, 2019, 4:02 PM

#

how many 10g ports?

little schooner Nov 28, 2019, 4:02 PM

#

Oh

#

4

#

Reason is because I want to get away from edgeswitch. It feels so buggy

#

Also it doesn't have 10g so

waxen scroll Nov 28, 2019, 4:04 PM

#

edgeswitch is set it and leave it

#

;o

little schooner Nov 28, 2019, 4:04 PM

#

but now I need a 10g version

#

And it has no poe

#

Also they only have 10sfp+ on their 48 port

clear igloo Nov 28, 2019, 4:05 PM

#

I found a nice 48 port with 4x10G poe switch, in the UK >.>

carmine moss Nov 28, 2019, 4:06 PM

#

there is the MikroTik CRS328-24P-4S+RM

little schooner Nov 28, 2019, 4:06 PM

#

I'm hesitant about 48 port because of fan noise

#

If it's quiet I can consider

#

@carmine moss after working with mikrotik, I think I'd like a different brand

#

It was so confusing setting up the mikrotik poe switch I had for that

waxen scroll Nov 28, 2019, 4:07 PM

#

idk bro if you want a new switch for under $400 you might be stuck

little schooner Nov 28, 2019, 4:07 PM

#

Aww

#

What about at 500?

#

Still nothing?

carmine moss Nov 28, 2019, 4:08 PM

#

there is also a Zyxel XGS1930-28HP 24port switch

waxen scroll Nov 28, 2019, 4:08 PM

#

as far as i can tell it goes from under $400 then jumps right to $1200

little schooner Nov 28, 2019, 4:08 PM

#

Yikes

#

@carmine moss I'll give that a look

carmine moss Nov 28, 2019, 4:08 PM

#

that is 540euro on eu site

little schooner Nov 28, 2019, 4:10 PM

#

USA pricing for me looks like it's 640

#

@clear igloo what model did you find?

clear igloo Nov 28, 2019, 4:10 PM

#

Meraki switch, lol

little schooner Nov 28, 2019, 4:11 PM

#

Oh

clear igloo Nov 28, 2019, 4:11 PM

#

If you want pre-owned then I see some options, although limited at the $400 to $500 mark

waxen scroll Nov 28, 2019, 4:11 PM

#

you cant do meraki without a sub tho

clear igloo Nov 28, 2019, 4:11 PM

#

That's the joke 😛

little schooner Nov 28, 2019, 4:12 PM

#

Subscription will kill me

clear igloo Nov 28, 2019, 4:12 PM

#

I see some EX3300's but I can't comment on noise

waxen scroll Nov 28, 2019, 4:12 PM

#

last job had meraki APs and i got TRIGGERED when i found out more about them

#

i wanted to stop the practice of allowing guest traffic across our network in its own vlan

#

so im like lets tunnel it

#

LMAO NOPE

#

you need another meraki device to do it

#

its some security appliance thing

clear igloo Nov 28, 2019, 4:13 PM

#

yah

waxen scroll Nov 28, 2019, 4:14 PM

#

it was a school like @little schooner !

#

i wanted to treat everyone as a threat

little schooner Nov 28, 2019, 4:15 PM

#

I still can't believe he couldn't just plug the cable back in

waxen scroll Nov 28, 2019, 4:15 PM

#

i know

little schooner Nov 28, 2019, 4:15 PM

#

Literally the internet came right back up

#

And here we were thinking cynical about our students

#

Well, I told him not to jump on that boat so soon

waxen scroll Nov 28, 2019, 4:16 PM

#

i also know how technical students are. you're gonna get scanned and likely broken into from some obscure method

#

back in the day i did this too

#

for example they blocked access to C:\ in windows XP

craggy parcel Nov 28, 2019, 4:16 PM

#

Bonus points for the student, if they report it, without exploiting it. 😉

waxen scroll Nov 28, 2019, 4:17 PM

#

so i discovered if i run drive clean tool i can press "show files" and there goes C:\

#

thats the type of shit students are gonna do constantly

#

😄

craggy parcel Nov 28, 2019, 4:18 PM

#

Haha.. I managed to start a full desktop through a citrix application. They DID hide the system drive, but c:\windows in any open dialog, got me right in, then display all files, and launch explorer.exe. I'm pretty sure it still works on the exact same server.. Don't know if they care though. 😉

waxen scroll Nov 28, 2019, 4:19 PM

#

they were doing this to stop the spread of illegal game emulators

#

tons of us were doing it

#

they were doing nightly scans of fileshares and auto deleting them lol

#

C:\ was next target

#

eventually USB drives became so popular they just stored them there

#

many of the computer classes had lots of downtime because the assignments were easy enough to crank out. so what do you do? emulators. newgrounds.com, bla bla bla

craggy parcel Nov 28, 2019, 4:23 PM

#

Haha.. I've never really felt limited on a school network, like EVER. 😛 "Oh you can only print in Black/White on this printer". Sure, if talking through the print server, but using it directly with the IP address conveniently printed on a label at the front of the machine, had no such restrictions... Network drives? Well, usually setup poorly, and lots of stuff put in public shares, that should not had been. Oh, and the classic, on the school teaching people how to setup and maintain networks, you could setup a DHCP server, and disconnect everyone on the subnet. Even though they taught us how to prevent that, then the wifi sucked, and the internet connection was horribly slow.. Yeah, kinda makes you expect a quality IT education. 😉

carmine moss Nov 28, 2019, 4:24 PM

#

some people logged of of the school domain and into their parents domain becouse they had a company and then the it sends a message to all the pc's but no one sees it as they all are on that one studenst parents domain

craggy parcel Nov 28, 2019, 4:24 PM

#

@waxen scroll Hmm... Either games, or write a program that locks the computer until the correct password has been entered, and set it to launch at boot?

waxen scroll Nov 28, 2019, 4:24 PM

#

@clear igloo remember novell?

little schooner Nov 28, 2019, 4:24 PM

#

@clear igloo so the ex3300 that you suggested I found a 24 port version of it. https://rover.ebay.com/rover/0/0/0?mpre=https%3A%2F%2Fwww.ebay.com%2Fulk%2Fitm%2F202646197359

eBay

Juniper Networks EX3300-24P EX3300 24-Port Gb PoE+ 4x SFP+ Switch ...

Google "Relay Networks MN" to view our product catalog complete with RFQ engine. Why Buy Pre-Owned Network Hardware from Relay Networks?. Relay Networks is an official Cambium Networks and Radwin Partner .

clear igloo Nov 28, 2019, 4:25 PM

#

yah @waxen scroll

little schooner Nov 28, 2019, 4:25 PM

#

Is it a really old switch or something?

craggy parcel Nov 28, 2019, 4:25 PM

#

@carmine moss I once shutdown all computers in a classroom... Don't know why school networks are so poorly managed...

waxen scroll Nov 28, 2019, 4:25 PM

#

@clear igloo novell had a messenger which could broadcast messages to all machines or just a selection. they locked it out in the registry. we found it and unlocked it

#

you can guess what happened

little schooner Nov 28, 2019, 4:26 PM

#

@craggy parcel I have the college lab setup where the teacher can use a one line command to reboot all his commands but what would make it special is to have it on like a stream deck shortcut

craggy parcel Nov 28, 2019, 4:26 PM

#

We just used net send for taht...

little schooner Nov 28, 2019, 4:26 PM

#

I think he would love that

#

And a command to get the latest like notepad++ executable and push it to all systems

clear igloo Nov 28, 2019, 4:27 PM

#

@waxen scroll LUL

little schooner Nov 28, 2019, 4:27 PM

#

I think he'd like that on stream deck

craggy parcel Nov 28, 2019, 4:27 PM

#

@little schooner I use a streamdeck at work for shortcuts I can never remember, and for quick launch of programs.. Quite convenient. 🙂

little schooner Nov 28, 2019, 4:28 PM

#

Yeah I want to bring that in and show him

#

That makes a lot of sense

carmine moss Nov 28, 2019, 4:28 PM

#

i'm sometimes am on a system that the government manages i can open task manager why didn't they block it idk i would expect not to have access to it as i just do digitizing some old photo's for them

craggy parcel Nov 28, 2019, 4:30 PM

#

@carmine moss Out local city government has a similar issue with public computers. They have too much access, on the other hand, they ARE at least on a separate network (VLAN), meant for guests. And they have network boot enabled to reimage them.. So I guess they don't really care if you mess too much with them.

carmine moss Nov 28, 2019, 4:31 PM

#

still it's dumb to have if they don't care about that why would they care if someone gets access to the confidential stuff just becouse they don't block most things no one needs

little schooner Nov 28, 2019, 4:54 PM

#

@clear igloo this is quiet?

📎 unknown.jpeg

clear igloo Nov 28, 2019, 4:54 PM

#

Depends, where will it be?

little schooner Nov 28, 2019, 4:54 PM

#

In a bedroom

clear igloo Nov 28, 2019, 4:55 PM

#

Then you'll want much quieter

#

now if we're talking in a closet that's closed, then it will be fine

little schooner Nov 28, 2019, 4:55 PM

#

Hmm

#

Let me check another dba Stat for my nvr

#

I think it louder

#

@clear igloo dang it, it's like 34 dba for my nvr fans

#

But I have like three of them running and that is loud

#

So the switch will be louder than that? XD

clear igloo Nov 28, 2019, 4:59 PM

#

Yah, 45dba is a good bit louder

little schooner Nov 28, 2019, 4:59 PM

#

Aww

clear igloo Nov 28, 2019, 5:00 PM

#

Now I have a ~43dba switch in my closet, I don't hear it with the door closed

little schooner Nov 28, 2019, 5:00 PM

#

Hmm

#

@clear igloo so I'm reading that juniper updates are not free? Or it depends on the person that helps with account creation?

waxen scroll Nov 28, 2019, 5:51 PM

#

nothings free. thats what happens when you dont use ubnt

vapid dune Nov 28, 2019, 6:12 PM

#

don't worry ubiquiti will add some more telemetry 😄

keen ermine Nov 28, 2019, 6:15 PM

#

Anyone here can help with running a network cable or fixing a already made one?

waxen scroll Nov 28, 2019, 6:32 PM

#

maybe

shrewd blade Nov 28, 2019, 7:57 PM

#

@little schooner just buy a crap tonne of raspberry pi 3 or 4s and you will have no sound as they rarely need fans

craggy parcel Nov 28, 2019, 8:50 PM

#

Won't the cost per port, be way to high?

waxen scroll Nov 28, 2019, 8:58 PM

#

i wish pi would support NVMe already

#

i need one that can use a high quality drive that can handle a lot of read/write but i dont need cpu/memory specs higher than pi

keen ermine Nov 28, 2019, 9:16 PM

#

Well managed to get 1 side of my Cat6 cable at Cat6 markings

#

Now to do the other as different sides of ports on a cable = non-functioning ethernet line

#

Before that though, need to mention to my dad the reason why cause he got mad over it saying the colors blah blah despite the spec

vapid dune Nov 28, 2019, 9:20 PM

#

I just use a usb SSD enclosure with my Pi @waxen scroll

keen ermine Nov 28, 2019, 9:20 PM

#

Only got around 100 Mbps which is half my modems speed to my PC and npt 1Gbps for full 200 Mbps and 100MB Transfer to my Server

vapid dune Nov 28, 2019, 9:20 PM

#

there's two different ways to wire a cat 6 cable. they need to match

keen ermine Nov 28, 2019, 9:21 PM

#

This was the old way he did it

📎 20191128_120858.jpg

vapid dune Nov 28, 2019, 9:21 PM

#

pi 4 doesn't have usb boot yet but it's not hard to just use a SD card to point to the usb drive

keen ermine Nov 28, 2019, 9:21 PM

#

Way different than well normal Cat6

waxen scroll Nov 28, 2019, 9:21 PM

#

@vapid dune ill have to look into it. the problem is i use an app that fully manages the OS for me and i cant just tell it "install here and not the SD card"

vapid dune Nov 28, 2019, 9:21 PM

#

hmm just install it on the SD card first. then move the partitions around

#

if you aren't gonna do the cable to spec, then it won't work

#

I mean color aside they just need to line up the way that's expected

keen ermine Nov 28, 2019, 9:22 PM

#

@vapid dune that I can tell. I just need to clear it up with my dad first cause he's the one who did it that way and clarify why it needs fixing

vapid dune Nov 28, 2019, 9:22 PM

#

lol

keen ermine Nov 28, 2019, 9:22 PM

#

I just wish he knew

#

He did the same thing with my old Cat5e line

vapid dune Nov 28, 2019, 9:22 PM

#

the other option is PXE @waxen scroll

keen ermine Nov 28, 2019, 9:23 PM

#

Only 100 Mbps modem to router

#

Despite it being able to get 221 Mbps on my phone

#

So I think he was basing off the old Ethernet standard of Fast Ethernet

waxen scroll Nov 28, 2019, 9:23 PM

#

📎 unknown.png

#

hassio is bae

#

❤️

clear igloo Nov 28, 2019, 9:24 PM

#

Hassio is love :D

keen ermine Nov 28, 2019, 9:24 PM

#

I wish he can understand I need full speed also for my server

waxen scroll Nov 28, 2019, 9:24 PM

#

do you use it too?

keen ermine Nov 28, 2019, 9:24 PM

#

For Local Transfer

#

I liked pulling 1 Gbps locally so wanted it sorted

#

But 🤷

#

Guess Dad just prefers his old thinking than new standards and looks

vapid dune Nov 28, 2019, 9:25 PM

#

.-.

#

that's weird

keen ermine Nov 28, 2019, 9:26 PM

#

Even Jay knows and who I followed to get the line fixed

#

And the forums

#

Saying this is the Cat6 Standard

#

Oh he goes it doesnt matter cause colors of green are the same

clear igloo Nov 28, 2019, 9:26 PM

#

LOL

keen ermine Nov 28, 2019, 9:27 PM

#

If only Linus came to tell him this is the standard

#

Or Jay

clear igloo Nov 28, 2019, 9:27 PM

#

Not how it works

keen ermine Nov 28, 2019, 9:27 PM

#

Thats a wish

clear igloo Nov 28, 2019, 9:27 PM

#

w/o o w/g b w/b g w/b b

#

B standard is best standard HYPERS

waxen scroll Nov 28, 2019, 9:28 PM

#

ive wired hundreds of connections with B

keen ermine Nov 28, 2019, 9:29 PM

#

Like this

📎 20191128_152846.jpg

#

Heck what he did before wasn't even Cat6 A

#

Jeez that image is blurry

clear igloo Nov 28, 2019, 9:29 PM

#

Yah but the sheath isn't crimped

keen ermine Nov 28, 2019, 9:29 PM

#

That sheath I hate a lot

waxen scroll Nov 28, 2019, 9:29 PM

#

i love the sheath!

keen ermine Nov 28, 2019, 9:30 PM

#

Was in the way and broke many copper wires

#

For the 1st time a user installs Cat 6 B

waxen scroll Nov 28, 2019, 9:30 PM

#

first few times are a bitch, then you learn the right way

#

like flattening the wires

clear igloo Nov 28, 2019, 9:30 PM

#

Yup

waxen scroll Nov 28, 2019, 9:31 PM

#

i have special cable scissors now too

keen ermine Nov 28, 2019, 9:31 PM

#

May be bette

📎 20191128_153138.jpg

#

Yeah had excess sticking

vapid dune Nov 28, 2019, 9:32 PM

#

lol

#

best to cut it off and restart

keen ermine Nov 28, 2019, 9:32 PM

#

But that is at least Cat 6 B properly

waxen scroll Nov 28, 2019, 9:33 PM

#

take it out carefully and cut as straight as you can at the end. keep trying until the sheath is mostly in

keen ermine Nov 28, 2019, 9:33 PM

#

Party now and gonna be a pain of 2 hours again to do so

#

Lol. Told my mom about it, she told dad and he said all is the same

vapid dune Nov 28, 2019, 9:34 PM

#

https://www.lanshack.com/make_cat_6_cable.aspx

How to Make a Category 6 Patch Cable

The best source on the Internet for cabling and connectivity products and information: cat 6 cable, make cat 6 cable, cat6 cable, how to make cat 6 cable.

keen ermine Nov 28, 2019, 9:34 PM

#

So Cat 1 == Cat 6?

#

In his mind

#

Or a FE cable = 10 Gbps Cable?

vapid dune Nov 28, 2019, 9:34 PM

#

looks like B to me

keen ermine Nov 28, 2019, 9:34 PM

#

Yeah thats what I did

#

Jay also did B

vapid dune Nov 28, 2019, 9:35 PM

#

A or B doesn't matter

keen ermine Nov 28, 2019, 9:35 PM

#

Yeah

vapid dune Nov 28, 2019, 9:35 PM

#

it just has to match at both ends

keen ermine Nov 28, 2019, 9:35 PM

#

I told him its the line many times

#

I know cause a small distance cable pulls 1 Gbps

clear igloo Nov 28, 2019, 9:36 PM

#

Fe standard is the same as 10Gb standard for wire color

keen ermine Nov 28, 2019, 9:36 PM

#

Note distance from his room to mine is like 11 feet

#

Well the cables might

#

But position who knows

#

I don't know what standard is this but it pulled Fast Ethernet Speeds Locally and ISP

📎 20191128_120858.jpg

clear igloo Nov 28, 2019, 9:37 PM

#

Position is same for 8 wire regardless of speed

#

Better :)

keen ermine Nov 28, 2019, 9:37 PM

#

He but brown stuff in 1 and 2

vapid dune Nov 28, 2019, 9:37 PM

#

you should only wire it to A or B since the twisted pairs are done to avoid crosstalk

clear igloo Nov 28, 2019, 9:38 PM

#

Yup

vapid dune Nov 28, 2019, 9:38 PM

#

that cable looks like someone did it backwards

#

like it's A but backwards

clear igloo Nov 28, 2019, 9:39 PM

#

Yah, it's weird

#

It's no standard but 4 wires (2 pairs) must match for you to get 100meg

vapid dune Nov 28, 2019, 9:40 PM

#

personally I just use a cable tester lol

keen ermine Nov 28, 2019, 9:42 PM

#

Yeah he did a straight through

#

I explained how I dont get 100 MB locally or all the speed from it but on wifi I do

#

https://images.app.goo.gl/AuwS4fGje6RC5Xd5A

#

I.e this

#

So i really confused why I am not getting 1 Gbps at all on any like Cat 5 or 6

#

If straight through or not

#

@vapid dune @clear igloo What might be the possible guess as i get 1 Gbps on my router on all my ports with a regular router cable but as soon as I connect the 6 line it goes into FE mode

waxen scroll Nov 28, 2019, 9:57 PM

#

that means damaged cable

keen ermine Nov 28, 2019, 9:57 PM

#

So a copper wire in it got cut during install

waxen scroll Nov 28, 2019, 9:58 PM

#

correct... or bent too much

#

with no tester, replacing the ends is the first thing i'd do

#

which you did

keen ermine Nov 28, 2019, 10:01 PM

#

Well I need to redo the line for straight through

#

Cause I did B crossover I think or something

#

And I feel after 30 mis of getting those cables in I might have snapped one a bit

#

God man made ethernet is something else

waxen scroll Nov 28, 2019, 10:11 PM

#

also realistically, you shouldnt nick the jacket of the wires either

#

if i do that to a wire, i cut the end right off and start over

keen ermine Nov 28, 2019, 10:15 PM

#

Nic

#

Nick?*

waxen scroll Nov 28, 2019, 10:20 PM

#

📎 Screenshot_20191128-161943.png

vapid dune Nov 28, 2019, 10:50 PM

#

lol

#

cut it off

little schooner Nov 28, 2019, 11:06 PM

#

@clear igloo what's a decent noise level for a switch with features that I wanted? 30-33 dba?

#

I measured in the network room it it's already at 40 dba

keen ermine Nov 29, 2019, 12:12 AM

#

Ah

waxen scroll Nov 29, 2019, 1:01 AM

#

Good boy, xeon

little schooner Nov 29, 2019, 1:17 AM

#

@waxen scroll so the laws of physics tells me that adding another 40 dba device would increase overall sound?

#

Or would it level out to like 39 or 40 dba?

vapid dune Nov 29, 2019, 1:48 AM

#

o.O

#

https://forums.tomshardware.com/threads/2-fans-with-same-noise-level-more-noise.377040/

Tom's Hardware Forum

2 Fans with same Noise Level, more noise ?

Will 2 fans, with noise level 32Db both, make more noise then 1 fan with noise level 32Db ? I mean will noise level increasing of more fans with the same noise level or it will be same level. (Actually, i was not good in physics classes :) )

CPU not found. Press any key to...

waxen scroll Nov 29, 2019, 2:06 AM

#

The answer in the home theater world is yes

#

I've seen +5dB adding a second sub

#

I do this by setting the volume of both with the other off, then turn both on

#

It's actually insane how much two subs add

#

@little schooner try it

little schooner Nov 29, 2019, 3:47 AM

#

@waxen scroll k

little schooner Nov 29, 2019, 7:19 AM

#

@vapid dune I see.

radiant shell Nov 29, 2019, 8:44 AM

#

as an audio technician the standard rule is every double adds 2db, so 1 would be 40db, 2 would be 42db and with 4 of them would be 44db

low marsh Nov 29, 2019, 9:10 AM

#

Looking to build a small home server to run 24/7 servers out of. I've got a spare 7700k with a motherboard. I'll need to pick up the drives, psu and a couple other bits to finish it up. But how would I go about configuring it all to suit my needs?

#

Very very new to home networking and such

clear igloo Nov 29, 2019, 1:33 PM

#

@keen ermine What router do you have? I saw your post on LTT forums as well

keen ermine Nov 29, 2019, 1:34 PM

#

Amplifi HD

#

Its their Mesh/Teleport Router

#

And I figured out my dad's method of the ethernet was straight through

#

Not sure if thats Cat6 compliant for local 1 Gbps speeds

#

And 5e

#

@clear igloo

clear igloo Nov 29, 2019, 1:35 PM

#

You might get some crosstalk and packet loss if you don't follow the pinouts but that shouldn't cause you to be limited to 100Mbps

#

Now if one wire is damaged or a pair is flipped on one end then it will cause the speed drop you're seeing

keen ermine Nov 29, 2019, 1:36 PM

#

Mhm

#

Yeah if I connect a regular Cat5 cable from another router/modem I get full 1 Gbps locally and all my speed

clear igloo Nov 29, 2019, 1:36 PM

#

ah, then I suspect something is flipped, badly crimped, or cut

keen ermine Nov 29, 2019, 1:37 PM

#

Same

#

My 1st guess was straight through isnt Cat6 speed

#

But noob at networking so 🤷

#

Noob mindset

clear igloo Nov 29, 2019, 1:38 PM

#

you mean straight through as the wires not following standard but just same on both sides?

keen ermine Nov 29, 2019, 1:38 PM

#

Mhm

#

Thats what he originally had it crimped as

clear igloo Nov 29, 2019, 1:38 PM

#

Straight through is actually following A or B standard and the same on both sides and is what 99.99% of cables use these days. Crossover isn't used anymore in most cases

#

Just wanted to make sure we're on the same page though 🙂

keen ermine Nov 29, 2019, 1:39 PM

#

Ok

#

Yeah he ran it straight through

#

I just terminated my PC end to be Cat6b but who knows

#

Noob at it still but know I'm not fully utilizing Cat6s speeds or 5

clear igloo Nov 29, 2019, 1:40 PM

#

Yah, and it's not CCA cable is it?

keen ermine Nov 29, 2019, 1:40 PM

#

CCA?

clear igloo Nov 29, 2019, 1:40 PM

#

Copper clad aluminum

#

It's cheap cable and very easy to break

keen ermine Nov 29, 2019, 1:40 PM

#

Ah

#

Um let me see

clear igloo Nov 29, 2019, 1:41 PM

#

If you have the product page for the cable you can search for CCA on there but if it says pure copper instead then you're good

keen ermine Nov 29, 2019, 1:42 PM

#

Hmm

clear igloo Nov 29, 2019, 1:42 PM

#

If it's Nova brand cable then it's definitely CCA cable

keen ermine Nov 29, 2019, 1:42 PM

#

📎 DataGain-CAT6plus.pdf

#

Think its solid

clear igloo Nov 29, 2019, 1:43 PM

#

Yah, that looks good

keen ermine Nov 29, 2019, 1:44 PM

#

Yeah I saw Jay do it Cat6b and when I saw my line I'm like looks like nada

clear igloo Nov 29, 2019, 1:44 PM

#

Just remember, there is actually Cat6a rated cable so be careful saying Cat6b 🙂

keen ermine Nov 29, 2019, 1:45 PM

#

Ah

#

Well Cat6 B Port Method

clear igloo Nov 29, 2019, 1:45 PM

#

Yah

#

B is very common these days, I don't think I've seen A in a long time

#

Now I do have one other question, what type of ends are you using for the cable again?

keen ermine Nov 29, 2019, 1:46 PM

#

RJ45

clear igloo Nov 29, 2019, 1:46 PM

#

So there is actually a difference between Cat5e rated ends and Cat6 rated ends

keen ermine Nov 29, 2019, 1:46 PM

#

Yeah

#

He made a Cat5e end 1st

clear igloo Nov 29, 2019, 1:46 PM

#

Just wanted to make sure you weren't using Cat5e ends on Cat6 cable

keen ermine Nov 29, 2019, 1:46 PM

#

Then added a 6 since 5e was also giving me 100 Mbps

#

So 2 seperate lines

clear igloo Nov 29, 2019, 1:47 PM

#

Yah, Cat5e rated ends are actually not going to crimp all the way into Cat6 cable iirc

keen ermine Nov 29, 2019, 1:49 PM

#

Mhm

#

Yeah they're seperate

#

So yeah straight through is up to 1 Gbps

#

So cable got snagged and tore a bit but my dad didnt notice it had a cut and crimped it with it

clear igloo Nov 29, 2019, 1:50 PM

#

Ah, that would do it

keen ermine Nov 29, 2019, 1:51 PM

#

Yeah

#

I know ethernet is fragile but I would at least check the cables if there is no cut

#

I dunno yet which end has the cut

#

My PC or router end

#

Cause if I can at least get that cable back, move router back to my room for 1Gbps and full speed of modem

#

So should I revert to straight through? @clear igloo

clear igloo Nov 29, 2019, 2:05 PM

#

So long as both ends match then you should be good

keen ermine Nov 29, 2019, 2:05 PM

#

Mhm

#

Yeah

#

I just want to get the local 1 Gbps

#

As I know Amplifi HDs cap at 1 Gbps

#

Though question

#

He put brown 1st than Green

#

Does that affect anything at all?

clear igloo Nov 29, 2019, 2:09 PM

#

It shouldn't if, like I said before, they match on both sides 🙂

keen ermine Nov 29, 2019, 2:10 PM

#

Ok

#

I was also looking at if pairs matter

clear igloo Nov 29, 2019, 2:10 PM

#

Yah, it's just copper so it doesn't matter in that regard

little schooner Nov 29, 2019, 2:47 PM

#

@radiant shell thanks for that tidbit

vapid dune Nov 29, 2019, 3:10 PM

#

It does for crosstalk and interference

#

That's why they're twisted pairs...

clear igloo Nov 29, 2019, 3:13 PM

#

But in terms of speed negotiation it won't matter on a normal run, yes it matters from a crosstalk and interference perspective but for like a 5m run it won't really cause issues. Now on like a 50m run then it can get tricky

keen ermine Nov 29, 2019, 9:52 PM

#

ok so gonna try to get him to reapply the ethernet jack to what it was before

#

though hope neither wire snaps to return back to 100 Mbps

keen ermine Nov 29, 2019, 10:36 PM

#

@clear igloo have a question

#

I just noticed this on my end. Is this just discoloration or a nick?

#

Nvm he cut it at the part where it looked light blue

clear igloo Nov 29, 2019, 10:38 PM

#

ah, so its cut

keen ermine Nov 29, 2019, 10:39 PM

#

Still 100 Mbps and same speeds on the same line after many straight runs

#

On dang Cat6

#

I swear he did something wrong still

#

and I don't even know if we have a ethernet tester to test it 1st before install

#

cause all he does is Satellite work

#

right now if I go back and say do you have a ethernet tester to test next time it's actually 1 Gbps he is gonna flip

#

he's already irritated over me yesterday doing that line and over trying to know why I keep getting 100 Mbps and lower speeds here vs my laptop on another cable run

#

(and yeah don't suggest to him to buy a pre-made one. That will cause loads of issues)

little schooner Nov 30, 2019, 12:29 AM

#

gigabit copper testers are easy to find

#

10gig ones are a bit expensive

vapid dune Nov 30, 2019, 1:13 AM

#

At this point just say you want to learn how to do it yourself lmao

little schooner Nov 30, 2019, 1:20 AM

#

@keen ermine it never hurts to test it yourself.

hasty bluff Nov 30, 2019, 2:22 AM

#

@mystic latch What device is logging the DNS timeouts that you are seeing the error?

rocky badge Nov 30, 2019, 2:27 AM

#

Is the UniFi configured as VLAN only?

#

You need a VLAN only network, then configure the SSID to use that VLAN

#

A VLAN only or corporate?

#

Can you access anything on the network?

#

Ok networks are good. Is it pfsense DNS?

#

Pfsense DNS configured to listen on those VLANs?

#

Can wired devices use the DNS server?

#

Dumb question, but have you tried restarting the pfsense and or DNS service? Lol

#

So it's pfsense's DNS? Lol

#

No, I was saying, it's Pfsense's DNS server fault

#

Try to dig the pfsense

#

dig google.com @192.168.5.1

#

Does other DNS servers work on wireless

#

?

#

Hmm

little schooner Nov 30, 2019, 3:40 AM

#

dig. Gotta love it

#

What improvements did drill bring

#

Lol

#

I believe it for a second

waxen scroll Nov 30, 2019, 4:02 PM

#

@clear igloo you get that cable fixed yet?

#

nickCreep

clear igloo Nov 30, 2019, 4:02 PM

#

lul

waxen scroll Dec 1, 2019, 2:44 PM

#

hello people

little schooner Dec 1, 2019, 3:08 PM

#

@waxen scroll I decided not to buy a switch because everything is either loud or expensive with 10g sfp+ with poe.

Or

Companies except mikrotik don't sell a 24 port, poe+ 10g sfp+ that is less than 41 dba of noise at reasonable prices with free updates

#

Ugh the struggle. So it looks like the best way is to simply buy two switches. One for POE and other simply 10g

waxen scroll Dec 1, 2019, 3:09 PM

#

80% of the reason i use a ubnt is no fans

little schooner Dec 1, 2019, 3:09 PM

#

Yeah

#

If only they had a 24 port with 4 sfp+ tho

#

They reserve that for the 48 verison

waxen scroll Dec 1, 2019, 3:10 PM

#

cisco might have fanless industrial switches butttttttt $

little schooner Dec 1, 2019, 3:10 PM

#

Yeah $$$$

#

Well it least it gives me something to work towards. It's better to earn than easily get what I want

#

It leaves a good feeling

waxen scroll Dec 1, 2019, 3:11 PM

#

i disagree, grab life by the balls and demand to see its manager

little schooner Dec 1, 2019, 3:11 PM

#

Hahah

#

Well yeah always stand up for yourself

#

Seize the opportunity

waxen scroll Dec 1, 2019, 3:11 PM

#

i do this with the stock purchase program at work

#

you gotta exploit where you can

#

@clear igloo lets get this guy some lab discount industrial switches

clear igloo Dec 1, 2019, 3:12 PM

#

lol

waxen scroll Dec 1, 2019, 3:13 PM

#

also i found out we have no lab discount at work BTW

#

i was trying to quote ASR9k on lab discount

#

the VAR went lmao you get only what you have

#

someone did awful contract nego... but they probably werent IT so i see how it slipped

#

last company had a lab discount at like 80%

clear igloo Dec 1, 2019, 3:15 PM

#

Nice

waxen scroll Dec 1, 2019, 3:18 PM

#

@little schooner https://www.youtube.com/watch?v=ELkgiJD9KuM

YouTube

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

rocky badge Dec 1, 2019, 4:11 PM

#

@clear igloo 👀 someone might pay for my CompTIA certs

clear igloo Dec 1, 2019, 4:11 PM

#

Why?

rocky badge Dec 1, 2019, 4:11 PM

#

He does "cloud ops crash courses" every 6 months. If you can pass his course, he pays for your certs.

waxen scroll Dec 1, 2019, 4:16 PM

#

no point in certs for your age

#

wait until jr year of college at min

#

lots of effort and time waste for no gain when the tech keeps moving on rapidly and you arent getting a corporate job until 6 years from now

rocky badge Dec 1, 2019, 4:18 PM

#

college

waxen scroll Dec 1, 2019, 4:18 PM

#

yes.

#

if you want your income potential capped at 60k and have a bitch getting started, by all means dont go

#

@clear igloo college.

clear igloo Dec 1, 2019, 4:21 PM

#

lol @waxen scroll

rocky badge Dec 1, 2019, 4:23 PM

#

~~meanwhile~~

#

~~Guy works at AWS, Asst. Director of Consumer implementation~~

clear igloo Dec 1, 2019, 4:23 PM

#

blob bachelors degree when?

rocky badge Dec 1, 2019, 4:23 PM

#

0 college, all certs. 3/4 mil/year

clear igloo Dec 1, 2019, 4:24 PM

#

That's a unicorn right there

waxen scroll Dec 1, 2019, 4:24 PM

#

yeah thats not happening without daddys money

rocky badge Dec 1, 2019, 4:24 PM

#

Yee, worked his way through AWS support

waxen scroll Dec 1, 2019, 4:25 PM

#

do you have a dad with 10+ mil whose gonna free ride you?

#

i know plenty of people who think the same way

#

big dreams

#

gonna make it in hollywood

#

its gonna be the same with tech, its a unicorn

#

dont put all your chips on it

#

all those friends in hollywood are barely finding work, making poverty wages, living with roommates

#

make sure you're not YOLOing unless dads got money

#

also maybe @clear igloo can back me up

#

"working your way up" just doesnt happen 90% of the time

#

you stall and you have to move on

#

nobody promotes. its so fucking rare

clear igloo Dec 1, 2019, 4:28 PM

#

I only have associates degree and a couple certs but even I understand I got lucky getting where I am

waxen scroll Dec 1, 2019, 4:29 PM

#

no no, i mean back me up on working your way up

#

even if you did go up your pay raise is usually nothing

#

i think the only time this is different is when you're not overly technical and in management

clear igloo Dec 1, 2019, 4:31 PM

#

So far I've been getting good pay raises but you have to actually work hard to work your way up

#

Mediocrity gets you nothing

#

I have executives at large financials who call me out by name and say thank you and commend me on doing a fantastic job and that's part of what helps me get good results and even then sometimes I wonder if it's enough

waxen scroll Dec 1, 2019, 4:34 PM

#

you also have to be a special type of person too because your work/life is destroyed if you just certing all day, going above and beyond 100% of the time, etc

clear igloo Dec 1, 2019, 4:35 PM

#

Yah, and getting a cert is easy these days, being able to apply it to real life is another level of hard for most people

waxen scroll Dec 1, 2019, 4:35 PM

#

the very few people who can do it without killing themselves from the stress/anxiety are the ones making a mill

#

back to daddys money though, the easiest way to get to a mill is to use daddys money to start something of your own

#

but then hes on the hook

#

😄

clear igloo Dec 1, 2019, 4:37 PM

#

And get bought by a bigger company 😄

waxen scroll Dec 1, 2019, 4:37 PM

#

yep

clear igloo Dec 1, 2019, 4:39 PM

#

@rocky badge What are you?

#

college bound or like Sophomore/Junior/something

little schooner Dec 1, 2019, 4:49 PM

#

@waxen scroll hey its better to just use vlan 1 as native vlan because it requires no additional administrative work right?

#

Like no need to change it if you are using other vlans

#

For your real traffic

waxen scroll Dec 1, 2019, 4:50 PM

#

personally thats my view. a lot of networks i work on like to change it

#

but thats stupid because a native vlan is a native vlan

#

if you're really paranoid some networks make a parking vlan thats not trunked and you put all your unused ports in there

little schooner Dec 1, 2019, 4:51 PM

#

Wow that's going extra

#

Yeah paranoid

hallow nimbus Dec 1, 2019, 4:52 PM

#

😂

waxen scroll Dec 1, 2019, 4:53 PM

#

im sure there are stories floating around like "my device needs to tag everything and doesnt support 1. lets not use 1 anymore" and it spread everywhere and nobody remembers why they do it

#

google suggests it prevents you from attacking other vlans your port isnt in, however you shouldnt be making trunk ports on end devices anyway

little schooner Dec 1, 2019, 7:11 PM

#

I have an all in one PC I'm trying to troubleshoot. But not gonna lie, this one is pretty nice and convenient

#

Screen is beautiful and touch

little schooner Dec 1, 2019, 11:49 PM

#

@waxen scroll I just pasted an empty Documents folder into a VM and it forced the system off. I don't even know how that could happen

waxen scroll Dec 2, 2019, 2:18 AM

#

maybe @unreal wedge can help

upper tinsel Dec 2, 2019, 9:57 AM

#

📎 unknown.png

#

📎 unknown.png

#

yay

#

this gona be moar than a day

toxic quartz Dec 2, 2019, 9:53 PM

#

hii

rocky badge Dec 2, 2019, 10:10 PM

#

animoji_wave

dire flare Dec 2, 2019, 10:16 PM

#

Any thoughts on "ngrok"?
I would like to use it for purposes of tcp tunneling so I can remotely access my local machines through ssh
Is it safe & do you have any suggestions regarding safety when dealing with ssh in general

It just makes me worry a tiny bit that ngrok started as an opensource project but has since stopped releasing source code

humble quarry Dec 2, 2019, 11:31 PM

#

I use ZeroTier for a similar remote tunneling situation, while more confusing it's free at a base level and seems relatively secure

radiant imp Dec 2, 2019, 11:43 PM

#

Hello. I am looking into getting the stuff I need to make a pi-hole
https://linustechtips.com/main/topic/1094810-pi-hole-setup-tutorial/

Some of the image links do not work anymore. I am also kind of new to using linux as a networking tool. I have used it in the past to just play around and see what it's about. I was looking at the headless install option and is says I have to enable ssh before booting up the pi. Do they mean on my desktop computer?

Linus Tech Tips

Pi-Hole Setup Tutorial

This is an accompanying guide for our recent video trying out Pi-Hole. Note: Image links will be coloured like this: https://google.ca Parts List: Raspberry Pi (any model) We will be using a Raspberry Pi Zero (https://lmg.gg/8KV3n) - $5 You can optionally install Pi-Hole in a...

humble quarry Dec 2, 2019, 11:47 PM

#

You need to set up the Pi to be ssh-able before install I presume, making it accessible from your desktop and a ssh application

novel saddle Dec 2, 2019, 11:51 PM

#

@radiant imp i presumme that this will help you set that ssh up https://www.raspberrypi.org/documentation/remote-access/ssh/

SSH (Secure Shell) - Raspberry Pi Documentation

Need to access a Raspberry Pi, but don’t have a monitor spare? This section provides basic instructions for setting up remote access.

radiant imp Dec 2, 2019, 11:54 PM

#

hmmm, is vnc an option for this? I am not sure if that's how it works, considering there is no mini-monitor on the thing

#

I'm just looking at my options before I dive head first.

olive thorn Dec 2, 2019, 11:56 PM

#

Anyone know of a decent out of the box NAS?

radiant imp Dec 2, 2019, 11:57 PM

#

I use the seagate mycloud

#

first one I used and it has been very reliable. I've ftp from work multiple times without fail. had it for a few years now

olive thorn Dec 2, 2019, 11:58 PM

#

That's the one that has been striking my eye. Do you stream videos from it?

radiant imp Dec 2, 2019, 11:59 PM

#

You can, but have to be on the same network. I think there's a way to do it while away, but it requires a vpn?🤔 I never really looked much into that

#

so don't take my word for it lol

vapid dune Dec 3, 2019, 12:00 AM

#

ssh setup is a file you touch on the SD card

#

you can setup your wireless internet too

olive thorn Dec 3, 2019, 12:00 AM

#

Gotcha. I'm hoping to set something up that will take place of my Plex server from my laptop. Figured I would combine file storage with a Plex replacement

vapid dune Dec 3, 2019, 12:00 AM

#

you can do headless pi setup

#

@radiant imp see 3. Enable SSH on a headless Raspberry Pi (add file to SD card on another machine)

radiant imp Dec 3, 2019, 12:01 AM

#

oohhh I see @vapid dune thanks!

#

@olive thorn Yeah for sure. If I had the time and an old computer laying around I would just make a homemade webserver for it.

#

been looking into those as well

#

but for you I think the NAS is a good go

olive thorn Dec 3, 2019, 12:03 AM

#

I'll probably grab one today since it's Cyber Monday. Thanks for the advice!

radiant imp Dec 3, 2019, 12:04 AM

#

anytime

#

8tb for a hundred bucks ain't bad
https://www.amazon.com/Seagate-Desktop-External-Hard-Drive/dp/B07CQJBSQL/ref=sr_1_1?keywords=seagate+personal+cloud&qid=1575331494&sr=8-1

#

oh wait wrong product sry

#

hhmm, can't seem to find the model I have at home.

olive thorn Dec 3, 2019, 12:13 AM

#

I've got one that I've been eyeballing

vapid dune Dec 3, 2019, 12:50 AM

#

@olive thorn are you trying to use that external for a NAS?

little schooner Dec 3, 2019, 1:24 AM

#

{
  "message": "An error has occurred.",
  "exceptionMessage": "An error occurred when trying to create a controller of type 'AuthController'. Make sure that the controller has a parameterless public constructor.",
  "exceptionType": "System.InvalidOperationException",
  "stackTrace": "   at System.Web.Http.Dispatcher.DefaultHttpControllerActivator.Create(HttpRequestMessage request, HttpControllerDescriptor controllerDescriptor, Type controllerType)\r\n   at System.Web.Http.Controllers.HttpControllerDescriptor.CreateController(HttpRequestMessage request)\r\n   at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()",
  "innerException": {

#

That spit out from a company who uses salesforce for billing

upbeat ravine Dec 3, 2019, 2:08 AM

#

Anybody have any experience with a Cisco Catalyst 3500 smart managed network switch?

#

Plz dm me if u can help. Our servers are broken and we can't figure out if it is our firewall or our switch that is broken

waxen scroll Dec 3, 2019, 2:10 AM

#

End-of-Support Date: 2010-09-17```

#

oofy

#

@little schooner did you lock those cabs yet?

#

😉

little schooner Dec 3, 2019, 2:11 AM

#

@waxen scroll hehe... Not yet. It is still a low priority thing

waxen scroll Dec 3, 2019, 2:11 AM

#

wow.

little schooner Dec 3, 2019, 2:12 AM

#

I already told him. Attach the door back

#

He took the door off because he wanted the students to see in awe the equipment

#

He thinks rack gear is sexy

waxen scroll Dec 3, 2019, 2:12 AM

#

lmao

#

oh to be young again

#

i HATE it now

#

new equipment is cool for a minute

#

then im over it

thick minnow Dec 3, 2019, 7:00 AM

#

__**hi is it possibe to have this setup

internet >> modem >> ubiquiti radio <<>> ubiquiti radio >> router

is it possibe the have a ubibuiti radio PTP plugged straight into a modem, not through a router??
???????
please @me if you have a reply**__

hard sand Dec 3, 2019, 7:05 AM

#

i need help with my networking

#

its too fast

fossil turret Dec 3, 2019, 7:20 PM

#

would i be silly to buy an old sun server (one of the purple ones) and put some PCI cards in to use as a router/firewall?

#

or are diy routers kinda a meme at this point anyways?

carmine moss Dec 3, 2019, 7:24 PM

#

i would go for something that is efficient if you want to use it as a router/firewall like a low power pc

#

as it could get expensive running an old server as a router/firewall power wise

fossil turret Dec 3, 2019, 7:25 PM

#

i literally just dig the aesthetics of the small 1u suns from that era

#

like honestly hollowing out a non-working one and putting in like an itx system would prolly be enough.. maybe something with wireless on board

carmine moss Dec 3, 2019, 7:26 PM

#

yeah that is an option

fossil turret Dec 3, 2019, 7:27 PM

#

i feel like the sun thing wouldn't be that bad even on it's own though. not like it'd be at load ever

#

idk i just love old networking gear and rack stuff

carmine moss Dec 3, 2019, 7:27 PM

#

yeah but it gonna use a decent amount of power that you could have saved on a low power cpu

fossil turret Dec 3, 2019, 7:28 PM

#

yeah, power is cheap here though :3 i really wish we would see higher-end ARM stuff reach mainstream

carmine moss Dec 3, 2019, 7:29 PM

#

if it's a sparc based sun server finding a router/firewal os could also be hard

fossil turret Dec 3, 2019, 7:30 PM

#

can't i just do things manually from solaris? Or bsd? I've used netBSD on a firewall before

carmine moss Dec 3, 2019, 7:30 PM

#

yeah but it could miss some features from modern software have not played with solaris or bsd but you can try it out

fossil turret Dec 3, 2019, 7:31 PM

#

honestly if it wouldn't be TOO bad it'd be cool to use something like that as a NAS too

#

get a SAS expander and just a big pile of drives and another case

#

any data hoarders here?

carmine moss Dec 3, 2019, 7:32 PM

#

i would use it as a server you only power on to play with not a 24/7 server but not bad to own it

fossil turret Dec 3, 2019, 7:32 PM

#

yeah

#

i was thinking of getting a T4 series sometime and experimenting with it, since something like that is modern enough for me not to feel like it's a waste

#

i could probably use it for that stuff too though.. idk yet

vapid dune Dec 3, 2019, 7:58 PM

#

I'm waiting for a router with good ipv6 support

hidden thicket Dec 3, 2019, 8:44 PM

#

does anyone know if the netgear nighthawk xr300 has good range?

waxen scroll Dec 3, 2019, 10:55 PM

#

@clear igloo that feel when you have a router with good ipv6 support

clear igloo Dec 3, 2019, 10:55 PM

#

That feel when your ISP fails at IPv6 support 😄

waxen scroll Dec 3, 2019, 10:56 PM

#

call 800-xfinity

clear igloo Dec 3, 2019, 10:56 PM

#

I get to call 800-att-suks

waxen scroll Dec 3, 2019, 10:57 PM

#

did you know they put their own field techs into a phone queue hold when they call for help?

clear igloo Dec 3, 2019, 10:57 PM

#

Actually yes I did, and it makes me sad

waxen scroll Dec 3, 2019, 10:57 PM

#

it warms my heart to see the company shooting itself

clear igloo Dec 3, 2019, 10:57 PM

#

That too 😄

vapid dune Dec 3, 2019, 11:07 PM

#

@waxen scroll you have something that can do ipv6 firerwall well?

#

this is my biggest issue with stuff I've found so far: https://redmine.pfsense.org/issues/6626

Feature #6626: Allow IPv6 firewall entries with dynamic PD prefix ...

Redmine

#

I'm not using pfsense but rather an ERL. same class of problem though

waxen scroll Dec 3, 2019, 11:34 PM

#

yep

#

ERL doing ipv6 FW

vapid dune Dec 3, 2019, 11:39 PM

#

oh I see. it's not sufficient for me since I have a dynamic prefix

waxen scroll Dec 3, 2019, 11:39 PM

#

this works with dynamic

vapid dune Dec 3, 2019, 11:40 PM

#

so like effectively port forwarding a la ipv4?

waxen scroll Dec 3, 2019, 11:41 PM

#

https://pastebin.com/S9vtgQy1

Pastebin

firewall { ipv6-name WANv6_IN { default-action drop ...

#

i cut out a lot of stuff, this isnt just copy paste

#

you should get the idea

vapid dune Dec 3, 2019, 11:42 PM

#

http://blog.dupondje.be/?p=17

little schooner Dec 3, 2019, 11:42 PM

#

@waxen scroll what do they mean by prefix id

vapid dune Dec 3, 2019, 11:42 PM

#

that's just basic ipv6 firewall rules

#

to all your devices @waxen scroll

#

I mean specifically for device x I want port y to be allowed through

#

I guess ignoring privacy extensions is okay for that

#

that blog seems like it might be what I want

little schooner Dec 3, 2019, 11:43 PM

#

@vapid dune cant you use NAT for that?

vapid dune Dec 3, 2019, 11:44 PM

#

https://community.ui.com/questions/Inbound-Firewall-rules-with-DHCPv6-PD/31aac051-4565-451c-89b2-8146a36724e8#comment/36880eb8-b3ef-4431-9e87-6049d2e720bb

Ubiquiti Community

Inbound Firewall rules with DHCPv6-PD | Ubiquiti Community

I wanted to know if anyone else has tried to resolve this issue. I want to implement IPv6 using DHCPv6-PD at home but I also have services at home I would like to access over IPv6. This of course would require allowing access in. I know most ISPs now 'sticky' an IP or block t...

#

there's no NAT for IPv6

little schooner Dec 3, 2019, 11:44 PM

#

Yes there is

#

It's just not commonly used

vapid dune Dec 3, 2019, 11:45 PM

#

lol okay fine fine, it's not a recommended option imo

#

it's not like we'll run out of IPv6 addresses

little schooner Dec 3, 2019, 11:46 PM

#

In some cases, you still need to NAT Ipv6 traffic

vapid dune Dec 3, 2019, 11:46 PM

#

and then also you'd need DHCPv6?

little schooner Dec 3, 2019, 11:46 PM

#

Like snat

#

Well, I was thinking if you wanted certain machines to always hit to a different port or ip

#

NAT is handy for that

waxen scroll Dec 3, 2019, 11:47 PM

#

@vapid dune i suppose if you can predict the last half of the ipv6 address you can just add a blank table to your existing FW and let a script put in modified rules any time it changes, or just DMZ the host linusPerfect

vapid dune Dec 3, 2019, 11:47 PM

#

I mean without NAT you can have two IPv6 servers on the same port

#

DMZ is basically no firewall lol

little schooner Dec 3, 2019, 11:48 PM

#

@vapid dune not true. You still need to be allocated IPs if it's public facing

#

Do they give more than 1 Ipv6?

vapid dune Dec 3, 2019, 11:48 PM

#

it's a /56 I think

little schooner Dec 3, 2019, 11:49 PM

#

Oh

#

Then yes

waxen scroll Dec 3, 2019, 11:49 PM

#

@little schooner its been forever since i set this up, i think the id tells my provider i need more subnets pulled

little schooner Dec 3, 2019, 11:49 PM

#

k

vapid dune Dec 3, 2019, 11:49 PM

#

I'd have to check what I'm assigned, but it's enough for many many IPs per device lol

little schooner Dec 3, 2019, 11:49 PM

#

Yeah I didn't recognize it

#

@vapid dune if that's the case, yes. It should just work

vapid dune Dec 3, 2019, 11:50 PM

#

ah yeah I just checked my raspberry pi. it has a 64

little schooner Dec 3, 2019, 11:50 PM

#

So that means you have a switch on the WAN side?

vapid dune Dec 3, 2019, 11:50 PM

#

no?

#

I just have a router

#

fiber --> ont --> router --> switch --> devices

little schooner Dec 3, 2019, 11:51 PM

#

How would that work then?

#

Router would not be giving you public facing Ipv6 address

waxen scroll Dec 3, 2019, 11:51 PM

#

silly xeon, the provider tells your router what the subnet is and your router hands them out

vapid dune Dec 3, 2019, 11:51 PM

#

dhcpv6-pd or slaac

waxen scroll Dec 3, 2019, 11:51 PM

#

router to isp is like a point to point address

vapid dune Dec 3, 2019, 11:51 PM

#

probably slaac mostly

little schooner Dec 3, 2019, 11:52 PM

#

@waxen scroll so that's different. So it can decide to hand you out a public facing that way? While still being internal?

#

I didn't know

vapid dune Dec 3, 2019, 11:52 PM

#

it's not internal

#

there's a link-local address in addition

little schooner Dec 3, 2019, 11:52 PM

#

Wait wait you said router

#

Oops. Like a real router

#

Lol

#

I thought you meant the consumer ones

vapid dune Dec 3, 2019, 11:52 PM

#

eh

little schooner Dec 3, 2019, 11:53 PM

#

I am thinking those lan ports

#

Sorry

vapid dune Dec 3, 2019, 11:53 PM

#

I can get it working on my Asus N66U iirc

#

a lot of consumer routers support ipv6

#

and the edgerouter lite is consumer too lol

#

not friendly mind you

little schooner Dec 3, 2019, 11:53 PM

#

Well consumer routers only have one wan port

vapid dune Dec 3, 2019, 11:53 PM

#

eh

little schooner Dec 3, 2019, 11:53 PM

#

The rest being bridge

vapid dune Dec 3, 2019, 11:54 PM

#

some of the have dual wan these days

little schooner Dec 3, 2019, 11:54 PM

#

I see.

vapid dune Dec 3, 2019, 11:54 PM

#

not sure who would use it lol

#

fwiw I only have 1 wan connection

little schooner Dec 3, 2019, 11:55 PM

#

@waxen scroll that still confuses me. So one port gets a subnet and that can propogate to eth1, eth2, eth3, etc?

#

If it's ipv6

#

I still not get that one lol

vapid dune Dec 3, 2019, 11:56 PM

#

more like the router receives a subnet that it can delegate to devices behidn it

#

then it announces that to the clients and they grab a subnet for themselves

little schooner Dec 3, 2019, 11:56 PM

#

And the addresses it announces are routable on internet?

vapid dune Dec 3, 2019, 11:57 PM

#

I mean the router can do what it wants since it's doing routing, but yes it could be

little schooner Dec 3, 2019, 11:57 PM

#

I'm trying to make the connection where the network separation happens, is why.

vapid dune Dec 3, 2019, 11:58 PM

#

ipv6 has so many addresses that the design is like that. so NAT is no longer needed lol

little schooner Dec 3, 2019, 11:58 PM

#

Ipv6 is my rusty point

waxen scroll Dec 3, 2019, 11:59 PM

#

theres no separation anymore unless you design it on purpose

vapid dune Dec 3, 2019, 11:59 PM

#

it's a mess imo lol

#

there's SLAAC and DHCPv6

#

https://en.wikipedia.org/wiki/IPv6_address#Stateless_address_autoconfiguration
vs
https://en.wikipedia.org/wiki/DHCPv6

waxen scroll Dec 4, 2019, 12:00 AM

#

every computer on your LAN can be reached from the internet unsolicited if you arent careful

little schooner Dec 4, 2019, 12:00 AM

#

@waxen scroll so isp --> router --> switch for Ipv6 now means "here is the WAN network

vapid dune Dec 4, 2019, 12:00 AM

#

depending on the device, it might support one and not the other

little schooner Dec 4, 2019, 12:00 AM

#

@waxen scroll gotcha

#

That was the tidbit I was missing

#

That sounds dangerous lol

#

And unifi by default has Ipv6. Firewall off

waxen scroll Dec 4, 2019, 12:01 AM

#

it is for the poor people who turn it on and dont realize ubnt ipv6 fw is separate and not in the GUI

vapid dune Dec 4, 2019, 12:01 AM

#

lol

#

yeah ipv6 support is kinda really bad that way imo

#

it's second class at best

little schooner Dec 4, 2019, 12:01 AM

#

Makes sense

vapid dune Dec 4, 2019, 12:01 AM

#

nah it doesn't make sense lol

#

it should be fw on by default

little schooner Dec 4, 2019, 12:01 AM

#

Well

#

I agree

#

But I mean with how Ipv6 works