#networking
1 messages ยท Page 258 of 1
I mean, if I type home.redacted.com which is my public ip, I get to my router config page too (when I am on my home network, from outside it's just a timeout like expected)
Just tried from different network my public IP
but if you entered this public ip
Do you try it from the same network ?
Ya if you surfing your external IP from your internal network it should send you to your router
But if you surf from different network like 4G it shouldn't do that
admin panel on the mikrotik is on the input chain
if I was to host a service on my public ip on same port, it would be forward
^
my old php projects live on my laptop https://i.imgur.com/tM2qPrU.png
For testing and learning pf
less web hosting, more BGP and MPLS
And fw
someone wanted to host a virtual airline software on his computer (not server) over wifi. I was like super bad idea, but I can help you
I mean, it looks good
I used to own cs:s servers and csgo with fdl
is a php script
that just looks in the /var/www/html
and there's some rewrites
to make the php script invisible
I owned mc server to
I was to lazy to manage it after someone hacked the mc console
๐
By one of the plugins
in my school server all I am running is multiplayer sleep, geysermc, floodgate, and luckyperms
Geysermc?
big loop that assembles dir structure
allows bedrock players to connect to java
header('Content-type: application/json');
echo json_encode(array(
"name" => $dir,
"type" => "folder",
"path" => $dir,
"items" => $response
));

Oh
and floodgate allows them to join without needing a java account
basically bypassing online-mode
Ok
@peak cloak luckyperms?
Like old days when it was possible to play online but offline
Permissions like expernissons
luckperms I mean https://luckperms.net/
And essentials group
/**
* Provides permissions for a user
*/
public interface PermissionProvider {
/**
* Gets the permissions for a user and server
*
* @param player the user
* @param server the server
* @return the list of permissions
*/
Map<String, Boolean> getPermissions(UUID player, String server);
/**
* Gets the groups a user is in
*
* @param player the user
* @return the list of groups
*/
List<String> getGroups(UUID player);
/**
* Adds a group to the player's group list
*
* @param player the user
* @param group the group
*/
void addGroup(UUID player, String group);
...
cough
There is one old permissions plugin I used to love
I am not a java coder at all
I maintain my own permission system
all third party plugins integrate with it through vault
@peak cloak all the stuff is synced with discord
and the forum
Technically, my first and only programming class was java. It was that early that I was really confused about print() because I thought it would print to the printer
Who made you permissions crystal
nice
I could probobly learn it, but I don't have the time for that
@Override
public Map<String, Boolean> getPermissions(UUID uuid, String server) {
PreventBlockingCode.ensureAsync();
try (Connection connection = database.open()) {
PreparedStatement ps = connection.prepareStatement(
"SELECT `groups`.groupname, `groups`.inherit " +
"FROM playergroups JOIN `groups` ON playergroups.groupname = `groups`.groupname " +
"WHERE player = UNHEX(?) ORDER BY priority;"
);
ps.setString(1, uuid.toString().replace("-", ""));
ResultSet rs = ps.executeQuery();
Map<String, Boolean> permissions = new HashMap<>();
List<GroupPermission> groups = new ArrayList<>();
while (rs.next()) {
groups.add(new GroupPermission(rs.getString("groupname"), rs.getString("inherit")));
}
rs.close();
ps.close();
groups.forEach(c -> {
try {
permissions.putAll(c.getPermissions(connection, server));
} catch (SQLException e) {
logger.error("failed to get permissions", e);
}
});
ps = connection.prepareStatement(
"SELECT permission, granted " +
"FROM playerpermissions " +
"WHERE player = UNHEX(?);"
);
ps.setString(1, uuid.toString().replace("-", ""));
rs = ps.executeQuery();
while (rs.next()) {
permissions.put(rs.getString("permission"), rs.getBoolean("granted"));
}
return permissions;
} catch (Exception e) {
throw new RuntimeException(e);
}
}

inheritance is fun
esp in sql databases
I like databases
All plugins should connect to some db
This file is only the db part for permission
Nice code
I'm learning Java now in my studies
@lean pebble yeah thats just one layer
this is just the database end
we have another plugin that uses this API to provide the permissions to vault
This plugin made especially for you?
our gameserver project which started in like 2013
has over 160 repositories now
on our git
You're a developer ?
it's probobly not on github is it?
yeah
no
we have a private gitea instance
and maven repos, build server with autodeploy pipelines xD
look, this is a community effort
and we have some smart people xD
quite a few self taught
I learned how to code with this as a hobby
What language do you program?
I know mc is Java
You can program mc in golang to
And python and etc
our own system has about 60 tables now
yeah
Knockturn is a community of people who came together to build the world of Harry Potter. The server currently features Hogwarts, DiagonAlley, Knockturn Alley,
it's this I think
Nice
I made my own login / register web system in python
Only for the API page ๐
This is just the core database and API project
this takes care of our entire data mechanism, chat, message exchange
discord integration
and backend API connection
I wrote this over the course of like 4 years
I want to open my own custom mc server since ever
With custom crafting
but we actually plan on rewriting this, and making it even more immersive
since we have written all kinds of tools to make 3d modelled entities appear wherever we like
I think our texture team uses blender
That's sound awesome
its just a bunch of individuals on a discord server
working together
I am not as active anymore as before
only for emergencies
I'll go finish download my js course
this is all hardcore java
Ya
we even wrote our own classloader implementations to allow for hotloading of code xD
I love the jvm
you can hack it quite hard
Man you making me want sit all day all night to create my super duper mc server
๐
@lean pebble when I first started getting into this early 2009
I was already into computers
and then in 2010 minecraft alpha went public
$5
Me too but not on programing
best investment ever
the more you talk the more I know I suck at programming
but yeah I ran my own servers for a long time for friends, had a couple failed communities
thats how I came into contact with java, linux, networking
I don't have mc, I use my brother's account when I need it
and eventually I started writing my own programs
sql is also something I learned early on
not properly until I went to school for it
I'm learning sql now
But I used it since I first launched my cs:s server
And my first maplestory private server
minecraft is so successful because it is written in java
bedrock sucks
Minecraft is soo successful because it cross platform
performance wasn't amazing
but we had an a networked piece of software that ran on a server
and you could build a world in 3d with your friends
I think it could be better without Microsoft interfering
AND we can modify the code
like in 2010
this was so rad
now that minecraft has gone mainstream
I see zoomers playing minecraft
oh speaking of the non-classic mc, minecraft earth is shutting down
I wanna try to run my mc server on golang
some like pokemon go style mc
I found a pretty nice golang engine for mc
I only care about the java version
same
thats my lifeblood
Mine to
stupid teleport is broken
when a user is riding another user
we use that to make up to 3 pets spawn above player's heads
like a pixie
Let's try this mc source
@peak cloak I didnt actually write all of this lol
I only worked on the network bit and adding support for our system to work with bungee
that honestly
is still the most difficult thing
bungee is a mc reverse proxy right?
yeah
@peak cloak until you get here... https://i.imgur.com/R6zA6Cq.png
the amount of code that fires when you call this one function lol
am i supposed to reboot?
yes
Thanks
ubuntu server?
yup
did you tick the openssh-server box?
Intellij?
first thing you should do after installation
is run sudo apt update && sudo apt upgrade -y && sudo apt autoremove -y
installer doesnt always update every package
apt update i know
and there's also some packages you do not need, that are installed and can be autoremoved
usually older kernel
What about autoremove
you don't need the kernel from installation
OK
but that is automatically handled
if it boots then you have a working system
so you can delete those, saves another 120MB
@oak night have you set this kind of system up before?
first thing you should do is install your public ssh key
and then disabling password login and root login on ssh
makes login secure
how to do that
^?
np it has finished
screenshot?
/etc/ssh/sshd_config
@oak night did you create a user account?
Sorry for my bad english
or is it just root ?
ok
create users for that
There's info on how to create user accounts
also how to use the firewall
you want to run a website you said?
sudo apt install nginx
nginx vs apache vs caddy?
Finally someone with common sense ๐
I was never able to setup ssl with nginx. I mean that was a year ago, so I probobly could now
Now I like you more crystal
are you on windows or linux rn?
Easy
@peak cloak was about to ask that too
i'm stupid
@oak night your client computer, the one you are sitting at rn
I have to get iso ouot
do you have windows? cus then we need some tools
@peak cloak git-bash is best for windows ssh
ssh-copy-id was so easy
Monkey I can help you with ssl if it's on Linux with nginx
ssl on nginx is fucking ez
Ya
letsencrypt
If you use certbot it's even more easier
Idk, I wasn't able to get it to work. Probobly some dumb thing
you then tell it you use nginx
yeah I used that
and you just have this copypasta
you add to your server def
but it can do it for you
Now certbot have a module for auto install on nginx
neat
Ya
root@panel:/# cat /etc/nginx/sites-available/api.knockturnmc.com
server {
listen 80;
server_name api.knockturnmc.com;
return 301 https://$server_name$request_uri;
}
server {
server_name api.knockturnmc.com;
listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/api.knockturnmc.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/api.knockturnmc.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;
well certbot was in a seperate container
at the top the 80 -> 443 redirect
you guys are going too fast!!!
we are just talking, go at your own pace
@oak night are you sure you want to use apache?
i know
@oak night nginx is very lightweight, and the config files are more readable
i just Cant follow your talks
Monkey on what distro you tried to install ?
@oak night if we mean to mention you directly we'll tag you like so
Then 1 command and you're done
otherwise its just general chatter
Ok thanks
@oak night but I asked, what makes you want apache specifically?
mh
my problem with apache is the overcomplicatd xml config when proxying and especially CGI
Probably cuz i'm new to ubuntu server and this kind of stuff
mod_php angers me so much
I still need to learn how to use the reverse proxy option in nginx the right way
I use php-fpm
it uses a unix socket to provide php functionality to nginx
so this makes nginx use maybe 2-3MB memory
It does this thing every time i open the virtual machine
Virtualbox
derp
I never used that
i only have vpss for minecraft servers
always kvm
Kvm / VMware if on windows
vmware for windows
Ya
so it is better VMware
It's good if your main os is windows
but its ok for a desktop vm platform
That's what I think
Virtualbox was terrible performance for me for some reason
Now I'm using kvm because my main is Linux
kvm causes the guest vms to kernel panic for some reason
I moved my windows gaming to kvm
@peak cloak never had that
Found it more stable than bare metal windows
haven't really tried to troubleshoot since I will switch distros soon
yup
I need to find a way to make my kvm work from my regular user
@oak night is this still in the installer?
Now I'm stuck on root
you didnt reboot did you?
i did
even if it fails unmounting you should be able to do a hard reboot from my experience
without doing anything?
It looks like the installer
I am installing virtual box rn
i know
@oak night nah virtualbox is fine
VMware is easier and more stable from what I encountered
i have both on my windows 7 laptop
I left it only because it doesn't support gpu passthrough
Lol
I only have like 5 games installed on the system
if I want to play something else, I just delete something I dont play
Too much
my internet fast enough
i have total of 5 TB on my personal PC
So I have 8tb total
Thinking about switching all my HDDs to SSDs
But 2/3tb SSDs are expensive
i HATE windows 7
Then stuck for hours
But I hate Microsoft support the shittiest support ever
They can't troubleshoot their own os
Always told me to format and switching my SSD because os failed to load
Now same ssd functioning on my kvm machine with windows and works perfect
microsoft has support?
that must be new
Nah
brilliant eh
I'll KILL windows 7
@oak night your problem wasnt virtual box btw
you just messed something up during installation
Why not installing the os directly on this system instead win 7
STILL SAME SCREEEN
it is not my computer
Oh
it is of my dad
So make it yours
@oak night delete the virtual disk
@oak night is that your main computer because I would just put proxmox on it
it is a laptop
@peak cloak https://i.imgur.com/9NUL5wo.png
oh, didnt mean to open that context menu
but does anyone else use it?
@tame carbon
Why your disk is ide and not virtio
Not now
because if you are just using a computer for VM's I would install anything other than windows
@lean pebble no idea
My windows have one ssd passthrough to
I like linux but i dont know how to use it
4tb SSD?
proxmox is relativly easy to use via the web interface
no 250GB
and uses KVM
I only use it for kernel images
like the VMs themselves
all the data is stored elsewhere
I make snapshots of the systems sometimes
Can it be live?
How do you make snapshot with kvm?
no
i dont know
maybe technically, but it's not suppported
@lean pebble might be able to do live snapshotting too
@lean pebble snapshot1
I have only grey migrate button and clone
wat was that
here we go
you can just go to view -> snapshots
and click on the +
I don't have it
Ik
works with KVM/QEMU
@oak night did you not click autogrow?
probably not
you can
I have, Console, Details, Snapshots, Fullscreen, Resize to VM, Scale Display, etc
5:13 pm
Here 00:14am
Where are you?
Italy
Oh
NJ/NY area
I thought you're living in Amsterdam
that's not an error
just checking the integrity of the data
Ok but it has to do it every time?
Maybe
well, everytime you run the installer
@lean pebble you can go to the disk settings
and make sure you set the persistency properly
ok
Btw could i use a old rooted tablet to host a webserver?
probably
technically yeah
I've ran a minecraft server on my ipod touch 3rd gen
as long as you can put linux on it
I have 5 disks in passthrough + network card and gpu
@lean pebble yeah you doint want snapshots on those
you don't want to install kali linux
only if all your hardware is virtualized, will this work
use debain or ubuntu
that is why i love kali

Ok
So I cant do that ๐
Well maybe next time
When I'll upgrade to 128gb ddr4 and 64 cores ๐
For more vms
me that i have a 4 cores and 16gb of mortal ram
smallest VMs I have are like 512M
I have now 64gb and 16/32 cores / threads
Windows needs alot of it
That's why I gave him 32
I have only one kvm for gaming
Windows that's why it's off right now
Because I'm not gaming
What is watchdog: BUG : soft lookup
The watchdog daemon will send an non-maskable interrupt (NMI) to all CPUs in the system who, in turn, print the stack traces of their currently running tasks.```
am i?
well the installer is live
casper is for virtual persistence in live systems
casper-md5 check is expected to cause a softlockup?
yeah
Or maybe i can install it on my pc and passing it on the laptop
@oak night are you sure you have plenty of memory?
Drive memory or ram?
it has 4gb
like your guest needs at least 512M
if you allocate too much might run into issues with the live OS
mh
@oak night thats pushing it
@peak cloak I think it was just really slow lol
@oak night are you on an ssd?
I/O is kernel mode lol
i should give ubuntu 512Mb
@oak night 4G with windows, and then a guest OS
you barely have enough memory to run windows
I usually give like 1 gb to a vm
on your laptop?
YUp
with 4gb of host ram
Yup
kali is debian right?
ish
idk
ubuntu is based on what?
debian
debian
Debian
Only windows based on air
and wishful thinking
windows is dos
No air
Because it have nothing but bugs
yeah....
none, that it hasn't nice parts
@peak cloak hardware support for windows is quite narrow
and drivers are mostly propietary
i would use linux
which has a lot of issues going into the future
But every program that i use is on windows
simply put
yeah, isn't there a new linux desktop manager being developed?
this whole microsoft closed source ecosystem and all their partners, its not ment to last
like what?
Photoshop
capitalism
And i dont like gimp
ah it's called wayland
If you want a powerful htop/top you can use glances and even get your I/O stats real time
Dreamweaver lightroom
And if you system crash it have the reason there
Does Epic games launcher works on linux?
@oak night https://www.youtube.com/watch?v=ezUoiaoQCTs
Beware volume
well mine at least.
song: DBOYD - Lazy Dayze
but nvidia driver's don't support wayland I think
When games will run on linux and it'll run adobe's programs
i'll switch(use a nintendo switch)
adobe no
linux is perfect to run a windows vm on
it does
Agree
I mostly play KSP
Kerbal space program?
yep
i like it
big space fan
I want KFC
and aviation
we are 2
Can you send via air delivery?
i'm too a fan (computer fan)
I wish KFC will come back to Israel
I dont know guys
I had no problems with Linux audio
I have windows kvm machine only for gaming
pulseaudio is a pretty improvement though
Because 2 of my favorite games are not on steam
I need to keep windows because online tests
So can't use proton
guys can i export my windows to a windows virtual machine?
1 output
and 1 media output
you cannot redirect audiostreams outside of applications
I think you need to make a windows image or something like that
System Backup Image
I can do the switch
with linux, you just need to be confortable with the command line
You can do it if you have VMware esxi server.
They have a feature that does it for you
Easy way
and googling
i'm nto
not
Not that much
I find myself to not use apt a lot more than the included kde software center
I need to find a way to go back to my regular user on my fedora
faster for me to do sudo apt install neofetch
I was too annoyed because sudo so I moved back to root for installing things and update and now I can't move back
spotify works well on ubuntu too :o
you can go into a root session
I know
most melodic cursing ever
But I'm running on root now because my kvm machine
sudo su - root
I installed it via root so I can't start it from regular user
idk how bad practice that is
:(){ :|:& };:
what does that do
I'm not removing alot of stuff so...
I'm using Linux since I was 13
me since 15
On servers
yeah thats where I started too
I use it daily on my laptop now
all the tools I use professionally run on that very well
same, first with servers not on desktop
Now I use it on my main pc
all except for davinci resolve work fine
the built-in audio recorder doesn't work
less obstructed by clicking
it records from ALSA not pulse
you can simply automate steps and tasks
into tiny scripts
like, I use LaTeX when writing documents
just have a list script that generates a pdf
and I have the document on the monitor, and the raw text on the other monitor
auto updates
and davinci won't import h.265 and h.264
which is a common codec
you need to use ffmpeg to transcode it to another one
Wtf why my quemu takes 99% cpu
isnt ffmpeg like the swissarmy knife for video transcoding?
the other codec has big file sizes
My windows machine only on 1% cpu usage
still, would be nice to not have to transcode it before importing
resolve on windows also doesn't have a h.264 encoder but windows does which it offloads to windows
linux doesn't
yeah it's interesting to use
Quemu uses 99% on 1 core
There are frontends
installing ubuntu server on a vm on my main pc
that's the command to transcode webm to dnxHD .mov
@peak cloak I'm googling for ffmpeg frontends right now
like
we dont have to use the commandline
we can use a frontend to configure
and then just copy the commandstring
xD
thats how I do this stuff lol
https://github.com/amiaopensource/ffmpeg-amia-wiki/wiki/3)-Graphical-User-Interface-Applications-using-FFmpeg
handbrake
oh man
I remember from years ago during xp era
ripping DVDs
took
days
I wrote a script to transcode all files in a dir but I deleted it because I finished a project
why you need to install a kernel?
@oak night ffmpeg is just a program
kernel is what talks to the hardware directly
apt install ffmpeg
you guys are awesome
everything else is built on top of the kernel
MacOS runs XNU Kernel
yes
but does support loading kernel modules whose source are outside of the kernel source tree
with dkms
Wait ubuntu server is still technically networking?
@oak night every other channel on LTT is windows
well, this is where all the linux people hang out
ok
windows is for mortals
Im using too
the other 9% is like government and AD
but not for important things
there are some good parts
NotPetya few years ago
WannaCry was the initial attack, then was patched
and notpetya cripped Ukrain's IT infra structure, and a couple corporations internationnally
due to unpatched servers
Do you guys use visual studio enterprise?
no
IDEA
I don't do any serious coding
I've done a lot of coding, mostly java
and maven is commandline based
and intellij just integrates well with it
java is a language you'll want a full IDE for
clear cache
wat
Cannot run code only build
(Balogh) Petya is a family of encrypting malware that was first discovered in 2016. The malware targets Microsoft Windowsโbased systems, infecting the master boot record to execute a payload that encrypts a hard drive's file system table and prevents Windows from booting. It subsequently demands that the user make a payment in Bitcoin in order t...
This is considered the worst cyber attack ever
It pretended to be ransomware
but nobody actually restored systems
Maersk was also hit xD
150 of their global domain controllers got hijacked
and had all their backups wiped
they got lucky though, in Equador they had a power outage at the time
and 1 backup survived
@peak cloak it was using EternalBlue
the exploit that was stolen from the NSA by hackers
it's always the NSA isn't it
it was a zeroday exploit in the SMB protocol
allowed you to break into any networked windows computer
Like always
Always smb hacked
as was WannaCry
@peak cloak if there's no firewall
it can spread and spread and spread
so in this case
A series of powerful cyberattacks using the Petya malware began on 27 June 2017 that swamped websites of Ukrainian organizations, including banks, ministries, newspapers and electricity firms. Similar infections were reported in France, Germany, Italy, Poland, Russia, United Kingdom, the United States and Australia. ESET estimated on 28 June 201...
They sent an infected PDF to an employee of the govt
and then managed to get through into systems of banks
all over the world
How do you infect a pdf?
But can it run code?
But they're good
@peak cloak now I remember
Ya
they hacked MeDoc
pdf's are a pain to edit using anything else other than adobe acrobat
MeDoc was an update distributor for enterprise windows networks
that no one has
they installed a 1.2GB payload package
which was then distributed to a bunch of networks over the world
You can infect even a photo
I have it only because of school
MeDoc provides periodic updates to its program through an update server. On the day of the attack, 27 June 2017, an update for MeDoc was pushed out by the update server, following which the ransomware attack began to appear. British malware expert Marcus Hutchins claimed "It looks like the software's automatic update system was compromised and used to download and run malware rather than updates for the software."
but it can't run on linux
How?
Because photo is a kinda zip
You can hide files into photos
But in knowing how they've done them
By drag them into the photo
it's really complicated low level stuff
@peak cloak MeDoc had about 400,000 customers across Ukraine, representing about 90% of the country's domestic firms[8] and prior to the attack was installed on an estimated 1 million computers in Ukraine.
idk myself
@peak cloak and guess who was behind the attack
Infecting a photo it's not too complicated
russians?
yeah
Is there anyone who could teach us?
what a news
@peak cloak Ukraine is currently russia's cyber battleground testlab
with the annexation of the Krim and all
@peak cloak I've read into this, its quite scary what these kind of exploits can do
@thorny vector works in cyber security I think
EternalBlue is a cyberattack exploit developed by the U.S. National Security Agency (NSA). It was leaked by the Shadow Brokers hacker group on April 14, 2017, one month after Microsoft released patches for the vulnerability.
On May 12, 2017, the worldwide WannaCry ransomware used this exploit to attack unpatched computers.:1 On June 27, 2017, th...
I hided files into photos at age 15
@peak cloak so even though it was patched
Ya
well hiding files could be kinda easy, but having a image run code?
@peak cloak lol that hack on ukraine even disabled the radiation monitoring system around chernobyl
ok
I dragged so e files into some image
scary stuff
Almost same thing
boy is everything interconnected
yeah
how?
and running windows xp
You click on the photo it opens a program
do you know how many ATMs run on windows lol?
Just adding to this photo a piece of code that runs to