#networking
tame carbon
We here at Linus Media Group think we know that it is better to disintermediate wirelessly than to utilize proactively. We think that most killer web-based applications use far too much Python, and not enough XForms. What do we cultivate? Anything and everything, regardless of incomprehensibility! Your budget for targeting should be at least twice your budget for optimizing. We will utilize the capacity of ubiquitous scalable web-readiness to expedite. What does the industry jargon "next-generation" really mean? Our technology takes the best features of J++ and PHP. What do we scale? Anything and everything, regardless of standing! Imagine a combination of PNG and Python. Think granular. Think virally-distributed. Think 60/24/7/365. But don't think all three at the same time. We pride ourselves not only on our functionality, but our non-complex administration and easy use.
plain siren
I couldnt even read that
plain siren
IFTT for IT? Hmm I need to try this
plain siren
http://www.andrewdavidson.com/gibberish/?companyname=Linus%20Media%20Group
Fantastic.
Micro$haft is the industry leader of scalable power shifts. Do you have a plan to become C2C2B, innovative? We frequently scale strategic co-branded, innovative experiences. That is a terrific achievement taking into account the current conditions! We pride ourselves not only on our customer-defined feature set, but our user-proof administration and newbie-proof operation. We pride ourselves not only on our feature set, but our non-complex administration and newbie-proof use.
Perfect.
tame carbon
xD
@plain siren this one is promising:
Have you ever needed to architect your feature set? With a single click? It comes off as staggering, but it's true! What does the term "visionary" really mean? We will disintermediate the aptitude of infrastructures to envisioneer.
plain siren
groans
tame carbon
with enough sauce you can sell anything
@plain siren You know what's really interesting, this conversation that we're having, is already in a library somewhere
I'll prove it to you as well
completely indexed the variations of the alphabet, and it is searchable
some very clever math
plain siren
HahahAHHAHA
tame carbon
@plain siren coolest thing is, once you've found the location
you can find the shelf it is on
and find other books next to it
that are eerilie similar
the entire library is shaped as one giant grid of hexagons
@plain siren supposedly the inside of the library looks like this: https://www.theparisreview.org/blog/wp-content/uploads/2015/07/kako-9detwzxqfqxrphos.jpg
plain siren
This is really an interesting project
tame carbon
The entire function is reversible
so you can locate a piece of text, in the library
a library of all 410 page books with every combination possible.
This can also be considered as a movement towards the infinitesimal. At present we are creating ~2 books/second. In order to create the library in, say, a century, we would need to create one book every 10^-1918657 seconds.
untold elbow
@tame carbon have you read The Last Question? short story by Asimov
that project kinda reminds me of it somehow
plain siren
https://templatetraining.princeton.edu/sites/training/files/the_last_question_-_...
This is a fun read
untold elbow
it's a great story
sturdy ledge
would moving my 2.4ghz from 20mhz width to 40mhz width be beneficial?
in terms of speed
my 2.4ghz near me is busy af
plain siren
Well, you have more bandwidth in the channel so overall throughput increases, but since its a larger spread, you run the risk of more cross talk/interference, bumping with your neighbors AP's (idk how much of a risk this is for your RF Environment, this could be totally useless), or having some legacy devices not connect
Omg, go find out whos not on the proper 1 6 or 11 channels, knock at their door, and tell them they are not helping themselves or anyone by doing channel alignment to anything but those 3
sturdy ledge
i think there is alot of cross talk in my neighborhood already everyone is using random channels
sturdy ledge
i live in an apartment complex so not really a choice to knock on others doors, sorta impolite. I mainly use the 5ghz channel anyways
plain siren
impolite is using anything but channel 1, 6, or 11
π
Deauth everyone until they comply! Muahaha
sturdy ledge
they have it set on auto i think as the router just picks it randomly for them i guess, bad coding in the router firmware
plain siren
Routers dont randomly move between those 3 main channels for 2.4GHz
They did that by hand
100%
sturdy ledge
really my router auto-ed to channel 3 the other day i set up the first time
plain siren
with as dirty as your RF background is, I wouldnt doubt some routers would just ignore the rule and start trying to fend for itself if they were a bit more in depth with the rules
But jfc, to get to that point
crystal shale
Lol, i modded an verson of openwrt to allow a higher power xD (22mW instead of 20mW) and thus have less problems with connecting to my second network. (Yes ofc the hardware isnt made for that but it allows me to do so for some reason and i have an better replacement so whatever)
sturdy ledge
just tested 40mz and it is slower
tender hazel
@sturdy ledge 40MHz will normally be slower, yes
sturdy ledge
i am getting 300mbps down / 140 mbps up on 5ghz anyways through 2 thick concrete walls, thank god there any more channels in 5ghz band to avoid congestion
tender hazel
yes you can't really use 2.4ghz effectively in a crowded spectrum
in my apartment downtown here I can only get 10-20Mbps on 2.4GHz
sometimes less
plain siren
this is a single PSU mikrotik switch
lol wait wot
tender hazel
lol wait wot
yeah.. I am puzzled by it.. the only thing I can think of is that because it is a PoE switch that can do 24V passive and 802.3af/at using some kind of converting power supply, perhaps the conversion shows up as a second PSU
it would explain the difference in voltage, but it is confusing
especially with the 0.0 amp current
plain siren
is there a second rail on the PSU
plain siren
especially with the 0.0 amp current
/system health print what does this print out?
tender hazel
same output
that was one of the first things I checked in case it was a winbox issue
but the /system health print output exactly matches the winbox output
and yes I'm sure the PSU has two rails because it has to be able to deliver 24V and 802.3af/at which is 48/52 volt or whatever
so PSU1 is probably actually rail 1 and PSU2 is probably actually rail 2, but it is still confusing
especially since both show 0.0 amps current
plain siren
especially since both show 0.0 amps current
Wait... battery?
tender hazel
no battery
it's in a datacenter
the big UPS and generator in the datacenter provides the battery backup
tender hazel
uh what?
the scheduler will be empty on a device unless you created some kind of scheduled task yourself
I have not, so there will not be anything there
the voltage monitoring happens automatically
if you have a scheduled task in there it is probably just to send an email if the voltage is off or whatever
plain siren
I was going off an assumption that maybe it was set like an alarm somewhere but guess not π
If old revision CRS112, CRS210 and CRS109 devices are powered with PoE - Health will show correct voltage only up to 26.7V. If higher voltage will be used - Health will show constant 16V.
Looks like its just the PoE Health
While that note doesnt apply here directly, gives a good idea where its coming from
oblique escarp
my 2.4ghz near me is busy af
What program is that?
thorny thunder
What program is that?
Wifi Analyzer by farproc
plain siren
if you have a scheduled task in there it is probably just to send an email if th...
Seems kinda funky to have the PoE Voltage listed in the PSU voltage lists tho heh
tender hazel
yeah it is confusing
plain siren
Apparently thats normal for Mikrotiks
tender hazel
we had some kind of power issue in the datacenter we are in where we had several devices suddenly reboot this afternoon
so I was trying to figure out if it was linked to one of the two power feeds we have
and looking at the power monitoring of that switch just confused me because I thought for a second that it had redundant power supplies and wasn't sure why the voltages weren't the same
but I thought I recalled that it was just a single power supply and verified the specs that it was just a single PSU switch
plain siren
but I thought I recalled that it was just a single power supply and verified the...
Were these devices on a UPS
tender hazel
they are all in a datacenter running from the datacenter's UPS
there are two redundant power feeds, only some devices went down so I assume there was only a drop in one of the power feeds
plain siren
Holy shit mikrotik, I get it now
tender hazel
we had this happen a month and a half ago too, and it was the same series of devices that lost power
plain siren
That PoE Out is the same PoE Input circuit, so its treating it like a power supply
Despite being fed from the internal Power Supply, the logic controller has no means of determining this thanks to the rudimentary "Primary Power Source" logic they are using.
tender hazel
ahh
plain siren
I can't say how things work on mUPS in particular. I have read an explanation by @Normis that when device (a RB device with PoE in) has connected both PoE in and barrel-plug, it'll use which ever power source has higher voltage by some margin (makes sense as it only involves a pair of diodes to make this happen). If one intends to use both power supply options, it is best to have some systematic difference in voltages so that power source used won't change too much.
The scenario of changing power source is the following: let's say that PoE in has 0.5V lower than barrel. Then device will start using barrel power source. As power draw increases, the power adapter will drop voltage slightly and it might decrease to 0.5V below the PoE in. So device will switch over to using PoE in. This will drop voltage on PoE in and allow barrel to increase again, causing barrel voltage to rise significantly above PoE in voltage. And RB will change power source over again.
This changing doesn't harm much the device itself as voltage fluctuations won't be critically high. However it might upset both power adapters due to constant switching between full power draw and idle states.
``` hahahahthis could be... potentially dangerous
tender hazel
in this case we aren't feeding the switch with PoE in - it is only being powered by a standard AC power cord plugged into the PSU
plain siren
Yeah I figured, it was just a big shock to see this tho.
tender hazel
it's really annoying that mikrotik capsman actually selects invalid channels
it doesn't happen when not using capsman
but for some reason when using capsman it does happen
it will choose the frequency first, then make a random choice from Ceee, eCee, eeCe, or eeeC
but that doesn't work, because the frequency selected determines which of those choices are valid
ex. 5200 Ceee is wrong, it has to be 5200 eCee
plain siren
AHHHHHH I get why its a "PSU"
Its the fact you can switch between 2 voltages on the PoE-out
So it is a PSU of sorts for PoE Devices.
A controllable one so it makes sense to report the data like such
tender hazel
yeah that's what I said early on
I already figured that out
but I do find it confusing in terms of the way it reports it
it made me think the device had two redundant power supplies
plain siren
i just read through the entire mikrotik wiki again for some reason and its still a god damn mess of links holy hell
sturdy ledge
for wifi 6 do you guys set 20/40/80/160mhz width ?
plain siren
this depends on local RF Environment tbh
sturdy ledge
Most devices that support ac wifi support 80 mhz right
tame carbon
@sturdy ledge on 2.4GHz wireless you basically use only 20MHz channels
on 5GHz, you have a much wider band, so you can cobble up some extension channels
and go up to 80MHz
Says here that 160MHz channels are part of the 802.11ax spec
so WiFi 6 only.
So if you use Ch36, you can get up 6 extension channels for total of 80MHz
Country restrictions and indoor/outdoor still applies
as well as DFS channels which you can only use if your device supports it
@plain siren living in china must suck. There's not a single full 80MHz block available for 5GHz.
This is just Xi trolling people: https://i.imgur.com/wtXYUzC.png
sturdy ledge
people could just change the regions easily in router settings
tame carbon
@sturdy ledge that's against the law
and subject to serious fines if you get cought.
sturdy ledge
really?
i saw many video makers from china on youtube just suggest user to switch region to USA/AUS for better signal strength
tame carbon
@sturdy ledge technically it works. legally you are on a tightrope
if the bandwidth police arrives, they will fine you
@sturdy ledge especially with DFS
if you operate a radio on those frequencies and don't adjust your transmit power, you can get into a heap of trouble
because you can interfere with doppler radar used by weather surveilance
You can only use DFS if your radio supports DFS channels (It scans for Doppler radar activity, and if one is detected, it reduces transmit power)
@tender hazel is there a way you can explicitly scan for DFS activity on all of the channels?
plain siren
<@!530075635423510548> is there a way you can explicitly scan for DFS activity o...
Yes, but not from a hostapd device
tame carbon
@plain siren yeah but those mikrotiks do an automatic channel selection
if I want to have specific channels for each radio in a designated area
and one of them is used by DFS, I wouldnt have a backup frequency configured for it to use
flat wagon
wait so PoE
how can ethernet give power
it's purely a internet cable
????????????????????
i imagine it can power up small things like maybe a phone
but i see a few companies claim PoE on laptops and such
and im like ???????????????
tame carbon
@flat wagon passive PoE is limited to something like 15 watts of power
higher powered devices use active PoE or PoE+ which is something that the network interface has to negotiate for with the PoE controller
PoE is mostly used by things like wireless access points and IP Phones
You could compare it to something like Phantom power used by audio equipment. It needs 48V to drive a special kind of microphone or instrument
topaz mirage
Hello
Probbaly newbie question...
Do I understand this correctly? DDNS will provide me access to my local network from anywhere?
...why (not) use VPN then?
plain siren
No it doesnt
topaz mirage
I found this by mistake when I wanted to make local IP as a DNS to connect to it more easily. Can this be done somehow? I have Pi-hole...could that forward me to local IP with some rule with DNS?
...and is port forwarding anything I should be aware of? I have several devices in my network and I don't know if they can be exploited in some way.
topaz mirage
No it doesnt
Oh, dammit
plain siren
All it does is automagically point a DNS Record to your IP, and when it changes, itll update the DNS record.
So if you have domain.tld
you can have it set home.domain.tld to point to your home public IP
So when you are away, you can use in your VPN Connection "Host" option "home.domain.tld"
instead of an IP
topaz mirage
Oh, okay. Nice.
Well, opening local network to outside with any service is a gamble.
plain siren
If you do it blindly yes
topaz mirage
...and can I set DNS to local IP when I'm in local network? SO I don't have to write IP:port...but just like nas.home or smthing?
topaz mirage
If you do it blindly yes
Not worth the headache. I don't need it, I would have to find ways to use it and not just have it for no reason.
plain siren
You would run a Local DNS server for that.
topaz mirage
You would run a Local DNS server for that.
I have Pi-hole. Can I use that somehow? Planning to make Unbound...that is DNS resolver.
plain siren
Yes
Unbound is a DNS Server that is basically bog standard for such a thing, same with BIND.
topaz mirage
Unbound is a DNS Server that is basically bog standard for such a thing, same wi...
Too bad. Next month project then π
topaz mirage
I never did like running PiHole + Unbound.
How so?
plain siren
PiHole is just a blocking list
Well, guess what you can put on Unbound
those same damn lists
topaz mirage
Oh, really? XD
But I doubt that they can be easily updated.
I use pihole-updatelists for example...
plain siren
Acutally, they update automatically
topaz mirage
Acutally, they update automatically
Oh...lol. Then my project was pointles...? XDD
This cant be. Then why would people run Pi.hole + Unbound?
plain siren
https://github.com/cbuijs/unbound-dns-firewall
https://github.com/cbuijs/unbound-dns-firewall/blob/master/dns-firewall.lists < choose your list of choice
Add into unbound.conf
python:
python-script: "/unbound/directory/dns-firewall.py"
and
server:
chroot: ""
module-config: "python validator iterator"
Suddenly.... you got a block list
topaz mirage
Interesting... π
plain siren
PiHole is a Proxy DNS/Cache that passes forward your DNS Calls unless it happens to match one of the rules in your blocklist
Then it just resolves to a dead addr
The reason people run it is the fancy UI
But, you can do that same blocking... at your Local DNS, which also forwards your DNS Calls if they are not resolved internally just like Pihole
tame carbon
plain siren
evil
thick minnow
<@&750150305383186585> We have a spammer here, He's spamming every channel ^
Every channel above networking so far
and below #tech-chat-2
waxen scroll
o_o
topaz mirage
Huh...is he linked to Lynical.Dev 
tender hazel
You can only use DFS if your radio supports DFS channels (It scans for Doppler r...
if Doppler radar is detected it actually changes channels.. it always works on reduced power in DFS frequencies
tame carbon
@tender hazel so how do I scan all the channels lol? I want to make sure they dont start overlapping
and I want to set each antenna to a specific frequency
tender hazel
there's a DFS check that happens for the first 30 seconds or minute or whatever before the radio comes up
if it is going to detect radar it is probably going to happen in that period and just not come up
tame carbon
Can I see if it is using reduced output power?
tame carbon
if it is going to detect radar it is probably going to happen in that period and...
I still doubt I'll have DFS issues . the area is a valley, in the middle of mountains
tender hazel
yeah I don't think you will either
the biggest risk is probably if you are near an airport or a dam or something like that
tame carbon
@tender hazel there's an old abandoned military base on the other side of the hill lol
supposedly cold war nuclear depot from the americans
The barracks area was completely rebuilt 40 years ago and never put in use
tender hazel
if it is abandoned it is probably not going to have an active radar installation π
tame carbon
we actually skipped the fence 2 years ago
had a look around
we werent the first
every single cable was removed
and not by a technician.
@tender hazel I think the only souvenir we have lying around, is one of those gigantic 400A fuses they used in the switching station
it was just lying on the ground, all the equipment was completely devoid of copper
frigid pine
if it is abandoned it is probably not going to have an active radar installation...
Unless there is a rat there which coincidentally walks over the on switch and turns the radio on. xD
south blade
if my firewall IP is 192.168.10.1, what should my router be that's connected after it?
TP-Link is telling me I can't make it 192.168.10.10 cause it'd be on the same subnet. :/
south blade
Arris Modem is 192.168.100.1, connected to PFSense firewall box 192.168.10.1 hooked up to TP-Link Archer C7 v2 which says I can't use 192.168.10.10 because it'd be on the same subnet.
peak cloak
Arris Modem is 192.168.100.1, connected to PFSense firewall box 192.168.10.1 hoo...
ok, but why...
ok here's the issue
the modem doesn't do any routing or NAT
south blade
Just thought I'd mention the IP to it, I can only seem to access it's GUI when i've lost connection to ISP.
peak cloak
yeah I know what you mean
it's weird how it works
I had a modem like that
also, why pfsense before router?
south blade
_> so there's a firewall working on all my devices? PFBlockerNG, weird stuff, VPN stuff...
peak cloak
router does firewall already?
sturdy ledge
Are there any good WiFi analyser apps for iOS?
south blade
router does firewall already?
Uh, if you wanna call this a Firewall, the only thing that's under "Firewall" is Stateful Packet Inspection (SPI) which is enabled. There's nothing else.
peak cloak
Uh, if you wanna call this a Firewall, the only thing that's under "Firewall" is...
any router by default should drop all new from WAN
south blade
I'm not sure what' you're trying to get at. I haven't been able to figure out how to set up the router since going back to stock firmware, TP-Link was locking up almost daily with DD-WRT in the last few updates. I had the firewall handling DHCP, but every time I try and set up the router how I think it should be, how I had DD-WRT, I lose access to the TP-Link and have to keep resetting it.
peak cloak
I'm not sure what' you're trying to get at. I haven't been able to figure out h...
ok so this so called "firewall" you actually want it to do dhcp and route?
tame carbon
tea-pea link
plain siren
Am I reading this right? Hes got pfsense and a TP-Link router?
or is lack of sleep nailing me once again
tame carbon
@south blade if you had to, could you draw your network on paper ? xD
plain siren
I think hes trying to use his TP-Link Router as a "Wi-Fi AP" Only
tame carbon
Im counting three subnets
plain siren
I think
tame carbon
use LAN port only, and disable DHCP
plain siren
I need a pen and paper for this
south blade
Im counting three subnets
And not on purpose, cause this shit TP-Link won't let me put it under the same subnet under PFSense, I was doing it when I had DD-WRT installed.
south blade
yep
peak cloak
And not on purpose, cause this shit TP-Link won't let me put it under the same s...
so pfsense is being the router?
you have NAT enabled?
and DHCP?
tame carbon
@south blade that TPLInk just needs to have an address in 192.168.10.0/24
plain siren
Triple NAT
plain siren
The RG or the PON
Or is this copper
I forget what this guy previously had as a feed
south blade
where do I paste this
plain siren
Its funny because the AT&T PON is the same IP, 192.168.100.1
tame carbon
@south blade here.
south blade
I mean the text. I'm trying to switch to Linux and don't know how to screenshot under here.
plain siren
wot
peak cloak
I mean the text. I'm trying to switch to Linux and don't know how to screenshot...
I use flameshot
south blade
FN+Print Screen is screenshotting, but pasting is not pasting that screenshot.
don't know where that's going
tame carbon
It saves it in ~/Pictures
plain siren
I use flameshot
Yeah this is the only one worth a damn
tame carbon
@south blade just copypasta the text lol
south blade
What's the command to only take a screenshot of Terminal?
plain siren
there really isnt one
tame carbon
β crystal@watomat ξ° ~ ξ° traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
1 router.<redacted>.nl (192.168.88.1) 0.144 ms 0.127 ms 0.116 ms
2 r2.serv.dro.weserve.nl (46.243.152.3) 5.659 ms 5.870 ms 5.652 ms
3 46.249.55.194 (46.249.55.194) 6.317 ms 6.413 ms 5.774 ms
4 185.8.179.33 (185.8.179.33) 6.845 ms 6.887 ms 6.442 ms
5 ams-ix.as13335.net (80.249.211.140) 12.189 ms 12.107 ms 12.145 ms
6 one.one.one.one (1.1.1.1) 7.677 ms 7.687 ms 7.684 ms
plain siren
traceroute 1.1.1.1 | nc termbin.com 9999
tame carbon
that works too
plain siren
DO that
tame carbon
if you have netcat installed.
south blade
1 _gateway (192.168.0.1) 0.270 ms 0.136 ms 0.127 ms
2 pfSense.localdomain (192.168.10.1) 0.376 ms 0.293 ms 0.294 ms
3 10.4.112.1 (10.4.112.1) 12.120 ms 12.068 ms 11.971 ms
4 te0-7-1-5.rcr21.dfw09.atlas.cogentco.com (38.32.80.113) 12.271 ms 12.272 ms 12.293 ms
5 be2664.ccr31.dfw01.atlas.cogentco.com (154.54.41.201) 12.179 ms 12.733 ms 12.491 ms
6 be2443.ccr42.iah01.atlas.cogentco.com (154.54.44.229) 17.725 ms be2441.ccr41.iah01.atlas.cogentco.com (154.54.41.65) 17.094 ms 16.965 ms
7 be3486.rcr22.iah02.atlas.cogentco.com (154.54.30.166) 19.224 ms be3493.rcr21.iah02.atlas.cogentco.com (154.54.30.174) 19.392 ms be3485.rcr21.iah02.atlas.cogentco.com (154.54.28.86) 19.352 ms
8 be3535.rcr51.iah03.atlas.cogentco.com (154.54.30.122) 20.201 ms 19.174 ms be3536.rcr51.iah03.atlas.cogentco.com (154.54.30.126) 19.313 ms
9 154.24.71.34 (154.24.71.34) 19.984 ms 19.926 ms 19.871 ms
10 38.122.74.162 (38.122.74.162) 22.377 ms 22.335 ms 22.362 ms
11 one.one.one.one (1.1.1.1) 18.838 ms 18.796 ms 20.496 ms
tada
tame carbon
GOOD ENOUGH.
plain siren
dfw
Are you in texas
tame carbon
_gateway (192.168.0.1) 0.270 ms 0.136 ms 0.127 ms
2 pfSense.localdomain (192.168.10.1) 0.376 ms 0.293 ms 0.294 ms
3 10.4.112.1 (10.4.112.1) 12.120 ms 12.068 ms 11.971 ms
nice NAT.
1
plain siren
DALLAS
tame carbon
Still NAT.
@south blade whatever that 192.168.0.1 is, you don't need it.
I assume thats your tplink
plain siren
Bruh, you are literally only 8 hops away from my network's IX Demarc... Im using Cogent Communications as one of my transits
south blade
Yes, that is the TP-Link
tame carbon
@plain siren I have my own Cogent entrypoint :)
2 r2.serv.dro.weserve.nl (46.243.152.3) 5.736 ms 5.797 ms 5.657 ms
3 46.249.55.194 (46.249.55.194) 5.975 ms 6.338 ms 6.472 ms
4 185.8.179.34 (185.8.179.34) 5.999 ms 6.620 ms 6.579 ms
5 hu0-4-0-4.rcr21.b015960-1.ams03.atlas.cogentco.com (149.14.140.185) 7.082 ms 7.056 ms 7.054 ms
6 be2456.ccr42.ams03.atlas.cogentco.com (130.117.49.145) 8.478 ms 8.536 ms be2455.ccr41.ams03.atlas.cogentco.com (130.117.49.29) 8.321 ms
Amsterdam
plain siren
Lets all join the OpenNIC
https://wiki.opennic.org/opennic/dot?redirect=1 Domain Registrars decentralized/removed/separated from the ICANN systems
south blade
<@!277518254178566146> whatever that 192.168.0.1 is, you don't need it.
easy enough to say I don't need it, but it's basically my AP, only 1 wired device to it.
plain siren
What he is saying is: Your gateway shouldnt be set to that particular device, it should be one up
192.168.10.1
south blade
10.1 is PFSense.
plain siren
Yes
south blade
TP-Link should be set to 192.168.10.1?
plain siren
You add an extra layer of NAT by being behind both pfSense + TP-Link's Routing as it currently is
tame carbon
@south blade your AP doesn't route. It only needs an IP for the management panel, so it should be something like 192.168.10.2
south blade
I tried, it says I can't be on the same subnet as PFSense!
south blade
"Error code: 5008
WAN IP address and LAN IP address cannot be in a same subnet. Please input another IP address."
WAN IP is what PFSense gives it automagically.
So, what do? xD
plain siren
what model is this TP Link
south blade
TP-Link Archer C7 v2.
plain siren
Ok so disconnect it from the WAN port of that TP-Link
pfSense connects to the LAN port
on the back of the TP Link
Then under Network > LAN, you set the the "IP Address" to 192.168.10.2
Under DHCP > DHCP Settings, You set DHCP Server to Disabled.
south blade
And it's gonna know how to get internet from a LAN port? >_>
plain siren
Yeah cuz its a LAN Device like your Computer is too.
peak cloak
"Error code: 5008
WAN IP address and LAN IP address cannot be in a same subnet. ...
yes because it's natting
you need to turn off nat
yeah do what rouing said
to get rid of nat
peak cloak
Yeah cuz its a LAN Device like your Computer is too.
it should get ip by dhcp right?
plain siren
It has to be defined thanks to TP-Links config
Ideally it would be outside his DHCP Range
plain siren
Ok so disconnect it from the WAN port of that TP-Link
but hoopla, this is good enough
plain siren
And it's gonna know how to get internet from a LAN port? >_>
That LAN port is a Switch (A regular unmanaged switch) built into the router.
So think about it, if you connect it to the LAN port, its gonna act like its another wired LAN Client.... and anyone who connects to Wi-Fi will be as if they plugged into the LAN Ports of the pfSense too
It moves you up a level
south blade
God damn, how did I have it working like I have it hooked up now under DD-WRT? Oh, I probably had WAN port set up as a LAN port. Fuck me, DD-WRT was spoiling me till it decided to get wrekt on last few updates.
plain siren
DD-WRT has a AP Mode
https://www.tp-link.com/us/support/faq/417/
Oh lookie, found it.
Its exactly the same solution too
peak cloak
@south blade Just to claify because I was really confused before. Your pfsense is your router, not just a firewall. I was really confused because you said firewall. And you basically just wanted your tp-link router to be an access point
plain siren
These damn misnomers are annoying
tame carbon
I need an emoji for :facedesk:
plain siren
I do too tbh
south blade
<@!277518254178566146> Just to claify because I was really confused before. Your...
Yes...but I have 1 wired device on it, because I don't know how to bind 2 ports on PFSense to keep them on the same network, only wired device is my Emby server which I have hooked up to the TP-Link, which is my AP, instead of PFsense box which I have 5 useless ports on.
plain siren
Interfaces >> (assign) >> Bridges
Put all the ports on 1 bridge
Suddenly its gonna act like a managed switch
peak cloak
Yes...but I have 1 wired device on it, because I don't know how to bind 2 ports ...
when you want to interfaces on the same network it's called a bridge fyi
which is basically a switch
south blade
I know it should be easy, but I had enough trouble setting up VPN to work on all my devices with the ability to toggle them under Rules.
plain siren
Focus.
south blade
I tried to use PFSense as a switch and I thought that broke my VPN stuff last time, so I'm hesitant to try again.
plain siren
You have 2 people (+1) who are paid to do this for a living
tame carbon
I get paid for mashing a keyboard
though I dont do network mashing professionally, just a hobby
peak cloak
You have 2 people (+1) who are paid to do this for a living
me? paid...
I'm just in HS
south blade
Ok, this monkey will try and follow your guide...after backing up his settings. LOL
plain siren
I'm just in HS
SHHHHHHHHHHHH
tame carbon
@plain siren BR0
plain siren
Dog of wisdom needs to play along
tame carbon
DING DING DING
@plain siren "Commandline is too hard"
https://i.imgur.com/5ZRg590.png
b. please.
plain siren
Ive come to the point I love CLI because im too lazy to use the mouse
tame carbon
Its nice when the marketing dpt be like: we need a new GUI to freshen things up
and every guide breaks.
and how every guide is incompatible with every other guide
plain siren
Sure, lets just... set background black, text white, remove all graphics....
plain siren
Ah yes
south blade
what's the ipconfig /release /renew equivalent in Linux?
tame carbon
there isn't one
if you use dhclient you can do dhclient -r
and then dhclient to reobtain
but might not work
not every linux system uses dhclient ;P
plain siren
ifconfig eth0 down
tame carbon
@plain siren BAD
plain siren
dhclient -r eth0
south blade
[sryously@localhost ~]$ traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
1 pfSense.localdomain (192.168.10.1) 0.263 ms 0.218 ms 0.168 ms
2 10.4.112.1 (10.4.112.1) 10.781 ms 10.876 ms 11.925 ms
3 te0-7-1-5.rcr21.dfw09.atlas.cogentco.com (38.32.80.113) 13.584 ms 13.767 ms 13.838 ms
4 be2058.ccr32.dfw01.atlas.cogentco.com (154.54.41.225) 12.745 ms 12.753 ms be2664.ccr31.dfw01.atlas.cogentco.com (154.54.41.201) 12.892 ms
5 be2443.ccr42.iah01.atlas.cogentco.com (154.54.44.229) 17.775 ms 17.731 ms be2441.ccr41.iah01.atlas.cogentco.com (154.54.41.65) 18.015 ms
6 be3494.rcr22.iah02.atlas.cogentco.com (154.54.40.54) 18.191 ms be3486.rcr22.iah02.atlas.cogentco.com (154.54.30.166) 19.080 ms be3485.rcr21.iah02.atlas.cogentco.com (154.54.28.86) 19.001 ms
7 be3535.rcr51.iah03.atlas.cogentco.com (154.54.30.122) 19.002 ms be3536.rcr51.iah03.atlas.cogentco.com (154.54.30.126) 18.331 ms 19.097 ms
8 154.24.71.34 (154.24.71.34) 19.830 ms 21.004 ms 20.961 ms
9 38.122.74.162 (38.122.74.162) 20.918 ms 20.621 ms 21.094 ms
10 one.one.one.one (1.1.1.1) 20.040 ms 19.999 ms 20.197 ms
plain siren
ifdown eth0; ifup eth0
tame carbon
ip link set down eth0
plain siren
/etc/init.d/networking restart
tame carbon
@plain siren I did that ^ on my host once with invalid config
plain siren
oops
plain siren
[sryously@localhost ~]$ traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 h...
oh you did it
I know I shouldnt be but I am suprised
south blade
_>
plain siren
Ah he caught that
south blade
The biggest problem was that TP-Link stock firmware won't let me use WAN as a LAN like DD-WRT could.
I had been on DD-WRT for the last 5 years, I forgot that shit. Edit: Shoot, now that I think about it I think I've been using DD-WRT for like 8+ years.
tame carbon
@south blade buy a mikrotik.
They have 100% flexible config
here comes the shill police
plain siren
heh
thick minnow
I can't even use my old TP-link router as a WDS
I hate it
What should I do when some1 has my ip
south blade
I have a shit ton of bills and no income to replace the TP-Link right now.
plain siren
What should I do when some1 has my ip
Nothing, it doesnt matter
thick minnow
What should I do when some1 has my ip
I mean everyone knows your ip
everyone=computers on the internet
peak cloak
just don't have any stupid services running
thick minnow
Ooohh
peak cloak
like something with vulnerabilities
peak cloak
run a webserver
plain siren
Ask them
peak cloak
tell them to go to your website
tame carbon
You want some IPs ?
thick minnow
1.1.1.1 is an ip
thick minnow
192.168.1.1
peak cloak
100.64.96.124
plain siren
2001:470:b9ff:10:d4fd:2f8e:4b5b:b257
tame carbon
Goood.
peak cloak
100.64.96.124
looks valid actually a reserved cgnat ip
fresh copper
216.218.193.62
tame carbon
peak cloak
not publically routable
thick minnow
So how do I get a IP without making a websever
tame carbon
Warscript running...
peak cloak
https://i.imgur.com/0yFhP08.png
did they fix zenmap?
tame carbon
what do you mean fix/
peak cloak
the whole python2 -> 3 thing
fresh copper
2a0d:1a40:fa1::1
peak cloak
I just learned nmap cli
thick minnow
So how do I get a IP without making a websever
Just guess
plain siren
So how do I get a IP without making a websever
There is no easy cheap "I gotcha IP (Read: Nose)" thing for this, and truthfully we dont answer those questions with serious nature because we know the intent. That isnt permitted on a Partnered Discord
thick minnow
Ooohhh
plain siren
but effectively: Heres everyones IP: 0.0.0.0/0
magic rivet
Hello everyone π I have a Netgear GS308E Switch. My pc is connected directly to my router, but i would like to login to my switch to change some settings. How can i do it? I tried some ip from netgear website, but they are just not working.
peak cloak
Hello everyone π I have a Netgear GS308E Switch. My pc is connected directly to...
run a network scan
easiest way imo
download zenmap
tame carbon
@peak cloak this build of ubuntu is so old. It aint even heard of python 3 yet.
plain siren
Hello everyone π I have a Netgear GS308E Switch. My pc is connected directly to...
Open your WebUI on your Router and see the list of "Clients"
thick minnow
but effectively: Heres everyones IP: 0.0.0.0/0
How is that everyones ip
peak cloak
How is that everyones ip
that's the ip of the internet
plain siren
0.0.0.0/0 means "Everything from 0.0.0.0 to 255.255.255.255"
thick minnow
run a network scan
also it's usually 192.168.1.1 or 192.168.0.1 usually
magic rivet
Open your WebUI on your Router and see the list of "Clients"
My switch is just not there. This is why i confused.
peak cloak
for v6 it's 2001::/32
tame carbon
@thick minnow the (loopback) IP of your computer is 127.0.0.1
plain siren
Ah, then it is out of the network scope
peak cloak
Ah, then it is out of the network scope
or maybe just not a dhcp client
network scan works for me
plain siren
I bet its a static config
peak cloak
also netgear has this tool to find it
thick minnow
<@456226577798135808> the (loopback) IP of your computer is 127.0.0.1
I'm not using wifi
tame carbon
^ 
plain siren
I'm not using wifi
peak cloak
I'm not using wifi
ok??
magic rivet
@peak cloak I will try zenmap to scan my network. Thank you for the help π
plain siren
Wi-Fi is just the same as using an Ethernet Cable, has nothing to do with IP's or Routes
peak cloak
<@!222482269829332992> I will try `zenmap` to scan my network. Thank you for the...
you basically plug in your network so for example 192.168.1.0/24 and it will scan it
plain siren
Wrong OSI layer there buddeh
peak cloak
there may be some settings you need to tweak however
tame carbon
@peak cloak if that switch was preconfigured on another subnet, or doesnt use dhcp, you can try but wont find it.
peak cloak
like -Pn which disables intial ping scan
peak cloak
<@!222482269829332992> I will try `zenmap` to scan my network. Thank you for the...
there is also this
worked for me last time
my netgear switch is a pita
magic rivet
there is also this
@peak cloak Actually i scanned my network with the same app just on iOS. The app found my switch on 192.168.0.239, but if i use this ip to login nothing happening.
peak cloak
<@!222482269829332992> Actually i scanned my network with the same app just on i...
how are you trying to log in?
the netgear app?
or just web brower
magic rivet
I have tried both. Netgear app has a button says web interface (not working) and also i tried from browser.
peak cloak
I forgot what I did though, if I just reset the switch or got it working
I think I just reset it
magic rivet
I will do a hard reset.
And i have the same problem with my modem as well π
@peak cloak Appreciate your help bro. I will update you tomorrow. Have a wonderful day.
south blade
@plain siren still here?
plain siren
Maybe-ish
south blade
plain siren
PfSense?
south blade
Yeah, trying to figure out how to switch from LAN to Bridge, but DHCP is on LAN, so need to turn it off to do it and I'll be able to put DHCP on Bridge?
plain siren
Its because you have to undo everything of that LAN Port before adding it to Bridge because its actually BR0 or Bridge that does DHCP
south blade
I'm not gonna lock myself out while I'm doing the switching? D:
south blade
How would I load up a backup if I got locked out?
There's actually more I'd like to do but trying to take it one step at a time. LOL, I've got an onboard NIC and a 4 port NIC card, I'd really like to make the onboard port WAN and bridge the 4 port NICs for LAN. I know I had tried a year or 2 ago but don't remember what happened. :/
peak cloak
I know in vyos there is a difference between commit and save
so you can commit a config and see if it works
if it doesn't you can reboot and it will go back to the previous one
only when you save does it become persistent
idk if there is something like that on pfsense
tame carbon
@peak cloak thanks for dropping nginx into my lap
a proxy pointing to itself.. yeah that wont fly
south blade
idk if there is something like that on pfsense
I don't think there is, I've rarely restarted this thing, changes just apply immediately it seems. So I feel if I turn off DHCP my Linux PC is going to let go of it's IP setup and lock me out of PFSense. LOL
tame carbon
@south blade real router dont need an IP to be configured ;)
no risk of getting dropped if you connect by MAC address instead
tender hazel
looks valid actually a reserved cgnat ip
you are supposed to use the 100.64 range for CGNAT and not other private ranges
peak cloak
a proxy pointing to itself.. yeah that wont fly
Wut
tame carbon
@peak cloak you sent someone to me
who had a borked nginx instance
and on windows of all the things.
I like nginx for its simplicity
@south blade all I can say is. buy a hardware router
pfsense is strange, and all the interesting parts are confusing to configure
and performance on regular computers is terrible for the amount of power it consumes
south blade
No idea how much power it uses, I bought a PC on eBay for like $100 a few years ago and it's just been running, PFSense just has a lot of stuff.
Barely even being pushed:
π I'm trying to pull the trigger on trying to flip this stuff around and then:
It's a whole freaking chain of stuff to turn off before I can make changes sigh
tame carbon
@south blade https://i.imgur.com/9qZihBl.png
@tender hazel and so it begins: https://twitter.com/EU_SST/status/1380120766071635968
Twitter
chance of collision between two sattelites
the more debris there is, the more collisions
its a defunct US weatherstation and a Soviet upper stage
south blade
Welp, guess what. I locked myself out just like I thought I would.
No idea how to load up this backup so....I'ma just start over and take advantage to update it to the newest PFSense 2.5.5.
opaque stirrup
ISP say that theres nothing wrong on their end :/
south blade
Oh god, is there a Rufus for Linux? xD
tame carbon
dd
iron scaffold
anyone know how to connect two pc over ethernet for lan gaming? been using a patch cord and zero tier with no luck atm
south blade
π€¦ββοΈ Restored to a backup that works on my PFSense, wanted to try and update it through the GUI but now after months of ignoring it telling me there was an update available:
2.4.4_3 = 2.5.0 π€‘
Everywhere, saying it's up to date. xD wtf
thick minnow
is there any cheap options for PFsence instead of negate
peak cloak
is there any cheap options for PFsence instead of negate
vyos, opnsense
apparently netgate has gotten bad recently
vyos is full cli however
there are some gui's I think for it but I never used them
thick minnow
apparently netgate has gotten bad recently
how come whatup whith them
peak cloak
how come whatup whith them
business practices apparently
thick minnow
ah ok
peak cloak
anyone know how to connect two pc over ethernet for lan gaming? been using a pat...
did you setup ips
thick minnow
home use
peak cloak
router?
thick minnow
i am allso useing it for the vpnn and dynamic dns and such
peak cloak
can do gigabit routing (depends on how many rules)
ipsec vpn
wireguard coming soon
that pfsense box is wayy overkill for home use
if you want something more powerful look at https://mikrotik.com/product/rb4011igs_rm
gui isn't as pretty but it works
tender hazel
you can also use the android/iphone app which is much more user friendly
tame carbon
is that thing even useable?
hollow marlin
GUI is ancient looking but Ill take it over GUIs that take seconds to load
tender hazel
yes, the android/iphone app works pretty well
tame carbon
@hollow marlin I like the simplicity of winbox
tender hazel
I've asked mikrotik though for the ability to turn off quick setup for us
hollow marlin
<@!462711605063450628> I like the simplicity of winbox
I didn't use winbox for the first year or so using Mikrotik, but now its CLI then winbox
tender hazel
quick setup works ok if the device is starting from mikrotiks defaults, but it gets confused by our default config and if you run the quick setup wizard through it will do stupid things like disconnect from the internet and remove all authentication from the wireless interfaces
I often use the terminal in winbox as the CLI
tame carbon
same
tender hazel
because I can open as many terminal windows as I want without having to reauthenticate
tame carbon
but I like the gui for browsing
just having a little window
with things like address lists
and such
is so helpful
tame carbon
because I can open as many terminal windows as I want without having to reauthen...
why not use ssh keys?
tender hazel
on hundreds and hundreds of customer routers?
things I may be only need to log into directly every few years?
final mirage
tender hazel
all of our mikrotiks authenticate against our active directory radius server, so we can just log in with the corporate username and password to any device
so it is already pretty convenient
tame carbon
@tender hazel lol saw a video today on why VPNs that use TCP are bad
and the answer is quite simple
dont stack TCP
flow control mechanism completely break the available bandwidth
tame carbon
I've seen those things
Like what is this?
oh wait
facepalm
this is spanning tree
keep forgetting that exists
plain siren
LOL
waxen scroll
@hollow marlin come use ubnt with me
plain siren
<@!462711605063450628> come use ubnt with me
peak cloak
its readable.
As in visual wise, for me its perfectly fine but compared to something like pfsense just visual wise it looks worse.
hollow marlin
<@!462711605063450628> come use ubnt with me
Ubi:
waxen scroll
@hollow marlin lets use pfsense in the corporate datacenter
tame carbon
asus as your edge router
hollow marlin
<@!462711605063450628> lets use pfsense in the corporate datacenter
But Ubi has "DC level" gear
waxen scroll
a leaf with no spine
hollow marlin
Wait you don't just ring them all up and rely on STP?
waxen scroll
nothing wrong with a little stp
plain siren
RSTP hopefully
waxen scroll
PV hopefully
tame carbon
aren't they all compatible with one another?
hollow marlin
MSTP or nothing
hollow marlin
aren't they all compatible with one another?
STP>RSTP/PVST+>MSTP
Backwards compatible in that order
waxen scroll
bpdufilter [on]
hollow marlin
I cannot remember. I know I didn't explain MSTP, many pieces to it but its overall pretty simple
I know I explained L2 and my absolute hate for it
waxen scroll
just wait until you think you know how port channels, spanning tree, etc work and then you meet VPC
tame carbon
yeah but as long as you dont have loops, you don't have to configure it right?
waxen scroll
then VPC breaks
tame carbon
with the horizon
you add 1 point to it
normally the protocol does that on its own
and build up that distance tree
hollow marlin
just wait until you think you know how port channels, spanning tree, etc work an...
VPC/MCLAG/EVPN, all fun when STP is involved
waxen scroll
ive learned a few lessons because of VPC
hollow marlin
yeah but as long as you dont have loops, you don't have to configure it right?
STP works most the time, but many like to say STP broke something rather than their terrible design
waxen scroll
i know enough to see what the NOC is about to do to recover a switch and go WAIT STOP!
π
VPC + switch with unexpected behavior is the devil
tender hazel
we use MSTP in general where we can
on some devices we have to use RSTP but for those we make them stubs
splitting apart an MSTP network with an RSTP device in the middle (ex. MSTP<-->RSTP<-->MSTP) is a bad idea
but MSTP<-->MSTP<-->RSTP, keeping that device as a stub, works ok
hollow marlin
We use MSTP because we still have a few Cisco switches scattered throughout and PVSTP+ is not an option to run on them. It gets too hard to filter BPDUs when multi vendors are involved
tender hazel
we used to run PVSTP and moved to MSTP
you start getting problems if you have tagged BPDU's arriving to a switch that is expecting MSTP
waxen scroll
yeah im dealing with a nexus <-> mellanox stp now and its not happy
i dont have access to the mellanox though so i have to wait on a vendor
its bpdufiltered lol
its ignoring my better bpdus
hollow marlin
we used to run PVSTP and moved to MSTP
Thats what we do. All devices are MSTP. Ciena for our edge PEs in some locations have no form of PVST BPDU filters and running it in core would cause havoc
hollow marlin
yeah im dealing with a nexus <-> mellanox stp now and its not happy
Did they not get back to you yet on that?
waxen scroll
NO!
hollow marlin
π€
waxen scroll
they're waiting for firewall rules so they can access it but they arent giving me any docs on it
docs dont mean anything anyway. who knows what the actual state is
tame carbon
why not use a token ring?
tender hazel
I don't really know why someone would want to run PVSTP+ instead of MSTP anyway
waxen scroll
because you're a cisco shop and thats what ships
last few major companies I worked were all PVSTP+
most implementations are going from a dist thats hosting the L3 to the edge, its not even that big
also everythings practically LACP/MLAG/VPC
tender hazel
but PVSTP+ I don't think has any advantages at all over MSTP, the opposite is true
waxen scroll
Or should I say RPVST+
hollow marlin
PVST did have it's advantages when it came to old fashioned load balancing of links. But as more are moving to L3 as close to the edge as possible, MSTP is king or RSTP in a single vendor environment
crystal shale
I dont understand any of those names like: "MSTP", "RSTP" but im still reading through it.. nice xD
Um i have a quick question tho.. Is there a difference between a LAN Switch and an LAN Hub? (If both even exists in the first place xD) And if there is a difference, then what are they?
peak cloak
I dont understand any of those names like: "MSTP", "RSTP" but im still reading t...
Hub is dumb, it send all the packets to everyone. A switch however sends the packets only to the port that it needs to be sent
hubs are obelete
get a switch
crystal shale
Hm.. tho a hub doesn't need an compute unit in it then (or atleast doesnt need to check to which pc to send it)
So.. wouldnt an cheap hub be faster then an cheap switch?
And to well.. split one lan kabel to multiple ones?
peak cloak
So.. wouldnt an cheap hub be faster then an cheap switch?
no
hubs are obselete
switches are faster
peak cloak
And to well.. split one lan kabel to multiple ones?
wdym?
switches don't do anything with IP addresses
all they do is packet switching based on MAC address
||well more advanced switches do more but that's besides the point||
crystal shale
I have an 2 story house, and only one lan cable going up
But i have 5 rooms to "power" up there
With each 2 lan devices.
peak cloak
With each 2 lan devices.
then use a switch
no reason to buy a hub
switches are cheap
I have the same situation with only 2 cables to the second floor from the basement (where the router is) so I have 2 managed switches (I need features such as vlans which are more advanced)
and poe
which is nice
crystal shale
Poe doesn't work for me
peak cloak
crystal shale
Wait.
plain siren
crystal shale
Nvm
plain siren
peak cloak
^upstairs distribution switch
crystal shale
I confused it
peak cloak
Poe doesn't work for me
poe is power over ethernet
plain siren
Powerline Networking
crystal shale
Or Whatever its called
plain siren
It sure does, and its useless with surge protection.... and guess what.. if your priorities are right your surge protection shouldve been there anyways
So it kinda is a twofer of a joke
Its used in Electric Grid Control Platforms quite nicely tho
Top it all off, you are limited to your branch and thats about it usually
crystal shale
powerline kinda sucks
Actually on one etage its quite nice
It gets a transfer speed of around 50mb/s under my devices
peak cloak
Slow...
crystal shale
Which is 5 times faster then my internet
plain siren
π΄
crystal shale
I just have an typical 100k connection
plain siren
Which is 5 times faster then my internet
crystal shale
I live on the land
peak cloak
Wow
plain siren
DSL
peak cloak
Sat internet?
peak cloak
Oh
crystal shale
We dont have anything else here on the land
peak cloak
Starlink...
plain siren
Your DSLAM on Provider end is prob run down as fuck too so old
They dont ever maintain those things anymore
peak cloak
I pay 30β¬ for my current connection
We pay 40 for 300/300mbps
crystal shale
Yeah germany?
peak cloak
Nah, us
plain siren
They do
How? There is literally no new parts for these devices being made by any OEM or Aftermarket Anymore D:
They are slowly dipping off the map
crystal shale
How? There is literally no new parts for these devices being made by any OEM or ...
Heh german engineering
crystal shale
They produce them here.
1&1 "Wir gehen erst wieder, wenn der Anschluss lΓ€uft" -Marcel Davis
plain siren
Imagine having the luxury to produce your own repair parts at a whim. only in Germany/Japan...
plain siren
I would kill for that capability
crystal shale
Heh
Remember amigas? Some of the chips still get produced..
Anyways... Ofc its slow.. slower then wifi tbh
Like wifi we have like 1700mb/s
So basically the top what the best router from them can handle
south blade
I pay 30β¬ for my current connection
30 euros for 10mb/s? That's the equivalent to paying $180 for Starlink, so you're basically paying double to not pay more for some other service.
peak cloak
30 euros for 10mb/s? That's the equivalent to paying $180 for Starlink, so you'...
isn't it 100/month?
south blade
Yes, at his price to match Starlink speeds...
peak cloak
oh
south blade
You signed up yet?
I'm in town right now, still working on getting something built on my rural property. Supposedly my ISP in town is available out there, I bet they'll give me access, but charge me an arm and a leg to go down the street to me. π
peak cloak
You signed up yet?
Nah because I have fiber
waxen scroll
@hollow marlin cleared before testing
tender hazel
We dont have anything else here on the land
What else would you live on besides land? a boat?
or "the land" is some magical place that is just called that that I have never heard of
peak cloak
What else would you live on besides land? a boat?
Land I think refers to rural
tender hazel
oh ok.. I would think of land as anything that is not water
thick minnow
Whats the most optimal type of ethernet cable
waxen saddle
One that works to spec
frigid pine
Hello People.
So does anyone have a better alternative to 'The Dude' for managing Mikrotik devices? My main concern is Winbox integration.
native cradle
powerline kinda sucks
My house has 4 energy circuits. Ports on the same circuit work OK, other ones are really unreliable and slow. Decent Wifi >
tame carbon
@frigid pine any particular reason you need the d00d
@native cradle more than 1 pair of powerline ethernets = laggy/slow
native cradle
actually idk
tame carbon
@native cradle nah just saying, that's how it is
they share the medium, and interfere
tame carbon
There's no well established standard for dlan
frigid pine
<@!230037398392799233> any particular reason you need the d00d
Because of Winbox integration. It's easier to access the sites with it.
tame carbon
@frigid pine yeah the dude is ment for monitoring load between various mikrotik devices
the dude can either run inside RouterOS or as standalone server package
I've never had a need for it
frigid pine
How do you login your Mikrotik devices in Winbox?
tame carbon
with winbox
mikrotiks have a mactelnet server
so you dont need an IP to manage them
frigid pine
I have about 3000 devices that I need easy access to.
tame carbon
@frigid pine I believe it is RoMON that you are looking for
RoMON allows you to set up an additional L2 network ment purely for administrative access
I've never used it myself, might want to ask @hollow marlin or @tender hazel
frigid pine
https://i.imgur.com/aw0q2Ww.png
This is ok for my core devices. But really trouble some for my access devices.
tame carbon
Yeah I am not 100% sure how RoMON does it, but I think it allows you to log onto a router at a specific site
and then access devices on that network
You have something called a RoMON agent
frigid pine
No No I know about ROMON. But That's not what I am looking for.
opening L2 access over a vast netwrok is not safe I think.
We use ROMON when needed but close it after the work is done.
Also, I don't think ROMON works with devices that are separated at L2.
tame carbon
pretty sure it is ment to be used as a gateway
but 3000 devices
yeah you have a completely different problem xD
frigid pine
So I am basically looking for a tool that can get me Winbox access with a right/double click using devices IP.
tame carbon
@frigid pine idk if this makes a difference: https://i.imgur.com/0X4AKGp.png
makes it scriptable
@frigid pine trying to attack this problem from a developer viewpoint :P
cus this kind of stuff is easily scriptable
romon traffic between L2 devices I believe gets filtered by the tiks themselves
and doesnt show up in packet sniffer or TORCH
frigid pine
Yeah I can write a php application for the job to be done but I don't have time lol. Also I am more interested to search a tool that can monitor the status of my devices too. Like The Dude does.
tame carbon
@frigid pine I think the mikrotiks underneath just use SNMP
As long as you have software for this
should work
might just be that the Dude uses that as well
frigid pine
Yes, But i'll need to wirte a lot of code. π
tame carbon
Nagios
frigid pine
Have you worked with Zabbix?
tame carbon
frigid pine
device configs in zabbix are confusing as fuck
IKR. tried to configure it like 4 times and didnt get it correctly. Now it doesnt interest me.
tame carbon
@frigid pine I wrote a monitoring daemon for Zabbix before
it would take healthchecks and post them to zabbix
thankfully I never had to create device configs
the program was written in java. and the 'unit' healthchecks were tiny javascript files
monitoring/daemon/scripthost
the only reason it was written in that way was because of a rediculous set of constraints I had to work with
the software had to be "configurable" without needing recompilation/reinstallation. But at the same time it had to support certain propietary java libraries
solution: script hosting.
frigid pine
uh everything went over my head xD
tame carbon
@frigid pine basically, the old "healthchecker" was a bunch of hardcoded tests in java
some files were 300+ lines
after my rewrite, those healthchecks were tiny 10-20 line javascript files
frigid pine
oh okay got it.
tame carbon
and they just got stored somewhere in /etc
so the sysadmin could 'tweak' the tests without having to bother the developers
Never doing this again though
literally, 5 months after I finished that project
Oracle comes out and says: we're deprecating Nashhorn (1 version later after they initially released it)
nashhorn is the javascript engine for java
frigid pine
there must be other JS engines? backporting shouldn't be hard I guess?
tame carbon
@frigid pine actually, that's a good question
sure, there's alternatives, and I actually wrote my software in such a way, that you could easily add more execution engines
for other languages
you could replace the Nashhorn executor with another one
and most of the code would remain functional
I abstracted the scripting layer
and all of that, in 60 hours xD
frigid pine
hmm
frigid pine
so if need be you won't have to spend another 60 Hrs. xD
tame carbon
@frigid pine yeah that was the idea. you have an interface called Script
that contains two fields: code and engine-type
executor looks up what engine it has to use, loads up an instance with the code
and runs it
it passes some context information like zabbix into the javascript VM
so inside your script you can do zabbix.set("my.key", "value")
and ^ this actually calls some bits of java code that communicates with zabbix
script hosting is strange. and I learned most of this by playing with lua.
because lua is kinda ment for this purpose.
tame carbon
Another programming language
often used as a scripting extension in existing systems or as mod platform for things like games
@frigid pine boils down to this: https://i.imgur.com/X7Y5xqy.png
One language, evaluating scripts from another language
so this is a tiny java program, running lua code inside a vm
print 'hello world' is that bit of lua
but we're waaaay offtopic lol
frigid pine
And I am way underqualified to understand this. xD
I use google to code. lel. So my understanding to coding jargon is limited. π
thick minnow
Hi, I have trying to configure dns records in the past tow hours and I could not get it to work. Could I please get some help?
cedar igloo
We can try to help. What is your question?
thick minnow
I have some servers in my network and I port forwarding them in my router, this works fine. But I could not understand how to make a srv record
Iβm using pork bun if it help
tame carbon
@thick minnow any specific service you are using SRV records for?
format depends on what the application expects
the idea behind SRV is to provide some more context (such as port & protocol) to a domain name
tame carbon
You can't
DNS points to IP addresses.
Some protocols and software can use SRV records for additional information, but this is specific to that program or piece of software
thick minnow
Oh
tame carbon
like for minecraft, you can use SRV records if you host your game on a port other than 25565
but this is only specific to minecraft in this context.
so when you do the domain lookup in the game, it checks if there's an SRV record when no port is provided
if no SRV is found, it will use 25565
by default, like with websites, you just use port 80
thick minnow
I saw I can use alias itβs fine to use it?
peak cloak
Http for websites doesn't use srv
peak cloak
I think because it's a security risk
tame carbon
again, SRV applies only to a couple protocols
peak cloak
Yep
thick minnow
There is a solution?
peak cloak
There is a solution?
What are you trying to do?
tame carbon
@thick minnow DNS only really has two kinds of records you'd be using
peak cloak
Run multiple websites on one ip?
tame carbon
A records, which point to an IP address
and CNAME records, which point to another domain
thick minnow
Run multiple websites on one ip?
Yes
tame carbon
@thick minnow use port 80 and deploy a proxy server.
tame carbon
you can have multiple hostnames on the same IP address
thick minnow
Ok I will look for it th u
tame carbon
so if example.com A record -> 10.0.0.1
peak cloak
And in this case reverse proxy based on hostname is exclusive to http iirc
tame carbon
you could have a foo.com pointing to the same address
peak cloak
You can't do it for pure tcp
tame carbon
@thick minnow basically, with HTTP version 1.1, the browser sends the hostname with the request (the domain in the address bar)
thick minnow
But i could use sub domain?
tame carbon
and the server can use this, to figure out which website it needs to load