Dev, Systems engineer

  • 0 Posts
  • 5 Comments
Joined 11 months ago
cake
Cake day: June 7th, 2025

help-circle
  • Proper routers can be used to effectively firewall your services from the net (Cisco/Aruba/Juniper/Fortigate etc). Mikrotik is the cheapest.

    For example, on a Mikrotik router in the IP filter rules:
    Rule 1 - drop input traffic from a custom blacklist.
    Rule 2 - accept input traffic that you want to port forward to your server. Rule 3 - accept established and related traffic (tcp sessions that have passed SYN ACK stage).
    Rule 4 - add source IP to blacklist for input traffic that you dont want to port forward to your server. Example: not 443,22 will trigger on all other ports.

    This way if someone is scanning your ports they will be blacklisted and then will never get back in even on your open ports. I manage some large networks and our blacklist grows by around 50k IP addresses per week that are just scanning the internet. With a setup like this you don’t have to worry that much about the servers open ports or its firewall. You can also write to the router log all successful requests and their source IPs if you ever want to double check who’s been getting in.



  • Hello!

    If you want a bigger challenge, try solving the Dolby Vision vs HDR10+ fight between Samsung and LG/Sony.

    I haven’t seen anyone with a fully compatible solution yet. Im in the process of building some Tdarr plug-ins based off of this repo
    https://github.com/nichols89ben/Tdarr_DoVi_Processing

    The goal is to take source content that contains either DoVi profile 4,5,7,8 or HDR10+ and output a mp4 or mkv that contains the base HDR10 layer along with BOTH HDR10+ and DoVi 8 additional streams, and then test on various players to see if they can utilize those streams correctly for the ones they support.

    This topic goes quite deep so be prepared to get sucked in. Your existing tickbox for “preserve HDR” probably doesn’t work at all for DoVi profile 5.