networking

[clever sigil]

I'm sort of inbetween IT and SWE

I don't really know hardware though. Don't follow it

[peak cloak]

what I would do is get some dedicated router machine/appliance, then get something for NAS. Having everything on same machine is a mess.

Can run truenas on nas machine

and then whatever works on router

[hot hawk]

well id prob just recommend a used nuc or somthin if u need x86 or a mid to high end soc

idk about how those device will preform as a router tho

[clever sigil]

my problem with nucs is id like to be able to plug actual nics into it

just want something small /lower power that can has two pci-e slots and integrated gfx really

[hot hawk]

prob a used OptiPlex r somthin

usually comes with 1-2 pci slots

[clever sigil]

would need to be pci-e

[hot hawk]

pretty sure most modern ones are pci-e autho double check

most likely they will be like gen 3 r older tho if used

[clever sigil]

can gen 3 handle 10g?

[hot hawk]

ig?

[lunar hemlock]

Guys do u know if its better to have a wifi card or intergrated wifi

[spare ledge]

laptop or desktop?

[cobalt obsidian]

i want to make a vpn server. how would i do that? do i need a service like openvpn or can i run it on a machine thats allways connected to the internet?

[lunar hemlock]

On desktop

for a motherbord on a pc i want to build

[spare ledge]

if integrated is intel wifi then that's good enough

[lunar hemlock]

It would be b450m pro carbon gaming

[spare ledge]

Ye that's enough, but why do you even want wifi on desktop? Just wire it up

[lunar hemlock]

I dont have ethernet im on first floor

is there a different way u could connect it

[spare ledge]

yes, powerline ethernet

[lunar hemlock]

Oh does that wirelessly connect the ethernet to a hub and then u have ethernet for your pc

[peak cloak]

openvpn, wireguard are all software you can run

[cobalt obsidian]

ok 👍

[peak cloak]

I have a vpn server at home to connect home from anywhere, I use wireguard

technically with wireguard there is no concept of server/client

just peers

but generally the "server" is the one with a port open

[spare ledge]

it will distribute your internet over your electricity network, then on the other side another adapter will receive it

[lunar hemlock]

Nice is this the fastest connection u can get or is this the fastest

[peak cloak]

to wifi? what?

to internet it depends

[lunar hemlock]

Is ethernet the fastest

[peak cloak]

yes

powerline can suck

[lunar hemlock]

K thx could you recommend me oje pls

[lunar hemlock]

no but like

[peak cloak]

powerline or ethernet?

[spare ledge]

powerline will still beat any wifi

[lunar hemlock]

i want ethernet cause its quickest

[peak cloak]

my friend had powerline and it sucked, got worse than wifi

[lunar hemlock]

by my ethernet is downstairs only

so how can i wirelessly get the ethernet im so noob

[peak cloak]

it all depends on line quality, electrical noise, power usage, etc.

[spare ledge]

did he plug the thing direct to wall? or the plug is GFCI?

[peak cloak]

you can't, then it's not direct ethernet

[peak cloak]

idk, I'd assume so

[lunar hemlock]

Oh is that powerline

[spare ledge]

ye I learned those hard way

[civic zealot]

hi

[lunar hemlock]

hi

[peak cloak]

there are wireless bridges, but then it becomes ethernet -> wifi -> ethernet. You're still bottlenecked by wifi

[lunar hemlock]

E

[peak cloak]

it's no longer ethernet

[lunar hemlock]

ethernet is fastest

whats next fastest

without needing a physical cable

[peak cloak]

depends

[lunar hemlock]

Wdym

[peak cloak]

everything depends

there is no next-fastest

[lunar hemlock]

But what is fast

[peak cloak]

ethernet is the best, everything else is compromise

[lunar hemlock]

U can only get ethernet by anphysical cable right

[peak cloak]

yes...

[lunar hemlock]

Whats a router

[peak cloak]

routes packets between 2 different networks

[lunar hemlock]

On google it says you can get ethernet via a powerline adapter and get the ethernet cable

[peak cloak]

still powerline

limited by powerline speeds

ethernet -> powerline -> ethernet

[lunar hemlock]

E

i swear its same thing idek

[hollow marlin]

@waxen scroll @clear igloo Finished up the studies and lab for NG-MVPNs for my JNCIE-SP. RIP the engineers that have to deal with it in production. Its not terribly difficult but seems like it can be a management nightmare

[meager ginkgo]

MoCa

Ethernet over your cable TV jacks in the house

[peak cloak]

I always forget about moca

but moca is also pretty reliable

[meager ginkgo]

You can get 2.5gig over it

[peak cloak]

much better than wifi or powerline

[meager ginkgo]

yep

It's definitely more advanced setup but it will give you 2500mbps if you get a 2.5 adapter

[peak cloak]

idk how moca interacts with spliters on the coax network tho

[meager ginkgo]

You have to put a filter on your incoming cable line (if it's hooked up)

[peak cloak]

yeah ik that

but splitters wise

[meager ginkgo]

splitters it should work aslong as the splitters can utilize moca

It's a certain MHz range I think

[spare ledge]

I totally forgot about moca, it's way better than powerline

Just my room doesn't have moca :/

[meager ginkgo]

You don't have a cable TV jack?

[lunar hemlock]

Oh moca

What is that

[peak cloak]

I don't

[spare ledge]

not in my room, just living room

[peak cloak]

I ran ethernet everywhere tho

[meager ginkgo]

Weird most houses I've been in have coax everywhere

[spare ledge]

My house is like 80s

[meager ginkgo]

Ethernet over your cable TV/internet lines.

I've been in a early 90s house and it has it

[spare ledge]

MoCA = Multimedia over Coax Alliance

Bad name good acronym

[lunar hemlock]

K thanks

[spare ledge]

every room?

[meager ginkgo]

do lots of research first and make sure it will work before changing anything

[spare ledge]

I guess we've been scammed

[meager ginkgo]

Yep.

[peak cloak]

I have it in a lot of rooms, just not mine

[spare ledge]

now this is sadge

[peak cloak]

idc

I have ethernet

[meager ginkgo]

I have Ethernet everywhere so IDC either

[peak cloak]

gave myself 2 ports

I needed to hack it together tho

[lunar hemlock]

Do u have ethernet

Via the physical cables

[meager ginkgo]

I need to buy a new bracket

[peak cloak]

there's only 2 lines already there from basement, so on one side of the house it goes to like the printer/office area where it goes to switch and all the printers and my brother's PC. On the other side, it goes up to my room, but I moved it so it goes to like the HVAC cavity and there's a POE powered switch which provides it to my room, and some other rooms

[rocky badge]

I wish I did a 4 port wall plate for my room

I want 2 more CAT6 runs

[meager ginkgo]

I only have one CAT6a run at the moment in all the locations in the house lol

[rocky badge]

My room only has 1 CAT6 and an OM3 MM fiber

[meager ginkgo]

Using switches for now

[rocky badge]

@clear igloo

[clear igloo]

Just a bit of data? 😛

[rocky badge]

ye

and the IP

[clear igloo]

CG-NAT 😦

[rocky badge]

I purposefully did it lol

[clear igloo]

No, wait, yes

[rocky badge]

100.89 should be CG NAT

[clear igloo]

Yup, 64 through 127

[rocky badge]

Lol

[wanton cypress]

Anybody know how to fix no internet in a promox vm

[sacred ocean]

check dns server configuration, I had that issue when I was using proxmox

[wanton cypress]

how do i do that

[sacred ocean]

check if the dns server is correct in the vm first.

[wanton cypress]

where would that be in hardware

[sacred ocean]

it could be something else like a missing driver if you're using virt-io or something

[sacred ocean]

check it inside the vm

[wanton cypress]

ok

if it si a missing driver how would I install it in proxmox

@clear igloo How would i get the drivers

[peak cloak]

what adapter are you using

under hardware

there's different types

[wanton cypress]

I am using Realtek

[peak cloak]

does windows see the network adapter

[wanton cypress]

it gives my the yellow triangle error

like in the vm

[peak cloak]

but to confirm, does it see the adapter

[wanton cypress]

yes

[peak cloak]

what's your proxmox network config

cat /etc/network/interfaces

[wanton cypress]

should i type that into the shell

[peak cloak]

yes

[peak cloak]

looks like default config

don't need to black that out btw

those are just internal ips

[wanton cypress]

it is an ip

[peak cloak]

so ?

[wanton cypress]

somebody could get access to that

[peak cloak]

no

it's internal private

[wanton cypress]

oh ok

[peak cloak]

not routable over internet

but anyway

seems like default config

what error does windows give exactly?

[wanton cypress]

this

the yellow triangle

[peak cloak]

doesn't tell me anything

there's specific errors, I think it tells you when you try windows network troubleshooter

[wanton cypress]

all it tells me is it can't find an ip

[peak cloak]

hmm, can't get IP

what does your network setup looks like

outside proxmox

[wanton cypress]

it was working fine until i installed truenas i think

but idk

The error is

[peak cloak]

type in windows ipconfig /all

[wanton cypress]

it gives me this

no default gateway

[peak cloak]

hmm, try

ipconfig /release
then
ipconfig /renew

if that doesn't work it's not an issue in windows I think

[wanton cypress]

that did not work

[peak cloak]

ok, again what does your whole network look like

[peak cloak]

what does your network look like

like what's plugged into what, etc.

[wanton cypress]

my pc is plugged into my router and same with my server

[peak cloak]

hmm

idk

[wanton cypress]

my server works fine getting to proxmox

just vm's don't work

so you don't know

[peak cloak]

no, sounds like something deeper is at play

or just something really dumb

[wanton cypress]

when I router truenas I had to route it threw a new ip but let me see if truenas works

if truenas does work then I just have to route truenas to a different ip

So truenas works

so i have to route it diffrently

[wanton cypress]

@peak cloak I fixed the no internet thing

it was truenas being weird in proxmox

[tall pagoda]

Does anyone know a good DOCSIS3.1 modem?

My cable provider just announced that I may use a own modem that is EURODOCSIS3.1 compatible

[twin zealot]

lmao, i hear a dutchie in the chat

[tall pagoda]

Yeah, Liberty Global have released their connectbox only restriction

[prime timber]

why is it when i update a game on pc it kills my internet to the point where nothing else on my pc will load

wont load webpages, etc at all

[tall pagoda]

Because gaming companies set priority to high so you will play the game asap

[waxen saddle]

Usually game updates, especially with vendor launchers (such as Steam) allow you to set bandwidth limits.

[plush valley]

Is it normal for ubiquity to be out of stock for what seems like 2 months now?

[unborn sluice]

Guess it's not ubiquitous

[clear igloo]

supply shortages would like a word with you 🙂

Some vendors have lead times of 400+ days for some equipment so 2 months isn't bad by comparison. It sucks but they're (Ubiquiti) probably selling as fast as they can get it in too

[meager ginkgo]

My recommendation would be to join their discord server for stock alerts

That's how I snagged 2 * U6-pros

[sturdy shadow]

They have a discord?

[meager ginkgo]

Yep.

[sturdy shadow]

Never knew. Need to verify my phone number but thanks for the info

[rocky badge]

@clear igloo

👀 AX AP

[clear igloo]

Nice!

[rocky badge]

I wonder where it is

[clear igloo]

Now give me a 2.4GHz device that'll use it 😛

[rocky badge]

Wait what the fuck

How does this know what the AP name is

bruh

[wary rover]

Hey everyone, so I have a issue with my ethernet driver. For some reason I just installed Windows 10 back on my computer a couple days ago with a cleaning install but for some reason my internet keeps dropping and it won't connect even though my ethernet cable is connected

I tried installing the driver on the manufacturer's website. It uses an Intel driver. The motherboard is a ROG strix B550E

The issue is it's having the same issue. It will say no internet but yet it's connected and the Wi-Fi works and every time I go to try and disable or uninstall the device and device manager device manager freezes.

After doing some troubleshooting, I'm pretty sure it's my ethernet driver rather than the cable as I've used that same cable on another system and it works just fine. Any idea? Because I don't want to reinstall the operating system, but it seems with a corrupt ethernet controller and the inability to even remove it without device manager crashing, I may not have a choice

[glass talon]

Have you tried unplugging and replugging in the cable when it disconnects? I've been having a problem with mine where that's the only solution when it happens, thinking it's also a driver or hardware issue since I've tried multiple cables

[wary rover]

As I've said before I used the cable on my laptop and it works fine. So cable ain't the issue

I believe it's a either driver issue or OS issue.

I restarted my PC and Ethernet works for about 1 mins then drops and says again no internet yet it detected the connection is there still

[glass talon]

ah doesn't sound the same as my issue then... mine only happens randomly maybe a few times a week

[little schooner]

I saw this as a reddit post. dang over a year!!! even for enterprise gear by Cisco

[clear igloo]

Yah, but other models were like 15 days 😄

[wary rover]

Okay, so I tried using a third party driver remover for the networking ethernet adapter and even the third party uninstall the driver

Somehow Windows 10 operating system won't allow the driver to be removed, which is strange because it should be easily uninstallable

And it's strange because this is a clean install

[little schooner]

try to uninstall it from safe mode. no third party drivers are allowed to load in that mode.

[wary rover]

What do you mean it's work before?? And it works for other drivers

I decided to test it with my Bluetooth driver which I can easily put back on and it uninstalled it in two seconds but every time I get to the network ethernet controller it won't uninstall it

I'll try from safe mode but I doubt it will make a difference

[wary rover]

What seems like I may need to do a clean install again. When I tried it clicking on startup settings to go to safe mode. It just went to a black screen and stayed there.

So I tried using msconfig to force the system into safe mode and now it's a black screen and it won't post lmao

[wary rover]

Thank you for the advice. Although device manager did freeze for a very long time, strangely it finally removed it. And I decided to get the driver off of Intel's website directly rather than asus's

[wary rover]

Welp about 15 minutes and it went right after to going back to no internet

I'm at a loss

[hot hawk]

ok am noob at setting up nextcloud, im able to get the apache server running and access the Apache2 Ubuntu Default Page, but im unable to access the webpage for nextcloud

is there any where to see logs r somthin

[fringe crow]

Hey Techies, I have a question that has been stumping me for the past 2 days. I host a gaming server. One of the scripts I am working on is a in game tablet. Now, it uses iframes to display what we need. However, I can not get it to display 2 sites that are most important. One being our gaming website which is through wordpress, the other is our cad which is localhosted php. How can I get them to come up?

[shell bear]

I spent 4h on the phone with my isp company because my internet speed was slow (20mbs) supose to be getting close to 1gb. They said it would get better but it only got worse how am I suppose to any thing with this speeds

[plain siren]

Coax, Fiber?

[hot hawk]

0 ms ping

[meager ginkgo]

better ping than me 😂

[shell bear]

coax

[plain siren]

Do you live in a house or apt/multi-family living unit?

[shell bear]

house

[plain siren]

Do you have that network box in your back yard?

The one that pops out the ground? Usually thats the one that ties in the street you are on (your neighbors)

I was gonna say go check and look to see if its in potentially shit condition

Coax can be problematic if the connection isnt well made. You might wanna also check the back of your modem to see if its fully plugged in and screwed on

[shell bear]

I think it's the modem it's problematic I'm going to have them send me out a new one it will be the 3 time getting it replaced

[south blade]

Windows 11 firewall, I think I'm locked down

I'm trying to get to port 9512 from my phone, but I'm not seeing it showing up in PingTools on my phone

CMD shows that port here, but 0.0.0.0 just means it itself can see it, no?

I don't see it showing up as 192.168.1.104:9512 that it's assigned to.

[hot hawk]

does nextcloud not support php 8.1.2?

[plain siren]

PHP 7 IIRC

[hot hawk]

says php 8.0 is recommended

ok using php 8.0.15

and still cant get into the web gui

:/

[spare ledge]

Just use nextcloud docker man

[plain siren]

^ this tbh

[hot hawk]

:/

guess ill try but my hardware is an android tv so e

[plain siren]

That you are running this on?

[spare ledge]

Doesn't matter though? With ssh and any package manager you can install docker (and I assume in this case, for arm)

[hot hawk]

?

[plain siren]

You are running this on an Android TV? The nextcloud?

[hot hawk]

termux

[hot hawk]

trying

xd

[plain siren]

Oh lord no wonder

What kind of Android TV? Amlogic or Rockchip based

[hot hawk]

Rockchip

i think

[plain siren]

3399?

[hot hawk]

uhh lemme check rq

rk 3066

[plain siren]

Noo not even a decent one

[hot hawk]

xd

u see for the price of 0$ i cant rlly complain atm

got a jellyfin server and a ftp server working

[plain siren]

You would prob do better flashing it with linux

[spare ledge]

^

[plain siren]

Do you know the model # on it?

[hot hawk]

ive already looked into it

too obscure

[plain siren]

Which one

[hot hawk]

x88 pro

x88pro.p2.0.6256.d4 (rk3328_box)

[plain siren]

yeah its doable

Gotta find the Serial Port Pins in the thing

[hot hawk]

berh

u got instructions

smh i need to get some custom pinouts r somthin for it then

[plain siren]

Well you open it and take a pic

or just buy an ARM SBC and make your life easier.
Or it may have an SD Card inside it

[hot hawk]

maybe if i find it for cheap

or some used nuc

[plain siren]

Like one of these

[hot hawk]

https://www.youtube.com/watch?v=X-_OQAVSKmk

if u cant find the serial on this thing i doubt mines has one

[plain siren]

Found it

[hot hawk]

o

u got instructions for wut i would do next e?

just flash a custom firmware?

[plain siren]

https://www.amazon.com/FEANTEEK-TTL232R-Raspberry-Serial-Windows/dp/B08HLSS5T4/
RX (Green) <> TX (On X99)
TX (White) <> RX (On X99)
GND (Black) <> GND (On X99)

[hot hawk]

kk

how do i flash it tho

[plain siren]

https://www.amazon.com/Electronics123-SparkFun-Serial-Basic-Breakout/dp/B07MLXS877/ Or one of these

[hot hawk]

e

[plain siren]

Use RKBatchTool

[hot hawk]

a

wait what firmware would i flash tho

[static solstice]

Boop, joined this discord and already see some flashing talk

Feels at home.

[hot hawk]

yessir

[plain siren]

Good question

[hot hawk]

e

i mean if i knew what to flash id prob do it

doesnt seem to hard xd

[plain siren]

Ohhhhhhhh it can be

Rockchip is kinda annoying to toy with but the proc's are beasts

[hot hawk]

i flashed a few phones so i generally know what im doin i think

come to think of it

prob should be using a spare phone

prob faster autho lack of usb ports

[plain siren]

For what

[hot hawk]

to host my stuff instead of an android tv

[plain siren]

Oh god no

[hot hawk]

y not

its prob faster e

if i use a s9 r somthin

[static solstice]

Knox is not gonna be fun

And flashing with Odin

[hot hawk]

o yea

i forgot all my samsung phones cant do flashing

because f u at&t and tmobile

us models dumb

which leaves me with some mid range to low end lg and lte phones r somthin"

[hot hawk]

i mean i dont care about knox cuz spare and ive flashed with odin e

well

docker anit playing nice

wish i could flash my tmobile gateway with linux r somthin

think it has a snapdragon855 r somthin to support 5g

😔

[static solstice]

Ehh not sure.
Could be something else dedicated.

[hot hawk]

i have the nokia gateway (tmobile version)

the reg nokia gateway is basically a 855 and a ethernet switch strapped together

sooo

even then its still faster than a android tv prob

[tidal frost]

would it be possible to setup trunas in a container such as docker within windows? Or should i stop being a cheap ass and finally upgrade my server so i can just use proxmox as the bare metal host for network storage

[hot hawk]

Cheap ass for the win

I'm using an android tv as my server

Where there's a will, there's a way

[static solstice]

have you considered getting a raspberry pi

[hot hawk]

Yes

[tidal frost]

Guess its time to learn docker then. Id rather it be on my server so i dont have to fight with migrating it later, but my server only has the power to do 1 thing at a time rn and without the downloads i have no need for the nas lul

[hot hawk]

Maybe if I use my jellyfin server more I might get a better device

then again I don't use it cuz its slow af

[slow pivot]

I am not sure I would run TrueNas in a docker container

[unborn sluice]

i won't even run my nas on a regular vm

[slow pivot]

I have, with both virtualized and pass-through disks. Both worked well enough for a light load.

[unborn sluice]

and how light is that

cause my heavy load is probably light for you

😆

[snow lance]

got new cable now @peak cloak and get this

doesnt go as high as it used to on write doe testing atm

and its not near the power cable at all atm

[peak cloak]

¯_(ツ)_/¯

[slow pivot]

Nah, just some plex and file access.

[unborn sluice]

yup sounds decent to me

[analog ice]

Anyone have experience with PXE server booting and Windows Deployment Services? I’m having a really odd issue where it seems like WDS isn’t recognizing the machine I’m trying to image, but I’ve imaged the exact same model for about 30 of these laptops. Same network, same server, only having the issue with this specific machine.

[thick minnow]

Never used wds i just use clonezilla as far of deployment you can sysprep the images before you use clonezilla to make image, so you can deploy it on more machines easily.

Other imaging software that works over pxe can potentially do the same, clonezilla is very easy to use tho

[worldly sinew]

only the best speeds from my ethernet connection (this is a 100Mbps subscription)

[worldly sinew]

just checked for myself
4.2Mbps on 5G wifi
1.01Mbps on ethernet

why would this happen?

[autumn bay]

Trash ISP

For my ISP when i search internet speed test it automatically improves

[hot hawk]

@plain siren progress has been made

[plain siren]

Oh lord

[hot hawk]

they said to use docker

[plain siren]

Are you still doing this on a PHONE

[hot hawk]

no the TV

[plain siren]

Huh Docker would make sense why its easier

[hot hawk]

and we are in

[plain siren]

It has the architecture in a nice little linux os container needed for everything so you dont have to fuck with dependencies....

Lol Android is a Container Host OS Now

[hot hawk]

now i gotta point it to my harddrive and then set up a cloudflared tunnel

oh lordy its slow

the issue was that the apache port was changed to 8080

but i didnt change nextcloud's port

[opal flower]

Can any recommend a simple solution for parental controls. Current using a UDM with a access point and a RPI for pihole. Would like webfilters and schedule by device

[waxen scroll]

https://firewalla.com/products/firewalla-purple maybe that if you want an all in one?

never used it but saw it this week, looks interesting

[peak cloak]

$320

from my student POV, a bit pricey

[lunar hemlock]

Does anyone know a good wifi card

That i could buy

[opal flower]

can you run firewalla on your own hardware?

[peak cloak]

just looked into it more, doesn't even have local webui

what's with this stupid trend

[peak cloak]

doesn't seems like it, from my pov it has the right idea, bad implementation

[meager ginkgo]

What would be a good router under $500 for 2gig fiber

[peak cloak]

that's so stupid

[clear igloo]

It does

[opal flower]

pricey for the hardware you get with it

[peak cloak]

not local https://help.firewalla.com/hc/en-us/articles/360052779253-The-Firewalla-Web-Interface

[clear igloo]

Or did have the option in the app a year or two ago to enable it

[opal flower]

i might try one of the synology units for parental controls in bridge mode

[meager ginkgo]

might get this

[peak cloak]

you are good at networking? want something simple?

[meager ginkgo]

I was thinking a UDM SE

has a 2.5gig uplink and SFP+

[clear igloo]

Ah, I thought it was truely local but I guess not, I haven't kept up with them for a while

[peak cloak]

eh, controlling what users do on your network is hard

it's a loosing battle

[clear igloo]

Yup, 100%, unless you get hardware for SSL decryption and everything else and start doing MiTM attacks you're basically fighting an uphill battle

[main ember]

Just managed to setup a first home server with only one docker pihole instance for now. I'd like to run multiple containers - one for a website, one for some api services, one for a nodejs app, nextcloud and a vpn server. I'd then like to somehow route the traffic based on subdomains, so api.domain.com would route to the api service, vpn.domain.com to the vpn and so on.

What would be the best approach here?

[peak cloak]

what you are looking for is a reverse proxy

it basically looks at the HTTP request coming in and checks the value of the domain header and routes to the right server

[main ember]

https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/

so I imagine this is it, right?

[peak cloak]

nginx is one very popular one

there's this which provides a easy to use webui frontend to it

https://nginxproxymanager.com/ @main ember

other popular software include Caddy and Apache

also traefik

[main ember]

thanks! 😄

I do have another question - I have installed pihole in docker and disabled the ubuntu resolve service thingy, so it does not interfere. After doing that, I can't access the server via hostname. Do you have any idea what I could have missed?

[peak cloak]

it could have disabled the mdns resolver or something

I personally never messed with mdns as my router is configured to answer all DNS requests

[main ember]

Thanks for the help!

[deep bough]

What could cause my internet going from consistent 5-10ms ping to 20ms ping? A few weeks ago my internet started going from <10 to 20ms+ ping consistently in valorant and fortnite, along with my gigabit download speed being about 800mbps download rather than 950mbps+ and my upload speed being inconsistent

Yes I am the only one connected to wifi and am connected via ethernet (it was a cable I got from best buy)

[plain siren]

This literally looks like a NanoPI R4S

[waxen scroll]

Does that do gig throughput?

[plain siren]

Yeah

[waxen scroll]

[sudden kayak]

yeah I'm pretty sure the current conclusion is firewalla started out with a neat product and then switched to just providing a proprietary locked-in cloud interface to commodity hardware like a nanopi

[waxen scroll]

🤔

[hot hawk]

@plain sirenwait can i just change the data directory in nextcloud config.php or is it not that simple

[waxen scroll]

ya'll just jelly that purple > mikrotik

[plain siren]

No it aint that simple

You should be storing it in Docker Volumes.

[hot hawk]

not using docker doe

[plain siren]

Well thats your first mistake, but then ok.. yes you can change it but you need to ensure the directory you change it too has the webserver/php servers uid read/write capable.

Unless you are running the php-fpm and niginx as root

and if its Apache, ima slap you

[hot hawk]

idk guide says apache e

well rn im stuck in maintenance mode and i cant get out :/

also why are the nextcloud so damm slow

smh it says nextcloud isnt installed

[peak cloak]

been setting up terraform + ansible for setting up VMs

god I wish I did this earlier

[hot hawk]

annd

data directory didnt change

:/

[rocky badge]

extreme

[sudden kayak]

lmao

[rocky badge]

I mean, I hate both but I'd take Extreme over Mikrotik any day

[waxen scroll]

Same

Extreme is not bad, in a weird way

[hot hawk]

nvm

i am dumb theres a app for external storage

used that now can access my big boi drive thru my slow ass nextcloud

next step try to fix preformance

video playback is still slow as balls

but faster than the jellyfin server

think its cuz nextcloud doesnt do any encoding

[topaz mirage]

Hello,
I was told that I need to setup a VPN in order to remotely connect to my NAS from outside of my home network. I just requested public IP from my ISP, so I am new to this.

I just need safe and private way to connect to my NAS without a worry of being hacked or hijacked. Of course if somebody will target me specifically, I have very little to do... I just don't want to this to be abused by any human with computer and keyboard.

[unborn sluice]

what firewall you have? i assume your router

[topaz mirage]

(I have Linux NAS [OpenMediaVault], TP-Link Archer AX73/AX5400, Pi-hole as a DNS resolver and caching)

[topaz mirage]

No idea... (Google Translate of page as I have my language set...should be translated fine)

[steel rock]

do any of you have experience doing homelab stuff while dealing with roommates? for example, I want to mess with PXE, but it wants its own DHCP server, also i'm working through another course that involves tinkering with DNS, but i'm hampered by the lameo ISP provided gateway that handles DHCP and Firewall duties currently, what i'm looking for is some way to just have a line of demarcation and go hey, any machines connected past this point, i'll handle the IP addressing and DHCP, I have a deskttop machine with multiple network interfaces if that's what needed, I just wonder if anyone has done this before, or seen any kind of guide related to it.

[waxen scroll]

you do that with a second router and double nat

otherwise you need to shell money for prosumer equipment that does VLANs and all that

[main ember]

Not sure if it's an appropriate channel but it kinda fits in here.

I am trying to setup a local VPN server I'd use to connect from uni/remote pc's etc.
The main issue is, that on those pc's I don't have admin privileges - therefore I can't install any aditional software.
I have been using RDP with open ports but finally found the time to do it properly.
What would be a VPN server (or something similar), that I could connect to natively using Windows/Linux machines, without any aditional software such as VPN clients, AnyDesk, TeamViewer ...?

[thick minnow]

i need serious help lol. is there any way to get my pc to have an internet connection without a network card or a lan cable, like through a phone or sth. probably not since it sounds extremely stupid but i thougt i might still ask

like can i share the internet on my phone to my pc without wifi

[sudden kayak]

any open source ipsec vpn will work because that's standard and built into windows

however if it's a school computer controlled by someone else they may well disable outbound vpn connections

[sudden kayak]

you just need to do standard tethering, any phone should support it but your carrier might block it unfortunately

[thick minnow]

yeah but like my pc cant recieve wifi lol

[sudden kayak]

yeah that's what i mean - you can just plug your phone in and tether it to your pc

[thick minnow]

for real

how do i do it?

[sudden kayak]

it depends on your phone but just look in the settings

[thick minnow]

chances that its not supported on iphone ?

xD

[sudden kayak]

try googling it

[thick minnow]

mh

[snow lance]

i am puzzled

[chilly rock]

Hi I need some Help I got a synology Nas DDNS is setup correctly on it IP is working apart from it redirects me to the Router Login screen and not the NAS login screen I have two Routers BT (Modern) and a Tp-Link one which is mine and the nas is on how can I port forward this or fix it thanks

[thick minnow]

Anyone have any recommendations for windows email server software?

[waxen scroll]

Exchange

[peak cloak]

Don't self host email

[thick minnow]

And why not

[peak cloak]

dealing with whitelisting your IP

spam filters

etc.

it's a major PITA and more of a chore

[thick minnow]

I happened to notice

The ssl guide already makes me dizzy

[rocky badge]

I just pay MS $5/mo lol

[peak cloak]

ssl is easy

[thick minnow]

In what world

[rocky badge]

this world

[rocky badge]

pain

[waxen scroll]

That's why I said exchange

If you're going to self host might as well make it easy

Mail sucks

[rocky badge]

[peak cloak]

I just use cloudflare's new email forwarding, it works for what I need it for. Can't send from that address, but not an issue

[waxen scroll]

You get a lot of spam

[rocky badge]

yes

LinkedIn and marketing emails

@waxen scroll 💀 VDSL2 directly into UDMP https://cdn.discordapp.com/attachments/301036697812992002/938902334963056772/25F2CFB8-8FCF-4545-84D5-1A7896EF050E.jpg

[waxen scroll]

Wtf

[rocky badge]

that's like a $180 sfp

just to get 100Mbps lol

[hot hawk]

mm

finished my nextcloud server on my android tv

gotta say kinda surprised it works decently well

yea my isp is the bottle neck rn

[half badge]

what kind of tv do you have that it can run nextcloud server?

[hot hawk]

https://www.youtube.com/watch?v=l8DlgjuebXA
this

it like runs it

not well but it works

[half badge]

interesting for something cheap. somehow i thought it ran directly on the tv itself 😄

[hot hawk]

lol i mean it would be possible

got my smexy server
slaps tv

best server specs

wait is there a way to see log in and log outs

or an app?

[hearty crescent]

Hi , my internet speed is 100 up and down and my wan port on the router is capped at 100 , did I need to change my router to new one or should I keep it ?

[toxic chasm]

Hey, so im moving into a new apartment and I have a friend a few units over im going to get internet from. I can get it to a distance of only 30-40 feet, but it will be through 3 brick walls. Also, apartment building so im expecting 2.4 to be busy.

What are my best options for wireless point to point here?

Or can I hijack the ISPs cable network in the building and run traffic alongside there?

Current plan is I will setup my MikroTik RB4011 in my friends unit to broadcast a network, then use my old Asus RTAC56U as a wireless to wired bridge to pickup the signal.

Will probably grab another WiFi router so I can rebroadcast the signal in my own unit as well for my phone and such.

Unless I can use my RB4011 to rebroadcast the WiFi and use as a wired bridge.

Need to forward ports, so I would like to use my router as the firewall, but I could make it work.

I might get an RB2011 for $50 on ebay and throw it in my friends place, use the RB4011 in my place, then use the RTAC56U as a WiFi AP only in my place. Then if needed get some yagi antenna on either end.

Only $100 to do that. It would literally pay itself off in just over 2 months of splitting internet.

Guess I would need 2 of those SMA to MMCX adapters. I thought the RB4011 I had came with removeable antenna

[peak cloak]

DHCP leases should be based off MAC right?

Because there's this stupid issue with Ubuntu's cloud-init where it brings up networking before setting hostname, which causes IP conflicts. But it's weird because shouldn't it be based off MAC. The MAC addresses of both VMs are different

If I do a simple dhclient -r then dhclient it gets a correct IP

[waxen scroll]

correct

what does wireshark say happened?

[peak cloak]

Didn't investigate

[waxen scroll]

💁

[peak cloak]

It's known issue apparently though

I'll investigate with wireshark today.

[half badge]

fast networking stuff is so expensive

[peak cloak]

I'll see if maybe rocky's cloud image has the same problem

If not, I'll just switch to it

[peak cloak]

Yeah it gets like exponentially more expensive after 1 gbps

[half badge]

looks like 10 has not changed in the last years. was thinking of upgrading and at least at my local stores the 10gb mikrotik are more expensive than i remember them being 2 years ago

[clear igloo]

component shortage and shipping challenges and general shortages all helped raise prices recently

[half badge]

yeah 😦 and getting past 10 seems real bad.

[clear igloo]

Yah, the issue is 25 and 50 is REALLY REALLY new too (like 2.5 and 5g)

[half badge]

especially without us ebay haha

[clear igloo]

Yup, I'd be tempted to do 100g and breakout cables over native 25g switches depending on the price point

[half badge]

yeah have to see, i want faster nas access for vms and isp recently pffers 25 for the price of 1gb 😅

but vms over network on 1gb feels too sluggish

[clear igloo]

Yah, 1Gb is too slow in most cases for VMs for storage to compute at least

[half badge]

i think i hsould check what cheap 100gb is priced at, currently was looking at 10 or 25 with either direct connections or TNSR on some hardware i dont have yet, or a new mikrotik with 10gb ports and a few 25 or 40gb ports

biggest issue probably is that i have a small appartment that is basically one room + bath, so loud is no good

[clear igloo]

Ah, yah, that's going to be a huge limiting factor

[half badge]

yeah likely feels like need for a custom build with big fans 😄

[hot hawk]

how old is the router

its either 1 of 2 things
ethernet cable bad so its down to cat 3 speeds (100/100)
or old router caps at 100/100

[glad ferry]

Thats what I ended up doing. Got a switch that supports 40/100G and for the time being using breakouts into 4 x 10 or 4 x 25 depending on the application.

Storage is the ONLY thing that tends to exceed 10G

If you are Cisco "Trained or Willing to Learn" N9372 or N9336PQ are decently priced but still not cheap by any standards.

[rocky badge]

Lol knowing Lurick 😉 :P

[peak cloak]

https://twitter.com/MalwareTechBlog/status/1489930722999615490?t=bED3KTbVzmGe4-SDEMVKpA&s=19

Marcus Hutchins (@MalwareTechBlog)

Non-technical users: logging into bank account on public wifi
Mildly technical users: “public wifi is dangerous, use a VPN!”
Very technical users: logging into bank account on public wifi https://t.co/Sl1zZgrqg9

Retweets

289

Likes

1815

Twitter · Feb 5, 2022, 11:55 AM

[unborn sluice]

VPN providers hate him

[clear igloo]

😄

[snow lance]

can anyone help me with port forwarding i havent been able to get it to work for ages and it isnt isp

[clear igloo]

I would avoid ethe 9336PQ because it's ACI only iirc

The 9332C though is ACI or NXOS

[waxen scroll]

aci is the future, do not avoid!

[south blade]

I seem to have a lot of network issues with Windows 11, I'm only using LAN stuff, currently online through a hotspot as I'm outside the city. I want to get my app I paid for to do phone to PC remote to work, it uses port 9512, I also have other remotes KDE Connect that doesn't have any issues connecting, what do I need to do to get the other one working?

[valid cradle]

Hello. I'm renting an apartament for a year and there are RJ-45 outlets in walls, but the problem is that the server is owned by the apartament's owner - I'm studying ICT so maybe I'm just a bit overreacting and paranoid - but I don't want the owner to maybe have a possibility to look through it. I have my own router - TP-LINK Archer C6 MU-MIMO and also I have raspberry pi with PiHole on it. Is there any way to encrypt all traffic going through that router?

Guy seems a bit shady

[peak cloak]

Encrypt to where?

Encryption needs to have an endpoint, in the case or HTTPS it's the web server

[valid cradle]

I guess I could buy VPS server, setup OpenVPN there and encrypt my traffic through there?

My router supports OpenVPN

[peak cloak]

OpenVPN or wireguard

That would work

[valid cradle]

Ok, thanks for confirming

[indigo wing]

Hey guys, could you please help me with something ?

why does it use so much network if I am not downloading anything ?

[rocky badge]

Because it’s download or uploading windows updates

[indigo wing]

windows update is on pause

[rocky badge]

Still does windows update background downloads and uploads

Because delivery services is p2p windows update sharing

[indigo wing]

can I turn it off ?

[rocky badge]

google 😉

[indigo wing]

👍

[waxen scroll]

clearly its downloading epic software

literally a progress bar on the start menu

[opaque stirrup]

im a bit confused the ping requests on the left are my home lab proxmox server pinging remotely through zerotier and on the right is my raspberry pi on the same network on zerotier aswell and its roughly 10ms lower latency than the server is there any explanation for this 🤔

[faint lava]

NAS is running solid now

[thick minnow]

its windows.... what were you expecting..... skynet is watching you and also m$

[thick minnow]

Hello there , got a question . I was wondering if it's possible to have 2 different internet connections on a single device , is it possible that there's a program that let's me select which program uses which network ?

ping me if you have something to recommend

[peak cloak]

it's possible but kinda a PITA

apparently there is tool called ForceBindIP for windows that forces a program to use a specific interface

never used it myself

[thick minnow]

oh really ? that's great , that'll be really useful for me if it actually works , since my house is running on mobile data , I can play games on it while watching youtube or downloading other stuff with grandma's internet

[gloomy loom]

ive got a mc server and people can join for like 10 seconds spawn in then they time out could that be a firewall thing?

[peak cloak]

I had a similar issue when running bedrock server over a VPS "proxy"

very weird, never figured it out

[smoky girder]

I need ethernet or better internet in one room, but i do not want to run a cable and drill in the walls, how would i do this for cheap

I believe that i have a ethernet jack in another room but i do not know if they are on the same circuit

i believe that i could try and see if it is and if it is i coulds use a Powerline adapter, but does it add latency?

[peak cloak]

there are no circuits with ethernet wiring

[peak cloak]

powerline sucks for the most part

it's not very reliable

do you have coax?

[peak cloak]

could run ethernet on the wall

[smoky girder]

no

heres the issue, doors. and there are none in the room

only power

[peak cloak]

I just put cables in the walls, yes it's kinda a PITA but worth it in the end

[smoky girder]

there are two doors in the way, and i shut them often, the cable would just get killed

[patent idol]

why does this happen

[hard pasture]

I'm moving to a new (to me) house soon that has no networking wiring at all. I want Ethernet backhaul on 2 floors and basement. If running conduit inside walls is not an option, would buying Cat6 rated for outdoors be enough to run it on the outside?

[peak cloak]

I don't see why not

Just make sure you have drip loops

And seal it

[hard pasture]

I won't need any kind of outdoor conduits, right?

[peak cloak]

No, it would be optimal to run it in the walls itself but that's not always possible.

[peak cloak]

You could if you wanted to, but not needed

[hard pasture]

Would this cable work? https://www.amazon.com/dp/B00AWQ13R6

[dry bronze]

you don't really want aluminum/CCA cable. you also dont need outdoor rated cable if its all inside

[hard pasture]

It's going to be on the outside of the house

[dry bronze]

oh, i misread

[clear igloo]

Do NOT get CCA cable, ever, that trash needs to die

[dry bronze]

you should be able to just drill holes in the wall and run it directly inside the wall even without conduit

[hard pasture]

Something like this then? https://www.amazon.com/dp/B08QQG1VMD

[clear igloo]

CCA cable is SUPER prone to breaking, pulling it out of the box can cause it to break
It can and will oxidize
Higher resistance leads to worse signal quality and degradation of the signal
If you ever were to run Power over Ethernet through it then it could start a fire or damage the end device

[clear igloo]

How many runs do you plan on doing?

and any specific color you need for it to blend in or does that not matter much?

[hard pasture]

At least 6. One run to each room from basement.

Don't care about the color

[clear igloo]

You should be fine with this then
https://www.amazon.com/Outdoor-Waterproof-Unshielded-Ethernet-trueCABLE/dp/B01JAVMYLM/

There are 500ft spools too which are about $50 cheaper, not sure if you want lot of extra or not or just want to play it safe

[thick minnow]

can u give me some of your upload speed

[south blade]

Is there some way to share my internet from my desktop, that I'm getting internet through a phone hotspot, to my OPNsense box (pFsense like setup)? I'd just use this periodically to update media center metadata.

[true nova]

i wanna setup a speedtest server and purposefully display peoples network as slower and see if i can get comcast to pay me for that

[rocky badge]

https://github.com/tylertreat/comcast

[thick minnow]

Some laptops allow mobile hotspots

[unborn sluice]

why would he hotspot from the laptop when he already has one

[thick minnow]

read what he said

[unborn sluice]

looks like you're the one who didn't

[thick minnow]

Hotspots are how you share internet from one device to another

[unborn sluice]

and?

[thick minnow]

He uses a phone hotspot

He's asking if he can share internet from his desktop

[unborn sluice]

so why would he create a hotspot from his laptop

[thick minnow]

And I know for certain you can share wifi using a hotspot using a laptop (I have to do it for my chromecast)

[thick minnow]

Because its using a device to share internet with another device.

[unborn sluice]

for the sake of argument, let's ignore his device is an OPNsense (which i assume is ethernet).

he could literally connect the device to his phone hotspot
instead of phone -> laptop -> device

[thick minnow]

I'm just explaining the only thing I can comprehend he could do instead of running a mobile hotspot through his phone.

Aside from getting an ethernet connection.

[unborn sluice]

that I'm getting internet through a phone hotspot

[thick minnow]

ah

[mellow hemlock]

How far can some Network Cards go? I want to say I remember seeing some 25Gb ethernet ports on motherboards, but can cards go further than that?

[blissful hearth]

first thing i could find are some nvidia infiniband nics with up to 400Gb/s

[mellow hemlock]

Good gosh, that's a lot of Gb

That's like 50Gbytes a second, right?

[blissful hearth]

ye

[mellow hemlock]

Jeez, and it's gen 5

If I were to put this in a gen 4 machine, I assume it'd just operate at the max speed gen 4 allows?

Anywhere to actually buy these? I'm only finding a loop of "learn more" on their page lol

Also it does mention compatability with g4 =D

[blissful hearth]

lol those things are enterprise stuff. you'd need to contact a nvidia sales rep. one nic would cost a couple grand and they don't use your standart rj45 connectors and copper cables. you'd need new switches and stuff too.

[peak cloak]

https://www.fs.com/products/110530.html

Just a transceiver

[unborn sluice]

when something doesn't list a price and it says "learn more" or "contact" simply means when you can buy it, you don't need to see the price first

[waxen scroll]

It really means "we want to research how much your company makes so that we can adjust accordingly"

[dry bronze]

Huh, apparently mellanox 200Gbe cards really are below $2,000. I'm surprised

[south blade]

The Emby media server box is in the utility room, just hooked up to LAN. The computer I use on a hotspot is on the opposite side of the house, about 35ft, connected at HSPA+ speeds. I have put a WiFi adapter on it to connect it to my phone hotspot but my phone only gets signal in some areas of the house so I have to actually connect the WiFi adapter to a long USB cable, I think it's like 30ft to actually get it on the hotspot. So it's a setup process, I don't know why the Emby client can't use it's own internet to get metadata when I "search" from it, stupid thing trying to find the info from the media server that's without internet. So I have to also find what to put a monitor and keyboard on every time. Starlink mid 2022 my order says 😦, T-Mobile 5G Home Internet on other side of town, Verizon announcing their 5G Home but not available here yet.

[low pond]

I think 800gbe transcivers too exist now

[warped karma]

I have a linksys smart Wi-Fi router, but when I started it up the power led flashed for a few seconds and then went solid (like normal). However, then the power led starts flashing again, and then all of the lights on the router turn on and then back off (this signifies it rebooted). I cannot access it through the web ui, and windows just says no internet access. I can’t hard reset it, because there are tons of devices depending on it and it’ll take too long to set up again.

[patent idol]

i wish lmao

[waxen saddle]

You might not have any option other than to reset it. You can try booting it with just your PC connected (and NOTHING else) and see if you can get on it. I’ve heard whispers about some devices auto rebooting if a service (like DHCP) is already running in the network.

[sonic cove]

Why didn't someone tell me how good wifi 6 is earlier 😭

[topaz mirage]

Hi,
I'd like to access my NAS securely and be able to download and upload from/to it.
As I use Linux based open-source system OpenMediaVault, I can't use the Remote Access feature that Synology or Netgear provides.
Should I do a VPN tunnel and if so, would RPi4 suffice? I was told that VPN tunnel should be on different device that the NAS itself.
Or is upgrade to Synology or other brand the go-to way.
Thanks a lot.

[dense nexus]

I have 0 millisecond ping to the nearest Speedtest server

[dense nexus]

Yeah I get 57mbps with no ping over Ethernet (no fluctuation whatsoever tho) and 275mbps with ~2ms ping over WiFi (and that’s only WiFi 5, I’m fairly sure! Unless my uni upgraded the routers since I last checked.)

[peak cloak]

Well somethings messed up lol

[peak cloak]

A pi would work

[dense nexus]

Wdym?

[peak cloak]

Either bad cabling, rate limiting, etc.

[dense nexus]

If you mean the no ping, it’s because my university hosts the server. Also interesting is that we have the only Blender server outside of Europe

[dense nexus]

Oh, yeah idk. It’s a dorm and idk how old the cabling is. Maybe even older than cat5e

[meager ginkgo]

that's easily reachable on AC lmao

[dusk wasp]

okay, so what is it with this asus ethernet dongle not working on certain software 😱

[topaz mirage]

Wireguard is the way to go?
And how to access my files? I heard SMB is not secure...but idk if it was solely if used just by opening its port...

[dense nexus]

^^^

[clear igloo]

Open SMB port onto the internet, files go bye bye in under a few hours 😄

VPN and then SMB or some other access method when VPNed into the local network is the way to go there

[peak cloak]

You vpn into network then smb from there

Not smb directly

[topaz mirage]

Yeah, I know.

[topaz mirage]

So basically getting WireGuard VPN is like having a login screen. Nothing else changes, just the fact I have more control on which IPs (maybe even MAC addresses?) can even connect and then have to login.

[peak cloak]

No? Think of it this way. It's like a tunnel to your rpi server. You browse your local network in the viewpoint of your raspberry pi

[topaz mirage]

Okay... and if I would just port forward the NAS to public internet? Dont worry, i know it is a very stupid idea, I just want to understand the POV.

Then it is viewpoint from my router, except the security and options of management are lackluster?

[peak cloak]

I'm gonna make a diagram in a bit, then it'll make a lot more sense. But then basically anyone can access the Nas

[peak cloak]

No?

[topaz mirage]

damn

[peak cloak]

Perhaps, maybe but really all it does it pass the packets on a specific port to a specific internal host

[topaz mirage]

i will try some vid again

[peak cloak]

@topaz mirage when using VPN

vs just port forwarding

VPN server provides authentication before even being able to connect to the server

with port forwarding there is no authentication at all

[topaz mirage]

Previous message:

So basically getting WireGuard VPN is like having a login screen. Nothing else changes, just the fact I have more control on which IPs (maybe even MAC addresses?) can even connect and then have to login.
So I was right, just didnt say it properly.

@peak cloak

[peak cloak]

I guess, the wording threw me off a bit

with port forwarding directly you can configure which IPs can connect as well

but there is no "password"

[topaz mirage]

Got it. But certificate or something more would be ideal, right? Although 14+ char generated password is uncrackable.

I am more worried about zero-day attacks...but I cant do anything about that.

One last thing. Can I still make my NAS use paid VPN service on top of this, so it will look for sites and sutff that I am from US or other country?

[unborn sluice]

Sounds like you browse the internet on your nas or something

[peak cloak]

with wireguard you need a key file

and pub key of server pretty sure

[topaz mirage]

Sounda great. Will do it on Friday or weekend.

[peak cloak]

https://www.wireguard.com/

they have example configs

so server would be like ```[Interface]
PrivateKey = yAnz5TF+lXXJte14tji3zlMNq+hd2rYUIgJBgB3fBmk=
ListenPort = 51820

[Peer]
PublicKey = xTIBA5rboUvnH4htodjb6e697QjLERt1NAB4mZqp8Dg=
AllowedIPs = 10.192.122.3/32, 10.192.124.1/24

[Peer]
PublicKey = TrMvSoP4jYQlY6RIzBgbssQqY3vxI2Pi+y71lOWWXX0=
AllowedIPs = 10.192.122.4/32, 192.168.0.0/16

[Peer]
PublicKey = gN65BkIKy1eCE9pP1wdc8ROUtkHLF2PfAqYdyYBz6EA=
AllowedIPs = 10.10.10.230/32```

and client

PrivateKey = gI6EdUSYvn8ugXOt8QQD6Yc+JyiZxIhp3GInSWRfWGE=
ListenPort = 21841

[Peer]
PublicKey = HIgo9xNzJMWLKASShiTqIybxZ0U3wGLiUeJ1PKf8ykw=
Endpoint = 192.95.5.69:51820
AllowedIPs = 0.0.0.0/0```

technically in wireguard there is no "server" it's just peers

[topaz mirage]

So those keys are...well keys xd
And they serve as a kind of userprofiles, as each can access specified local IP, right?

[peak cloak]

but server refers to like whatever side is publicly accessible and "stable" so like with the same ID

[peak cloak]

yeah

[topaz mirage]

Yupp, I see. I was just afraid that I would have to whitelist connecting IP...which is impossible as I won't know the IP of the place beforehand.

[peak cloak]

there's wrappers on top of wireguard "server" to make it easier to add/remove clients

pivpn is one

[topaz mirage]

Cool!

[topaz mirage]

And the ability to layer outside VPN service on top of this?
Oh, yeah I will be able to use my home Pi-hole now anywhere...just RIP latency probably.

[peak cloak]

yeah

[topaz mirage]

Thanks a lot

[near basin]

Anyone here know how secure is a workfolder connection. I just seen the vpn thing. Its pushed through http

you need a login and all, plus the proper certificate to login?

[distant condor]

I wanna find out where in my local network the connection is being bottlenecked, what's an easy way to find that?

or actually any way to do it for free I would like to know about

[peak cloak]

make a diagram and see what the connection is going through

and then check interface speeds between devices

and narrow it down

[distant condor]

I got the diagram, I don't have a way of testing most of the inbetween points

[swift creek]

anyone have success recording to a network share folder? I tried recording to my old machine and OBS just stopped refreshing the canvas. but I'm not sure if thats an obs issue or a bandwith thing

[snow lance]

welp i get this

[swift creek]

Hmmm

[snow lance]

if i choose it from the side it seems to work doe thats weird

[swift creek]

Oh yeah. My explanation to my self is It can’t write to a server but it can write to a folder in a server

[snow lance]

my explanation is there is probably a good reason for it

[sudden kayak]

if it's a good network connection it would hypothetically work but probably not well at all

there are better ways though - obs is after all built for streaming video over a network

writing a video stream to networked storage is much less likely to work smoothly but you can just point the encoded video stream to another machine on the network and have that machine buffer and write the stream to disk

[snow lance]

I had pretty good success in my tests

[sudden kayak]

yeah if it's compressed video it's probably fine, especially if your network file system has decent caching

but it would likely be much more stable if you use something that is actually designed to transmit video over a network

[plain siren]

This

[sudden kayak]

admittedly i have very low expectations for windows file sharing/network drives in general

[plain siren]

I keep my Storage, Encode/Decode, and Network File Sharing Servers separate

The network file sharing servers just pull from storage server and share/network with stuff like SMB, NFS, S3, etc
The encode/decode server pulls from storage server and does streaming/recording
The storage server just does storage and is connected by HBA or Fiber backend to the others doing the work.

Trying to make one machine do all the works causes services to step on each other's toes as they do their job

[plain siren]

Windows Storage Server can do really well... If tuned and setup correctly

But that is actually quite a bit of foot work at the start

[sudden kayak]

hmm i would believe that, but I'm not sure it compares favorably to data center level networked storage

[plain siren]

Oh definitely not but for SMB/SOHO use its pretty good

[sudden kayak]

yeah that makes sense

[plain siren]

Things like Work Folders, Backups, Documentation Sharing, Print/Scan Dump, and Networked Home Folders do well

Start doing massive projects with Video, Big Data, SQL, etc... Err now we got issues

[proper abyss]

Hi, I would need help with my lab in Packet Tracer tonight. I've done most of it, but there's things I can't do well. Mostly access lists, NAT and DHCP with a relay

[waxen scroll]

@hollow marlin look at that cutie

[zenith meadow]

I have an ASUS AX-89X. Would I be better off getting am AX-86X to extend my wireless network and maintaining a high gigabit for lan? Or would Zen XT8(2-pack) be better?

[hollow marlin]

I actually was looking into them until I found out they're mostly only supported on the ACX series. Which is like the second worst series in Juniper's lineup

[clear igloo]

No, network industry is forbidden here 😛

[clear igloo]

Got a cute little heat sink too 😄

[low pond]

that looks so 2010

[waxen scroll]

I have to put "company confidential" on my linkedin because of the marketing space

also pro tip for anyone getting spam at work even though you did not publish your mail anywhere ^^^ thats the cause

second cause is giving your email to solarwinds for free tools

[hollow marlin]

I learned that through a coworker that also responded to the initial email which included his desk number in his signature. email was the last of his worries, it was the constant calls that was the problem

[waxen scroll]

I didnt really get calls but I did get emails. I ended up asking multiple email services abuse@ to blacklist me and reported their customers for illegally obtaining emails

I also had a standard reply for such emails basically threatening to sue and reminding them of CAN SPAM fines.

😄

I noticed that if I changed my title to one that marketers would want to spam the hell out of, Enterprise Architect, I started getting hits on my email next day. It started with random indian named gmail addresses sending me a blank email and then days later spam started

So some how people are able to monitor linkedin, resolve emails that arent published, then spam

I've found that sending those emails a fake bounceback, even if its hours later helps

[waxen saddle]

Block the senders. Sell your block list.

[waxen scroll]

Nah you know how spammers are. Next day its a new email. Best not to give them the tools to find you at your company

[peak prairie]

I'm having an impossible time here... Would anyone be able to link me to a detailed step-by-step guide on how to set up remote access through nextcloud on TrueNAS Core? Also, I'm using a pfSense router if that helps.

[peak cloak]

what have you been trying

[peak prairie]

I could send you a list of video tutorials that I've tried if you want...

I've tried using dynamic DNS, setting up nginx proxy manager, and got HOPELESSLY lost trying to set up a docker container... Linux/FreeBSD and I don't get along very well...

[peak cloak]

if you are doing it that way, that's port forwarding

[peak prairie]

Ok...? I did setup a port forward in the process... HTTP and HTTPS... I've looked into seting up access with OpenVPN but the tutorial said to set a static IP wich wouldn't work for me... I need to be able to access this from anywhere and the TrueNAS is on a residential IP adrress.

[chilly rock]

Does anyone know how I can port forward my other pc on another network so I can use the wake up on WLAN?

[plain siren]

Are you sure you are not behind CG-NAT

[peak cloak]

^ in pfsense what are the first 2 octets of WAN IP

[peak cloak]

wdym "other network"

Wake up on LAN only works on the L2 network I'm pretty sure

so you would need something on the same network to actually send the magic packet

[plain siren]

yeah isnt it Multicast

[chilly rock]

I have a rendering server at another house and I want to port forward it so I can put it into sleep mode when I dont need it and when I need it I can wake up on lan?

[peak cloak]

yeah no

[chilly rock]

Would Hamachi VPN work?

[plain siren]

You can only WOL on the same Physical LAN

[peak cloak]

zerotier is better

[peak prairie]

I'm positive that I'm not on CG-NAT.

[chilly rock]

Is it free?

I have enabled WLAN/LAN Option in bios of the server side

[peak cloak]

what I did was setup a VPN to get into my house, then ssh into a pi to send the magic packet

[peak cloak]

yes

[chilly rock]

Ill download it.

[peak cloak]

you download it on both devices you want to connect

then join them to the network you create in webui

[chilly rock]

Okay

[peak cloak]

but you still need something on the same network to send the actual packets

I'm pretty sure ZT is L3 only

[zenith meadow]

If I have an ASUS wifi 6 router as my main router can I use wifi 6e if I have 6e mesh satellites?

[chilly rock]

Im moving my rendering server back to mine now so all the issues are resolved

[peak prairie]

I'm going to try and follow this guide. If anyone has a better step-by-step guide, please let me know.
https://www.youtube.com/watch?v=fTruxKi9qbs

[rocky badge]

@waxen scroll @clear igloo 👀 Ubiquiti finally moved into the WiFi 6E market

[clear igloo]

beta?

[rocky badge]

Yeah, $249

[clear igloo]

ooof

[rocky badge]

oof price or specs lol

[waxen scroll]

oof i just bought their wifi 6 last year

[clear igloo]

I mean 7 is already on the way so might just wait for that

[waxen scroll]

ikr

[rocky badge]

[peak prairie]

I'm stuck at about the 16:50 part... My pfSense router keeps bringing up the message,
"Potential DNS Rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding
Try accessing the router by IP address instead of by hostname."
I have no idea what I did wrong...! 😢

https://www.youtube.com/watch?v=fTruxKi9qbs

[toxic chasm]

Is it possible to use a mikrotik 2011 as a wireless bridge for a mikrotik 4011?

Basically I'm moving in next to a friend and want to use his internet.

My idea would be to take my 4011 and put it in his place to broadcast out Wi-Fi for the both of us, then set up a 2011 in my place to break that back out to wired connections. I would be able to have the two routers on either side of a wall to have a pretty solid connection between them.

I wouldn't need the 2011 to rebroadcast wi-fi, just convert back to wired

[peak cloak]

99% sure it's possible

[solid lichen]

could anyone help me with setting up my asus router to extend the wifi network?

[toxic chasm]

Found I was searching the wrong terms. I got the RB2011 setup with a pseudobridge connection back to the RB4011. However, I cant ping anything on the network other than the RB4011 from the RB2011 and I cant ping the RB2011 from the rest of the network.

[peak cloak]

gotta setup static routes I assume

different subnets right?

not just the same L2?

[thick tartan]

does anything exist that I can use to trace network cables from a floor box if they're plugged from a patch panel into a switch

[toxic chasm]

Its all on 192.168.1.X

[peak cloak]

what you are looking for is a toner/cable tracer

[thick tartan]

I have a toner and probe but it doesn't work on live cabling

[peak cloak]

oh on live

hmm, I'm sure there's a way

I think you may be able to do something with connected MACs, not sure

not well versed in L2

why you label

[thick tartan]

I could probably plug something in with a known mac address and get a port map from the switch(es)

new job

nothing is labelled and it's my first week job

even something that would flash a data link light on the switch

something must exist

[toxic chasm]

The RB4011 is at 192.168.1.1 and the RB2011 is at 192.168.1.2.

The 2011 started with a cleared config and all I added was the wireless pseudobridge, a network bridge containing all ports and the wireless adapter, then giving an IP to the network bridge

[peak cloak]

perhaps something with ARP?

that's messy stuff idk much about

[toxic chasm]

Oh, is mikrotik one of the places that is disabling pings?

Eah, probably not the issue. I can ping the 4011

ah, that might be it

I just plugged something into the 2011 and it works and I can ping it

Yeah, just got it plugged into my laptop and I was able to keep going on a live stream without droping when switching over from wireless on the RB4011 to wired on the RB 2011 via wireless

Yeah, still cant ping the 2011 for whatever reason

Whatever

[drifting marlin]

good day, I have an extra pc that I would like to use as a file server between 2 offices, problem is my ISP uses CGNAT therefore I am unable to expose ports other networks can connect to. What solutions can I use for this?

[frigid sphinx]

ask nicely to opt out...

failing that a centrally negotiated vpn like heroshi .

[peak cloak]

Ngrok, zerotier, et

[daring bough]

Does ethernet cable length matter if I'm going to use indoors? I need a 10m (32 feet) cable to run between rooms, no device nearby, except the router itself

[unborn sluice]

Does ethernet cable length matter if I'm going to use indoors?
Yes, the cable should be long enough to connect the equipment

[daring bough]

I was thinking in terms of interference or whatnot, the internet is very split on this

[clear igloo]

No, copper cable length does NOT matter provided it's under 100m*
*Unless it's Cat6 and you're doing 10Gbps in which case it's rated for roughly 55m but solved by going Cat6A which can do 10Gbps up to 100m

[daring bough]

I live in Greece, we don't do gigabit here

[clear igloo]

There are finer details but gigabit with 5e through 6a is fine to 100m 🙂

[unborn sluice]

my internet is 35mbps, but my internal is gigabit

[daring bough]

Oh I forgot that is a thing, I don't have internal connections ;d

[feral bear]

Greece should have gigabit.

I mean, Turkey has gigabit, so

[daring bough]

✨soon✨

[feral bear]

Soon™️

[short quarry]

I don't need a fix it's fine

[waxen scroll]

@hollow marlin @clear igloo did you know fiber mode changers existed?!

[clear igloo]

You mean a switch? 😄

Not surprised, never seen them though

[waxen scroll]

kek no but its a thing

Within the Anritsu booth (#2931), and in partnership with Anritsu and Cailabs, Panduit’s OM3/OM4 multimode fiber will be shown to support both 40 Gb/s and 100 Gb/s over 2000 m using novel mode division multiplexing technology enabled by Panduit’s HD Flex™ ultra low loss optical connectivity.

https://www.modularphotonics.com/wp-content/uploads/OMPlexProDS21.pdf

also that

[clear igloo]

Interesting, that's pretty cool

[waxen scroll]

ive seen this done before too

a whole switch just to change media for one link pair

[clear igloo]

haha, nice

[thick minnow]

I think I have gone a little over kill

[thick minnow]

jeeesus thats a lot of switches

also I love IDIoT

[idle folio]

any1 have a few minutes 2 help me with a problem?

specifically with the asus ac-68

[sudden kayak]

wtf are you for real.... this is glorious if a bit ridiculous

there's nothing as beautiful as an intentionally overbuilt home network

[dense jewel]

https://bgpview.io/asn/9829#peers-v4 (Bsnl)
https://bgpview.io/asn/9498#peers-v4 (Airtel)
by the vast number of international peers available from Airtel, can we say that Airtel does a better job when it comes to routing international traffic?

[unique isle]

Hello, if I hosting game server for me and my friends do I need enabled on my router the PING to WAN? Because my router says that thing is not good from the security point of view

[low pond]

Not really

[peak cloak]

No, ping is just ICMP protocol. Something different than TCP or UDP. You can have a router block ICMP but forward through TCP and/or UDP

[unique isle]

OK thank you, then I will disable it because

[worthy orbit]

I bought a CCR1036-8G-2S+EM router and have a ruckus r650 in my closet that I need to set up for my home network 🙃

if we're talking overkill

[idle karma]

Hello , Can i use WDS in my Genexis Earth-1010 modem

[carmine trench]

has anyone seen this happen before?
I can connect to everything but windows reports it as no internet access

dude I literally went ahead and wiped my router and started from scratch just to realize windows has been lying the whole time

[hot hawk]

im using nextcloud + cloudflared tunnel

works with my cgnat isp

[waxen saddle]

I see this at work where we accidentally/intentionally block whatever Microsoft is using to make that determination.

It’s not that Windows is lying - it’s that whatever it is trying to phone home to is blocked. This reminds me. I should research this more.

[plain siren]

http://www.msftncsi.com/ncsi.txt
Try to access this

This is what MS uses to test against

[carmine trench]

@waxen saddle @plain siren thx. I've been setting up my previous settings so far its too late I had already reset everything lol. I'm setting up the pi-hole again i've forgotten the credentials to the raspbian even

[plain siren]

Sorry its http://www.msftconnecttest.com/connecttest.txt now

[plain siren]

@waxen saddle
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NlaSvc\Parameters\Internet

[waxen saddle]

Thanks mate. Just gotta convince our security team how much time and money is being wasted by workers trying self-fix their networking problem only to give up 3 hours later and call IT only for us to tell them to ignore that…

True story by the way.

[unborn sluice]

your security team blocks that?

[plain siren]

Hahhaha. also this btw.

[unborn sluice]

nice, so you could actually change the connection test

[thick minnow]

my whole apartment complex has been having problems with our isp

And they blocked the speedtest website

lul

[idle karma]

anyone please replay

[plain siren]

https://fast.com
https://speed.cloudflare.com/

One runs on Netflix Servers, other runs on Cloudflare Servers... you block that.. you block the internet

[thick minnow]

@plain siren my isp is seething rn

[waxen saddle]

Oh sick. That’s awesome that we can change that.

[waxen saddle]

Yea. The idea being all Internet access is blocked unless you are on the corporate network. I think the detection works if you are physically on the network, but at say, home or a coffee shop, our employees are easily fooled that the network is down.

I’ve heard of employees on a business trip going to a coffee shop, can’t get online, bring it up to the coffee shop, and since everyone else can get on , they’re now embarrassed that their multi-million dollar company can’t get them a laptop that works. I mean, it works perfectly, it just looks like it doesn’t work to them.

There have been times where I’ve forwarded calls from frustrated people to our Security team and absolutely nothing comes of it.

Wonder if I could get them to have an exception for our own website. They probably wouldn’t because “IP’s can be spoofed”. So I get it. But still. Maybe dynamically set the GPO to check for Internet access to the local gateway? Might not be too bad of an idea….

[unborn sluice]

Now why would they do that

[plain siren]

AHHH Because the network test is run outside the Always On VPN

[waxen saddle]

Yep.

Funnily enough, captive portals work perfectly.

[unborn sluice]

But captive would just capture it right, doesn't matter if the test site is actually reachable