networking

[desert briar]

Though I do see its appeal for bigger projects, I try to avoid it as much as I can. Personally use VSCode when I have to with a standard CLI to compile

[tame carbon]

I'm used to IDEA

[desert briar]

but at the same time, im not a developer, so I cant compare to others with my puny projects

[tame carbon]

which has much more sensible autocomplete

and most of the time

you can just tab your way through a line of code

like you can type: catch (NPE<TAB>

you don't have to type it out, neither do you have to type (

and if you do type ( it ignores it

visual studio puts another one in, for good measure

[desert briar]

good measure

[tame carbon]

@desert briar its just the behavior of the editor, when editing code

like backspaces

if you press tab in visual studio, it indents with spaces according to the style guide

[desert briar]

yeah I know, sometimes it can be very annoying though

[tame carbon]

but backspace, only removes a single space.

[desert briar]

like when it fills in the second "

but you only need 1

and when you want to delete 1 it deletes both

[tame carbon]

@desert briar lol I dont care if it fills it in, it should ignore the adding of another "

with IDEA even if you make the mistake

it just ignores it

[desert briar]

yeah well, jetbrains has good stuff

[tame carbon]

almost as if

they analyzed people's behavior on the editor

@desert briar thankfully you can install jetbrains' toolkit for visual studio

it makes life a little easier, as it remaps a lot of shortcuts

specifically for IDEA users

like, CTRL + D for duplicate line or CTRL + Y to delete a line

those are way different on VS

[desert briar]

As I said, im not a dev so I dont mind vscode

the small amount of coding I can do in my free time

yeah

I will survive

[tame carbon]

@desert briar yeah its my job basically

so I curse these things into oblivion

because they make my life hard

[desert briar]

I cant stand developing, its just so stupid imo

[tame carbon]

haha, I generally don't mind it

its just when dealing with certain technologies, that I get upset

[desert briar]

putting that aside, working in an environment like that

[tame carbon]

java for me, is like a breeze

[desert briar]

where 90% of the time you have managers with insane expectations

not even talking about the ridiculous job interviews where you need to be prepared to pull out 1 of those 15000 possible algorithms from god knows where

[tame carbon]

xD

if I need to know specifics

I just look them up

@desert briar my specialty with coding lies in services and APIs

so providing and consuming APIs

distributed systems architecture

and all the fun stuff

[desert briar]

😄

I do pentesting, so im far far away from coding

in rare cases I get to audit code, but thats it

[tame carbon]

do you do native code exploitation?

[desert briar]

As in binary exploitation? Egghunters, heap, stack, SEH

the whole process which goes behind it such as fuzzing and what not

I dont, I dont really enjoy that field honestly. I know the basics (heap, stack, format strings) but I do webapps & networks for the living

I specialize in Active Directory and you could say "offensive toolkit" development, lol

Work is mostly webapps though. So OWASP and other standards

[hazy sandal]

pfsense+haproxy w/ client certificates behind Cloudflare, is it not possible? I've tried a lot of different settings w/o any luck.

[peak cloak]

what error?

why wouldn't it be possible?

[hazy sandal]

weird. must've been some dns issues 😮 https has given me dns probe finished nxdomain since yesterday, while http worked, but now everything seems to have started to work as expected xD

[thick minnow]

Is there anything special about these cables? Or do they just look fancy 😂

[peak cloak]

they look to be shielded

check the rating on the cable though

or if you have a multi meter check continuity between the 2 metal things

[thick minnow]

Don’t have one here

Cat 6 s/ftp 250 mhz 4pairs iso/iec

[thorny vector]

@desert briar The people that enjoy binary explotation are wonderful, weird people I love having around. So they can do it.

[desert briar]

Yeah, im not saying its impossible. Its just not my niche, I dont enjoy it myself 😄

A really interesting field though

[thick minnow]

@peak cloak does this say something?

[desert briar]

FTP means its foiled twisted pair @thick minnow

[thick minnow]

what advantage does that have?

[desert briar]

if you'd undo the end and remove the "external layer" the cable would look like this:

[thorny vector]

For sure. I took a course on it, and we did a decent amount. But once code canary's and address space randomization started popping up, nope.

Done, I'll just social engineer creds at that point

[desert briar]

Less interference, higher speeds. CAT6 can do 10gbit for example, up to 30 metres I think? Cat6A can do longer. Standard Cat5E is rated for 1gbit (although debatable)

[clear igloo]

55m for 6 but I wouldn't push it that far

[thick minnow]

these are all 30 cm

[desert briar]

Yeah, then 55m

[thick minnow]

so no problem :p

[desert briar]

Yeah, we sometimes do phishing tests, if the customer wants to test their security posture

We had a test once, for a pretty major insurance company in our country. Sent out like 120 emails, phished 80 people.

What's funny is that we had a list of people we weren't suppose to phish, like the lead people in the company... We sent an email to the secretary (scraped her email off of linkedin) and she resent it to like 5 people in the high ranking positions we werent supposed to phish

And color me impressed, 3 of them fell for it

We were very diligent about it though, we sent emails in small waves. Only towards the end did we unload the rest.

[waxen scroll]

@rocky badge lets go to cisco live

[rocky badge]

👀

[thick minnow]

blob

[thorny vector]

Any payload? Or just went to a webpage that reported a hit?

[waxen scroll]

cisco live is all digital again and free i think

[desert briar]

It was a targeted attack with a christmas themed phishing page. Custom made, we had 2ish weeks to prepare. We also managed to snag a domain with a very similar name.

No payloads though

Sometimes we embed remote images in emails if we know that the email environment they use is windows based. That will allow us to host a remote smb server and steal their authentication hash. Then try to crack it, if we are allowed to.

That is a novelty though, usually customers are against that... And even if, blocking outbound traffic is common sense so it often wont go through, just trigger many alerts

often doesnt mean never though

[unborn plinth]

Someone mind helping me out, just got dhcp working but now it seems that it cant open a connection to boot from anything other than onboard memory

[tame carbon]

@unborn plinth are you attempting netboot?

[unborn plinth]

Yeah
Trying to get a linux distro to boot and install over lan

[tame carbon]

yeah but this is PXE

do you have a local TFTP server?

[unborn plinth]

I think tiny pxe server should have set it up automatically but now I think I'll have to set that up by itself

[tame carbon]

@unborn plinth do you have these on a switch?

or is it behind a gateway?

because it should be on the same ethernet network

[unborn plinth]

Its just right from my desktop to the thin clinet

[tame carbon]

https://i.imgur.com/UlWmlgm.png

Got any wireshark, to sniff for packets

?

[unborn plinth]

I could probably go quickly install one

[tame carbon]

@unborn plinth https://i.imgur.com/wHLRczA.png

[tame carbon]

@unborn plinth https://i.imgur.com/2vXleSZ.png

it reapeatedly is looking for an ARP response to the IP its looking for

@unborn plinth I recommend putting both the client and the server on a switch

on the same ethernet network

because you have an ARP configuration problem here

normally, the device with the corresponding IP would reply

[deft fog]

quick question, is it possible to run part of a server as a modem in stead of running a actual modem that the internet provider gives you?

[peak cloak]

modem just modulates coax to ethernet. I think you mean router?

as for router, yes

I wouldn't reccomend it for a core home router

There are many solutions out there like vyos, pfsense, etc.

[unborn plinth]

Well I don't have a switch or money for a cheap one from like staples so I guess it's just that arp issue is just not gonna get solved for awhile

[tame carbon]

@deft fog depends on the technology

with DSL this is called a DSLAM

but a 'multiplexer' is another term used

https://en.wikipedia.org/wiki/Digital_subscriber_line_access_multiplexer

it does in essence the same thing our modem does, except it always listens for another modem on other side

but it can handle many many lines

with fiber optics, its either direct fiber modules into a switch, passive optical networks, or a fiber multiplexer

[deft fog]

@tame carbon ok so i kinda under stand what your saying but have a video that explains a little more on how to set one up and what the pros and cons are?

[tame carbon]

why would you set up a DSL service

use fiber optics.

DSL is legacy, old crap

[deft fog]

no

i mean for the server to act as the modem

[peak cloak]

to replace your ISP modem?

or router?

because I think this is an xy problem

[tame carbon]

There's actual difference in hardware between these two kinds of modems

like, they use they same signalling system

but the roles they take is way different

those modems you get at home can't do what the machine of the ISP does

you'd need a DSLAM

and those are very $$$

and probably not somethign you'll get configured

without knowing how to do so

[deft fog]

ok sorry a little new here, i mean as a router so that i can run srate fiber form my pervider to both my server which is actiong as the router and my computer which would get access to the net work.

[peak cloak]

srate fiber?

what type of fiber network?

is it GPON?

because if it's GPON you need your ISP's equipment

[deft fog]

i am not sure, my provider is metro net so i don't know what they use to conect to there modems??.

[peak cloak]

from what I read online you can just use their ONT

and then route that to your server

you can always ask the ISP

ask if they can provide an SFP module to replace the ONT or something

[deft fog]

ok i was just seeing if it was posible to ran my server as the rougher

[thorny vector]

I just got the first fork of my github repo. Feels good bro

[peak cloak]

nice

[peak cloak]

as a router absolutely take a look at pfsense

although I would just recommend getting a dedicated router

because of the cost and noise of a dedicated server running as a router

[thorny vector]

Server room go brrrrrrrr.

[deft fog]

lol

but ya

i just wanted to see if it would be fun to do

that is all

[thorny vector]

You do get the benefit of being able to run more stuff off your router, like an IPS, or VPN server

[peak cloak]

ah yeah for just learning go for it, I used vyos an edgerouter for my server Kube cluster for learning

never got k3s to work

I'll try again later

[timid matrix]

hey uh i have some question

which one is better , TP-Link MR3420 or MR3220?

[lean pebble]

Here they use gpon

[timid matrix]

whats gpon?

[tame carbon]

both of those are crap

tplink routers

[timid matrix]

but which one

which one were better

[tame carbon]

probably the one with the higher number

[timid matrix]

dont compare it with one of those router with 'spikes'

[timid matrix]

[tame carbon]

@timid matrix tplink doesnt provide test results with their devices

so you have to trust the marketing

[timid matrix]

test result

?

im planning to use it for range extending tho

[tame carbon]

lmfao wat

facepalm

[timid matrix]

wait no, imma use it as wifi extender

and might wanna experiment with the firmware

like installing OpenWRT

[tame carbon]

I need like a standard message

that sums up the terrible idea that is: wifi extending

@timid matrix I'm no fan of WDS and the likes

[timid matrix]

standart message?

[tame carbon]

It makes wifi even more terrible than it already is

[timid matrix]

all i need is a wifi in my room

[tame carbon]

@timid matrix https://en.wikipedia.org/wiki/Wireless_distribution_system

This is what provides that 'range extending'

[timid matrix]

forgot bout range extending

imma just use the wifi extender

so this one had his own ssid

[tame carbon]

The maximum wireless effective throughput may be halved after the first retransmission (hop) being made.

^ downside of wifi extending

nevermind the packet loss, increase in latency, and the drop in speed ^ as mentioned above

[timid matrix]

i dont rly care bout like 500ms more ping

[tame carbon]

500ms?

online games = not playable

[timid matrix]

who said im going to use it to play online games

[tame carbon]

video calls = you end up talking over one another

[timid matrix]

w8 1 question

is 380ms ping alot to u?

[tame carbon]

Yes

that's a lot, even for DSL lines

[timid matrix]

wew

ok then

[tame carbon]

DSL is ~10-30ms depending on distance

fiber optics, I have a 35km fiber here, and I get 5ms

[timid matrix]

cuz its howmuch ping i got when playing a game connected to Finland or US server

[tame carbon]

latency is another term for ping

wifi itself already has 3-4ms latency

so add an extender, makes that 6-8ms

• internet latency

[timid matrix]

hmm thats pretty low

[tame carbon]

@timid matrix extenders probably wont make it shoot up that fast

but wireless transmission isnt perfect

[timid matrix]

only like 10ms ping more, its not a big deal

[tame carbon]

so in the case of lost data

it has to retransmit

[timid matrix]

atleast it fix my slow internet on my room

[tame carbon]

@timid matrix have you thought about using powerline?

[timid matrix]

i cant even open google on my room

[timid matrix]

powerline? u mean lan?

[tame carbon]

Its a pair of adapters

[timid matrix]

tf is that?

never heard of that

[tame carbon]

you plug them into a powersocket in two places in the house

and they make an ethernet bridge over the existing house wiring

[timid matrix]

what does it do?

[tame carbon]

its not as fast, but its more reliable and has low latency

[timid matrix]

powerline?

[tame carbon]

https://content.hwigroup.net/images/products_500x300/043697/devolo-dlan-200-avplus-starter-kit.jpg

there's various brands of these

https://media.s-bol.com/31l2w6K1BBjQ/550x392.jpg

[timid matrix]

uuh

[tame carbon]

But in essence, they plug into the house electrical system

[timid matrix]

these thing?

[tame carbon]

half a million rupees?

[timid matrix]

3.5x more than both of the router i asked which one were better

[tame carbon]

@timid matrix thats the expensive variant

[timid matrix]

ooh yea

imma sort low to high

[tame carbon]

@timid matrix benefit of these is that you can enjoy wired internet, without having to run cables

you can attach a small wireless access point to the end of them

[timid matrix]

wait what

[tame carbon]

and they act as 'extender' except they are wired

so no airgap inbetween

no latency or packet loss

[timid matrix]

huh

still expensiveee

yea imma stick to the old plan

[tame carbon]

@timid matrix there are also kits from tplink with the built in wifi adapters into those plugs

[timid matrix]

dont rly care bout 8ms more ping, tho i would only use the wifi in my room for youtube or smthng like that

just finished speed testing the speed on my room

82ms ping, 0.94Mbps Download, 3.38Mbps Upload

[tame carbon]

@timid matrix have you compared that to wired connectivity?

[timid matrix]

while if i use lan , i got around 21mbps download 4,2Mbps Upload

[tame carbon]

ah

[timid matrix]

but same ping

imma re test on the LAN

[tame carbon]

@timid matrix keep in mind that the wifi extender, if you plan on using one, has to be in range of the main access point

if it has bad signal, it wont help you much

[timid matrix]

nvm, 13ms ping on LAN

[tame carbon]

yeah thats more reasonable

@timid matrix you are getting 80ms ping because of retransmits

[timid matrix]

retransmit?

[tame carbon]

so it has to retransmit a failed transmission

this takes time

[timid matrix]

ooh

[tame carbon]

if you have a good signal

you get maybe 3-5ms

[timid matrix]

nope , never

in my country, this is fast

[tame carbon]

@timid matrix just saying, that's what it would do if you had good signal

@timid matrix in my country that is slow lol :3

https://i.imgur.com/w0u6d6F.png

[timid matrix]

and what city r u in?

the same as the server?

[tame carbon]

I live in a rural area

but I have an FttH connection

(Fiber to the home)

[timid matrix]

hmm same with me

[timid matrix]

also holy sh*t just realized that 250mbps speed

[tame carbon]

the magic of fiber optics

unlimited* speed

@timid matrix having delt with terrible wifi before, I have a general negative view towards wifi extenders

[timid matrix]

how much u pay for that speed?

[tame carbon]

because in my experience, they just ruin what could have been 'ok internet'

@timid matrix its a compound plan, but just for data. (excluding everything else)

250mbit is like 72 euros/month for me (excluding taxes)

[timid matrix]

wooow 72 euros

[tame carbon]

once you add the operator fee for the fiber

[timid matrix]

like IDR 1,21 Million

[tame carbon]

extra /29 IP block

IPTV

you end at around 130/month

[timid matrix]

well, if i convert from IDR to Euro , mine were like 23 Euro

[tame carbon]

@timid matrix you can't even get internet here for that much lol

[timid matrix]

20mbps

[tame carbon]

smallest plans here start at 50mbit, and cost around 40 bucks

[timid matrix]

which was pretty sh*t

[timid matrix]

wew, thats the max speed my isp that in my area max offer

[tame carbon]

even if you are on ADSL2+ and get a max of 24mbit/s, they still make you pay for the full 50mbit

[timid matrix]

but if i go to other ISP, i could get 100Mbps for 23Euro

[tame carbon]

@timid matrix this fiber line, with the current plan, I could get up to 800mbit/s

if I need more, I have to contact their sales dpt

[timid matrix]

wow, thats almost 1Gbit

[tame carbon]

the fiber optic would allow for up to like 10G or more

just depends if my ISP wants to sell it to me

and for what price

[timid matrix]

also umm

[tame carbon]

https://i.imgur.com/h7Cg1M7.png

[timid matrix]

why is almost every cheap model of TP Link had this version of case?

[tame carbon]

they been looking like that since 2008 lol

[timid matrix]

hmm

[tame carbon]

I had like 3 tplink routers in the past

but every single one of them died

[timid matrix]

F

how did it died...

[tame carbon]

not buying them again

idk

it just stopped turning on

or had stupid amounts of packet loss

[timid matrix]

no led blink?

[tame carbon]

for no reason at all

tplink builds consumeables

every 5 odd years, you'll need a new one

[timid matrix]

hmm

yea imma go with TP-Link

[thick minnow]

only good tp link product ive ever had is a usb to ethernet dongle

other products constant prblems

[timid matrix]

usb to ehternet?

[peak cloak]

the only good tp link is their Omada line and I guess their switches

[thick minnow]

this bad boi

[peak cloak]

mom has this, works well no additional drivers needed https://www.amazon.com/TeckNet-Aluminum-Converter-Ultrabooks-Notebooks/dp/B0178HOTOU/ref=sxin_12?ascsubtag=amzn1.osa.3f25e444-78bf-41db-8bff-fc9dc04adfd5.ATVPDKIKX0DER.en_US&creativeASIN=B0178HOTOU&crid=3KDQWAJX6DSX4&cv_ct_cx=usb+ethernet+adapter&cv_ct_id=amzn1.osa.3f25e444-78bf-41db-8bff-fc9dc04adfd5.ATVPDKIKX0DER.en_US&cv_ct_pg=search&cv_ct_we=asin&cv_ct_wn=osp-single-source-gl-ranking&dchild=1&keywords=usb+ethernet+adapter&linkCode=oas&pd_rd_i=B0178HOTOU&pd_rd_r=87e51003-ce7d-4d03-ad82-22cb99ecb048&pd_rd_w=2EMQv&pd_rd_wg=gzFjF&pf_rd_p=53f37bb1-bef6-4b9e-be3a-0696c5f5ad01&pf_rd_r=MKW320ASNNVGNZ7WY2YH&qid=1612442794&sprefix=usb+etherne%2Caps%2C157&sr=1-3-d9dc7690-f7e1-44eb-ad06-aebbef559a37&tag=pcmagcontent-20

[unborn sluice]

look at that wall of link

[timid matrix]

wow, that wall of link

[unborn sluice]

he's just trying to help

why are you like thiss

[tame carbon]

"no drivers needed"

seems legit

does it use magic ?

[thick minnow]

its true

works for my nintendo switch

[tame carbon]

wat

https://www.youtube.com/watch?v=RcNgOnbZzc0

[peak cloak]

additional I meant

like some wifi ones need additional drivers and it's hella annoying

[tame carbon]

welcome to the world of linux, where drivers are never an issue

they are just always there.

[hollow marlin]

https://tenor.com/view/sure-john-cena-are-you-sure-gif-5783187

[unborn sluice]

drivers are never an issue

[tame carbon]

@hollow marlin hahaha

for commodity hardware, drivers are just generic and always available

unless your peripheral has green letters on them spelling N V I D I A

[thick minnow]

I now can control my pi from my pc via VNC can you also do that via internet?

[peak cloak]

yes I reccomend you setup a vpn

[thick minnow]

u got a link or something of what i need to do? :p

[peak cloak]

pivpn is nice

[thick minnow]

i use my pi for discord bot hosting btw

[peak cloak]

or just use ssh

why do you need vnc

all you really need to do is cli

so just setup ssh on a non-standard port and use ssh keys

[thick minnow]

to view the desktop

[peak cloak]

why?

[thick minnow]

experimenting

planning on doing more that hosting a bot

[peak cloak]

you can experiment with just cli?

all my servers are headless

[thick minnow]

im new to all of this so yeah i think this is better for me

[tame carbon]

@thick minnow set up SSH keys for your pi, disable password login

then forward a port for SSH

after which, you have 2 choices

either, use X11 forwarding

or

set up an SSH tunnel for VNC

you can do this with a oneliner command, or a preset in PuTTY

after you created the tunnel

you can connect to a local port with your VNC client

and SSH tunnels it to the server

@thick minnow https://i.imgur.com/Evbz4hK.png

Remote is from Client <-- Server

and Local is to Client --> Server

Dynamic will spawn a SOCKS5 proxy for HTTP and such

[thick minnow]

ty

[tame carbon]

@thick minnow actually

what i posted above is wrong

@thick minnow like

ssh -L 6379:127.0.0.1:6379 crystal@main

[thick minnow]

👀

[tame carbon]

this is the command, maps the local port 6378 to the same port, but on the remote server

yeah, you'll want Local

https://i.imgur.com/MdvRRR1.png

with Remote you can forward a local port to the remote system

[thick minnow]

what destination do i need to dp

[tame carbon]

destination would be 127.0.0.1:80 (this is http) or localhost

and whatever port vnc uses

[thick minnow]

oki

[tame carbon]

@thick minnow I use this to get around stupid internet filters on school networks and such xD

set up a dynamic tunnel to some ssh server

and configure firefox

firefox pocket edition, whichever

@thick minnow this is how ez it is: https://i.imgur.com/c7nzjJP.png

command for this is

ssh -D 8081 -q -C -N -f user@host

-q is quiet and -f fork into background, -C compresses traffic, and I forget what those other flags do

oh yeah -N makes sure no terminal spawns, since we only forward ports

[waxen scroll]

everywhere i know that uses a proxy blocks all ports to the internet from users

so 💁

that trick was working in the early 2000s but school IT wised up

[peak cloak]

Idk most schools security sucks

[tame carbon]

@waxen scroll thats why my SSH server listens on both port 22 and 123

123 is NTP

and most windows sysadmins do not run their own local NTP server

since they all use time.windows.com

[waxen scroll]

idk every place i worked had their own

[tame carbon]

@waxen scroll you can still use port 80 if all else fails lol

unless they do protocol analysis

[waxen scroll]

i mean you're not gonna get port 80 SSH to go through a browsing proxy

👀

[tame carbon]

@waxen scroll no I ment

running the ssh server on 80

[waxen scroll]

right but many places that use a proxy block everything to the internet except the proxy and their servers

[tame carbon]

oh

http proxy?

[waxen scroll]

yes

[tame carbon]

@waxen scroll they had something like that too

I forget what is was called

Squid something

[waxen scroll]

bluecoat? squidguard?

[tame carbon]

http://www.squid-cache.org/

@waxen scroll you're talking about a school, with 200 some computers, on a 20/20 fiber line

10 years ago

[waxen scroll]

my school did websense

i hated the thing cause it worked so well

[tame carbon]

https://www.telegraaf.nl/images/840x473/filters:format(jpeg):quality(50)/cdn-kiosk-api.telegraaf.nl/9fa2e150-66b0-11eb-acd3-0217670beecd.jpg

Rotterdam ^

[waxen saddle]

At the school I worked at, we used Lightspeed Systems. It worked insanely well and I have 100% confidence in the product and company (I took a tour of their headquarters and was certified with their product). They specifically cater to schools and with all my logging and testing and trying to bypass it, I found 0 evidence that anyone was ever able to get around it - though they tried.

[tame carbon]

out of nowhere, everyone has disabled parking spots

since the lockdown

[unborn sluice]

I found 0 evidence that anyone was ever able to get around it

what if they committed the perfect crime

that's the worst thing about the perfect crime, nobody should know it

[waxen saddle]

Kudos to them for having blackhat conference capabilities at such a young age. 🙂

[tame carbon]

https://i.imgur.com/RJ5jm3r.png

[unborn sluice]

checkmate

[tame carbon]

@waxen saddle at my old highschool they were using Novell Networks

ran on XP

and servers W2k

I think its called NetWare

GroupWise for email I remember

[waxen saddle]

The sys admin that took over me got rid of Lightspeed and replaced it with a free DNS filter. I guarantee you kids started bypassing that in the first week.

I don't have any experience with Novell stuff.

[reef gazelle]

Domain controllers are NTP servers for domain joined computers, their uplink may be ntp.org, time.nist.gov, or what have you but there is a local NTP server

[tame carbon]

@reef gazelle or their filter was just bad

because I created ssh tunnels over that port lol

[reef gazelle]

Time sync is kinda important for Kerberos

On a domain joined computer, you should be able to run w32tm /query /source to find the domain controller relaying NTP

Usually it will be the same server that you'll get with echo %logonserver%

[reef gazelle]

My work has Websense, well now known as ForcePoint

Used for inbound mail filtering, DLP, web filtering, on and off prem.

We are just now switching to virtual appliances.

I've been getting free rails from them as of late :)

They're A7 rails so they work for my servers

[lean pebble]

hey

someone ever encounter a strange issue like this?
The company I used to work for had this weird issue that one subnet can only be accessed from one subnet on the same network but not from the other subnets that on the same router even that the firewall accepting all to all from all the subnets that this router handled.
This router have access to 10 different external IP subnets almost all of them prefixed /24 /25 /27 and etc

oh and it stopped working one day without any notice just came to work and had this issue

[peak cloak]

no clue, maybe ask on home lab, a lot more full of networking experts

[lean pebble]

I'm just curios

My old CEO just find it out again with the employ xD

after I told him almost 2 years ago

[hollow marlin]

So how exactly was it setup? If all subnets were hosted on a single router than it would be ACLs, if they were multiple routers/L3 switches, that its a routing problem. If the "router" was actually a firewall, its firewall policies

[hollow marlin]

I take that as an insult

[peak cloak]

not very active, that's why

which is understandable

[hollow marlin]

Im here, just get busy during day hours with work as a service provider core network engineer which apparently not experty enough

[lean pebble]

Fortigate

1 main fortigate IP for access it

All the rest are configured I'm not sure how my CEO played with it

I'm pretty sure that they was as sub networks on the lan ports

But I don't remember I was adding and removing rules in the firewall

Didn't went the fortigate configuration

[little schooner]

Sounds experty to me

[lean pebble]

It's not dhcp or something

All the IPs assign manually to the servers

This CEO against automation

And SSDs

[hollow marlin]

If all subnets existed withing the fortigate, then its really just down to policies, improper zoning, etc

[lean pebble]

Ya

All withing the fortigate

The only weird thing that it worked and suddenly stopped

Only from one subnet all the other works fine

Let's say 10.10.10.0/24 suddenly stopped working properly while trying to connect to him from 10.20.0.0/20 and 192.168.20.0/24

[lean pebble]

No policies have changed

I even tried to open it all to the specific IP didn't helped

Even not worked sometimes whiting the same network

Above all policies

And from outside everyone can access to the servers that running on this subnet

[hollow marlin]

Well if he manually assigned the IPs and fat fingered the mask, such as leaving it 10/8, the packet would make it to the server but not back as in the server thought 10.10.10.x was in the same subnet

[lean pebble]

Just not whitin the network

[hollow marlin]

Nah fam, thats why you need to go to homelab where /24s and VLANs are all there is to networking

[lean pebble]

It's not vlan

😩

Just a bunch of external IPs subnets

The internal IPs such 192.168 and 10.0/8 are good

[hollow marlin]

Did the servers have 10/8 IPs or did the servers just have public IPs?

[lean pebble]

Only the dedicated ones

All the rest are VMS

On them

"cloud" he call it

Just xen virtualization I don't like it

[peak cloak]

that's the homelab reddit, the discord is actually descent tbh

[lean pebble]

Send me the discord

If you have it

[hollow marlin]

I would go with he had incorrect mask, NATing in the vswitch or VMs having multiple IPs and responding with the incorrect interface. Its really hard to say with little topology

[lean pebble]

Suddenly without changing anything

Let me fix the question

The problematic subnet can be accessed only from the same subnet in the same network

[tame carbon]

time for a solo JRP session

[lean pebble]

Gl

[tame carbon]

http://darklab.org/jrp.txt

https://i.imgur.com/az17AYr.png

[hollow marlin]

Oh no, thats where Pheonix has been

[peak cloak]

yep

[hollow marlin]

My last point stands still. If the servers/VM have a private and public IP and the IP is the primary, traffic will make it to the server but then respond on the public interface. While it will be able to reach any other devices within the subnet on their secondary IPs

[sick grotto]

So I enabled SMB 1.0/CIFS Client for my computer thinking it would help get my nas going, saw that I lost all internet for my computer, turned it off and still don't have internet. HALP

Windows' useless troubleshooter just says "The DNS server isn't responding"

[lean pebble]

In my PC I have
2 x 1tb hdds
1x3tb hdd
2x2tb hdds
2x250gb
ssds 1x1tb ssd
1x2tb nvme m.2
I want to take out all the hdds and replace them or with ssds or make a nas at home for will be as backgup for important things and folder for games and for my home plex server.
What do you think about this idea?
I have an old i7 4770 computer on my closet that I still need to check what happen there.

[tame carbon]

@sick grotto try pinging 1.1.1.1

[sick grotto]

"The free app that makes your Internet safer"?

[tame carbon]

no ignore that

1.1.1.1 is a dns server

so by running ping 1.1.1.1 can test if you can even reach it

[sick grotto]

oh it's a windows command?

[tame carbon]

yeah

[sick grotto]

It shot up some replies and closed the window

[tame carbon]

yeah so, what is the issue then?

Windows' useless troubleshooter just says "The DNS server isn't responding"

that's what you said

[sick grotto]

Yes, as in that's what the troubleshooter told me

[tame carbon]

idk

windows is vague as always

maybe someone else knows a solution

[sick grotto]

Like I said the only thing I did was enable SMB 1.0/CIFS Client and then disabled it, and poof it doesn't work now. Would it have changed another setting somewhere else?

[hollow marlin]

Just enter ipconfig /all in CMD and paste the output for your network interface

[lean pebble]

Windows troubleshooter only makes more troubles

[sick grotto]

You want me to paste it in here?

[lean pebble]

I hate pppoe connection 😑

[hollow marlin]

Yes

[lean pebble]

Again taking 200000000 years to connect

Even that the router got the IP from the ISP

[tame carbon]

looks normal to me

[sick grotto]

Yet here we are

[lean pebble]

Finally pppoe connected

The solution for all my internet problems.
Connect to hex-s disable pppoe for 4 seconds enable it and here we go internet working

[hollow marlin]

Output is fine but I see its showing connected to ethernet in the top right, do you have any VPN clients installed?

[sick grotto]

No VPN

[sick grotto]

There is this if it helps

Only 1 ethernet cable is in and the top one is actually a wifi connection and my computer has no wifi

[hollow marlin]

Reason I brought it up is the only connection its showing connected is an Intel Wifi adaptor and typically when on wifi connected to VPNs the symbol changes to ethernet. Are you positive there is no wifi? Its clearly show there is

[short veldt]

What causes RST packet during SSH?

[sick grotto]

The motherboard can have wifi, but I've never had the antennas in and never told it to connect there

[hollow marlin]

Firewall denying the connection

[short veldt]

Thanks I'll check on that

[peak cloak]

@sick grotto seems like your router is the dns server on your pc (Issue with router upstream dns?)

[hollow marlin]

Are you plugged in via ethernet? I would disconnect from the wireless and reseat the ethernet connection

[sick grotto]

Yup, plugged in with ethernet and already reseated the cable. And it won't let me change that over so I just outright disabled wifi completely

[sick grotto]

I'm not an expert with networking stuff, so how would one go about fixing that?

[peak cloak]

go to 192.168.1.1 and log in (if you know the router login)

look for something like dns forwarding or dns server, something like that

[hollow marlin]

In windows search type windows network connections and it will open the control panel for you adapters, what all exist there

[sick grotto]

It's not connecting to that

[hollow marlin]

double click on ether 3 and go to properties

[sick grotto]

Every box is checked except that one

[hollow marlin]

double click on Internet Protocol version 4

[hollow marlin]

ok so press cancel, then cancel and go to details

[peak cloak]

Best would be to check the DNS settings on the router or change the DNS server on the PC itself?

[hollow marlin]

Well if any other devices are working I would not make changes in the router

[sick grotto]

Yup all other devices are working just fine

Just this computer that I had briefly enabled the SMB 1.0/Client thing on

[peak cloak]

True

[hollow marlin]

Id say Windows is just borked. Go back to properties, IPV4 and set the DNS as static, add int 1.1.1.1, press ok then ok. See if it will restart the process

[tame carbon]

^

have you tried restarting the machine? xD

[hollow marlin]

I hesitated asking that lol

[peak cloak]

it's windows so tbh that may work

[tame carbon]

service reps do it without shame

exactly

[sick grotto]

You know, that sounds stupid enough to work. I dismissed it cause it happened after 2 restarts already but gimmie 1 sec

[sick grotto]

Btw I don't think that changed anything

Nope restart did nothing

[tame carbon]

@sick grotto https://cdn.discordapp.com/attachments/387022787480387605/807023530197254174/20210204_180305.jpg

Go back to this

[sick grotto]

Wait, discord's working on it now but not other things...

[tame carbon]

Click on "Use the following DNS server addresses"

and enter;

[sick grotto]

Oop spoke too soon, it's only semi working

[tame carbon]

1.1.1.1

and
1.0.0.1

[sick grotto]

Gave the same "DNS server isn't responding" thing that the troubleshooter gave before

[tame carbon]

that troubleshooter is useless.

never helps you.

[sick grotto]

Yup

[hollow marlin]

What version of windows are you on?

[tame carbon]

set your DNS server manually.

then open a terminal

and run

nslookup

then try a domain name and see if you get a response

[sick grotto]

Version 10.0.18363 Build 18363

[tame carbon]

I'm on the same version

That's 1909

https://i.imgur.com/2fpHsWf.png

[sick grotto]

This thing?

[tame carbon]

@hollow marlin now I am lost

wtf windows

[sick grotto]

It's just timing out over and over

[hollow marlin]

The reason I bring that up is I ran into this as well as others, a bug in 1909 has caused issues with DNS, essentially breaking it for applications.

[tame carbon]

really?

[hollow marlin]

in nslookup, type server 1.1.1.1

then try again

[tame carbon]

https://i.imgur.com/rEjasyC.png

[tame carbon]

@hollow marlin its already using 1.1.1.1

now I am curious

@sick grotto do other devices on your local network exhibit this behavior?

[sick grotto]

None of the other devices are doing this

Because I didn't do that SMB 1.0/Client thing on the others, only this one

[tame carbon]

Ok, have you tried reverting that change?

[sick grotto]

I reverted it instantly, but the problem persists

[hollow marlin]

after entering server 1.1.1.1 did you try youtube.com again

[sick grotto]

Just tried it and it's timing out

[hollow marlin]

But you can ping 1.1.1.1

[tame carbon]

no dns... can ping?

[sick grotto]

Yup

[tame carbon]

did windows break itself?

[sick grotto]

I guess so? Maybe a clean install of windows is in order?

[tame carbon]

@sick grotto open another terminal, this time right click it and run as administrator

then run

sfc /scannow

https://i.imgur.com/kKoDUdU.png

[sick grotto]

It's running

I'll share it when it's done

[tame carbon]

reliable

[sick grotto]

Mannnn I just wanted to get a nas working

[tame carbon]

reboot

[sick grotto]

Restarting the system now

[tame carbon]

so rare to see that message xD

usually its like: ERROR@#$!@# UR F4CKED

fingers crossed xD

lets hope this fixed it

[sick grotto]

[hollow marlin]

1909 broke the DNS resolver suddenly for many of us at work back in Sept/Oct. Only fix at the time was registry change but I cannot remember what changes I made. If he changed the system packages and reverted it might have been enough to break it

[lean pebble]

I'm still on 1909

on my vm

[sick grotto]

Nop

[lean pebble]

Well I used do this sfc steps from windows installation disk and then cmd

before the windows is even up

[tame carbon]

I still don't get why system32 is even a thing

[lean pebble]

because windows

[tame carbon]

on linux the entire operating system is usually a single image file :3

[lean pebble]

You know that if you remove it nothing happen right?

[tame carbon]

@lean pebble lol really?

[lean pebble]

My friend removed it and the computer was ok with that

I was O_o

[tame carbon]

yeah until you reboot

[lean pebble]

nah he rebooted

[tame carbon]

F

[sick grotto]

For those reading do not do that!

[lean pebble]

for some reason for me it didn't worked

xD

[tame carbon]

here's a fun program:

[waxen saddle]

Yea, system32 is absolutely necessary for Windows to run.

[tame carbon]

https://qntm.org/suicide

[lean pebble]

Just you rm -rf /

[tame carbon]

if you have a syntax error, at any time, in a shell

[lean pebble]

😂

[tame carbon]

it wipes your entire disk.

[sick grotto]

But yeah restarted and nothing changed. So do you guys think just a fresh windows install would be the answer?

[hollow marlin]

At this point, lets hope there is a restore point. Hold shift while choosing restart and revert windows

[tame carbon]

those actually work?

[lean pebble]

Is that thing works?

Last time I tried nothing happen

except sticky keys before reboot

[tame carbon]

cynicism level is very high right now

[hollow marlin]

If reverting is successful, immediately update

[lean pebble]

What version of windows do you use?

[tame carbon]

@hollow marlin I would do a feature upgrade regardless lol

it kinda reinstalls the whole OS anyways

[lean pebble]

if 1909 never update from it

[tame carbon]

I think I am replacing my laptop before installing a new distro on it

Ubuntu 16 is still supported lol

[lean pebble]

Well last time I updated windows I get the answer from microsoft that my ssd is about to die

[sick grotto]

It says that I can't go back to a previous version because I updated more than 10 days ago

[lean pebble]

because their os

[hollow marlin]

Im on 20H2, I maybe have an issue 2-4 times a year. No complaints

[tame carbon]

wait

2-4, a year?!

and that's acceptable?

[lean pebble]

I'm on fedora 32 kde on my main and windows gaming vm with 1909

That I can't update so idc

[hollow marlin]

For an OS design to working in a 10,000,000 possible configurations and relying on 3rd parties for driver support. Yeah its acceptable in my eyes

[lean pebble]

for some reason the updates not working

do I disabled them completely

[sick grotto]

I'm just gonna do a reset on it, see if that works

[lean pebble]

Well linux works on every device to

I have problems once in a life time

[tame carbon]

yeah but the problem is

that when the layman installs ubuntu on their system

there's always this one thing that doesnt work out of the box

[lean pebble]

like what?

[tame carbon]

like intel hda combo jacks on laptops

those are fun :P

[hollow marlin]

Like the camera and wifi on my Surface Go

[tame carbon]

require a tweak in alsa

[lean pebble]

ah never had problem with them anyways

[tame carbon]

my laptop had this issue too

[lean pebble]

always worked for me

on every laptop

for bee more accurate on my laptop

xD

[tame carbon]

webcams are sometimes a bit dodgy because the camera defaults are not correct

like saturation and brightness

[lean pebble]

ah not using them

so idc

[tame carbon]

but you can tweak that with the right software

[lean pebble]

I use only keyboard mouse autdio

[hollow marlin]

There is a surface linux subreddit. Camera's are basically out of the equation

[lean pebble]

and the os

the only issue I had on my laptop was vmware and virtualbox

[tame carbon]

Lol I remember this one problem with someone's garmin

he wanted to export a track of waypoints

from one device to like 20, for a treasure hunt

but the garmin connect software, required an always online connection

and the servers were under ddos that exact day xD

[peak cloak]

why is that so? some weird non-standard interface?

[tame carbon]

meanwhile

[lean pebble]

so now he opened hackthebox?

xD

[tame carbon]

I just plugged it into my laptop

loaded garmin-gps kernel module

and boop. could export and import

using gpsbabel

most hw manufacturers use commodity hardware

with drivers that are already in linux

[hollow marlin]

Yeah partly due to its Mircosoft's camera and there are no non-windows drivers and they have no been successful throwing driver changes at the wall and something sticking

[tame carbon]

its just they put it in a plastic box with some other components and slap a price label on it

funny thing is

often with new hardware, the drivers are already in the kernel source code before the product even ships

except with the bleeding edge

[sick grotto]

Oof it's uh... taking a while to show something on the screen after this restart

[hollow marlin]

If you are resetting it, give it some time

[sick grotto]

But being patient is boring

[tame carbon]

https://ubuntu.com/

[hollow marlin]

@tame carbon I do have to say, after tying Mint and Xubuntu on my Surface Go, then installing ChromeOS. Performance wise its night and day and I have to give some props to ChromeOS performance

[tame carbon]

@hollow marlin I'm waiting for a laptop with an 8-core 64 bit arm processor with ample memory

with nvme and regular IO on the side

and preferably one that isnt branded: apple

@hollow marlin I wish to have something a little more powerful than a chromebook

like, OS is one thing, but raw IO performance is another

to make it a daily driver

[hollow marlin]

Look at the Acer Spin 713. 10 gen i7 with NVME and is replaceable

If ChromeOS performs as well as it does on my Go with is a dual core pentium, I think youll be surprised

[tame carbon]

Can I just install debian packages?

[hollow marlin]

Yeppers

[tame carbon]

ideally

I want one

for 1 month

and then decide xD

[hollow marlin]

The "Linux Beta" is just a debian container. Integrates with the OS and can appear as a normal app or you can install the desktop too

[tame carbon]

oh

is there no way to just put your own distro on there?

or does performance suffer from this?

[hollow marlin]

https://github.com/sebanc/brunch

There is how to install the official image of ChromeOS

[hollow marlin]

There is parallel but I havent needed to delv much into it. I just using it while traveling

[tame carbon]

ideally

I just want a debian install

with like a styled out xfce desktop or similair

[hollow marlin]

Its debian and you can just install xfce

[tame carbon]

lol

put gnome on it

[lean pebble]

omg hell no

[tame carbon]

https://i.imgur.com/rNZtAxB.png

^ idle

like 1GB

[peak cloak]

I just use KDE

[tame carbon]

KDE has issues with my mouse for some strange reason

[lean pebble]

gosh the swap

what the hell are you doing there man

[peak cloak]

oh lol

too many tabs open

[lean pebble]

chrome?

[peak cloak]

yep

[lean pebble]

gosh

go firefox

[peak cloak]

chrome for school

firefox for personal

[lean pebble]

lol

[tame carbon]

he swappin hard

[lean pebble]

me to

for the college website

[tame carbon]

all the minecraft servers I have, I disabled swap completely xD

[lean pebble]

me to

on my servers and my pc

[tame carbon]

it kills performance

[lean pebble]

ya swap is disk

don't kill your hdd / ssd

[hollow marlin]

When I spin up one of my larger EVE labs....3gb of swap is childs play

[lean pebble]

lol

I saw 128gb of swap filled up in 2 seconds

[peak cloak]

how do I disable swap, just delete the swap partition?

[lean pebble]

idk what are you talking about

I did it while I installed my systems

but I think ya removing the partition

[hollow marlin]

You disable it, don't just outright delete it or you are in for a world of hurt. But after you can

[lean pebble]

crystal seems like one that does it after the installation xD

[peak cloak]

ah

[tame carbon]

we allocated our game memory to like 95% of total memory

I just reduced swappiness

to like 99%

[lean pebble]

256gb ram ?

[tame carbon]

https://i.imgur.com/tLaq0KJ.png

means the system doesnt start swapping until you run out of memory

[lean pebble]

this is your mc server?

[tame carbon]

no

this is another machine

[lean pebble]

oh ok

[tame carbon]

https://i.imgur.com/QpdmCpk.png

One of our VMs with bunch of servers on them

[lean pebble]

12gb ram?

[tame carbon]

capable yeah

[lean pebble]

am I seeing right?

[tame carbon]

I think quidditch is down for maintenance right now

[lean pebble]

ah ok its the bungee core

[hollow marlin]

Need to up them core counts

[lean pebble]

looks like my pc Xd

[tame carbon]

@hollow marlin this is a 12 core 24 thread system

[peak cloak]

of course discord is using the most % of ram now

[tame carbon]

except VMs

and 64GB ram

[lean pebble]

My pc 64GB Ram 16 cores 32 threads

why this is white

[hollow marlin]

EVE-NG is baremetal because I need the performance gain for Juniper images. Pretty much single use as is

[lean pebble]

change it back to black

[hollow marlin]

No, I cannot stand dark mode

[lean pebble]

only dark mode

[tame carbon]

you need to up them uptimes

2

[hollow marlin]

Unless its past 8pm, dark mode is never on. My office has a huge window over looking the mountains and the eye strain from dark mode is not worth it.

[hollow marlin]

I like updates thank you. EVE requires reboots after version upgrades

[lean pebble]

You ever saw website dedicated server that at the moment you start it fill the swap to max ?

128gb swap in 2 seconds

I saw it twice

[tame carbon]

@hollow marlin after 500 days of uptime

I'm kinda afraid to restart lol xD

[lean pebble]

had to disable the mysql for making the website go down

[tame carbon]

even though its regular ubuntu version, and not been messed with ever since configuring

[lean pebble]

500 days

server or laptop?

[tame carbon]

https://i.imgur.com/QpdmCpk.png

564 days

[lean pebble]

ya I saw

server or laptop

[tame carbon]

server

[lean pebble]

its ok

I saw server with more than 1000 days

xD

You should afraid to reboot windows server that running more than 1000

[tame carbon]

this server doesnt have anything important on it though

[lean pebble]

thats scary

only bugeecord

[tame carbon]

its just the proxy, hub (which is frozen and backed up) and skyblocks (which are instances in a database elsewhere)

[lean pebble]

Ya I know bungeecord

I used it

[tame carbon]

like, its critical to be running, just not any important files on it

[lean pebble]

it just the main server that everyone going trough to the other servers

[tame carbon]

yup

[lean pebble]

Ik

[tame carbon]

@lean pebble though our system is a little different

we have our own middleware around the proxy

[lean pebble]

bungeecord is the same unless you changed it

[tame carbon]

because mundane bungeecord plugin messages with spigot, are not enough

it only allows proxy <--> server to talk

but not two servers behind the same proxy

[lean pebble]

what do you mean?

[tame carbon]

so all our player handling, chat, profiles and other information is synchronized through redis

[lean pebble]

all the servers are going trough bungeecord and talks with it

[tame carbon]

yeah, normally

but that is severely limited it capabilities

[lean pebble]

redis in minecraft?

[tame carbon]

yeah

I use redis for chat

and profile synchronization across servers

so when you go from one to another, you keep all your stuff

[lean pebble]

How do you connect redis cache to minecraft chat?

O-o

never heard on this option

[tame carbon]

a whole lot of java code

[lean pebble]

oh

custom made

ok

[tame carbon]

yup

[lean pebble]

Sounds really hard work

I'm on java right now

doing my project

[tame carbon]

this was my hobby project almost fulltime for 2 years

it really helped hone my skills

[lean pebble]

nice

I'm doing my java end semester project alone

instead with the 3 more ppl I should do it with

[tame carbon]

@lean pebble it eventually grew and grew

https://i.imgur.com/U2T31aq.png

and now our middle ware, is a public API, chat, core database plugin

[lean pebble]

really?

[tame carbon]

and then a proxy server, as well as a backend service with a rest api

[lean pebble]

Well that's sound very nice

[tame carbon]

https://api.knockturnmc.com/online

https://api.knockturnmc.com/online/simple

this one is nicer

it resolves the roleplay names as well

@lean pebble we don't have gamertags in our chat

everyone picks a name

[lean pebble]

omg

I just found a new shortcut xD

for pasting

I never new I have it

spinning my mouse wheel down and click

[tame carbon]

@lean pebble but yeah, the backend API uses RPC to communicate with the game to get live information

so that online list, is realtime

https://i.imgur.com/bnVnfcB.png

quite a few functions ^

[lean pebble]

nice man

impressed

wanna make my end semester project? xD 😉

[tame carbon]

some parts are still WiP

https://i.imgur.com/gtSSZqq.png

like, this works for 99%, except the configuration is tricky

we had our own module system

[lean pebble]

well soon I'll make crazy minecraft projects to

[tame carbon]

@lean pebble I think we have a like, one gigantic fucking enum

with all the lore information for all our families

[lean pebble]

real families or game ?

[tame carbon]

its all harry potter lore

[lean pebble]

ok

[tame carbon]

(not my idea) lol

[lean pebble]

Linus idea

[tame carbon]

I used other people to fuel creativity

[lean pebble]

lol

[tame carbon]

nah, this was a group of fans who wanted to build hogwarts in minecraft

[lean pebble]

now add RTX to it

[tame carbon]

and I started writing plugins for things that we couldn't find online

@lean pebble we've actually ditched essentials

we wrote our own standard command library

[lean pebble]

I liked essentials until it got demmaged

[tame carbon]

custom permission system lol xD

so garbage, group inheritance

xD

resolving that in code

[lean pebble]

nah never used their groupmanager

[tame carbon]

is so annoying

[lean pebble]

I used to use premissionex

with sql

so was pretty nice

or yaml

idr

[tame carbon]

@lean pebble yeah, so bukkit has its own interfaces which those plugins implement to hook into bukkit permissions

we just took those, and made our own

since our usergroups tie into discord

and all

forum

[lean pebble]

the permissions plugins out there not that good

[honest trail]

Question, how large should a cache drive be for a 2Tb RaidZ pool?