networking

[tame carbon]

and 1x 10Gigabit

[clear igloo]

@hazy sandal If your teacher doesn't know about Juniper, Arista, Extreme, Nokia, Dell, HP, Aruba, Ruckus, etc. then they don't know jack

Almost nobody runs single vendor anymore

[tame carbon]

^

[clear igloo]

And this is from someone who works for them

[hazy sandal]

@clear igloo haha he has mentioned like juniper and hp a few times, but mostly like "this is better than how x does it" or in a similiar sense

he's really shilling them xD

[tame carbon]

omg. I've actually been productive today

https://i.imgur.com/3F1tWIU.png

finally, my SPA framework is functional

[clear igloo]

Probably doesn't know any better but it's still sad

[tame carbon]

it gets pre-rendered html from the server, and after that can use the CDN for content requests

as you can see by the url requests

but every path, also has a valid controller on the server, that can fetch pre-rendered html

so you can enter the SPA at any point

until 6 months ago, I've never used nodejs

but starting to get the hang of it now

[hazy sandal]

possible. but he took the same education as I am currently undergoing, but like 10 years or so ago, and then went and got certified, and nowadays it seems like he is only working with cisco stuff

[peak cloak]

I'm a noob in js

I'm making a multiplayer game using socketio with my friends

[tame carbon]

@peak cloak most of this code is typescript and the SPA is written in hyperscript

[hollow marlin]

Each has their pros/cons. Such as Juniper is much more flexible in config but has odd restrictions Cisco does not while hardware is a toss between either over the past few years.

Also I cannot blame them for only knowing Cisco. Many go their whole career touching nothing but it

[hazy sandal]

In my mind, that can't be a fulfilling career. For me, I'm doing something wrong if I haven't learned something new (ie totally new, or new ways to do stuff) everyday.

[waxen scroll]

i started my career touching extreme mostly and some cisco #blessed

[hollow marlin]

You can still do that working with a single vendor. There is plenty to learn

[tame carbon]

https://i.imgur.com/ZlGvPr4.png

[clear igloo]

Yah, you just can't go around expecting vendor x to always be the very best at everything

[tame carbon]

@peak cloak look how clean that controller is

[peak cloak]

nice

[tame carbon]

@peak cloak that prerenders the mithril DOM

inserts it into a view

and then once the bundle loads, it mounts the Component in code to the actual html

and then you can dynamically update it

and the only thing it needs the server for when its running

is fragment of js code, to render each view

https://i.imgur.com/HiMZfrj.png

[hazy sandal]

true, with the rate stuff has been evolving there sure is a lot to learn, even from one vendor, but still, it's a very limited knowledge if all you ever learn is from one vendor. If I could I'd happily spend my entire "career" learning new stuff and trying to become a jack-of-all-trades xD

[tame carbon]

it loads the initial content from the CDN, prerenders it

after that, you can see the browser load the bundle and chunk for the homepage

after browsing to another page, it downloads another chunk

the .map files are symbols for debugging

so even though its tsx in sourcecode, you can debug it with chrome

[hollow marlin]

Definitely. The common reddit thread of there are better options for hardware vs each of Cisco's product but they are still the only vendor to cover the entire spectrumn with performance and config. Someone will always be better in some form or another

[clear igloo]

I mean it depends, a lot of knowledge carries over between vendors because most stuff is based on common specs. The config commands or GUI operations to do it might be different but with things going towards APIs even that becomes moot

[tame carbon]

the problem is when vendors abstract convention away in favor of their own system

this knowledge becomes kinda impossible to apply to another vendor's equipment

@peak cloak zsh: command not found: yarn

oof

[1/4] Resolving packages...
[2/4] Fetching packages...
[3/4] Linking dependencies...
[4/4] Building fresh packages...
Done in 1.89s.

we gucci

time to run your rat

[peak cloak]

it's bad

[tame carbon]

@peak cloak what is this lmao

https://i.imgur.com/GLhfa36.png

[peak cloak]

oh lol

it's my freinds code

I didn't write that

I just do all the actual coding

there's one other kid who knows how to code, but it's pretty badly

[hollow marlin]

@clear igloo Yeah, once you understand the core its just syntax hopping between, its why I have no problem when people go down a vendor cert path. Somethings that don't carry for example is going from Juniper to Cisco, routing-instances and what they can do is not viable at all such as breaking a EX4600 into multiple virtual-switches or tunneling them together for policy-based MAC forwarding. Each vendor has its cons and if a teacher focuses on a single vendor they don't understand what actually can/cannot be done

[peak cloak]

@tame carbon are you on the major rewrite branch

[tame carbon]

wait, I am not

[peak cloak]

yeah, my actual "good" code is there

I need to figure out interpolation

[tame carbon]

ok how do I interact with it?

[peak cloak]

wasd?

[tame carbon]

works well yeah

sockets right?

[peak cloak]

yeah

is there a better way

webrtc?

[tame carbon]

webrtc has issues sometimes

most noteably

that not all forms of traffic are possible

RTCDataChannel allows bidirectional communication of arbitrary data between peers. It uses the same API as WebSockets and has very low latency

so they both use the same mechanism

[peak cloak]

hmm, but they use tcp then?

[tame carbon]

yeah

but if you want to do peer-to-peer with webrtc

you need to be able to map a port

which doesnt always work

websockets good enough

its a website. not a desktop application

[peak cloak]

I kinda want to make it so player data is transported via udp, to avoid data retransmits

[tame carbon]

ok well, in a local setting this will work

but require fw configuration on either end if not on same network

[peak cloak]

hmm

[vale storm]

Hey everyone! I am in a student dorm where the internet speed is limited to 15 Mbps per device no matter how many devices are online. How do I make it so my computer appears to the router as two devices and receives double the bandwidth?

[peak cloak]

umm if you get 15 from your isp there is no way to make that faster

[vale storm]

No, the house gets 400 Mbps.

Or 500 Mbps.

But the router just limits every device to 15 Mbps.

[peak cloak]

technically maybe

idk how

[tame carbon]

@vale storm complain with the admin from the dorm, not here

[vale storm]

Well, they won't change it, I already asked them. But I thought maybe someone would know how to make the router think it's talking to two devices even though it's only one.

I thought this was the place to ask.

[tame carbon]

the answer is, you can't

[peak cloak]

you would need special hardware

[vale storm]

You can combine multiple cellphone signals though...

[tame carbon]

that doesnt make it faster

[vale storm]

More bandwidth though.

[tame carbon]

it just allows you to load balance connections over two external connections

[peak cloak]

yeah

[tame carbon]

doesnt make a single download faster

[vale storm]

Well, if I have four YouTube streams running, I can watch two over one connection and two over the other.

[clear igloo]

It will hash to a single interface and you'll be in the same situation, you can't load balance a single application between multiple connections like that easily. You could in theory do YouTube over 1 connection and other stuff over another but you can't split youtube video streams over two like that

[vale storm]

But it's basically different browser tabs though, not strictly the same application.

[tame carbon]

to me this sounds like a layer 8 problem

[clear igloo]

If you can figure out how to tell Windows to balance based on browser tabs then go for it

[vale storm]

I'm using Linux.

@tame carbon what's your problem? Am I annoying you? If so, just tell me and I'll be out of here.

[clear igloo]

You're ignoring the fact that this isn't possible in the way you want

[vale storm]

I'm not ignoring anything, I just hoped to find some help from some enthusiasts who could explain this stuff to me. Bye everyone!

[tame carbon]

@vale storm you should persuade the IT guy to set up their queues differently. if it can do 500mbit, why not let someone have more bandwidth when its not in use

and then guarantee everyone at least 15mbit

[vale storm]

@tame carbon that is EXACTLY what I told them and they said "we don't care, it currently works, that's the main thing".

[tame carbon]

@vale storm no it doesn't.

because its too slow

and it could be way faster

[vale storm]

Yes, but they don't care.

[peak cloak]

pay for internet

[tame carbon]

^

[vale storm]

Doesn't work, the wifi is distributed throughout the house.

[peak cloak]

and maybe... sell it to your neighboors

[tame carbon]

@vale storm dot1x easily allow you to authenticate a device with your account

have a multiuser environment on a single wireless network

[vale storm]

They have the entire internet centralized in the house.

[tame carbon]

muh, I think their router is either. crap. and doesnt support this feature

or

they are really too lazy

[vale storm]

No, they have pretty nice Ubiquiti routers.

[peak cloak]

AP's right

[tame carbon]

then they are lazy as fuck

[vale storm]

They are too lazy. I've met these people. I wouldn't be asking for a wonky workaround if I hadn't tried telling them time and time again.

[tame carbon]

yeah its because they dont have a clue

because if they knew how, they would have already done it

15mbit per device on a 500m line

[vale storm]

No, they hire an external IT firm and they're cheap af and don't want to deal with it.

[tame carbon]

ok and

what about

[vale storm]

The house owner's cheap, that is.

[tame carbon]

removing their equipment xD

and putting your own in place

[vale storm]

@tame carbon no, the router's not in my room, it's centralized.

[tame carbon]

but its on premises ?

[vale storm]

Yes.

[tame carbon]

but not authorized to mess with it?

[vale storm]

But it's not my property.

[tame carbon]

well

ur fucked

[vale storm]

Yes.

[tame carbon]

cant really do much

[peak cloak]

could you get an ISP to your dorm directly

[vale storm]

Exactly. That's why I asked for that workaround.

[vale storm]

No ethernet port in my room.

[tame carbon]

computer says no

most likely

@vale storm if you get a line installed, if they already have a fiber link in the building or something

patching a wavelength off is easy, because the ISP is another company

and then you can have gigabit internet

while everyone chuggs along with 15

[vale storm]

I'm directly under the roof, there's no way they put in a new line.

[tame carbon]

move :3

[vale storm]

Thing is, I'm not paying anything for internet here.

That's probably also why they don't care. Nobody's paying for internet, it's included in the rent.

But the rental contract doesn't specify a certain internet speed.

[tame carbon]

yeah but if speed isnt what it could be

I'd call that a defect

@vale storm what if you bribe the guy?

get him to move his butt

he has no incentives

so give him one

[vale storm]

He'd have to hire that IT firm which is probably more expensive than what I can reasonably bribe the guy with.

[tame carbon]

:/

[vale storm]

I mean, they clearly have no idea what they're talking about.

The phrasing in the rental contract is ridiculous.

[tame carbon]

is it in comic sans??

I'm joking btw

[vale storm]

I'm translating here, but:

"[...] You're not allowed to give the wifi password to unauthorized people. You're not allowed to use the internet for illegal downloads and for visiting illegal websites and websites that offer paid services. [...]"

Like, what?

So I'm not allowed to use Amazon, Netflix, or anything basically?

[tame carbon]

paid services?

wat

[vale storm]

Yes.

[tame carbon]

so what, no netflix?

really?

[vale storm]

I mean, no

I have no idea what they mean.

They probably mean shady sites that charge you if you look at the site wrong...

But like... What?

[hollow marlin]

Pretty much standard. Anything they offer without proper logging, if someone does something illegal and there is no logging to show what device at a particular time was accessing something illegally, they are liable.

[vale storm]

Yes, I get that...

But it's not their business which sites I visit unless they get an inquiry because there was illegal activity.

I mean, I use a VPN at all times anyway...

[hollow marlin]

Most do not have sufficient logging to accurately tie a device to an IP at a point in history

It is there business if they cannot supply proper logging or prison time

[vale storm]

Exactly, but what does that have to do with "no paid sites"?

It's not like they have any website filters in place.

[hollow marlin]

No clue. Like you said probably illegal sites with paid services but worded wrong

[vale storm]

Yeah, it might be my bad translation but even in the original wording it's really strange.

[tame carbon]

@vale storm they might also refer to hosting services on their network

because its an educational system

[vale storm]

No, it's a private dorm.

But only for university students.

And it specifies "visiting" those sites.

[little schooner]

I know for my job, I had to sign an agreement form that states every interaction is monitored and logged.

If I violated it, I am subject to employment termination

@vale storm

[vale storm]

@little schooner sure, but like... What does that have to do with my problem?

[little schooner]

Because you mentioned a university policy

I'm mentioning mine

[waxen scroll]

Please stop what you are trying to do and think about it for a second. Is it secure to have Windows file sharing over IPv4 WAN?

LTT forum ^^

so IPv6 file share over internet secure?

today 👏 i 👏 learned

[clear igloo]

Yes, IPv6 is 100% secure

[elder bramble]

https://cdn.discordapp.com/attachments/655242174371463170/785952695906729984/PXL_20201208_193454234.jpg

[waxen scroll]

#iamveryrich

@hollow marlin link some ciennas

[little schooner]

I don't think I could ever go full unifi

[peak cloak]

too expensive

and not that many features (as in locked down)

[hollow marlin]

@waxen scroll No Cienas right now. Do have a stack of SRXs to lab up

[waxen scroll]

[peak cloak]

@tame carbon you have an ovh vps?

What are the cpu clock speeds

[south blade]

Hey, can I swap out us-houston.privateinternetaccess.com in my OpenVPN with that new us-houston.privacy.network and it just work?

Maybe I missed an email or something but I hadn't heard there were newer servers till I just found them right now checking if an old server I was using was being upgraded.

[amber light]

ok, what the heck??? so apparently my modem works on ethernet when directly connected but wifi and ethernet throughout the rest of the house doesn't work?

same, even to this date

[peak cloak]

@amber light what router are you using

[amber light]

isp provided modem/router

(xfinity)

most xfinity reps are too dumb to know what to do

rEsEt tHe mOdEm

[little schooner]

@amber light wow you quoted me all the way back in 2019

[amber light]

yeah lol

[little schooner]

My opinion is still the same. And it's going to be worse when they enforce the data cap

[amber light]

they already did

1.2 tb cap

[little schooner]

Is that in effect already?

[amber light]

yep

has been now for months

[little schooner]

No, for my state it's early 2021

[amber light]

Hm

[little schooner]

Fortunately, the data usage at site 1 is under 900GB

[amber light]

They already put it in effect for california and other states

[little schooner]

@amber light yes that's true

It's more that the northern east states will get it next

[amber light]

ah

paying $10 for unlimited data isn't bad though

[little schooner]

Oh, no I heard it was going to be $30 for my case

$10 I'd be okay with

But 30....

[amber light]

thats a lot

[waxen saddle]

They sold you a freeway and charge you for using it

[verbal oasis]

Wondering if comcast will cap thier gigabit tier?

[tall pagoda]

My server ipv6 ready but my 4G isp not

[lean pebble]

My server have ipv6 but my home network doesn't have

[unborn sluice]

you should

[tall pagoda]

Tele2 is Some classic old branding name and they doesn’t really care about new technology

Actually a few years ago when I went to Germany I got welcome messages in Swedish instead of Dutch

[tame carbon]

@peak cloak no OVH vpses here, only linode

[dusty osprey]

i had to enable ipv6 on APN settings in android to get v6

my home wifi has v6 and 4g too

[tame carbon]

https://leftoversalad.com/c/015_programmingpeople/

[unborn sluice]

javascript truly

[unborn sluice]

javascript is what happens when people with different design philosophy gather together and add ideas

but I used js in unity

[tame carbon]

I think the lua one is funny lol

and js is on-point

[unborn sluice]

haven't tried lua so i don't get the reference

I tried js so many times, and it still manages to surprise me everytime

@tame carbon is this guy the original author of those?

cause I've seen so many of this langauges as a person

[tame carbon]

not sure

this was just linked to me

[dusty osprey]

crystal

u here

@tame carbon

[tame carbon]

wat

@dusty osprey sup

[dusty osprey]

;-;

[tame carbon]

yes

RedHat is a commercial entity

[dusty osprey]

they are kill centos ;-;

[tame carbon]

thats what they do, they give away their product, and charge for support

[dusty osprey]

well NOT killl but

[tame carbon]

fork it

:P

[dusty osprey]

yea it isnt stable

[dusty osprey]

😛

i guess that

but still

many people are going mad

sad

crazy

[tame carbon]

debian ftw

[dusty osprey]

mm

[lean pebble]

Someone know a good hosting company with high bandwidth cap / unlimited bandwidth vps in US?

[tame carbon]

linode gets you 1TB on their smallest plan

most providers have a fair use traffic policy

[lean pebble]

How much it costs ?

[tame carbon]

$5

[lean pebble]

Only for proxy

[tame carbon]

pretty sure linode allows bandwidth saving

[lean pebble]

Now I have proxy on my server in Germany and I can watch German netflix

[tame carbon]

so if you use less than 1TB

you can use more the next month

[lean pebble]

It's not alot of bandwidth just want to test it

Because in vultr It didn't worked as my other proxy server

[lean pebble]

Thanks I'll check it out

They don't accept paypal 🤔

[dusty osprey]

vultr does

linode? they... I am not sure

😐

[unborn sluice]

linode accepts paypal

[lean pebble]

Vultr does linode doesn't

[unborn sluice]

They do

[lean pebble]

I couldn't find it

[unborn sluice]

interesting, I expect paypal to be worldwide

[lean pebble]

I found the best and cheap way to bypass Netflix geo blocking.
Cheaper than VPN.

[unborn sluice]

tunnel?

[lean comet]

Hello All, I am having issues with my PiHole dropping DNS requests. I read somewhere online that this is because you need to assign it an IPv6 address(ULA). I have a Pfsense box and am a complete noob when is comes to IPv6 addresses. Most of the videos online are in regards to setting this up on a WAN interface. Has anyone run into this problem?

[little schooner]

I don't use Ipv6 and pihole does not drop my DNS requests

[lean comet]

hmm interesting what type of router /firewall do you use?

any thoughts why this might be happening? Its not every page just randomly, I can sometime hit the refresh button and it pulls up the page after a slight delay.

when I switch to another DNS server it works fine so I know it has to do with something related to PiHole

[peak cloak]

@lean comet how many dns servers do you have in windows

or in dhcp

[lean comet]

I am using linux, but I have just the PiHole set as the DNS and then my upstream DNS servers are OpenDNS

[peak cloak]

hmm

ipv6 shouldn't be an issue

[lean comet]

ok, yeah thought that was weird anyways. I am going off of what is suggested on piHole's website. Another suggestion was regarding HTTPS "As mentioned previously, Pi-hole is only handling the DNS queries and doesn’t know about the other protocols that are taking place. But we can use iptables to manage these protocols to prevent time-outs allowing Pi-hole work it’s magic."

Do you think that could be were the problem is?

[peak cloak]

no clue tbh

[lean comet]

Same haha

[lean pebble]

Private Proxy

[little schooner]

@lean comet I'm using Edgerouter for the router

[dusty osprey]

UniFi™️

[hollow marlin]

You will not setup a ULA unless you plan on setting NAT66. Does you Pfsense have global IPv6 address? AKA starting with 2001::

[south blade]

Anyone know if I should be able to switch us-houston.privateinternetaccess.com with the new us-houston.privacy.network?

[peak cloak]

¯_(ツ)_/¯

try and see

[south blade]

throws the dice on seeing if internet cuts off for everyone in the house. :D

Nope, doesn't seem to connect anymore.

[waxen scroll]

¯_(ツ)_/¯

[south blade]

Well shoot, don't want to waste my time making too many setting changes if I'm not updating my PFSense and that doesn't look like smooth sailing to me.

😭

[little schooner]

looks smooth to me

that was released today?

oh its not stable yet

not smooth.

[pearl beacon]

does anyone know how to subset a /23 network i need to know how for an assignment

[clear igloo]

255.255.255.0 x2

I subnetted it 😄

[pearl beacon]

i mean like starting with a /23 network

[clear igloo]

Start with the most hosts you'll need and work to the smaller number of hosts. If they say 100 users you round to the upper bit boundary (128) and so on.

[pearl beacon]

ive only learned how to do it starting with /24

[clear igloo]

Example: 10.0.0.0/23
Subnet 1 would be 10.0.0.0/25
Subnet 2 would be 10.0.0.128/something

[peak cloak]

You can subnet multiple ways iirc, there isn't one set way. Depends on the assignment

[clear igloo]

Yah, that too. A /23 is just 2x /24s so the same concept of a /24 would apply (at least how I see it)

[pearl beacon]

i know how subnet its more how starting with 23 affects it

[clear igloo]

Ah, ok, that makes more sense. 1 sec

[pearl beacon]

like noramly with a /24 u only really mess with the last octet

[clear igloo]

A /23 crosses what would normally be a bit boundary for a /24
So, at least how I always look at it is this:
Find the lower boundary and add +1 to the third octet to get the upper boundary
Example:
10.0.2.0/23
10.0.2.0-10.0.3.255

[pearl beacon]

ahhhhh

[clear igloo]

You could also say inverse mask + subnet = upper limit
A /23 subnet mask is 255.255.254.0 so the inverse is 0.0.1.255

10.0.2.0 + 0.0.1.255 = 10.0.3.255 🙂

and with a 22 it would be 0.0.3.255 so 10.0.0.0-10.0.3.255 as an example

[peak cloak]

I didn't really understand it myself, nice way to think about it

[pearl beacon]

so say 192.168.30.0 is the starting ip u would subnet under 192.168.0 and then 192.168.31.0?

[clear igloo]

Yes, be careful though, I remember in my classes teachers would say "you have 192.168.31.0" but you can't subnet that into a /23 because it's in the middle of the bit boundary 30.0-31.255 so they can try to trick you sometimes 🙂

[pearl beacon]

ok got it thanks

[lean pebble]

Subneting make me crazy when I studied networks

[clear igloo]

Yah, it's a pain at first but when you find those little tricks it makes it easier but do what's easiest for YOU to understand 🙂

[lean pebble]

The only part of my studies that never staid inside my brain

[pearl beacon]

ya thankfully my professor isnt making us do it in straight binary

hes letting us make subletting circles and the sort

[lean pebble]

Still having troubles with it.
Just using website that does it for me 😬

[clear igloo]

What's really fun is with a /23 you can have a host of 192.168.31.0 or 30.255 and be fine 🙂

not gonna lie, I'm a network engineer and even I use subnet sites now and again

[lean pebble]

Always had problems with the subnet itself

255.255.255.255 and down

The only one I remember is /32

All 255

Prefix I just looked at the gateway

I used to work only with external IPs

[clear igloo]

What always sucks is when you're using /31s and you're like 8 interfaces deep and your brain stops for a second and suddenly you're off by 1, lol

[lean pebble]

Lol

The big problem is when one of your customers trying his luck and taking 1 free extra IP address and making you IP conflict

[peak cloak]

wait how do ISP's prevent that

like on big ISP's how do they prevent you from just setting a static ip

is it the ONT/Modem of theirs

[hollow marlin]

ARP inspection or PPPoE

[waxen scroll]

muh pp

@lean pebble blob does it all the time

[lean pebble]

It was hosting company not ISP

[lean pebble]

Haha

My new router hex-s on his way 👀

[dusty osprey]

oh wow

I was also planning to get one

[waxen saddle]

Is anyone aware of IP's that Amazon sidewalk uses? I'm finding the information hard to come by and I'm going to have to block those IP's.

[unborn sluice]

like the IP to communicate to amazon servers?

[thorny vector]

Probably using the same IP's as the rest of their stuff

[unborn sluice]

don't let the sidewalk DNS

[thorny vector]

Unless you're talking about their peer addressing

@unborn sluice Forgive me brother, for I have sinned. I attacked a 1050ti with tin snips to make it fit in a 1u server rack chassis

[unborn sluice]

[thorny vector]

But it was free!

[unborn sluice]

what does it look like though

I got curious

[thorny vector]

https://www.amazon.com/Gigabyte-Geforce-GDDR5-Graphic-GV-N105TD5-4GD/dp/B01M4KGTNI/ref=asc_df_B01M4KGTNI/?tag=hyprod-20&linkCode=df0&hvadid=309777534894&hvpos=&hvnetw=g&hvrand=14330973148914898692&hvpone=&hvptwo=&hvqmt=&hvdev=c&hvdvcmdl=&hvlocint=&hvlocphy=9007853&hvtargid=pla-388321096531&psc=1&tag=&ref=&adgrpid=58425267301&hvpone=&hvptwo=&hvadid=309777534894&hvpos=&hvnetw=g&hvrand=14330973148914898692&hvqmt=&hvdev=c&hvdvcmdl=&hvlocint=&hvlocphy=9007853&hvtargid=pla-388321096531

[unborn sluice]

i mean the 1050ti right now

[thorny vector]

I'm not taking it out of the rack, and opening it up since its running some stuff for me. Basically the plastic shroud is gone, and the bracket is hacked away at until it fit, and would still screw in.

[unborn sluice]

I want to see what is left of the 1050ti after the surgery

[thorny vector]

Also had to dremel out a portion of the chassis

[unborn sluice]

yikes

the plastic shroud should be fine ngl

but using dremel is sus

[thorny vector]

Happily, though, from the outside it looks clean

[unborn sluice]

Sometimes gonna smile even though dying inside

Well it's hidden in the server

so the barbaric acts are concealed

and free

can't beat that

[dusty osprey]

blocc aws asn

[unborn sluice]

block all aws ipv4/v6 prefix ?

I like how sidewalk is you paying the internet so amazon could sell the feature

[hazy sandal]

anyone used to freeIPA? Just installed it on a Fedora 33 vm, but I am unable to add a new user. I get this error gecos: value #0 invalid per syntax: Invalid syntax. and I can't seem to find any clear info on what is going wrong.

oh, and I posted it here cause I think there's a higher probability that someone here knows something, even thou it isn't really a networking issue, but still relatable to networking in general. If I should put it in another channel, please tell me so 🙂

oh, no worries, was my last name that caused the issue xD Last name contains a non-english character (å) xD

[waxen scroll]

[tall pagoda]

How do I remove the provider name on the left if it is possible?

[tame carbon]

depends on the phone

apple you need jailbreak

on android its not that difficult

[lime pasture]

im pretty sure thats apple

you would need to install cydia

although

it might be very hard to find a 14.2 jailbreak

lemme see

[tame carbon]

hacking your phone for such a stupid reason lol

[lime pasture]

yea i guess he wants to do it

but

ok

[tame carbon]

yes.. that certainly seems secure

[lime pasture]

jail breaking isnt secure in the first place

lololool

[tame carbon]

remove that url

its a scam

[lime pasture]

ok

[tame carbon]

it does not even list to the official checkra1n repository

they have their own thing going on

[lime pasture]

okie i deleted it

[tame carbon]

https://i.imgur.com/PIWvZdM.png

wat xD

[lime pasture]

???

[tame carbon]

https://checkra.in/news/2020/09/iOS-14-announcement

https://i.imgur.com/sZniiv4.png

[tame carbon]

yeah read the footer

[lime pasture]

yea thats prtty obvious

i was just tryna help lol

[tame carbon]

This is why I like opensource and therefor android

[lime pasture]

if he wants to do it

[tame carbon]

cus its fully transparant

:)

[lime pasture]

then he can do it

🙂

[tame carbon]

@tall pagoda not unless you jailbreak that sucker, basically.

I used to have a jailbroken iphone 4

[lime pasture]

yea

same

[tame carbon]

Idek what program i used for that

[lime pasture]

but an 5s

Cydia was mainly used

[tame carbon]

but you basically generated your own install ipsw I think it was

[lime pasture]

back in those days

[tame carbon]

and then you started your device in DFU mode and held down SHIFT when you pressed "restore phone"

[lime pasture]

ohhhhy

that

yea i remember

[tame carbon]

and it opened up a file selector to choose your patched image

[lime pasture]

i did it for my younger cousin

[hazy sandal]

checkra1n is awesome, specially paired with odysseyra1n 😄 Anyhow, checkra1n don't work on my iPhone 11 PM, it does on my iPad thou, but the battery is so bad it dies almost daily xD

[lime pasture]

because he wanted a custome swipe animation

[tame carbon]

I denounced apple after my ipod touch 3rd gen and iphone 4 died after 2 years

[lime pasture]

lol

[tame carbon]

like, both are nonfunctional

[lime pasture]

those are so old tho

you can say that

cant'

[hazy sandal]

only reason I really wanna jb is getting 5 icon homescreen and dock xD

[tame carbon]

my 23 year old windows 95 machine still works?

[lime pasture]

yea

i gguess

[tame carbon]

apple is crap

for all the reasons

[lime pasture]

it cause apple just wants you waste money

like

600 dollar headphones

with the CRAPPIEST case

it the world

[tame carbon]

once the battery goes its a useless device anyways

thats the big problem

lithium ion only has limited lifetime

300~ cycles you are at 80% capacity

[hazy sandal]

i left android cause when I had android I spent to much time building my own roms and/or trying out other roms that when I really needed my phone it was useless or unstable xD wont happen with the iPhone xD

[tame carbon]

give or take 2-3 years

you will only have 50% capacity

[lime pasture]

uhhhh

maybe more liek 70

[tame carbon]

no

[lime pasture]

not 50

bruh u r using an iphone 4

[tame carbon]

as the phone looses capacity, you charge it more often

accelerating the wear

[lime pasture]

but IPHONE 4

THATS SO OLD IT GUNNA BE BAD

[tame carbon]

@lime pasture mh, at the time it was snappy too

worked well

[lime pasture]

yea

[tame carbon]

it wouldnt be able to handle discord probably

[lime pasture]

uh

[tame carbon]

but its still a phone

you can text with it

[lime pasture]

i dont think tghe software is up to date

[tame carbon]

make photos

[lime pasture]

even

[tame carbon]

@lime pasture thats planned.

[lime pasture]

yea

[tame carbon]

and even if it was

[lime pasture]

thats cause apple wants you to get a new pohone

[tame carbon]

with android, you can install community operating systems

[lime pasture]

every fricking year

[tame carbon]

that still get updates

[lime pasture]

yea

well with apple they force you to have their own operating system

[hazy sandal]

hey, atleast apple supplies sw updates for like 5 yrs I think, even thou they intentionally mess older phones up with them xD

[lime pasture]

with android they have opensource

yea i guess

[tame carbon]

another big problem

you can't sideload apps

so even if the device was functional

[lime pasture]

mmhh

[tame carbon]

there's no ways for you to install any apps

[hazy sandal]

not completely thou. vendorspecific stuff (drivers etc) doesn't need to be opensourced, which makes it hard to make new roms if the drivers available are to old

[tame carbon]

this is why older devices must be jailbroken

because cydia allows sideloading

[lime pasture]

mhh

[tame carbon]

but it shouldn't have to be this way

I think its criminal for apple to do this

[hazy sandal]

I've been hit by that myself when trying to port newer android versions to a maybe 3 year old device

[lime pasture]

well apple software security is better

[tame carbon]

It damages the environment

and they are the single largest phone manufacturer

[lime pasture]

besides all the china imported manufaturers

yea

[tame carbon]

they are the largest one in the industry

[lime pasture]

yea

true

[tall pagoda]

I have relative new Samsung lying around in my drawer anyway, iill maybe start using that device again

A9 (2018) is someone will ask the model.
My current device is a Apple IPhone SE (2020)

[tall pagoda]

Cat 7 👀i didnt know that exist

[clear igloo]

Because it doesn't, not according to the TIA/EIA standard at least, only ISO

[hazy sandal]

It isn't standardized yet IIRC. Cat7 has been mentioned by my teachers (one runs a company building and hosting infrastructure, another is a Cisco guy).

[hollow marlin]

7/8 do exist but outside not being a standard there is little to no use for them over 6a.

[deft fog]

does any one know what this is?

[hazy sandal]

got any vpn or virtualization software installed? I got a bunch of TAP adapters because of virtualization software, and a few from different vpn apps

[peak cloak]

I have 2 too, 1 for npcap and one for hyperV (WSL)

[deft fog]

Only installed bitdefender

[peak cloak]

probobly their VPN?

you could try removing it

device manager -> network adapters

right click and uninstall

[deft fog]

Ok

Ow also any one know how "network bridge" wotks

[waxen scroll]

whats an IRL bridge do?

@clear igloo 😷

im not hip with the kids these days. wtf is sus

[clear igloo]

@rocky badge might know 😄

[waxen scroll]

must be the new oof

[clear igloo]

a big sus oof

[waxen scroll]

thats mad dope, yo

[waxen saddle]

sus = short for suspect/suspicious.

It appeared in common conversations after "among us" became popular.

[waxen scroll]

makes sense, i guess if you dont use voice in that game it would suck to keep typing that

[peak cloak]

oof is just a meme, no one uses it in a real conversation

at least in my age

[little schooner]

Some things are just meant to be read not spoken yeah @peak cloak

[waxen scroll]

I've seen it used in spoken communication

[peak cloak]

in little kids yeah

[dire condor]

Looking for a network wizard to solve my moca 2.5 problem. Willing to sacrifice my 3 yr old for answers. 😫

[peak cloak]

moca networking is black magic to me

[modern reef]

What MoCA question you have?

[dire condor]

You and me both, buddy. I thought I had a good understanding. I don't.

So I have these moca 2.5 adapters and I cant seem to get them to talk to each other. I tested with a short piece of coax and it worked so Im guessing the adaptors are fine.

[modern reef]

Can you explain to me your topology?

[dire condor]

Fios ONT -> House 4-way coax splitter -> office coax, living room coax

The Fios tech said theyre using a 2.5 moca adaptor

and I have 4 live coax jacks

[modern reef]

Is the splitter active or passive?

[dire condor]

The main house splitter, I have no idea... but the tech installed it... and the gigabit is working

I just cant seem the get my moca lan working

I have a pair of gocoax 2.5s

I would think it would be something in the wiring but the Fios moca adapter is working.... yeah... black magic

[modern reef]

What is the model of the MoCA adapter?

[dire condor]

frontier fios one is FCA251. GOCOAX is WF-803M

Fios using moca for gigabit is new to me. It used to be if you were over 150 they ran ethernet from the ONT

Which is what I was prepared for. So this threw me for a loop.

[modern reef]

I am just going through the manual of that adapter real quick

[dire condor]

The adaptors look idential except for Fios one has a LAN/WAN switch and the gocoax has a TV passthrough but no switch

ok

[modern reef]

What I can tell you is this. Due to using different model adapters I cannot and they shouldn't have either, guarantee proper functionality between different MoCA adapters. It to me sounds like Verizon one isn't compatible in some way with the goCoax one. Even though these devices are sold, they are technically still a niche device, and as goes with most niche network appliances they tend to only work with the same model. Kinda like a Powerline adapter. I will continue to dig and see what I find though.

[dire condor]

I would LOVE to buy more FCA251s

but that seems imlossible

[modern reef]

It is likely under a different brand name

[dire condor]

I was just trying to run gocoax moca from a LAN port on my router to the other gocoax in the living room

I have a splitter in the office going to the fios and gocoax adapters

then gocoax ethernet toan on router

[modern reef]

What is the model of the splitter?

[modern reef]

Can you send a pic of the splitter?

[modern reef]

Good they gave you an active splitter. So many ISP give out passive ones

[dire condor]

gigabit speeds come thru that splitter so i didnt think it was that

thats actually an old splitter i already had

I just want to pass a router port through moca from my office for my living room

Freakin fios :(

Thank you for your help

[waxen scroll]

thats a passive splitter bruhhh

[modern reef]

No problem,
I also just realized that splitter you posted is a MoCA 2.0 splitter. That being the case one of 2 things could happen here, either this splitter is going to filter out the 2.5 frequency or drop the degrade/slow the signal. What I would recommend is getting a MoCA 2.5 splitter and having a tech go out to your location make sure other splitter that you may have behind your walls are also MoCA 2.5. Houses can have multiple splitters depending on phisical topology and of course in order for the MoCA network to work properly they all need to be 2.5.

[dire condor]

That was my thinking too but I get 960 megabit speed tests through that splitter

so Im confused

The gocoax has a web interface with a bunch of settings for frequencies... maybe theres something there I can do to get them on the same page?

[modern reef]

That is possible, but due to the nature of MoCA and how it can be finicky with splitters you're always better off making sure that you don't have a weak link in the chain.

And yes, if you have access to the web interfaces (I am not familiar with goCOAX) you'll want to make sure the frequency range is between 500Mhz and 1650Mhz.

[dire condor]

they need to be set to lan right?

[modern reef]

Yes

God the documentation for these things is sparse. I am going to assume the MPS pairing work similar the Powerline pairing in that you hold one until it blinks and then hold the other. Unless the manual that came with it specifies differently.

[dire condor]

the manual is garbage

only useful thing it says is how to access the web interface

[modern reef]

Were you able to change the frequency or sent to MoCA 2.0?

[dire condor]

working on that now

[modern reef]

Sorry for misspelling, do I’m on my phone.

[dire condor]

Welllllll shit

[dire condor]

ok so I disabled D Ext and D Low, rebooted and now the units are talking

however

There appears to be more work to do because thaaaats terrible

[modern reef]

Let me look, I was eating.

Lets try adjusting the LOF to 1250

Be sure to reboot the adapters after doing so

[dire condor]

1250 for both adapters?

lmao I might give up

that looked good in the diagnostic but then....

[burnt epoch]

woah, cool. My frontier modem doesn't even have coax

[primal ice]

the coax connector would be at the ONT

[modern reef]

Yes, both will be 1250

[dire condor]

Even when I get them talking to each other and the diagnostic on the adapters web interface shows 3500 I still get insanely shitty speed tests. Super stumped.

I just need to hijack a Fios truck and get some more FCA251s. Yeah thats it. :)

[late spoke]

hey guys, does anyone know some VPN provider which uses OpenVPN, and the IP is different after every connect ? preferably czech/slovak endpoint IP

[peak cloak]

why not just run ethernet

[dire condor]

Not cost effective and I'm renting this house

[peak cloak]

moca adapters are more expensive

[dire condor]

They're definitely not more expensive than having a pro run ethernet

[peak cloak]

oh, yeah. I ran ethernet myself

yeah having a "pro" do it is expensive

[dire condor]

You're welcome to hop into the attic and run some ethernet for me though

😄

[peak cloak]

if it was my house I would do it XD

[dire condor]

Did you run drops or get more creative?

[tame carbon]

@dire condor if you can't even run basic ethernet wires, you are not worthy of #networking

Show of hands, if you've never crimped RJ45 terminations

[peak cloak]

I ran 1 in the basement and then up to my parents's bedroom (where my mom works from home), another one to my stairwell for an access point, and the 4 to the TV/Media area. This is all on the first floor so it was easy. There were already 2 ethernet runs going to the upstairs so I just continued to run to my PC and my dad's work from home setup

[humble cloak]

hi! anyone who can help me? My pc shows this (gigabit) but whenever im downloading files or drag+drop to my NAS i get a max of 99.8mbps...

[dire condor]

I can do that, thats the easy part. My worry is going into the attic.. and potentially breaking something.

[tame carbon]

@humble cloak is the NAS connected with gigabit?

[humble cloak]

yep

[tame carbon]

clearly isnt

Theres a bottleneck somewhere, 100M (fast ethernet)

[humble cloak]

also my speedtest over wifi shows anywhere between 200 to 250 mbps while the same speedtest over ethernet is 99mbps

[tame carbon]

10MB/s facepalm

[humble cloak]

that is +- 99mbps

[tame carbon]

yep

[humble cloak]

that is not gigabit

[tame carbon]

correct

[humble cloak]

for internal network

on cat5e cables

[tame carbon]

a hop between your PC and your NAS isn't gigabit.

[peak cloak]

what is the speed on the NAS

[humble cloak]

gigabit

[peak cloak]

can you check it

what is it negotiating to

[humble cloak]

from anywhere in the house i get up to 250 on wifi down from the nas

[tame carbon]

@humble cloak how is the NAS connected to the network

and how is the PC connected to that network

[humble cloak]

i get +- 100MB/s over another cable

[tame carbon]

is there a switch inbetween?

[humble cloak]

cat5e directly in the router for nas, cat5e in a gigabit switch for my pc

[tame carbon]

@humble cloak I don't care about the cable. I care about the active link speed

[humble cloak]

which is?

[tame carbon]

well, your PC reports it has 1gbit to whatever it is connected to

[humble cloak]

yes, i tried three different ones

all rated for gigabit

10/100/1000

[tame carbon]

rates is one thing

but is it actually 1G ?

you can tell by the lights on the front

[humble cloak]

tl-sg105 ver 6

[peak cloak]

are the lights green or orange?

[humble cloak]

green

[tame carbon]

@peak cloak orange is 10M

he's looking for both lights on

one blinks

[peak cloak]

huh, one green one orange is 100M though

[tame carbon]

if only a single light blinks, and the other is off, its 100M

or I might be wrong

[peak cloak]

huh idk

[tame carbon]

https://i.imgur.com/AvJxKoP.png

amber is gigabit. derp

my cisco switch is not even the same

[peak cloak]

huh, that's wrong

[tame carbon]

yes

I was just about to say

screw u oracle.

[humble cloak]

It doesn’t like to upload a video

But blinking green with no second light at all

[tame carbon]

@humble cloak what are the exact devices between your PC and your NAS

like, make me a little diagram

[peak cloak]

oh that just has one light

[tame carbon]

cheapskate tplink

fuuuu

ok

@humble cloak is your NAS and your PC on the same switch?

[humble cloak]

PC-5 port switch shown in pic-8 port tp-link switch-fritz box-nas

all gigabit or above

router is 2.5 i think

[tame carbon]

@humble cloak if a cable is not properly connected, it will default to 100M

and I guarantee you, one of the cables there, is running at 100M

[humble cloak]

it did work sometime tho

[peak cloak]

is it a managed or dumb switch?

[humble cloak]

dumb

all of em except the router

[peak cloak]

A wire in the rj45 could have come loose

idk

[tame carbon]

Dust, not properly plugged in, damaged or kinked cable

[humble cloak]

(in the router it also says that both have a gigabit link)

[tame carbon]

electrical noise

if you have a bad link, speed will be lower

[humble cloak]

but limited to 100

[tame carbon]

yeah, you only need 4 wires for 100M

gigabit requires all 8

[humble cloak]

like, specifically 99.8

aaah

makes sense

[tame carbon]

if gigabit is not being gigabit-y

then its usually bad cable

[peak cloak]

yeah usually when it's right on 100, it's the physical link

[humble cloak]

So I should do the bottom one again?

[tame carbon]

and you mentioned your wifi is fine, >100M

so the links between NAS -> Wifi

[humble cloak]

WOW I SEE THE BROKEN CABLE

a white cable is broken in that pic

[tame carbon]

port 5 seems busted

[humble cloak]

of the bottom one

[tame carbon]

https://cdn.discordapp.com/attachments/776722183119699988/777646103775674368/IMG-20200922-WA0001.jpg

:3 sorry, had to post a comparison to a semi neat setup xD

[peak cloak]

if you have a crimper and a rj45 connector it's an easy fix

[humble cloak]

aah i think my dad has some around somewhere

[tame carbon]

cut off old connector

splice new one on

also, make sure you check what wiring standard the other side uses

it has to be identical ;)

[humble cloak]

that makes sense

issue, this is the long boi cable running through the walls

[tame carbon]

https://i.pinimg.com/564x/59/c9/06/59c906245b83d4ea73176a6936fb3f90.jpg

There's two standards

[peak cloak]

I like to put the wire jacket all the way in

so it gets crimped as well

[tame carbon]

@peak cloak mee too. if I manage lmao

[dire condor]

dont want that crosstalk

[humble cloak]

why does windows say it has a gigabit link tho?

[tame carbon]

@humble cloak misreport?

[peak cloak]

wait where does that cable go @humble cloak

to pc or router?

[humble cloak]

the lowest one goes to another switch

which goes to the router

[peak cloak]

ah

[humble cloak]

OH

that makes sense

[tame carbon]

and NAS is on router, so gets fine speed

[peak cloak]

router and pc only show the negotiation speed

[humble cloak]

yes

[tame carbon]

except everything through that busted cable, is 100M

there u go

[humble cloak]

thank youuu

ive had this issue the past 6 months

[tame carbon]

replace the cable or reterminate the connection

[humble cloak]

new connection it is

i dont feel like running cables through walls again

[tame carbon]

You can just cut off the old rj45 jack

and put another one on

[humble cloak]

yeah

[humble cloak]

i did that a year ago for my xbox and it was hell

[tame carbon]

I ran fiber through my attic xD

my LAN is 10G capable lol

[humble cloak]

and that was with a cable already being all the way to the attic already

damn

just had to bore a hole

and some cable things

[tame carbon]

bore a hole, stick a PVC pipe through it

ezgame

[tame carbon]

https://i.mt.lv/cdn/rb_images/1661_l.jpg

The switch I use for 10G networking ^

my router and server are both connected over 10G with this

the server hosts a NAS :)

[humble cloak]

nice

i just have a synology nas

[tame carbon]

I just grabbed off the shelf parts

put them in a 2U case

[humble cloak]

once im actually earning more money i want a rack + a rackmount server

[tame carbon]

Mini ITX B450, Ryzen 2600 with 16GB ECC memory

and a dual 10G network card

and bunch of harddrives

[dire condor]

SFP+ is that the same as direct attached copper?

[humble cloak]

but first a replacement for my intel NUC

[tame carbon]

@dire condor DAC cables have SFP at the end yes

[peak cloak]

https://cdn.discordapp.com/attachments/387022787480387605/777319486004396042/20201101_115841.jpg

[tame carbon]

@dire condor https://i.imgur.com/XbUpiC2.png

[peak cloak]

this is mine

[tame carbon]

@dire condor thats a fiber link with SFP+

[peak cloak]

outdated, I now have fiber

I need to get meyself a patch panel

and a pdu

[tame carbon]

I have a 10G DAC cable lying around somewhere

its the only ubiquiti product I own

xD

[dire condor]

full 10G setup under a grand?

[tame carbon]

easily

you need way less

[peak cloak]

fiber is cheap

[tame carbon]

10G copper with RJ45 is more expensive

[peak cloak]

so are the sfp+ modules

[tame carbon]

fiber itself is no major cost concern

30 meters fiber costs 5 bucks

fiber modules, depending on the fiber type, cost anywhere from 8-15 bucks

you need two of those

The only expensive part

[humble cloak]

i want 25gbps

[tame carbon]

is the network interfaces themselves.

That dual 10G intel card I have

Intel X520-DA2

costs like 250 bucks

but there are cheaper 10G cards for only 60 bucks

@humble cloak good luck finding the networking equipment for that

10G is still affordable as a consumer

[humble cloak]

lol

i dont have money nor a pcie slot haha

[peak cloak]

what sfp standard is 24gbps

[humble cloak]

fibre

[tame carbon]

@dire condor https://mikrotik.com/product/rb4011igs_rm

[peak cloak]

is it like qsfp?

[tame carbon]

This is the router that powers it all ^

Its another 200 bucks

add that 10G switch, 160 bucks

[humble cloak]

i dont even have one, which makes sense as my pc is smaller than a 16x slot but still

[tame carbon]

you're looking at around 400 usd, for a router + switch + a pair of fiber modules & fiber

[peak cloak]

https://www.amazon.com/StarTech-com-Qsfp-Server-Network-Card/dp/B07QZHQTVH/ref=sr_1_3?dchild=1&keywords=QSFP+pcie&qid=1607692621&s=electronics&sr=1-3

this is for 40G

[tame carbon]

ye

but have you seen the cost

[peak cloak]

yeah

QSFP+

[tame carbon]

yeah those modules are expensive

https://i.imgur.com/nc5N7GU.png

thats a 10x price increase

@peak cloak I mean, thats one thing. you have the NIC, and the module

next

you'll need a switch capable of doing this

[peak cloak]

yeah lol

[tame carbon]

https://i.imgur.com/yYQWZDG.png

[dusty osprey]

I hate when YouTube gives me a ad to Cisco Nexus™️ Switches.

The price next to that, I always

[waxen scroll]

i just bought some

[shrewd blade]

I have 6 lol

[waxen scroll]

mine

👀 🤩

@clear igloo let's play make an IPN

[hollow marlin]

@tame carbon https://www.youtube.com/watch?v=MsYv8LpytQM

[clear igloo]

@waxen scroll Only 9504s 😦

[waxen scroll]

im not giving you more money

[clear igloo]

gib money pl0x

[tame carbon]

@hollow marlin 🤣

I knew there was a wedge coming...

just did not expect that

[peak cloak]

wait, that's offical

lol

[waxen scroll]

they had one for ASR 9k too I think

[tame carbon]

if you ran that on regular TV ads

I bet everyone would be like: wat

https://tenor.com/view/kermit-wat-what-wtf-are-you-kidding-gif-13598412

[hollow marlin]

Yeah they did https://www.youtube.com/watch?v=V91MQAIjrbo

[thorny vector]

@dusty epoch It should, although your provider may do some region blocking/checking

[peak cloak]

like T-Mobile may check if you are in the US before they will allow you to call

exactly, so it may not let call, but tech wise it should work

idk

vpn may work

but they may also check for vpn ip's

[thorny vector]

What he's saying is that it'll be a known VPN IP address, and they might not like it

Should be able to do both

[hollow marlin]

@tame carbon 2 months ago we have moved US wide deployment for services and the problem is we have to outsource installers until staff is built up. I was looking at the Mikrotik LTAP LTE6 because the ability for LTE and console. Before I get my hands on one decided to plug in my USB console into my hAP AC2 and it popped right up and could console right from it. Going to be a game changer. No screen share BS, just take this, plug in the console and let me go at it

[tame carbon]

@hollow marlin the other usb models also have lte support with a dongle

its neat

[hollow marlin]

It was just something I got excited about. Couple other applications I might be able to use this for for OOB at some of our locations

[waxen scroll]

@hollow marlin we did this a long time ago at 2nd job

they bought routers, hacked them, the routers would connect to a datacenter wifi network and NAT to a lantronix spider KVM glued onto it.

the KVM got power VIA USB from the host it attached to

it was a colo so every rack belonged to someone else, so not like we could install an enterprise solution

[hollow marlin]

I plan on setting it and be mobile. As far as models that have SIM slots, none have 5v supplies unless I was missing a model. But dang, this is going to change the entire setup process for these deployments

[thick minnow]

Whats a good modem only?

I live in the UK

[peak cloak]

what protocol is used in the UK, I only know that in the US it's DOCISS

[zealous tulip]

Hey guys i need help.I accidentally deleted the network- manager and I don't know what version to install

I am using Parrot Os 4.9

[modern reef]

Parrot is Debian. Should be “sudo apt install NetworkManager”

[peak cloak]

if you don't have internet rn you could use ip

to use apt

[zealous tulip]

but i cant connect my wifi because i deleted it

[peak cloak]

I think there is a lower level linux thing for wifi, let me check

[modern reef]

https://linuxconfig.org/how-to-connect-to-wifi-from-the-cli-on-debian-10-buster

[peak cloak]

https://wiki.debian.org/WiFi/HowToUse#Command_Line

[zealous tulip]

Thanks!

[fossil stirrup]

what is the worst someone can do if they find your open port? i thought that they can just see the data that is coming out of that one port, aka see the video you are playing if you are using that port for say plex.

[modern reef]

They can see unencrypted data using that port. If it is a standard port lets say 3389 (Windows RDP) they can use that as a hint you are using RDP and utilize whatever exploits are available to RDP and get into your network.

[fossil stirrup]

what if i just have the one port open, say TCP: 32400 for plex

[modern reef]

Although a sufficient firewall will stop most "hackers".

That would just tell anyone doing a port scan that you may be using Plex and thus look for a Plex exploit.

[fossil stirrup]

when you say firewall you mean just the windows firewall, or should i get a better one.

also what is i change my plex to a different port other then the default one. Will they still be able to tell i am using that port for plex.

[modern reef]

The one on your router should be sufficient. Unless you are actively exposing yourself. You can change it to whatever you like. The only way they would tell you are using Plex at that point is if they do packet inspection. But even then Plex is encrypted if I’m not mistaken.

[peak cloak]

depends on the port

some of what @modern reef is correct, but at the same time kinda wrong (idk how to describe it)

well actually it doesn't matter the port that much, but the service that listens on that port

but most services have a commonly used port and default to one (ex: http and ssh)

if you have an internet facing ssh, it's not inhenerly bad but you need to secure it correctly (Ex: don't username and password logins, use ssh keys with an additional password for better security)

[unborn sluice]

Most services are secured now

soo

even plex can do HTTPS

[peak cloak]

yeah, it's more about the login

[unborn sluice]

and it's not like seeing the open port and the magic begins

[peak cloak]

some services aren't made to be internet facing

@modern reef like it's pretty common knowledge to not have rdp internet facing

instead you would want to use a vpn to access the internal network first, and then rdp

[fossil stirrup]

so if i change the default port of jellyfin and only open the one port on my router i should be fine.

jellyfin does have ssl and https but i am not to sure how to set that up, when i tried to enable it, it said i need letsencrypt setup

[peak cloak]

https is for transport layer security, it won't do anything about people trying to brute force the login

letsencrypt is relatively easy, easiest with the DNS-01 challenge, but you need to have a domain

[modern reef]

@peak cloak Yes it is common knowledge, I was just using it as an example since it's the first thing that came into my head.

[waxen saddle]

I use nginx-manager in a docker container to manage my https certs. Super simple and easy

[unborn sluice]

yea, let the bots do the work

[thorny vector]

No, EVERYONE needs to roll their own certs, and manage their own CA /s

[unborn sluice]

Agreed

You can create

Let's roaldi

[thorny vector]

Already do.

Got my CA signed by sectigo

And can requests new certs internally via a CA api on one of my windows servers

[unborn sluice]

Can i request from you then

lel

[thorny vector]

lol, I guess technically you could, if you wanted to use a subdomain of my domain

[unborn sluice]

oh

I was expecting a CA that can give certs

[thorny vector]

Yeah. They are certs, but I can only sign domains that are a subdomain of mine

I can't do it for other domains XD

[peak cloak]

How does one because a CA

At least for my subdomains

Because for now I'm just using a wildcard cert