#networking

1 messages · Page 288 of 1

rocky badge
#

and IDFs connect back to the MDF at multiple 10/40/100 gig

#

then clients connect to switches at the IDF

#

this IDF powers one wing of the school

#

(the fine arts wing)

peak cloak
#

school so small we only have a MDF, although I think all the traffic either goes to dedicated fiber to the main campus or via fiber

rocky badge
#

That's why all of the labels start with F

#

The MDF at this district powers the ENTIRE district

#

it has the fat armored 96 strand fiber cable off the street

peak cloak
#

ah, idk how my district does things

#

all I know is that they cap us at 30

#

and that they are there own ISP I think

rocky badge
#

Each school has 2 strands coming back to the MDF

#

Going into a switch

peak cloak
#

never checked if they have an AS number

#

yep

#

they do

#

only one peer

#

no wonder it's so slow

rocky badge
#

yikes lmao

#

who

#

cogent? he? level3? tata?

#

zayo?

desert briar
peak cloak
#

optimum wifi

rocky badge
#

Cable # markers

peak cloak
#

at least publically announed

rocky badge
#

Stick them through the cable

rocky badge
desert briar
#

oh, thanks

little schooner
#

I broke two keystones during termination

#

how hard exactly am I supposed to push down?

#

I also did the mistake of have the cut blade inside instead of out

#

Lastly, when I pushed down hard, the keystone flew and the plastic holding down copper wire snapped

#

I'm off to a bad start

waxen scroll
#

Nothing wrong with extreme

little schooner
#

@waxen scroll is regex rule matching a thing if I pay for o365 email

#

im sick of free outlook.com not supporting such a thing. the junk is relentless, coming in

#

with no way of having regex matching or to delete email if body content is empty

#

i remember exchange having transport rules to configure that does work from one of my win admin lab courses

waxen scroll
#

i dont think regex is a thing in exchange

little schooner
#

oh

#

maybe i remembered it wrong then

rocky badge
#

Only an Outlook desktop client macro

little schooner
#

@rocky badge but not on the server side right?

rocky badge
#

Nope

little schooner
#

:(

waxen scroll
#

@little schooner i want to auto decline peoples dumb invites that say PTO in them and I cant even do that one basic thing

#

i shouldnt have to script jack for that. it should be a simple GUI option

#

why can i filter by email headers and take action but not calendar invites????

#

@rocky badge guess what

#

they phish test us all the time and theres a header that says phish test

#

i auto delete and auto report them

#

got a rule

#

lol

rocky badge
peak cloak
#

anyone else on linux gets these things after waking from sleep

#

ik sleep on linux is weird, but still

waxen scroll
#

sleep on any computer is weird. dont do it

#

shut down, save more power

peak cloak
#

true

#

I really should get used to shutting down

drowsy lava
#

anyone good at linux network config. not sure what i am doing wrong with setting static on pi

peak cloak
#

what's the issue

#

also I dislike using statics, use dhcp static leases instead

drowsy lava
peak cloak
#

DHCP is basically like walking up to the hotel counter and getting a room, DHCP statics are going to the counter with a reservation, and statics are just breaking into a hotel room without telling anyone

drowsy lava
#

when ever i set that. it wont take and takes DHCP. when i put it on a port that is just static. no DHCP. sets the hw address

#

oh i get that. This is going into an old network where i dont touch the config overlly. just building up some PI kiosks for video loop. setting a static for now to have an SCP script over to it to upload videos.

#

stoppps the HR lady from walking aroundd with USB sticks.

peak cloak
#

ah ok

#

makes sense

drowsy lava
#

i set one pi fine. it worked no issues. copied the conf. Changed the ip to one higher. 101

#

scp it over to the new pi with my other configs. but no go

peak cloak
#

hmm, I only know the basics with dhcpcd.conf so no clue tbh, just as a sanity you restarted the dhcp service and if that didn't work restarted the pi

drowsy lava
#

yep did that.

#

even pulled the SD. rebuilt from fresh. started over again and same issue. so im breaking it somewhere.

peak cloak
#

I'm out of ideas

serene sparrow
#

Is this the right place to ask about wifi stuff?

drowsy lava
#

yes

#

@peak cloak no idea what it was but i coped over the conf from the new pi. just edited it there vs upload previous. Worked. did a dif. nothing different. not sure. but its working

serene sparrow
#

Ok, so i have a router at home (obviously) and for now it has been working fine. But when i use my pc (with onboard WiFi on the mobo) the connection is really bad

serene sparrow
drowsy lava
#

pretty low signal

serene sparrow
#

That’s what i figured

#

But the thing is, my laptop got 5bar (haven’t checked rssi)

drowsy lava
#

so its like cell phones. Inital contact can always have high. but then when you use it (chatter) it can drop

peak cloak
#

well when the laptop is at the same location where the PC is?

slate sonnet
#

Hey guys, is it possible to port forward using pppoe? Does anyone know?

drowsy lava
#

due to interference and or sharing the same channel.

peak cloak
#

is the laptop AC?

serene sparrow
#

But i’m only using the laptop to test for the signal so i’m not using it

drowsy lava
#

hmm

peak cloak
#

because I only see wifi g and n on that program you are using

serene sparrow
drowsy lava
#

what is the source of wifi? router. or AP. or repeater or PC with wifi card or USB stick?

drowsy lava
#

what kind?

serene sparrow
#

Don’t really know the diff, it’s the thing that plugs into the modem

serene sparrow
peak cloak
slate sonnet
#

Huh, okay

drowsy lava
#

basic little ap.

#

how far is it away?

peak cloak
#

and only 10/100

#

so you can't get anything over 100mbps

serene sparrow
drowsy lava
#

that low of signal i would be shocked if u get that

peak cloak
#

could be just wifi card on motherboard

serene sparrow
drowsy lava
#

that low. antenna would have to be disconnected from the card.

serene sparrow
peak cloak
#

I have those on my motherboard although now I don't use it

serene sparrow
peak cloak
#

you have something like that fully plugged in and tightened?

serene sparrow
#

I’d rather use it than use a pci slot

#

If i can

drowsy lava
#

ahh i thought it was a laptop

serene sparrow
drowsy lava
#

ahh ok

peak cloak
#

best solution is just to use ethernet, but ik it's not possible for everyone

drowsy lava
#

login to the router. look at wifi page. see if there is a transmit power setting

serene sparrow
#

No, i can’t pull a cable to my room

drowsy lava
#

crank it

#

then also look for a wifi scan too. on your phone or laptop and pick a wireless channel that no one else is on if possible.

peak cloak
#

that's how it looks like on my AP

serene sparrow
#

From laptop

drowsy lava
#

that looks very good

serene sparrow
#

Anything i should change?

drowsy lava
#

well WPS has been cracked long ago. so if curious kids it could be an issue

#

beyond that looks fine

serene sparrow
#

Sorry for the screenshots btw, my ISP is having seizures rn so im on mobile

drowsy lava
#

if your laptop shows perfect. but the PC in the same room does now.

#

not.

serene sparrow
#

I’m trying to eliminate factors here

drowsy lava
#

router looks good. not much config change

serene sparrow
#

So should i buy an antenna first

drowsy lava
#

ohhh click advanced

peak cloak
#

it's a wifi card issue then, I guess you may be able to try to get better antennaes

peak cloak
#

oh

drowsy lava
#

almost

#

one tab to the right

serene sparrow
#

Advanced tab is just acl, url block, dns stuff

peak cloak
#

oh, I get what you mean

drowsy lava
#

ahh ok

peak cloak
#

but that's all router stuff, no wifi

#

already in wifi advanced

drowsy lava
#

its been a while since ive been in dlink

#

but router looks good. laptop looks good.

#

time to look at PC.

serene sparrow
peak cloak
#

maybe move the antenna's? If they are behind the pc like that, it could be an issue?

serene sparrow
slate sonnet
peak cloak
drowsy lava
#

i would personally

#

it wont help any issues but its just good to have off.

peak cloak
#

my AP doesn't even have WPS, there is no need

peak cloak
#

find the router, click the button

drowsy lava
#

@serene sparrow look at the PC antennas. Take them off. Test. put them back on. test. See if a change. if not. open device manager find the wifi card. Right click. uninstall. Reboot

#

reinstall drivers and try again

serene sparrow
#

Even switched to my multimedia player’s antenna. Rssi went from 85 to 79

slate sonnet
#

I haven't done something wrong here, right?

#

In regards to port forwarding

peak cloak
#

what are the first 2 octets of your WAN IP on your router

slate sonnet
#

octets?

peak cloak
#

so like 123.456.x.x

drowsy lava
#

each group is an octet.

peak cloak
#

^

slate sonnet
#

91.236

slate sonnet
peak cloak
#

on the router right? not searching on google?

slate sonnet
#

Oh, I searched on google

peak cloak
#

yeah no

#

need to look for WAN IP on the router

slate sonnet
#

Ah

peak cloak
#

look under maybe the PPPoE interface

slate sonnet
#

10.1

peak cloak
#

yep

#

you are under cgNAT

#

you can't port forward

slate sonnet
#

Oh

peak cloak
#

do you have ipv6 by any chance?

slate sonnet
#

Nothing that I can do?

slate sonnet
peak cloak
#

does you ISP have it though?

slate sonnet
#

Not sure

#

I would assume it does

peak cloak
#

because in ipv6 each device gets a public IP, each house get's at least a /64 block which is 18,446,744,073,709,551,615 addresses

slate sonnet
#

So if I had ipv6, I could port forward

peak cloak
#

well no such thing as port forward in ipv6

slate sonnet
#

Well, yeah

peak cloak
#

just open the firewall

slate sonnet
#

How would someone connect though? Just use public ip or something?

peak cloak
#

use the ip of the device

serene sparrow
#

Wait that’s minecraft?

peak cloak
#

let me show you an example, give me a sec @slate sonnet

slate sonnet
#

Well I'm trying to figure out how people can access A server on my network

#

Would love to host more than a minecraft server for my friends

serene sparrow
#

I just do this

serene sparrow
#

Or outside

slate sonnet
#

No

peak cloak
#

@slate sonnet So I get a /64 from tunnelbroker. This is the network 2001:470:___:111::/64 (omitted one octet for privacy). My router's IP would be 2001:470:___:111::1 A device that is on your LAN would get an address like this 2001:470:____:111:123:456:789:111 So you would open port 25565 though the router to 2001:470:____:111:123:456:789:111 and give your friends this IP

slate sonnet
#

Outside

peak cloak
serene sparrow
#

Oh rip

peak cloak
#

you can't port forward under NAT unless you have access to the router that is doing NAT. His ISP is NATing so he doesn't have access

#

ipv6 is great because no NAT

#

unless you are stupid to NAT ipv6

serene sparrow
#

Can you connect through ipv6 on mc tho

peak cloak
#

on bedrock

#

not on java unfortunatly

#

yet

slate sonnet
#

Well rip me then

peak cloak
#

annoy mojang about it

slate sonnet
#

Guess I'm gonna have to switch houses lmao

serene sparrow
#

Use hamachi?

slate sonnet
#

Too complicated

peak cloak
slate sonnet
serene sparrow
#

How many of y’all have switched to ipv6

peak cloak
serene sparrow
#

We don’t have it available at all

peak cloak
#

so ipv4 and v6

#

me neither

#

I use tunnlebroker to get a ipv6 tunnel

#

but my ISP (verizon) doesn't have native v6

#

HE also does ipv6 certifications

#

you need to setup an ipv6 webserver and mailserver

#

among other things

slate sonnet
#

So if I use zerotier, my friends won't need to dl it too, right?

#

Or do they have to have it too

peak cloak
#

I'm not an expert in zerotier but lots of people recommend it

serene sparrow
#

Btw what kind of antenna should i get

peak cloak
#

¯_(ツ)_/¯

#

no clue

#

so many available

serene sparrow
peak cloak
#

idk wifi tbh

#

dBi is all foreign to me

serene sparrow
#

@drowsy lava ?

drowsy lava
#

Oh sorry was in pi world. ahaha

#

any high gain antenna off amazon would do. but i like these kind the most

#
#

that way they can go above all the power noise or closer to the source

serene sparrow
#

Is 22dBi realistic?

drowsy lava
#

ive also used these before.

#

No its not. its all sales BS. best case possible in a lab with no EMI aruond. not even human body EMI

serene sparrow
#

Ok, so lets say i got a 6dB antenna

drowsy lava
#

im just not convinced its the antenna right off. they are generally solid beyond the bend point.

#

its just a thin copper wire and or copper mesh

#

so pretty flexable

slate sonnet
serene sparrow
#

I’m not sure as well

slate sonnet
#

So kinda like hamachi

drowsy lava
#

i would try the drivers first

slate sonnet
#

But less difficult to use

peak cloak
#

friends need to download it as well

slate sonnet
#

That is fine

#

I remember hamachi was much harder to use than zerotier

serene sparrow
#

How can i test if the built in wifi is broken ?

drowsy lava
#

reinstall drivers first.

#

and or boot up a linux os that supports it and test it that way

#

limits software issues

#

boot into bios. turn it off

#

reboot.

#

power off.

#

Then power on and turn it on

#

see if any change

serene sparrow
#

Ah shit i have to deal with linux now

drowsy lava
#

dont have to

#

its an option

#

Also never fear linux. its everywhere

serene sparrow
#

Not that i fear it or anything

drowsy lava
#

try to reinstall drivers. as with windows that is normally a problem no matter whta

serene sparrow
#

I have to set up paritions and whatnot

drowsy lava
#

no no

#

linux boot on USB key

#

then reboot to USB

#

remove USB when done

peak cloak
#

yep

#

just do a live boot

drowsy lava
#

but first. Try drivers first. Cant say that enough.

serene sparrow
#

Oh so that’s what i’ve been doing wrong

#

🤪

#

Ok, so i uninstalled the drivers

drowsy lava
#

reboot

#

then see if it auto detects. if not use laptop. go to mainboard driver site. download. move them over to PC vis USB and install

peak cloak
#

@drowsy lava that is... if there are linux drivers

serene sparrow
#

I have the drivers, needed to update a while back

drowsy lava
#

the pc is windows right?

serene sparrow
#

Yes

drowsy lava
#

ok

#

then use device manager. remove them

#

reboot

serene sparrow
#

Done

drowsy lava
#

it may auto install again.

#

then see how the PC sees things

serene sparrow
#

So it autodetects

drowsy lava
#

ok let it do its thing

#

then see if there is an improvement

serene sparrow
#

Nope

#

Nothing

drowsy lava
#

remove the antennas for a moment. see if it changes anything

#

it should drop the signal to nothing. but thats not much lower than what your getting

peak cloak
#

eh

#

tplink

#

tplink cosumer is eh

wise sedge
#

trying to replace the combo unit

drowsy lava
#

it will work

wise sedge
#

better than combo unit?

drowsy lava
#

hahahah

wise sedge
#

I mean... it is 4x the price

peak cloak
drowsy lava
#

but yes the TP link will be better than the combo

wise sedge
#

so it better be better

peak cloak
#

yeah, although depends what you define as better

drowsy lava
#

its only better if you have an issue to fix.

peak cloak
#

I've heard of tplink having firmware issues

drowsy lava
#

if there is no issue and you just want more power. then its gonna cost ya

wise sedge
#

the combo kicks me out once in a while

drowsy lava
#

change channels?

wise sedge
#

will the router changing channels kick me out of the network?

peak cloak
drowsy lava
#

thoes are nice ones. used them before i went unifi

serene sparrow
#

@drowsy lava i just don’ understand how a router 5 metres away has the same strength as another AP past 2 walls about 15m away

drowsy lava
#

hahaha there are so many variables with wifi its hard to say

#

you have never messed with the wifi card config settings in windows did you?

wise sedge
#

I dont understand why this goes from 1 bar to 3 bar from time to time

#

while both are at the exact place

drowsy lava
#

sounds like interference.

peak cloak
#

switching between 2.4ghz and 5ghz?

#

idk

wise sedge
#

always on 5ghz

peak cloak
#

ah ok

wise sedge
#

I got them split

drowsy lava
#

had that once years ago on 2.4. was a compressor in a fridge kicking on

wise sedge
#

I cant use my microwave on 2.4

#

5g seems fine with microwave

peak cloak
#

wait, what

#

your microwave is wifi connected?

wise sedge
#

no

peak cloak
#

oh

#

nevermind

wise sedge
#

like with microwave on, 2.4 gest messe dup

peak cloak
#

yeah lots of things are on 2.4 ghz

wise sedge
#

so what can be messing with 5ghz?

serene sparrow
#

@drowsy lava does any antenna support any freq?

wise sedge
#

should I lock the channel?

drowsy lava
#

to the basics. yes.

#

@serene sparrow to the basics yes.

wise sedge
#

are these settings ok?

drowsy lava
#

@wise sedge i would not. its auto logic to move to a clean channel should be fine.

#

again WPS hahaha

peak cloak
#

I enabled band steering on my AP

serene sparrow
#

Wait so, 5GHz.... λ=6cm?

wise sedge
#

yeah, it keeps my laptop on 2.4 always...

#

ok, I guess band steering then

drowsy lava
#

what channel options do you have?

wise sedge
#

not a lot

drowsy lava
#

try the 157

#

its in the 5g range.

#

lots of older devices cant talk that high

#

normally is clear. Unless your in an apartment

#

but again. Older devices may not be able to use it

wise sedge
#

I have an apartment nearby

#

well, theres always 2.4 for older devices right?

#

I want my laptop to stop dying in the middle of a call

drowsy lava
#

try it and see how oit goes

serene sparrow
drowsy lava
#

Computer speaking nice is kicking it in the front panel.

wise sedge
#

so 40 is still 5ghz? but ~157 is better?

#

I dont get how those are different

#

and why the big jump

#

with my app I see a bunch of things on the ~157 range

drowsy lava
#

157 has less devices that can use it

#

hmmm

#

then you may just be in a congested area

#

wifi 6, with taging/painting could help but thats still a bit off from consumer.

peak cloak
#

6e also introduces higher freqencies

drowsy lava
#

with your app is there any channel that has the least amount of chatter?

wise sedge
#

the free channels are not available on my combo unit

drowsy lava
#

ahh

#

that sucks

#

haha

#

well select the least of the worst.

#

then see.

wise sedge
#

the app says my ap is 36m away..., but it is like 7

slate sonnet
#

If I use ZeroTier, can I technically ssh into my pcs at home?

drowsy lava
#

as wifi is still Radio. one thing talks at a time on each antenna.

#

dont worry about that

slate sonnet
#

Or any pc on the network

drowsy lava
#

the apps will always be wonky at distance.

drowsy lava
#

unless its a pro tool. its not worth the guess

slate sonnet
#

That's sick

peak cloak
#

@slate sonnet I actually have a vpn set up

slate sonnet
#

Thank you for showing me this

peak cloak
#

so I connect to my vpn and then I'm in my network

serene sparrow
#

Oh, it stopped being so bad

peak cloak
#

I use wireguard

serene sparrow
#

Ok, i think the solution is to buy a new antenna for now. See where i go from there

wise sedge
#

where is the best place to place a router?

#

like in a single room but need to access it in other rooms

#

and really never in that room

drowsy lava
#

think of wifi like a bubble.

#

and you get to the center of hte bubble to get your signal

#

straight line of sight through anything

peak cloak
wise sedge
#

that wont be possible with the combo unit, the cable goes into the garage

peak cloak
#

I have my AP on my stairwell wall

drowsy lava
#

Wifi is best in the middle. BUT>>> your light of sight should not go through. water. Steel. TV's. Appliances. Bathrooms

wise sedge
#

I am like above the garage on a bit to the side

peak cloak
#

true

peak cloak
drowsy lava
#

NA?

peak cloak
#

north american

drowsy lava
#

Debateable.

#

tin studs are becoming common.

#

wifi bad

serene sparrow
#

Insulations

drowsy lava
#

Inside wetwalls. Bad for wifi

wise sedge
#

would it be close to walls be bad?

serene sparrow
#

Wetwalls?

wise sedge
#

drywall

peak cloak
drowsy lava
#

wet walls are walls that have water pipes behind it

wise sedge
#

it is in the garage

drowsy lava
#

Yes. metal studs.

#

Horrid.

wise sedge
#

um, no idea

drowsy lava
#

worse when some idiot grounds something to it. MY gof

wise sedge
#

wood studs I think

peak cloak
drowsy lava
#

place your AP in the center and see what you get

#

hahah seeee.

serene sparrow
#

I don’t understand NA houses lol, y’all use gypsum and plywood for just about everything

peak cloak
#

guess I'm getting another AP for the basement

wise sedge
#

so like, I should stick the router as high as possible in the garage

peak cloak
wise sedge
#

so I am closer on the second floor

wise sedge
#

?

#

would that help

#

?

#

right, that wall has the electric panel on it, so that does not help ?

peak cloak
#

we aren't using wooden studs for basement in case water comes in

drowsy lava
#

@serene sparrow Glased tiles in bathrooms and kitchens have metal in them.
Running water creates an EMI field. the faster it runs the larger tthe field. the more interference you get
Appliances and all have their own issues.,
Bathrooms due to metal tubs for older homes and running water. Heair dryers and glased tiles.

#

there is a wet wood you can get. but it aint cheap

#

better insulation though. we use it in ours but then foamed the whole thing so its water tight from penetration

#

leaks are another story ahahha

#

@peak cloak when renoing the basement. Run network cables.

peak cloak
ocean pivot
#

Nice 😉

wise sedge
#

I was getting around 30-40 before...

drowsy lava
#

less noise.

#

but see how stable it is tomorrow on the calls.

thick minnow
#

i live on 20 download and 2 upload

peak cloak
wise sedge
#

so, should I raise my router up so it is closer to me?

#

and get rid of any metal round me?

#

the router*

drowsy lava
#

@peak cloak thats what we did. though i cheated and did foamed crown moulding. very lite. its Velcro on with cables behind it

#

well straight line of sight.

thorny vector
#

Hey, who here has a physical linux box they could run a command on? Need to test some grep regex.

drowsy lava
#

Radio waves dont like going around things. They go through it. like bull in china shopp

#

thicker the thing or more dense. Bull go slow.

#

= Wifi go slow

thorny vector
#

ip link show | grep '[1-9]: ' | cut -d ":" -f 2

#

output of that command

peak cloak
#
 lo
 enp0s31f6
 wlp4s0
 virbr0
 virbr0-nic
thick minnow
peak cloak
#

it's just the boasting of speeds

thick minnow
#

its the rules 🤷‍♂️

drowsy lava
#

so he gets a tisk tisk. move on

thorny vector
#

@peak cloak Thank you. Most of my linux boxes are VM's, need to make sure physical nics don't have any craziness

slate sonnet
thick minnow
#

i could of picked a completely inappropriate one but didnt

#

if u want a invite to the custom sharex urls dm

slate sonnet
#

I just use snipping tool

#

lmao

peak cloak
#

and paste in discord

slate sonnet
#

Yup

peak cloak
#

discord hosts images

#

ik blob has his own though

#

blob.rocks is a nice domain

slate sonnet
#

and any files up to 50mb on this server

#

Cuz boosts

#

So videos too

thick minnow
#

dont use pxl.blue as well

#

they log everything

peak cloak
#

eh

#

I just use discord

thorny vector
#

Self host best host

peak cloak
#

true, just don't have the need to

#

although, email

thick minnow
#

use pays.host

thorny vector
#

Get yo cloudflare outa here

#

not paying someone to hold my data

peak cloak
#

yeah I ditched cloudflare

thick minnow
#

yeah cloudflare is ass

peak cloak
#

moving to protonmail though

#

for email

rocky badge
#

Cloudflare is fine

thick minnow
#

no

thorny vector
#

cloudflare is fine

rocky badge
#

¯\_(ツ)_/¯

thorny vector
#

Gandi is a superior registrar though 😉

rocky badge
#

Cloudflare is not just a registrar

peak cloak
#

I need to find a good domain

#

that's professional

rocky badge
#

I use a mixture, google domains, cloudflare, namecheap

thorny vector
#

I know, just saying people that use it as just a registrar are missing out

rocky badge
#

All 3 have been fine

peak cloak
#

don't want presentmonkey.something on my resume

thick minnow
#

yikes

thorny vector
#

It makes sense as a cdn and security net

rocky badge
#

And most people are using cloudflare as a nameserver & proxy

#

Not registrar

#

Although prices for cloudflare are really good

thick minnow
#

no way

rocky badge
#

I'm paying like $8/year for a .com

thorny vector
#

That include a ssl?

rocky badge
#

While most others charge $12

#

lmao paying for ssl

#

Cloudflare provides free ssl and let's encrypt exists

peak cloak
#

let's encrypt all the way if you are not anything big

rocky badge
#

Even big corps use let's encrypt

peak cloak
#

really?

#

I thought you want a custom SSL

thorny vector
#

Lets encypt is eventually not going to be as trusted, because it can be automated. Most malicious domains use it.

rocky badge
#

Google uses it by default for their google cloud load balancer

#

Although aws provides ACM for free too via their Amazon Root CA

peak cloak
rocky badge
#

Most public certifications can be automated

peak cloak
#

https != good site

rocky badge
#

Digicert, AWS ACM, let's encrypt/acme

#

But most of them are pretty good about verification

thorny vector
#

Yeah, but most people see that https is on, and disregard other security practices. It's security theatre, and something malicious actors take advantage of

thorny vector
#

It also means easy automation of encrypted C2 channels.

rocky badge
#

Whether it be dns or well known http

peak cloak
#

explaining it to my older familiy is hard

#

although one of my aunts doesn't trust online banking at all

rocky badge
#

https now just serves as encryption really doesn't mean it's safe

#

With it you know you know it's verified and nobody's snooping on your traffic assuming default Mozilla root CA store

thorny vector
#

You know this, and I know this. But people still see it as a sign of trust

rocky badge
#

yup

#

Because that's what the industry has told them for a while

#

See the green padlock, which is now just grey, or https

thorny vector
#

A Spanish root CA just got booted out of Chromes trusted certs for having an unregulated sub-CA, and too many malicious domains without an answer of how stuff happened.

rocky badge
#

Symantec

#

/s

thorny vector
#

What do you do when you see mcafee on a computer?
Burn it. Burn it with cleansing flames.

rocky badge
#

destroy that disk /s

thorny vector
#

You go ahead and remove that /s

#

lol

peak cloak
#

what are some scanning protocol standards?

#

I'm setting up a linux scan server because that stupid scanner only has USB linux drivers

#

ik I can use SANE on linux over network, but what about windows?

thorny vector
#

🤷‍♂️

#

I just let windows handle all my printing and scanning. Don't feel like reinventing the wheel

peak cloak
#

the windows client software also sucks

#

you need a licence key or something

thorny vector
#

Ah.

thick minnow
#

lol i just found a vulnerable sql injection on the skindex

wise sedge
#

Best free WiFi analizer for android?

#

I dont think the one I have right now works

serene sparrow
#

I’m not getting it

#

Why

#

My rssi is still so weak

thick minnow
#

its free and a good analyzer

#

dont have to have unifi stuff to use it

wise sedge
thick minnow
#

@tame carbon Sorry for pinging you gain but I have another question, can a plex server, apart from initial installation and occasional maintenance, run without an internet connection and can I connect it to my non-smart tv via ethernet and run it?

wise sedge
#

oh wow, the signal strength graph actually works

#

tried 2 others out and they kinda just did not move and updated real slow

willow oracle
#

What would be the reason that i cannot connect to my main WIFI at home. But i can connect to others WIFIs with my Laptop. And i can use phone on that wifi, just my laptop doesnt want to connect.

tame carbon
#

@thick minnow that machine would just be like a regular computer on your network. You still need an internet connection to install and update packages

#

@peak cloak Yup. CUPSd + SANE

#

the go-to stack for multifunctional office printers

thick minnow
tame carbon
#

@thick minnow You'll need a device for that

#

without a smart TV, you wont be able to stream directly

#

@thick minnow a cheap solution would be a raspberry pi with KODI installed on it

#

KODI has a plugin called PlexKodiConnect

#

allows KODI to stream from Plex

#

KODI was formerly called XBMC or "Xbox Media Center"

wise sedge
#

can wifi interferer with coax?

wise sedge
#

my internet comes form coax and my router is right next to it

clear igloo
#

not unless you've got like a few hundreds watts of power applied to the antenna 😛

thick minnow
flat yew
#

@flat yew hi guys

peak cloak
#

hi

lean pebble
#

What a wonderful surprise no 4G all day

thick minnow
#

if ive opened a port on my isp provided modem + router combo, if i get a new router, would i have to forward on that aswell?

peak cloak
#

this is called double NAT

hollow marlin
#

Hardware is so nice stacked, no Ciena but right up there looks wise

waxen scroll
#

that feel when you're a neteng and physical HW aint your problem anymore

#

#blessed

hollow marlin
#

At least I do not have to rack it. Just getting it ready for the sysadmins

waxen scroll
#

s-sysadmins? eeeeeeh

#

i used to work in a few datacenters so ive done so much racking and wiring I screen employers to make sure thats not my problem

#

its not sexy anymore

hollow marlin
#

Yep, enjoying it for the first few times but im good.

waxen scroll
#

i had an employer hang up on me once

waxen scroll
#

was office depot. crappy company. dodged a bullet

#

They asked questions, I asked mine and then they were like "OK lets move on to the other part of the interview." [CLICK]

#

lmao

#

someone in that room was prob like hell no and hung it up

#

@desert briar its not that im old. I love money and you work less the more money you make. I'm not doing non-engineer work

desert briar
#

Yeah, I mean same. I work in security, this thing is a big passion of mine though. I'd kill to work with some current hardware for a bit pepoJuice

waxen scroll
#

and here @clear igloo is deep into his career and touches gear and wires constantly

sour saddle
#

looking for 10G switch with at least 10 ports but affordable, less than 650 USD

#

any suggestions ?

desert briar
#

@sour saddle SFP+? Or strict ethernet?

waxen scroll
#

@desert briar its basically like getting 100k and taking out the trash. You try to justify it.... hey im well paid trash man but over time the mental thoughts get to you and you get depressed

desert briar
#

brand new or refurbed?

waxen scroll
#

thats me and cables+racking

sour saddle
desert briar
sour saddle
#

new

desert briar
#

500USD

#

24 ports sfp+ and 2 40gbit ones. I have it myself. Just dont expect too much l3 functionality out of it, its a tik after all

desert briar
#

or anything aside old, refurbed hardware 😄

waxen scroll
#

datacenter teching can be a mental rollercoaster. You're doing tech stuff but you're also cleaning, taking out trash, working the dock when deliveries come in 3-4 times per day

#

are you in IT?

desert briar
#

I do pentesting, yeah

waxen scroll
#

the company has no colo?

desert briar
#

They do have an actual data center, but I havent managed to persuade anyone to let me in yet 😂

waxen scroll
#

oh. shame.

desert briar
#
  • im an intern
#

so doing everything requires me to go through my team lead, then through his boss etc. etc.

waxen scroll
#

funnnnn

desert briar
#

I wanted a dev splunk license as its free and im elligible for it, but my request got lost somewhere in the corporate chain pepoJuice

waxen scroll
#

yeaaaaahhhh know that feel ;p

desert briar
#

Certain someone in this chat offered theirs, and im really grateful for that 😄

#

For now im just learning ELK

waxen scroll
#

current job is very locked down. if i wanted non-standard software its a whole ordeal, takes forever

desert briar
#

yeah, same. It is what it is

#

VMUG for the win 🙂

#

I learnt a tonne about vsphere and what not, these things are unusual for what I do. Having a server allowed me to make some cool active directory labs and what not

waxen scroll
#

i used to buy licenses and just use them at work but now in 2021 everyones auditing your software and you'll get caught

desert briar
#

def one of the best purchases I ever made

waxen scroll
#

the new thing is also to MITM attack everyones SSL

#

last two jobs did it 😦

desert briar
#

tho it depends on who is doing the audits 😂

#

from security perspective, man in the middle is a bad idea often

#

or well, from the "stealth" perspective

waxen scroll
#

it reads everything i do and kills connections if it doesnt like whats being sent

#

not sure how its not a violation of the law, but whatever. i stopped doing personal anything

#

no emails, nothing

desert briar
#

I mean you cant even strip TLS nowadays, that attack wont work. To some extent it might but browsers will always alert the users at this point.

#
  • a lot of browsers have hardcoded HSTS lists, so if you try to connect to facebook without https per say, browser wont even connect
#

Overall if you were to attack someone you share a network with, there are much better ways than doing mitm

waxen scroll
#

idk how it works. i know the proxy opens the actual connection and decrypts, then the encryption between me and the proxy is an in-house CA/cert

#

browser doesnt complain

desert briar
#

LZDanger, circa 2018

desert briar
lean pebble
#

Hello

#

Can I provide myself 4G?

#

😆

rocky badge
#

@clear igloo IPv6 working in Wireguard VPN via pfSense Crab

desert briar
#

blob

#

what image hosting platform are you using? Is it self coded?

rocky badge
#

Self

rocky badge
#

which is just a node API infront of S3

desert briar
#

Was thinking about hosting my own url shortener / something similar like what you have

#

dont really wanna code it myself, have way too many ongoing projects at this point

rocky badge
#

shlink for url shortener

#

Run it in Docker

tame carbon
desert briar
#

Anything you can recommend for image hosting?

rocky badge
#

Depends on how you wanna do it

desert briar
#

Wanna do it blob style

rocky badge
#

You could either setup your own minio S3

#

Use DigitalOcean S3/AWS S3/Google Cloud Storage Buckets

#

Use a PHP/Python/Node uploader on a webserver

desert briar
#

How do you actually upload the image though? Have some self hosted front end for it? drag n drop, it gets uploaded?

rocky badge
#

ShareX

lean pebble
#

I think I'll ignore him and just wait to tomorrow morning for the business support like always.
Fixing it in 1 sec

little schooner
#

sharex is so awesome

#

makes it fast and easy to share ss

little schooner
# waxen scroll datacenter teching can be a mental rollercoaster. You're doing tech stuff but yo...

I get drained easily having to install dual monitors setups when everything has a security lock and cable. Needs to be removed to plug in anything new under the cover of a Dell 3020M system. On top of that, need to bend forward just to work on the dang thing for long periods of time. Then, cable manage everything back in the 3020M, run other cables through the monitor hole and connect.

If the desks in the office had a way to go behind them, the job would be 3x easier. I hate doing the physical part of IT. I'm kinda weak for that stuff. The software side of things is my best ability.

#

Last time my coworker offered to take over the cart of PCs because he saw how I was struggling to push them lol

#

One ended up falling anyway, but I think those were PCs to be recycled

#

I'd like them to hire a student worker because they were doing this part of the job

waxen scroll
#

yes, you get it ❤️

lean pebble
#

Lol

#

Sounds little annoying to manage it like this

wise sedge
#

I am trying to place my router at the best spot. would better signal be more stable speed?

peak cloak
#

yep

wise sedge
#

because I was getting ~80mbps at a lower signal spot than a better spot

#

like from 80 to 1 or even nothing

#

but signal is great

#

it can even say signal great, no internet

#

I dont know what is going on

lone fossil
#

hey guys

#

i have a question about webserver/ or just servers in general

#

basically, let's take the hosting as a service scheme

#

companies like digitalocean offer a variety of options when it comes to chosing hardware

#

but when it boils down to the low level stuff, i can assume it's just a virtual machine using a hypervisor ~ please correct me if i am wrong

#

my question is how they handle assigning IPs to each one of these virtual machines/ droplets

peak cloak
#

you can also buy bare metal servers

lone fossil
#

Could you shine some light on them for me?

peak cloak
#

idk exactly how and the specifics since I don't work for a DC

lone fossil
#

so it's virtual router huh

#

but i thought routers could only manage ipv4 and ipv6

#

i guess it's a special case

peak cloak
#

wdym manage?

#

@hollow marlin know much more about this, maybe he could answer if he's online

#

routers route

lone fossil
#

well, i'm used to the idea of a router sitting in between my PCs and internet

#

i get only 1 Ip

#

but the router hands out IPV4/6 to all of my local devices

peak cloak
#

well that's your router's DHCP server that is handing out ips

#

and for ipv6, router-advert

lone fossil
#

right

peak cloak
#

but a router itself all it does it router between subnets

#

no DHCP

#

no router-advert

#

no DNS

lone fossil
#

hum

#

so router-advert is specifically for IPv6?

#

Sorry if i am getting this wrong, i haven't heard of it before

peak cloak
#

basically the PC itself decides on what ip to get

#

android for some complicated reason does not support DHCPv6

lone fossil
#

i see

peak cloak
#

in ipv6 NAT is the exception not the norm like in ipv4

#

you know what NAT is right?

lone fossil
#

network address translation?

#

i believe

peak cloak
#

yeah, but you understand the concept or no?

lone fossil
#

I've just heard the term, never actually looked over what it means or how it works

#

i just saw a video online

peak cloak
#

Ok so in the beginning of the internet each device on the internet got their own public IP address. However as ipv4 addresses started to run dry NAT was used a solution. Basically each home would only get 1 public IP (nowadays some even don't get a public address) and that one address is NATed so a private ip range like 192.168.1.1/24. This way many devices can share one public IP. However this breaks the point to point concept of the internet because a device outside cannot start a connection to a device behind NAT without port forwarding. In ipv6 there are many more addresses so each household should get at least a /64 block which is ALOT of addresses and the smallest publically routable prefix. Most ISPs give out at least a /56 so you can subnet within your housenet. Now each device gets their own public IP

#

And the device gets their IP with SLAAC by asking the router for the prefix and generating the rest of the IP themselves

#

So for example I get this: 2001:470:___:111::/64 (ommited one octet for privacy)

#

my router's IP is 2001:470:___:111::1/64

#

and the router advertises this whole block to my LAN 2001:470:___:111::/64

#

So a device on my LAN could have the ip of 2001:470:____:111:123:456:789:111

#

And it's a public IP

#

in ipv4 lets say get this IP 123.456.789.111

#

My router NATs this one IP to a 192.168.1.1/24 network

#

so a device may have an IP of 192.168.1.38

#

But this address is not a public address, in order to lets say access a webserver on it, the router would have to port forward port 80 on the WAN interface to 192.168.1.38

#

And people would access the websever via the public IP, not the actual IP of the device behind NAT

lone fossil
#

ah yes

#

it's port forwarding

#

an incoming data transmission is port forwarded to a specific port on a specific device on the local network

#

if available ofc.

peak cloak
#

yeah, all other connections need to be initiated by the device behind NAT and the router holds a connection NAT table

rocky badge
#

Its maxing my upload

clear igloo
#

Nice!

#

give more bandwidth!

rocky badge
#

wayyyy better than ipsec

lone fossil
#

i'll be sure to look this stuff up and understand it fully

peak cloak
#

ipv6 takes a while to understand

#

you have to think a lot differently than what you are used to

lone fossil
#

Yes, i agree, it's still quite vague

waxen scroll
autumn bay
#

any recommendations for a good router ???

#

budget like 200 USD

rare matrix
#

@peak cloak that was a good writeup

peak cloak
#

thanks, I'm getting better at explaining

limpid oracle
#

Can i ask a wifi problem here? Pleade

#

Please*

peak cloak
limpid oracle
#

Ooook

#

Could i possibly ask a sorta tech related question? I’m having a problem with my drivers on my laptop and for some reason also cant update my laptop either?

#

Maybe both problems are connected but its not there 😦

thick minnow
#

Dose anyone want to help me create a video sharing service we are doing this because of YouTube taking down the coco distrack we decided that we want to create a platform not riddled with over censorship this will not only help creators make more content but also make more money we will only take 20% and the will be no sub threshold for ads if you you can dm me if you want to help

thorny vector
#

Do you understand the amount of capital, connections, and knowledge it takes to build something like that?

#

There's a reason why youtube remains king

rocky badge
#

God a video platform has a lot of parts to it

#

Video ingest, video playback, video storage, community interaction

#

Live ingest, rtmp routing and streaming

#

Analytics and recommendations, content reporting, etc...

rare matrix
#

i think that falls under promotion

#

its obviously political too rather than about actual networking so its off topic at best

#

bless you both for attacking the engineering aspect immediately though lol

static knoll
hollow marlin
#

First they want to make a streaming service, then a game then a video service all in a few days WaitWhat

thick minnow
static knoll
#

Honestly you need hundreds of thousands of dollars in hardware and infrastructure for that

#

It's not easy

#

Nor may it be legal

thick minnow
thick minnow
static knoll
#

Not too sure

thick minnow
#

My studio that is making it is trademarked in Japan

#

But I have the licenseing to do business in the states

static knoll
#

Hmm, I guess go for it then

#

Doesn't hurt to try

#

You'll have to heavily advertise though

#

And also be good at development

thick minnow
#

Well the devolopment part is the problem we are only two people we can’t do that much

static knoll
waxen saddle
#

My advice? Do something, even if it is one thing, truly unique. “We are better because we have a video another service took down and we have greater profit margins” isn’t very compelling in my mind because that’s what all the YouTube competitors are doing.

#

For example. LTT does NOT make videos. Sure they do, but that’s not what they DO. They make a story. You know, the stuff that has held captive hundreds of generations of people for thousands of years? That’s what LTT DOES. They focus on story first.

paper valve
#

Will be attending a lecture by the IBM Z lead architect for APAC

#

I am very excited

waxen saddle
#

So sure, you can make yet another video hosting service, but unless you set your sights on something the competitors aren’t doing, you’ll drown in the noise.

#

What is APAC?

paper valve
#

Asia pacific

ruby bramble
#

School WiFi in the morning (6 devices) and then 569 devices

#

But y tho

static knoll
ruby bramble
#

Yea ik

static knoll
#

In my opinion schools should have 1Gbps

#

They can clearly afford it

#

(assuming its a private school)

ruby bramble
#

Yea it is

#

I mean the teachers speakers are Harmon kardon

static knoll
#

Yeah they can afford gigabit

ruby bramble
#

Yea

obtuse oxide
#

does this look like an alright server config for high avaliability? for a case study

desert briar
#

Debatable. If you want maximum uptime Id change some things. Possibly 2 power supplies and 2 network cards

#

if either fails you have a failover

#

I dont like using software raid, but thats just my bias

obtuse oxide
#

ty for that, case study wants a server cluster, do i just make 2 servers? or cloud @desert briar

desert briar
#

I mean, you can cluster with 1 server. You install a hypervisor and at that point make many smaller VMs which work in a cluster (for example kubernetes)

#

The more servers the merrier though pepoJuice

#

depending on what you use having multiple servers allows you to migrate live VMs, load balance the traffic etc.

#

With one server you can "simulate" HA, however if you need to do a maintenance on the server itself (update the hypervisor, bios, etc.) there will be downtime

obtuse oxide
#

cool

#

im quite new to it all

#

im guessing having an active and passive server with shared storage is just easier but costs more money?

desert briar
#

the whole idea of clustering is that its better to have 4 tiny servers (which together compare to a power of 1 big server) compared to just 1 big server

#

Or have 4 big servers if you can afford it 😆

obtuse oxide
#

like having 2 servers that share the same data, if 1 of them goes down the other one takes its place

desert briar
#

If by having same data you are referring to shared storage

obtuse oxide
#

Yea

desert briar
#

You can do clustering on more or less anything, even a Pi

#

In this video, I introduce the concept of Raspberry Pi clustering, and cluster computing in general. Technology like Beowulf clusters and Kubernetes has made it easy to build clusters using off-the-shelf components.

I walk through how I built my 'Pi Dramble' (https://www.pidramble.com) over the years using various Raspberry Pi model B computers...

▶ Play video
#

This is a pretty nice video too, as to why clustering is a thing - https://www.youtube.com/watch?v=hGyJTcdfR1E&ab_channel=MichaelKlements

I recently built this water-cooled Raspberry Pi cluster and now it's time to put it to the test. I ran it against a Windows PC, a MacBook Air and a single Raspberry Pi to see how it compares. On each platform, we searched for all of the primes numbers up to a certain limit and compared the times it took to reach the target limit. You'll be surpr...

▶ Play video
#

of course, the use case depends on what you need to do 😄

obtuse oxide
#

Right

peak cloak
#

Just split over hundreds of devices

#

Hell my school district is technically an isp

mossy bloom
#

So just wanted a second opinion, just been told by engineer that came out, that my powerline adapter is the cause of all of our internet issues (dropping out everywhere, etc) and that we should switch to pure wifi or proper ethernet. Is that actually right, i cant imagine it causing complete drop-outs and low speeds for our wifi as well

#

Also dont really wanna be having to buy a wifi card, seeing as proper ethernet isnt an option

static knoll
hollow marlin
#

And how do you know?

peak cloak
hollow marlin
# static knoll What?

Just because you are not getting gig over wireless does not mean the school does not have a gig connection

static knoll
peak cloak
#

even ethernet, it's throttled

hollow marlin
# peak cloak Just split over hundreds of devices

We provide circuits to almost half the schools in the state. All are minimum of a gig. Chromebooks, phones, streaming presentations, etc. basically require schools to have a gig at bare minimum or they cannot function in todays world

peak cloak
#

yeah

hollow marlin
peak cloak
#

when you have 1000 mbps / 400 devices that leaves 2.5 mbps per device assuming each one was maxing out the connection

#

that's an unrealistic scenerio but still

static knoll
#

ah

#

hmm idk

minor girder
#

If I have a kas does the fact that the drives are different sizes?

#

Nas *

peak cloak
#

well depends on the NAS

#

and what filesystem it uses

minor girder
#

Errrrr dunno

peak cloak
#

RAID, ZFS, BTRFS?

minor girder
#

I think raid

#

Its just a Linux based 4 drive enclosure

peak cloak
#

idk much about storage but I think RAID doesn't like different sizes drives

minor girder
#

Ah ok so they should ideally be the same size

peak cloak
#

yeah

minor girder
#

Sweet, ok, having soem trouble with setting up a lan

#

You got a tutorial by any chance?

peak cloak
#

setting up LAN?

#

what does that mean

minor girder
#

Yeah I'm trying to use a mobile hotspot for my WiFi router, and have everything connect to it

#

Is that even possible?

thick minnow
#

What do you mean?

#

what are u using

peak cloak
minor girder
#

Every time I configure the WiFi to connect to my hotspot the ip changes, then nothing connects to it?

#

@peak cloak EXACTLY THAT

#

💯

thick minnow
#

what devices do you use

minor girder
#

Samsung note 9

thick minnow
#

and how do you want to connect wifi to a phone

peak cloak
minor girder
#

I've done so.e research and it might have something to do with dhcp

#

Or a server setting idk

coarse storm
#

i’m moving soon and the internet is 500mbps for $60 a month and 1 gbps for 80 a month? is it worth getting the full gig? these are my current speeds so anything will be an upgrade

peak cloak
#

I know things like some mikrotik have a USB port that you can plug a 4G dongle in and use the mobile data

thick minnow
#

@minor girder get a 4g router and put your sim in that

minor girder
#

Hmmm, I can connect via wifi

peak cloak
minor girder
#

@thick minnow that means I can't use my phone lol

#

@peak cloak WiFi

thick minnow
minor girder
#

Essentially I'm using mobile hotspit thingy

#

So essentially my unlimited data to a router then to all my devices like a switch

#

Is that even possible?

thick minnow
#

does your provider allow that?

#

they probably do not like that and fine you lol

minor girder
#

Trust me

peak cloak
thick minnow
#

yeah ^

minor girder
#

I've downloaded over 300gb

#

There cool 🤣

thick minnow
#

thats not that much

peak cloak
#

I use terabytes a month

minor girder
#

Its just tv Spotify and xbox

#

I work alot 🤣

#

Would be nice to just come home wack my hotspit on then... boom everything on the WiFi

#

*bangs head on desk

#

Is it something like port forwarding or something?

peak cloak
#

no

#

it'a matter of routing everything though your phone

thick minnow
#

but you cant connect your router or acces point to your phone to extent the signal

minor girder
#

Hmmmm

peak cloak
minor girder
#

🤔

peak cloak
#

only if the router supports that

#

and the phone

thick minnow
#

phones arent made for that

peak cloak
#

much easier to just get a 4g modem

minor girder
#

Can I ask what seems to be a dumb question?

thick minnow
#

4g modem is only possible solution

#

maybe your provider has them

#

call them

minor girder
#

@peak cloak it has a sim card slot but I use the phone itself

cursive jasper
minor girder
#

Does the ip addresses of my devices have to match the ip of my phone

thick minnow
peak cloak
#

you don't want it to

minor girder
#

Ok

thick minnow
#

it wont work

peak cloak
#

that would cause IP conflicts, very bad

minor girder
#

Ok

thick minnow
#

local ip adres 1 per device never the same

peak cloak
#

think of IPs are physical street addresses

minor girder
#

So say for example my ip address on my phone is 192.168.1.0

peak cloak
#

you can't have the same house number on the same street

minor girder
#

My devices would be totally different right?