Oh well hang on; dns doesn’t work from 8.8.8.8 either?
#networking
slow pivot
vale storm
my /etc/resolv.conf shows the following:
search <ssid> <hostname>
nameserver 8.8.8.8```
[details omitted for privacy]@slow pivot what do you mean? All URLs are resolved if that's what you mean.
distant wedge
Can you ping any other destination?
vale storm
Yes, 8.8.4.4 works
slow pivot
<@!189577713026072576> what do you mean? All URLs are resolved if that's what yo...
Oh, sorry I misunderstood; i thought you meant 8.8.8.8 was the only one where dns wasn’t working
vale storm
No, 8.8.8.8 is the only IP where ping isn't working (that I've found so far).
But 8.8.8.8 is also my standard nameserver according to my /etc/resolv.conf so maybe that has something to do with it, that's what I meant.
vale storm
Okay, but then I have no idea why it's only 8.8.8.8 that doesn't get pinged.
peak cloak
some sort of firewall/routing issue?
vale storm
Don't think so, I've never had this problem.
peak cloak
what else could it be
slow pivot
Maybe ping has been blocked by a node upstream
vale storm
I only noticed because my polybar includes a network widget that flashes when it detects packet loss, and it only started flashing today.
slow pivot
Can anyone else ping 8.8.8.8?
peak cloak
yes
vale storm
Could it be my ISP's fault?
Hold on, if I connect to my VPN, will that make a difference?
LOL
Through my VPN 8.8.8.8 is pingable.
Okay, so it's either my ISP or my local config, right?
peak cloak
something between your PC and 8.8.8.8
errant bronze
When i close Nat i lose internet connection.
peak cloak
which router?
you either need to put the ISP router into bridge mode and disconnect all your other devices from it and just have your router conencted
or turn off NAT on your router, along with DHCP
errant bronze
Ok solved. I just switched my router to ap mode
Which i imagine eventually did all the things you suggested when i did that
Thanks man
peak cloak
Which i imagine eventually did all the things you suggested when i did that
yep
what's what AP does
tame carbon
@hot hawk Plex
hot hawk
That's for videos only
tame carbon
or KODI
hot hawk
Want file trasfer too
tame carbon
@hot hawk android TV is your streaming client no?
hot hawk
No I got other devices that can do that
tame carbon
Where are you storing your files then?
tame carbon
So that's just USB attached storage?
peak cloak
Any software recommendations
jellyfin
hot hawk
TV box has usb 3
tame carbon
Yeah that android TV thing, that's ment for streaming only
tame carbon
I doubt it can host files on the network
hot hawk
Never heard to google I go
hot hawk
I doubt it can host files on the network
If android doesn't work I might be able to throw arch
peak cloak
use truenas
hot hawk
you want a NAS?
Yes
tame carbon
@hot hawk that box is ment as a client, those usb slots are probably just to do file playback directly
peak cloak
just plz not arch lol
hot hawk
just plz not arch lol
Y not
tame carbon
because
hot hawk
I guess
tame carbon
I personally wouldn't even use TrueNAS, but that's up to you
hot hawk
Autho the real question is can I even get linux on it
gilded kite
does someone have experience with unraid and nextcloud? I have troubles installing it and I'm at my wits end by now...
after installing nextcloud I can't even get into the webgui. I just get a "Internal server error" page
I tried the usual, new install, reboot but nothing works
peak cloak
I personally wouldn't even use TrueNAS, but that's up to you
yeah it can be overkill
hot hawk
From what I've looked up not sure
hot hawk
I'd just toss debian on it, install samba and be done
Samba 2 any faster?
tame carbon
no idea
hot hawk
E
tame carbon
I just install the samba package
and then go to /etc/samba/smb.conf
Samba just creates windows shares
tame carbon
I don't even bother with it myself lol
I use sshfs for everything
0-effort network shares
tame carbon
sshfs root@machine:/path/on/server /mnt/remote
then just cd /mnt/remote
and you can browse the files as if they were a local dir
0-effort network shares
hot hawk
Does samaba work on termux
Or never tired
Prob can look that up lol
Was thinking just doing this
Autho need another android samaba server
Other than that ssh tormenting and a few other apps
O wait
I forgot servers ultimate
Will Try that first
gilded kite
does someone have experience with unraid and nextcloud? I have troubles installing it and I'm at my wits end by now...
after installing nextcloud I can't even get into the webgui. I just get a "Internal server error" page
I tried the usual, new install, reboot but nothing works
supple fog
Can anyone here help me set a static IP address?
low pond
yea but for what service or what use case exactly? (like is it a VPS configuration of netplan, or just local IP on your netowork etc)
supple fog
So I’ve been trying to connect to activision services. Both my IT Department (I work at a University and live “on campus”) and our internet provider and they both told me I’m on my own. So I did the whole TCP port access thing now, from what I’ve read, I need to have a static IP address
supple fog
I think so. On my options I’m set to private. But bare with me. I’m so far outta my league here.
peak cloak
if you need a static ip, that should be the job of the networking people, since you don't want to set a static ip in the DHCP range, what they could do is either tell your what the DHCP range is so you don't interfere, or they could just set dhcp reservation, so it's still seen as DHCP by your server, but the DHCP server gives the same address
I'm kinda confused tho, on what you are trying to achive
what's activision?
supple fog
To be able to play Warzone
peak cloak
don't need static ip for that
supple fog
Ok, so they told me everything looks fine on their side, and same with my IT dep. but it doesn’t even try, it just immediately tells me “unable to connect to Activision services”.
I’ve tried on both of my PCs same problem, and when I’m home it works. So it’s obviously an internet issue
I’m just going off of activision’s support page and what I can find on google
peak cloak
so your trying to port forward
supple fog
Again man, I’m not trying to be ignorant but I’m just trying to do what this page says. I’m outta my league.
peak cloak
if your at uni and your router doesn't get a public ip, you can't port forward
supple fog
Is that something I need to ask them?
Cause it works on the school’s public gaming PC center (same network) but not mine
hot hawk
prob somthing blocking on uni
peak cloak
yeah
crisp bay
yo can someone help me with putting the webserver online on my VPS...
I opened ports 80 and 443 correctly, but still can't access the domain
peak cloak
that's chain output
wait
hmm
what's the output of ip a
dm it
actually before you do that
is there even a webserver running
@crisp bay your using nginx?
peak cloak
and is running if I access it using the public IP
so it works? just https doesn't?
and certbot isn't
peak cloak
no, I can't access using a domain at all
enter the domain there
do you get an A record with the right IP?
peak cloak
nope, it got me my home IP
then update your nameserver records
crisp bay
what do you mean?
peak cloak
what do you mean?
the dns records
crisp bay
I have removed DNS records now on CF
peak cloak
crisp bay
yeah I have DNS records on cloudflare, so I removed that nameserver
like it won't look for my home IP
peak cloak
and on your domain registar you changed the nameserver to cloudflare?
peak cloak
you need to wait
if it's still getting the record from the old nameserver that means it didn't propagate
or it isn't done correctly
crisp bay
it's not getting anymore
crisp bay
no record
crisp bay
.com
peak cloak
ah, so no issue there
on cloudflare if I remember it will tell you when it find it is the nameserver for your domain
crisp bay
yeah
but I'm experiencing it for the first time
as it has been working always without any problems
the f?
now it's 100% ports
crisp bay
it has found 2 completely different IP's
peak cloak
it has found 2 completely different IP's
that's cloudflare caching
so yep
it's working
if you want to disable that, click the yellow cloud next to the record on cf
crisp bay
set it on DNS only?
peak cloak
if you want
don't need to
what that does is that cloudflare will cache your website
and traffic will get resolved on cloudflare's end, without going to your vps
peak cloak
hmm now I would wait for it?
you should be able to go the domain and see the website
crisp bay
okay wt
I think I know what I did wrong
windows has this weird internal hosts thing
and I added the domain with my home IP to loopback it
peak cloak
yeah the site's working and it's on SSL
the SSL tho may be b/c of cf
crisp bay
maybe
peak cloak
click the lock to the left of the url
crisp bay
certificate?
peak cloak
ah
crisp bay
Let's encrypt
peak cloak
nice
peak cloak
np
hot hawk
mm android tv nas 10x faster than my old nas
vale reef
mm android tv nas 10x faster than my old nas
was your old nas a raspberry pi zero
thick minnow
Someone help me evade lol
How do I mask my ip
Without using a proxy or VPN that has already been used
Ping me or somethung please
peak cloak
Without using a proxy or VPN that has already been used
you can't without some sort of proxy or vpn
what are you trying to do
thick minnow
what are you trying to do
Evade any way possible lol
My isp says i can't change my IP unless i switch to static
Or a way to use a VPN or proxy that isn't already blacklisted
peak cloak
Evade any way possible lol
evade what?
thick minnow
evade what?
A blacklist
peak cloak
of?
peak cloak
My isp says i can't change my IP unless i switch to static
this actually you could
most ISPs use dhcp
just release the lease
and then maybe wait a bit
then get a new one
primal ice
ehh my isp holds the lease for like 8 hours and renews it like every 5 hours. so I get the same IP.
thick minnow
just release the lease
There's something about a broadband ipv4 address, which is my public IP
And my isp says they can't change it and it will not change unless i get static which is 15 more dollars a month
peak cloak
ehh my isp holds the lease for like 8 hours and renews it like every 5 hours. so...
never tried with my current isp, but with optimum they were very aggressive with it
just rebooting the router meant new ip
gloomy saffron
is there any fix for wifi going out for like 30 minutes every few hours. like bruh at&t cant manage anything
primal ice
use your own equipment for wifi
peak cloak
is there any fix for wifi going out for like 30 minutes every few hours. like br...
that's not att's problem
thats the router
which I guess is the ISPs but still
having your own is the best
gloomy saffron
switched routers 3 times 😦
thick minnow
Help
gloomy saffron
same help
peak cloak
¯_(ツ)_/¯
gloomy saffron
ima just switch to xfinity att so annoying
peak cloak
it's not att lol
peak cloak
ah
gloomy saffron
with pc
peak cloak
dsl?
gloomy saffron
yep
peak cloak
ah dsl
gloomy saffron
att doesnt serve fiber in like a vey large area. also not in a rural area either idk why its not here yet
gloomy saffron
what
primal ice
yeah
gloomy saffron
whats dociss
gloomy saffron
idk
fathom plover
data over coax
thick minnow
Why doesn't my public IP appear on ipconfig
hot hawk
Why doesn't my public IP appear on ipconfig
Ipconfig only shoes the ip it was assigned
Which is prob local if your on your own internet due to dhcp/nat
peak cloak
Why doesn't my public IP appear on ipconfig
because of NAT
you usually have one public ip that's shared by many devices on a private subnet via NAT
your computer only knows it's private ip
ipv6 is different
primal ice
unplug your router for 8 hours you should get a new IP after that.
mellow fox
Does anyone have any recommendations for good (yet bang for the buck) security orientated routers?
primal ice
pfsense - your old hardware.
low pond
They don't have Jio/Airtel, Jio and airtel are Indian based carriers.
the providers exist in India
Every country has their own providers
some providers liek Vodafone do have internationally though
but most of them are just per country basis
That'd be stupidly expensive. Roaming costs exist
It's not cheaper that way, would make it ton of times expensiver, like a LOT
raw marten
roaming prices, not the data plans
low pond
dude that's within IN, roaming charges are HUGE
thick minnow
unplug your router for 8 hours you should get a new IP after that.
Nope
low pond
Still expensiver.
raw marten
Still expensiver.
expensiver? mm english
thick minnow
We're having "Networking fundamentals" for CS class now, I feel like this will cause seizures for techies
The misuse of networking teerms in this class is * Hyperventilates * just painful
Crystal I blame you for it
tame carbon
@thick minnow wat
thick minnow
I'm blaming you for the pain
'cause wasn't it you who taught me much of what I know about networking
tame carbon
@thick minnow My teacher tried to explain CSMA/CD using a conversation between people, and then loudly screaming JAM JAM JAM
thick minnow
wow
tame carbon
Even though CSMA/CD isn't even used anymore by ethernet
its from a time when ethernet was BNC connectors and Tbase10, without switches
All computers were on the same medium
hence the need for CD
thick minnow
Ah, thanks
tame carbon
@thick minnow has your teacher even touched on OSI yet?
Learning, understanding and thinking in OSI terms makes things a lot easier
because it doesn't discriminate between cable and twisted pair, its just Layer 1
@thick minnow my networking class was quite rudamentary. It was mostly from the context of embedded development and communication techniques
tame carbon
@thick minnow Open Systems Interconnect
a standard, and conceptual idea of logical layers in networks
Layer 1 is your bits over the wire or photons through the air
Layer 2 is your link layer, here be ethernet
Layer 3 is Network Layer (IP be here)
Layer 4 is Transport Layer, here are the transport protocols like TCP and UDP
Layers 5-7 are not that interesting from a networking standpoint
Layer 7 is your application specific protocol, like say: HTTP
Layer 8 - we don't talk about
The reason its useful to think in these terms
thick minnow
Uh huh
tame carbon
is because when you are say, dealing with a TCP socket
all the stuff underneath, be it ethernet or wireless ethernet
doesn't matter
all of that is abstracted away by the layers below
@thick minnow another key point is that, layers themselves never inherit or use information from other layers
IP is not dependent on ethernet
thick minnow
Okay
tame carbon
@thick minnow probably not as prevelant
but a good example is the other way around
There are plenty of (mostly old) networking protocols for ethernet, that aren't TCP/IP
@thick minnow and this is also why NAT is such garbage
Nat sits on layer 3 and 4
It rewrites IP addresses (L3) using information from the transport protocol (portnumber) which is Layer 4
NAT breaks this abstraction
thick minnow
Uh huh Okay
proven ferry
Im not sure if this is the chat to ask this but i have a shed in my backyard abt 25 meters from the house and abt 30 from my router and i want to get wifi there a cable or powerline are no option what would be the next best thing?
peak cloak
Im not sure if this is the chat to ask this but i have a shed in my backyard abt...
P2p antanae
tame carbon
@proven ferry either cable or point-to-point wireless
cable is best solution, no bottlenecks and no funny biz
peak cloak
Finally my pr was merged, time to setup vyos bgp and tunneling this evening
tidal frost
im installing my first vm in proxmox. Since im in a VM, i tell ubuntu to nuke everything and install right? ignore any warnings it throws?
peak cloak
Yes
tidal frost
the only thing itll "nuke" is the 120gb i gave it?
peak cloak
Yes
tidal frost
thank you
hollow marlin
@waxen scroll It took me hours during a maintenance last night just fighting the strangest bugs in Junos. Honestly Ive never hated Junos at that moment in time as it was almost randomly handle traffic however it felt like
waxen scroll
just wait until you check a routing table and it says Interface A but the hardware debug says Interface B
or even better you check a routing table and it says Interface A but the hardware debug says line card 2 and 3 didnt program it
hollow marlin
It wasn't far off from what I was experiencing
tidal frost
so ive got proxmox installed. works great. ubuntu and truenas both work fine. Had to enable IOMMU that way truenas could see my new drives. required a reboot. suddenly, the system doesn't see proxmox at all. it sees all 3 drives though. when i take the new drives back out it boots fine again. what gives?
is it an issue with my raid card?
im not in raid, made sure it was disabled in bios.
BUT when i throw the drives in (hotswap bays) AFTER booting, proxmox sees them
but like, i cant pull drives every time i need to reboot
do i need to get the boot drive off the raid card? thatd be super not possible at the moment
thick minnow
Is proxy caching worth it?
I’m trying to get YouTube working with squid proxy cache. But the videos don’t play no matter what I do. I’m trying to figure out if I can blacklist the links to YouTube videos from the proxy
tame carbon
@thick minnow you can't cache HTTPS
thick minnow
Is there a way I can exclude YouTube from the caching?
tame carbon
don't cache HTTPS traffic
thick minnow
How do I know if it’s trying to cache https content? How can I turn off https caching?
tame carbon
that content is delivered over https, and should not be cached, unless you are using SSL Bumping
@thick minnow disable SSL Bumping
- You cannot cache HTTPS
- SquidProxy can cache HTTPS by means of SSL Bumping
Which means, the proxy server connects with HTTPS on your behalf, and mediates keys between your PC and the target server
this is not advised though.
@thick minnow just filter on url, anything using https shouldn't be cached
@thick minnow I see little use for HTTP Proxies these days, with all traffic being encrypted and mixed sources are generally a bad practice on webpages (serving images over HTTP, while the page was fetched with HTTPS)
cedar igloo
Any Windows admins? I am trying to create a Windows Server template with Packer (for use with Terraform). I have created an autounattend.xml file for the initial install but after installing, I am needing to generalize the image. When running sysprep with the following command: ...../sysprep.exe /generalize /oobe /shutdown, I am getting the following error:
"Not running DLLs; either the machine is in an invalid state or we couldn't update the recorded state"
"Hit failure while processing sysprep cleanup external providers"
The answer file can be found here: https://pastebin.com/26KK3n6M
thick minnow
I see. yea. I’m mainly trying to figure out ways of speeding up webpages and stuff. I already have my own DNS server which blocks ads and such. Client side hardware is not a problem since I have tons of horse power
tame carbon
@thick minnow uBlock Origin
peak cloak
I see. yea. I’m mainly trying to figure out ways of speeding up webpages and stu...
it will do very little
more annoyance than anything
tame carbon
Only use from the top of my head would be on school networks
to stop kids from viewing 18+ content
thick minnow
Yeah, that makes sense. The reason I have the DNS servers because certain clients like the Fire TV, you’re not allowed to have extensions and ad blockers and such
tame carbon
Twitch Launcher broke when I used default list on pihole
thick minnow
Yeah, I have my own set of lists
tame carbon
entire program stops working if it can't have its ads served
what kind of backwards ass world do we live in
lunar spade
Would you trust “SkyVPN” as a VPN?
lunar spade
What would be the reason?
old peak
"SkyVPN is one of the worst VPNs we''ve tested. It should be avoided at all costs. It's an untrustworthy VPN that logs your IP address and other personally-identifiable data. It also fails to unblock Netflix and it's not safe for torrenting"
source:google sent me there
lunar spade
Ok
lunar spade
Ive been using it for 2 years for bypassing school wifi
old peak
use nord man
little schooner
@lunar spade no I don't
old peak
Is it free or freemium?
freemium
but nord is a very popular pick and lots of youtubers which they make a sponsor cameo have discount cupons
lunar spade
I have no income so I cant really pay for a VPN
old peak
ok so i will find a free one then
old peak
I have no income so I cant really pay for a VPN
surfshark is a 2,50 dollars per month
which means it's pretty cheap for a premium vpn
peak cloak
Ive been using it for 2 years for bypassing school wifi
To bypass school, just make your own
Look at pivpn, really ez tool to setup wireguard
Or you could do manual wireguard
That's what I do
tame carbon
cloud VPN 
k
lean pebble
Ivacy is a good VPN allow bypass Amazon prime video restrictions and sometimes Netflix.
That's funny because amazon recommended ivacy to bypass their own restrictions because alot of customers complained that they can't use it when they traveling out side of their country.
gilded kite
does someone have experience with unraid and nextcloud? I have troubles installing it and I'm at my wits end by now...
after installing nextcloud I can't even get into the webgui. I just get a "Internal server error" page
I tried the usual, new install, reboot but nothing works
flat wagon
Ivacy is a good VPN allow bypass Amazon prime video restrictions and sometimes N...
pr sure most vpns can do that and esp the paid ones
tame carbon
that is a cloud vpn, or rather a vpn cloud, you just connect to someone else's network and route your traffic through theirs
the whole concept to me, seems utterly pointless
because with NAT
you still can't prove who it was that did X
and the cry for privacy, idk
to me, privacy is on-premise hosting
flat wagon
that is a cloud vpn, or rather a vpn cloud, you just connect to someone else's ...
ohhhh, yeah that does sound dumb LMFAO
crisp bay
ye so umm a service is bound to a port and my SSH session got terminated and it's still running..fuser is the way to kill anything on that port but what's the correct command?
peak cloak
man fuser
hollow marlin
Mmmm... 4-byte ASes
peak cloak
Mmmm... 4-byte ASes
dn42
hollow marlin
?
hollow marlin
Nice. If you have any questions let me know and I can show you in my lab
peak cloak
yeah
any uploading/downloading files is great with high bandwidth
but most of the time you don't use it
waxen scroll
Nice. If you have any questions let me know and I can show you in my lab
learning openshift
hidden socket
I havent ever bought a repeater and just wondering if this is worth the price or is there something better for the same price (planning to get around 100mbps max but might upgrade to 300+ in the future)
waxen scroll
@clear igloo dat UBNT reliability
peak cloak
the isp line is pretty good
lean pebble
ye so umm a service is bound to a port and my SSH session got terminated and it'...
fuser -k 3306/tcp - example for tcp
fuser -k 3306/udp - example for udp
clear igloo
<@!291198741862416384> dat UBNT reliability
laughs in 6500
waxen scroll
no u
crisp bay
fuser -k 3306/tcp - example for tcp
fuser -k 3306/udp - example for udp
yes that worked, thank you!
man fuser wasn't working for me tho @peak cloak
peak cloak
man fuser wasn't working for me tho <@!222482269829332992>
Anytime you don't know how to use something man brings up the manual
low pond
^ in other words, "RTFM"
lean pebble
Anytime you don't know how to use something man brings up the manual
I think better to send people to google sometimes man can be messy or broken.
I had a Linux system that man was kinda broken
hollow marlin
laughs in 6500
6500 chassis reboot....I'm already beginning to sweat
tender hazel
doesn't that take forever?
peak cloak
@hollow marlin so I have a dilemma I never had before, how exactly would I go around "combining" all these separate wireguard peer interfaces into one interface which is what I need for outbound-interface for NAT. What would I use? A bond?
tender hazel
I don't know how you do it on there, but bonding is a layer 2 thing and wireguard operates on layer 3
peak cloak
I don't know how you do it on there, but bonding is a layer 2 thing and wireguar...
don't worry about wg that's just ip transport
tender hazel
you are using those wireguard tunnels to get online?
peak cloak
what I want is to be able to bond/load-balance whatever it would be wg92 and wg93 and any additional peers I will have in the future
peak cloak
you are using those wireguard tunnels to get online?
to join the dn42 network
tender hazel
as I said that's not bonding.. load balancing is what you want
peak cloak
yeah
this is what confused me in the vyos docs
The bonding interface provides a method for aggregating multiple network interfaces into a single logical “bonded” interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed
modes provide either hot standby or load balancing services
tender hazel
yes but the bonded interface is layer 2, so you can't bond wireguard interfaces because they are layer 3
on mikrotik you accomplish that using a load balancing technique called PCC
not sure what vyos has in that regard
however if you are on dn42 you are doing BGP, and it is unusual to do that sort of load balancing with BGP
peak cloak
however if you are on dn42 you are doing BGP, and it is unusual to do that sort ...
maybe I'm doing something wrong, but I basically want to have an interface going "out" of the vyos VM that has dhcp, is nated and all that, but can also access dn42
tender hazel
I'm afraid I don't completely understand - but you don't have to bond your wireguard dn42 interfaces for that
you will be getting BGP routes from both peers over both tunnels
some will have shorter routes to some networks than others
tender hazel
so you will naturally get a form of load balancing where it will choose the peer based on which has the shorter distance
can you create some kind of "interface list" like in mikrotik?
tender hazel
it looks like "zones" would be the equivalent
if you can configure NAT to use some kind of wireguard zone as opposed to the individual wireguard interfaces you can do that
otherwise if you have to specify the interface you might have to do multiple NATs, one for each wireguard interface
the other reason why bonding would not be applicable here, even if wireguard were layer 2, is that the two tunnels are going to different places
bonding is for aggregating two layer 2 connections between the same two devices
ex. if you had two switches with only 1Gbps ports and wanted to increase the bandwidth between them, you could connect two cables, bond the ports, and then you would have a total of 2Gbps between them
peak cloak
ex. if you had two switches with only 1Gbps ports and wanted to increase the ban...
yeah, that's what I thought
tender hazel
there is a type of bonding called MLAG that works with different devices, but it is meant to solve the problem of redundancy in event of a switch failure.. for instance if you had two switches on one side (A and B) and two on the other (C and D), and you wanted to do bonding with two 1Gbps cables, one going from switch A <--> C and the other going from switch B <--> D
MLAG lets you configure bonding so that those two links are bonded, with switches A and B as an MLAG pair, configured similarly in the same place
and switches C and D also together, wherever they are, and configured similarly
tender hazel
that depends on the purpose for this NAT "interface" that VyOS wants you to make - if it is just used to get an IP to NAT from, then it might do what you want. If the NAT interface is specifying what interface the packets will actually exit from to go to the upstream router, then it may not
hollow marlin
doesn't that take forever?
Its does but I was more referring around the fact when 6500s reboot, that tends to be it. Its a common core switch where uptime of 15+ years is really common
hollow marlin
<@!462711605063450628> so I have a dilemma I never had before, how exactly would...
You have a sketch of what you are doing? If VyOS is anything like Junos you can NAT off the loopback but may not be optimal.
There is such things as L3 LAGs, but just like L2 its hashed but based on flow. Since BGP is involved there is load balancing but that is done with ECMP. All routing protocols support it
I assume you are looking at something similar to the following?
tender hazel
Its does but I was more referring around the fact when 6500s reboot, that tends ...
our most stressful time was when we were preparing to replace our core ASR 1002 with mikrotik CCR's at our colo.. we had the CCR config like 80-90% done but were not in a hurry
colo had a power outage and when power came back, the ASR reported hardware failure and didn't link up
so we had to quickly finish the CCR configuration, spent like 1.5 hours on that, then rushed down to the colo to replace it
unfortunately there was no room left and the screws in the ASR1002 were stripped when it was installed so it took like 3 hours to physically remove the ASR1002
we were down for something like 6 hours as a result
hollow marlin
@peak cloak Here is my guess at what you are doing. This is my design for some of you customers. IPsec tunnels, BGP for routes, split-tunnel, VOIP traffic NAT over loopback to peering FWs
peak cloak
yeah something like that
hollow marlin
Ill grab a snipit of the config, at least enough to contrast to VyOS
tender hazel
I've asked mikrotik before to add /31 support
they think they don't need to because /32 is better
but I think they underestimate how common /31 is in the service provider realm, with cisco and juniper etc
rocky badge
"because /32 is better" 
low pond
Idk which universe you guys live in we use /69's here
hollow marlin
but I think they underestimate how common /31 is in the service provider realm, ...
Every core link is a /31. I can't imagine wasting such publics because a vendor refuses to support /31
tender hazel
we use RFC1918 addresses for most of our core links as a result
which of course breaks traceroute if you aren't on our network
hollow marlin
You can still get responses, Ive gotten TR responses from Verizon, Spectrum that contain privates. Not a big deal but people lose their minds over it
tender hazel
yes - the local telco is a customer of ours in a few places, buying service for their customers
we had it happen once where their VPN stopped working.. they still had internet, but their VPN to the telco went down.. we were not blocking it.. the telco turned out to be blocking it with their firewall becuase it misdetected it as an attack or something
then a few years later we had another customer of theirs, same thing happened, internet was up but VPN was down.. the telco guy was insisting the problem was on our end and the traceroute not completing the last few hops was proof
low pond
Wait, why'd you actually need to add support for "/31" specifically, i taught its all a standard and it should directly work
hollow marlin
Its an unofficial standard
tender hazel
I wound up just changing their static IP from us to work around it
hollow marlin
From what Ive heard is it can be a nightmare on the code side and needs some extra magic in the ASICs
tender hazel
the issue with /31 support on linux specifically is it is accomplished by manually overriding the broadcast address
low pond
From what Ive heard is it can be a nightmare on the code side and needs some ext...
Yea tho mikrotiok does have a software updating stuff in place
tender hazel
so mikrotik would have to add a new field into the IP address window to specify the broadcast address
I see their hesitancy to do so, because that could be confusing for people who don't use /31's
hollow marlin
Its throws our smaller peers off, not many understand it
tender hazel
if you try using /31 in linux, it doesn't work unless you override the broadcast
to be the IP address of the other side of the /31
if linux handled /31 properly by default, mikrotik would not need to jump through those hoops
low pond
alright why doesnt leenux have that tho
tender hazel
I don't know
but /31 is this weird exception to the rule of how to calculate the broadcast address for a subnet
in that there is no single broadcast address for both.. I guess they don't want to have to create an exception in this case? I have no idea
or maybe they think the workaround to override the broadcast address is OK
I have no idea
waxen scroll
I use /31 a lot in enterprise
crisp bay
yeah umm I need to make my domain SSL (last time I was here, was a subdomain..), but the fact is, that I want to make a domain SSL only trough a port 2096, but not 80 and 443 yet..it's a daemon sending stuff to the webserver already
https://certbot.eff.org/lets-encrypt/ubuntufocal-other would this fit me?
peak cloak
https://certbot.eff.org/lets-encrypt/ubuntufocal-other would this fit me?
You can only get certs using the http challenge on port 80
But I think they can be used to host things on other ports
peak cloak
no
I'm still using cat5e and I'm getting gigabit lol
it's the same 8 wires
just the shielding is different
I mean as long as you get good speed there is no need
tacit mantle
why does the download drop for a bit and suddenly comeback on, its kinda annoying because it wouldve been done by now if it aint fooling around
tame carbon
thick minnow
wow
Guess it'll be useless in my country of residence
Good it doesnt get as hot here
tame carbon
@thick minnow lmao lol wat
ozone layer is fucked in some places of the world
and 122F is not a lot for electronics
hollow marlin
Until recently our AC in one of our COs would fail, both primary and backup. One time it got to ~105f and some equipment began shutting down, lost 2 QSFPs due to temps. 122 isn't a lot but for passively cooled devices I'd imagine it being a problem
waxen scroll
2 QSFPs oh no. LRs?
hollow marlin
Yeah, both were uplinks to our upstream peers
tender hazel
LOL just got a maintenance notice from our telco, they are doing upgrades affecting a few circuits
four outages of up to a minute long between June 28 and July 19
normally the windows that we get are like hours long.. not weeks
that long window is basically useless b/c how are we supposed to know if it goes down if it has anything to do with the maintenance or not?
dusky flame
if you got a 50 up/down speed from a datacenter and you are currently using about 40 mbps on rack #1. rack #2 will need to use 40 mbps too. will both rack split the speed down to 25/25 or will they both be able to use 40 mbps?
peak cloak
if you got a 50 up/down speed from a datacenter and you are currently using abou...
Split
That's how bandwidth works
dusky flame
so how do company with crucial service that need to serve thousands of their employees able to get through this bottleneck?
dusky flame
then what about mega large streaming website? million of connection streaming high quality video
peak cloak
They have cdns
And many servers
1.1.1.1 for example is not one sever
1.1.1.1 is an anycast ip
You will be routed to the closest server
It's a pretty complex system
dusky flame
then what about when my rack in the datacenter max out the bandwidth. would me maxing out the bandwidth in there affect any other people that also have servers in that datacenter?
peak cloak
No because the data center limits your link to 50mbps
dusky flame
I would assume their speed would be way about 1000 mbps right? due to the amount of people using their service
peak cloak
In data centers, its much more, depending on the size
They usually have multiple ip links
Data center internet doesn't work like residential
dusky flame
ok, I think I got a better understanding of how they handle traffic and my use on it. thanks a lot
peak cloak
The data center prob is it's own as, with their own ips
plain siren
They usually have multiple ip links
In a way it does. The DC if you use their network instead of buying through an IX uplink yourself becomes an ISP and each customer would be a "Resident"
peak cloak
In a way it does. The DC if you use their network instead of buying through an I...
yeah but the way the datacenter itself gets internet connectivity
plain siren
Its just one less link. Your House is just linked to a DC to the ISP's shit through the IX in the DC
peak cloak
the way each rack/server whatever gets connectivity is more like residential
was just trying to explain that in a DC it's not like there is one connection
that is split up
plain siren
I mean, neither is your residential offering: Multiple ISP Choices.
Now in a DC its much easier to do multihoming since getting service through multiple providers is easier administratively
That being said, if you use the DCs Network offering (as your ISP) they most likely have their link Multihomed so you get multiple ISPs packaged into that offering
old peak
why does america have limited bandwidth
peak cloak
it doesn't
plain siren
We really dont
old peak
i meant how many gigs you can use per month
clear igloo
Because greed at certain ISPs that love to impose data caps
old peak
Because greed at certain ISPs that love to impose data caps
in brazil we have a regulation for that
plain siren
Because the US is a really large data user base and when you buy IP Transit, you pay by the Gig (The ISP Does)
old peak
in brazil we have a regulation for that
it is called civil mark of the internet
plain siren
So compared to other nations, the demand is high enough to tax what is already the largest network infra in the world
peak cloak
Because the US is a really large data user base and when you buy IP Transit, you...
unless you have your own transit 
doesn't comast have a big network?
any of the big ones really
plain siren
tbh, all the Retail Level providers are quite small in comparison to the big transit providers
they just have more going on since they have to run the equipment that ties customers in instead of just routers and fiber everywhere
peak cloak
that notorious last mile
peak cloak
?
plain siren
Its like that everywhere its just US treats Internet as a Service instead of a utility
old peak
in brazil it is treated like a service too
a very very regulated one
this is why we have only 4 big isps here
plain siren
Thats more of a Utility
old peak
too much tax and too much regulation leads to this
plain siren
Utilities are heavily regulated in order to ensure equal offerings
Services are left up to the market sway
clear igloo
Buying politicians laws
plain siren
~~Buying politicians~~ laws
Literally this
plain siren
Easement Right of way is my largest cost as an ISP
clear igloo
Yup
peak cloak
oh yeah
old peak
Utilities are heavily regulated in order to ensure equal offerings
Services are ...
brazil logic:
if it's public or very essential like healthcare it is an utility
if it's private and not so essential it is a service,but for not competing with utilities it is regulated the same way as an utility
peak cloak
that counts as cabling in my book
plain siren
I also lobbied to get priority access and cheaper rates
peak cloak
leasing all the poles and such
plain siren
which was literally legalized pay offs
clear igloo
or fighting back big players who have literally been caught giving laws to big cities and having them pass it without so much as a flinch
peak cloak
yeah
lean pebble
Hey guys someone can help me fix my new fedora 34 installation ?
I installed it on new ssd 500gb and I can't boot to it.
Failed and goes to emergency mode.
edgy burrow
my d-link wireless adapter died ;-;. pihole ruined lmao
mellow fox
Hi everyone I recently got a UDM and I was able to successfully set up a guest, main,and IOT network. But I’ve ran into an interesting problem. First problem is the UDM is having a signal problem. The weird part is with my isp router I never and I mean never had a signal issue. My apartment is about 500 sqft. The second issue I’m having is my desktop will sometimes say “secured, no internet”. I have tried everything. I changed dns settings, reinstalled drivers, and much much more. Now the weird thing is sometimes I’ll get the desktop to connect and it will hover around 50-80 mbps down and 30-50 mbps up. My isp provides 200 down and 30-50 up. I don’t know what else to do!
I am talking to Ubiquiti
plain siren
https://www.reddit.com/r/networking/comments/o189rd/ubiquiti_routing_in_wonderla...
The first comment on there basically holds the same response I have
The router will have a local IP for every LAN Made in that LAN's subnet, so 192.168.1.1, 192.168.2.1 etc
And his problem is: A device on 192.168.1.0/24's subnet can access the router from 192.168.2.1
tender hazel
yeah that guy has some fundamental misunderstandings
he's freaking out over a non-problem
his problem with the port forwarding isn't what he thinks.. he is not doing hairpin NAT
hollow marlin
https://www.reddit.com/r/networking/comments/o189rd/ubiquiti_routing_in_wonderla...
"this is not how routing is supposed to work"
"I have extensive experience working directly with a large range of networking and network security vendors and their products, including: Cisco (including Meraki & Linksys), Juniper, Extreme, Check Point, Fortinet, Palo Alto, NetGear, Dell, HPE (including Aruba & 3Com), and even TACLANE. "
You think with all that "experience" he'd understand the basics of routing
However to his point, Juniper's FW stack, the processing and policies will not have the same result even with Junos's tight reliance of the loopback being the destination to all interfaces.
peak cloak
Pictures of ports would help
Seems to just be a USB drive
Not a nas
The n in nas stands for network
I don't see any ethernet
Could not be formatted
Ik in Linux you can list the USB devices
It should show a name
Device manager
Check that
formal ibex
are there any risks to port forwarding?
the reason i ask is because I want to open up a remote destop port so that I can access my pc from outside my network
tender hazel
yes, there are risks, if your PC is not updated when it comes to windows updates, there may be security vulnerabilities others could use to hack your computer, and people might be able to try brute forcing your password
I would avoid opening RDP with port forwarding if you can, VPN into your router instead, it is safer
formal ibex
would hiding the known 3389 port with some random internal port help?
I do plan on setting up a vpn in the future i just dont know if there are any good free vpn providers i can use
tender hazel
I mean using your router at home as a VPN server
you need to have a router that is capable of that
formal ibex
oh
tender hazel
support for it was removed by apple in their iphones like 4 years ago now as a result
tender hazel
if there is no firmware update, you might be able to flash it with some other firmware like openwrt to allow you to get newer features without having to get a new device
tender hazel
yes, openvpn will work
formal ibex
actually i have one more question
so with a vpn
i would just connect to that vpn and then have complete access to my local network from anywhere?
i wouldn't need to enter in my public ip to access my remote desktop just the device ip?
thick minnow
i would just connect to that vpn and then have complete access to my local netwo...
I don't think so, unless you have both devices connected to the vpn, but I'm not really sure
tender hazel
i wouldn't need to enter in my public ip to access my remote desktop just the de...
yes, that is correct
lean pebble
Anyone knows how to fix dracut-initqueue timeout ?
lean pebble
Nvrm
north lark
hi friends, how do you change from DHCP to static on debain server?
twin zealot
idk
twin zealot
hi friends, how do you change from DHCP to static on debain server?
or did you already google??
peak cloak
hi friends, how do you change from DHCP to static on debain server?
do you need static? DHCP reservation is better imo
/etc/network/interfaces
instead of auto eth0 allow-hotplug eth0 iface eth0 inet dhcp
do
iface eth0 inet static
address 192.0.2.7/24
gateway 192.0.2.254
change address and gateway of course
paper valve
make sure to service networking restart
lean pebble
I'm using fedora 34 fresh install with kvm virtualization. Using (virt-manager)
I have an issue that vm won't start I click on the play button and then it just get stuck without message.
If I check the service status I see "libcap-ng used by "/usr/sbin/libvirtd" failed due to not having CAP_SETPCAP in capng_apply"
tender hazel
trying to figure out how to configure this adtran ta5004 chassis
cosmic hinge
Hi i am having trouble setting up a dedicated pc as a server. If anyone is good at servers hit my dms please:)
peak cloak
Hi i am having trouble setting up a dedicated pc as a server. If anyone is good ...
what's the issue, just ask
also the line between server and pc is very blurry
technically anything that is hosting any service is a server
hollow marlin
trying to figure out how to configure this adtran ta5004 chassis
Do not miss the 5Ks one bit
tender hazel
I feel like I'm wandering around in the dark
sorting through 10 different manuals to find the bits and pieces I need
@hollow marlin do ONT's that don't double as residential gateways get management IPs?
I would assume so but I haven't found anything about that
hollow marlin
Yeah, ONTs that are built as RGs will have their own mgmt VLAN and interface
It been so long since I used a 5k I cannot remember most of it. We only had a few 5ks that has GPON blades, the rest had ADSL2+ blades
plain siren
<@!462711605063450628> do ONT's that don't double as residential gateways get ma...
Ideally this is ubiquitous across all platforms since thats how authentication is handled if Radius is used
tender hazel
I just can't seem to find anything about how to get these ONT's to get management IPs
these ONTs are just basic ones and don't operate as a residential gateway
so I'm just wondering if I'm looking for something that isn't there
tender hazel
I guess it only works with inband management
it took me forever to find it because it was a term I was unaware of before.. "subtended hosts"
cosmic hinge
Easiest way to launch a server with a rather old rig?
little schooner
@waxen scroll How is it that a simple feature, such as a user msg prompt to start patching, takes over 7 years to implement?? https://kace.uservoice.com/forums/82699-sma-k1000/suggestions/3987437-allow-a-user-to-patch-on-demand
also it took Quest 6 months to make my bug report considered a product defect.
It probably wont be fixed until 2029 at this right
I dont understand how they could make features that are broken out of the box
Yet no one ever reported them!
I bet they didnt even test it in the first place
waxen scroll
Why would a user go ask if there's patches? The computer should tell them they need to patch now with a timer
That's how my work does it. You have 12hr before the computer auto reboots or you can reboot any time before
frigid pine
I have installed FreeRadius in pfsense. But I keep getting this error while doing radtest.
(0) Error parsing "stdin": Failed resolving "pfSense.xyz" to IPv4 address: Name does not resolve
I have disabled DNS resolver and forwarder but no use.
radtest ozair ozair 127.0.0.1:1812 0 testing123
cedar igloo
I am trying to configure a VyOS router with Ansible, but I cannot get the playbook to run.
---
- name: Server Setup and Configuration
network_os: vyos.vyos
connection: ansible.netcommon.network_cli
hosts: all
become: true
become_method: sudo
tasks:
- name: Initial Setup
include_tasks: tasks/initial/main.yml
# - name: Security Setup
# include_tasks: tasks/security/main.yml
- name: Playbook Cleanup
include_tasks: tasks/cleanup/main.yml
Error:
ERROR! 'network_os' is not a valid attribute for a Play
Please can someone suggest how to make this work?
little schooner
Why would a user go ask if there's patches? The computer should tell them they n...
I agree with you, though it is an example of how long the wait is to get anything fixed or added by Quest. they take forever to do anything
I wonder if they put the organization I work for on the watchlist or something because of the number of tickets I opened that have geninue real problems they overlooked in their appliance. One of them was as simple as Device Inventory search not functioning in their SDA appliance. Typing a search query and hitting enter clears the entire list of devices, even if it matches device names.
basic stuff they could of found out by actual testing but this went unnoticed for years
almost as if the other admins using this appliance too aren't fully using what they paying for or know it wasn't worth the time to create a service request for knowing Quests track record
snow lance
is there any way to get the mac address of a device on lan without access to the router settings or touching the pc itself?
azure lion
Ok so i have an issue with my current wifi. ill describe my setup
I have a ISP Modem+Router 2-in-1 (which I consider trash). It used to frequently drop my devices even when working right next to it. All the devices used to get disconnected at the same time for about a min. There was a big issue with the 2.4GHz connection. I have a plan of 200mbps but on 2.4G band, I only used to get about 20-30 at the most 50mbps. The 5GHz band worked flawlessly other than the obvious shorter range. This was really for WorkFromHome. So I disabled both the wireless bands on the ISP Modem+Router and attached my ASUS router as an access point as it was just lying around. The range and strength improved slightly but the same issues still prevailed. I used to get disconnected on devices and 2.4G band was still weird and sus.
Now I have an option of making selective LAN ports on the ISP device run in "bridge" mode rather than "route" mode. From what I know, I will have to put my ASUS router back into Router mode and connect the LAN to the WAN (rather than LAN to LAN) for this, and this may probably solve any issues arising from a double NAT situation.
Should I do anything else to improve my WiFi?
hollow marlin
If all 2.4 devices are disconnecting that the same time then typically its due to interference. Simply a microwave running can knock it down. If there is a ton of congestion in your area with 2.4, the speeds are not out of the normal for expected speeds.
azure lion
The microwave is far enough I guess. But I have a second Internet connection and router around 20-25 feet away from this one we are talking about.
And I get disconnected from both the bands
hollow marlin
Does the SSID for both bands disappear during this time for all devices?
azure lion
the SSID doesn’t necessarily disappear but I sometimes have to wait for a while to reconnect. It tries to connect but fails
frigid kernel
what is the endianess of microsoft windows subsytem for linux (wsl)? is it dependant on the host machine?
terse anchor
Hey, lmk if this is a dumb question, I've got a wap that I really like (nighthawk r9000 X10) and I want to put it in an upstairs hall cabinet but there's no outlets nearby and it isn't Poe capable. I'm looking for a Poe to ac converter to power my router. The cat 6 ethernet cable to that closet would be about 60 feet.
I've never messed with Poe and just got started with making my own ethernet cables. I know there are Poe access points as well and would be open to that but I'd rather just have the one access point in this perfect location. Feel free to recommend what you think might work for me
peak cloak
Hey, lmk if this is a dumb question, I've got a wap that I really like (nighthaw...
I have an EAP225 for me AP
the only one in the house
you can go for the better models if you want
terse anchor
I may have to go for something like that. I'll take a second look and see if I can pigtail an outlet off of something in the attic since my search hasn't really come up with much in the way of plug/play solutions
hollow marlin
@tame carbon Just got in a Mist AP43 for the homelab from work to test some things out. A $1600 AP means its better right? 
thick minnow
anyone experienced with plex
azure lion
the SSID doesn’t necessarily disappear but I sometimes have to wait for a while ...
help 
spare cypress
anyone experienced with plex
What do you need help with?
thick minnow
Thanks for the reply but managed to fix it now. 😊
spare cypress
Thanks for the reply but managed to fix it now. 😊
Glad to hear that man,
I've made some wacky setups work using Plex and Kodi 😜
heady lynx
i have a NAS and i want to know how to install all types of programs to it as i con only install sertan programs
also unrelated i have server for data and because where it is i cant rig a monitor up so I normal remote access it but i now cant it turns on but i cant remote it
which one you confused with
so i have a NAS
the NAS dosent have one
the only way i can accsess it is throw the online panel
its a buffalo NAS
i can only install software that use an older installer
to the NAS
and you you have anythink for the other question
the remote accsess to the server
its only just stoped me doing it it always worked befor
problem i cant get the devices IP
i probs should just try use a montitor and not remote accsess its behind a tv and a big tv stand
not talking abt the NAS now
i went to the other queshtion this is a dell server i am talking about
well that will be fun i can read and write to it
but just cant accsess and i need to
so that will be a fun few hours
remotly
no
its on site but i cant accsess it as its behind a heavy cabbet
tv cabnet*
lean pebble
You can read and write to it but "can't access" to it?
So how you can read and write to it?
heady lynx
my nas and my server
but
in the network
the one there is my PC normay the server is here and i can right click and remote accsess
lean pebble
I sometimes use Hosts file for pointing my backup network drive the IP address
I never used wins
I finally finished configuring my truenas server and transferred it downstairs for plex and backups
thick minnow
Hey so, Can I install something like Jellyfin onto a regular Linux desktop and then just open up a port to it in the firewall to access it, right?
heady lynx
i am going to try use my swich box to kick it off the network and let it rejoin it
found fault i think
its painfull
thick minnow
Thanks
low pond
crystal:
Someone in a another small tech server showed they got a new Ubiquitti switch
i was like ew why ubi, heard of mikrotik or similar
and they be like:
my whole network is ubiqutitu
so might as well be locked into their system
🤣
whenever i see ubiiquiti i cringeeee
clear igloo
why, because someone doesn't use YOUR platform of choice?
frigid pine
i have a NAS and i want to know how to install all types of programs to it as i ...
Prolly your NAS is old and the apps you are trying to install aren't supported.
hook up a monitor and check if RDP service is actually running. Try restarting it. Sometimes windows does weird kind of stuff.
heady lynx
ty
verbal charm
I stick to Pilot chat mostly and come below when I see a train wreck happening.
low pond
Heh true.
waxen scroll
why, because someone doesn't use YOUR platform of choice?
I get mad when I see mikrotik gui screenshots
clear igloo
lol
waxen scroll
I can appreciate why that guy with other ubnt wants more ubnt. Especially if it's that cloud stuff
frigid pine
I get mad when I see mikrotik gui screenshots
I get mad when I see Mikrotik CLI screenshots 😛
waxen scroll
I don't think I've seen that yet
rocky badge
I can appreciate why that guy with other ubnt wants more ubnt. Especially if it'...
I’m starting to simplify my home network
Since I’m gonna move out of the house next year
So if everything is under one dashboard and set and forget 😍
frigid pine
I don't think I've seen that yet
sneak peak.
low pond
that's mikrotik shell?
frigid pine
yes
low pond
that looks interesting
frigid pine
it is
zenith inlet
Im trying to port foward but I cant figure it out
most yt vids I find dont explain clear enough
unreal terrace
Might be a bit far fetched but can I set up a VPN connection to my home with a standard router from the ISP?
Like using a pc that is always on?
peak cloak
Might be a bit far fetched but can I set up a VPN connection to my home with a s...
With your standard isp router, it prob won't have such a feature,however is you have a spare pc or something to run a wireguard or ovpn server on you could make that work just as well
That's what I do, I have a wireguard server in a vm
Pivpn makes wireguard setup really easy
crisp bay
Anyone here familliar with Pterodactyl tool?
peak cloak
Can it run on linux too?
Yes ofc
I run the server on linux
It has like first class Linux support
crisp bay
Anyone here familliar with Pterodactyl tool?
trying to access the Minecraft server using docker's IP and home server's IP and neither of them works..
peak cloak
very good, is there some kinda guide somewhere ?
Pivpn website
unreal terrace
or you can voice call me and run thru the steps or do it for me?
peak cloak
Not really sorry
unreal terrace
dont have much knowledge about linux, i know just enough how to install redbot and how to update it, lol
but thanks
dull mirage
Any tips to protect ip from ddos/dos ? through domain in cloudflare or something
crisp bay
it does not protect it against DDoS attacks. Use a proxy such as sslh
dull mirage
huh?
peak cloak
it does not protect it against DDoS attacks. Use a proxy such as sslh
Wut lol
crisp bay
yea I use sslh for forwarding an IP and port
dull mirage
Something free xd
crisp bay
yup
I got DDoSed trough a domain, not subdomain
that's why I don't trust CF for DDoS protection tho
peak cloak
I got DDoSed trough a domain, not subdomain
Doesn't matter
peak cloak
that's why I don't trust CF for DDoS protection tho
You set something up wrong then
crisp bay
yeah probably did
peak cloak
Cf is like the most trusted service
crisp bay
agree
I just bought the cheapest VPS and put a proxy on it (sslh) and forwarded an IP
and most VPS providers has some sort of DDoS mitigation tho
crisp bay
Any tips to protect ip from ddos/dos ? through domain in cloudflare or something
if you can, use Cloudflare for it tho
maybe I really did set it up wrong
peak cloak
Doing more research
Sslh is just ssh
Kinda
What I would reccomend is instead setup a wireguard tunnel
Between the vps and home
crisp bay
DAEMON_OPTS="--user sslh --listen 0.0.0.0:25590 --anyprot home IP:25590 --pidfile /var/run/sslh/sslh.pid"
that's my forward basically
or one of them
cosmic hinge
Hello everyone. I need help with setting up arma 3 server from a dedicated server. If anyone knows how to do that. Please hit my dms. I am pretty far into the setup. Just need help with connecting to filezilla properly and setting up server launcher
crisp bay
are you connecting to server trough filezilla with sftp?
zenith inlet
xfinity
cosmic hinge
are you connecting to server trough filezilla with sftp?
I am connecting through ftp
haughty ocean
Hypixel has introduced cludflare to their servers (recent DDOS attacks) and it always gives me an error when i go to their website. Could my VPN be interfering with that?
low pond
what error does it give
jovial oriole
I hate CGNAT
low pond
I love CGnat
jovial oriole
Yup. Got a Static IP because of it
How do I help someone check?
Yup. Another headache. My ISP has all IPv6 hardware in place but not software, so the next best thing was Static IP
Grabbed
That is the easiest for most
In CMD?
How do i check this?
Same here
Am paying for a WAN IP
so i run this in cmd?
zenith inlet
wth is that. I dont know anything about that. I just need to now how to port foward
jovial oriole
How do I change my router's hostname? It's this crazy thing
jovial oriole
wth is that. I dont know anything about that. I just need to now how to port fow...
First check if u r eligible m8
zenith inlet
First check if u r eligible m8
and how do I do that?
jovial oriole
run this in cmd, share screenshot
zenith inlet
got it
jovial oriole
Press windows key, type cmd, press enter, command prompt opens
type tracert 1.1.1.1 and press enter
jovial oriole
And then Windows+Shift+S for screenshot
zenith inlet
aight
Same problem from before
im going to act like ik what your talking about
thats not good 
could it because im using wireless on my pc not ethernet?
Its my router and my pc if thats what you mean
I have multiple wifi extensions throughout my house
I saw something about that on yt when I first tried
could be something with that
exactly what I heard!
low pond
just run 400Gbps QSFP fiber shit to every wall
jovial oriole
But what devices do you have that can use it?
low pond
400gbit??? :P
zenith inlet
so im guessing I cant hostmy server? is there a way for my friend to connect without port fowarding??
low pond
over a longer area, covering a "park" or open area with wifi seems like the right thing to do
zenith inlet
!
low pond
getting like physcial connections everywhere could be a bit hard