• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: March 7th, 2025

help-circle
  • I love it, have serial (rj45), no more need for monitor/keyboard setup in my “server room”. I have some raspberry-pi in my “family”-vlan, so i can always ssh/serial on to my proxmox. considering my secret superpower is “locking myself out from my firewall” this is really comfortable.

    I’m just running debian trixie. I really don’t like openwrt and pfsense. I deal a bit with openwrt from time to time on embedded devices, APs or the like… just incredibly complicated to configure the firewall, which comes with like 28 default policy I would not know why I need those :D

    I like the many ports. Internally I have everything over one port with plenty of VLANs, but I like my ISPs directly connected to cut out the switch and leaves my firewall as sole single point of failure. at least for internet reachability of my services.

    my current project is integrating the multi homed wan and vpn choices into my home assistant. sadly it seems to be complicated to to route specific traffic (like .*bbci?.co.uk) via specific tunnels. sni detection is broken thanks to ech. Not sure if ech is even employed by bbc (akamai/amazon/fastly), but if i try to policy-route this traffic i cant watch :-( have to set the whole device to the VPN and it works fine.



  • He can keep it. Just degrade the original, obviously crap router to a modem. If it lacks this functionality then create a transfer net between it and your server. Connect your internal networks to your box, run your own dhcpd if you need. Get in control of your network. Have you box do the routing, masquerading, translations.

    If you need the WiFi of your router, this gets harder, but can still be made to work by defining a 2nd network on the link between isp-router and user controlled router. If not supported by router then via manual IP config of clients.this does usually not work in modem setups but with the transfer network only. Port forwarding on ISP router needs to be possible in all scenarios with transfer net.

    Sounds like a fun project and possibly a deeper dive into selfhosting territory:)













  • I believe it was slackware. it was gifted to teenage me ca 1994, was on the CD of some magazine.

    I wanted to try it, so went dual boot. it (or I?) partitioned my 800MB hard disk into a 300MB and an 800MB partition. stupid young me thought this was great and I just gained 300MB. when I noticed date corruption, stupid young me started to copy over important data to the assumed good partition. things didn’t end well.

    I took a two year break from Linux afterwards 🤣




  • I’m mainly on Linux for over 20 years (still have one Windows Box for VR and some games, hopefully I can migrate this to Linux with the next hardware iteration). I was on Suse, Debian, Mandrake, Gentoo, Ubuntu, QubesOS (which does not self-identify as Linux-distribution) with Fedora+Debian Qubes. I never had those installed on my main machine, but also worked a lot with kali, grml, knoppix, dsl, centos, Redhat and certainly a bunch of others.

    The absolute best for me, as working in it security and with different customers, is QubesOS. Sadly my current laptop is so badly supported by QubesOS that it burns 6h battery in 25 minutes and sleep/suspent does not work at all, so I’m currently on Ubuntu (which I hate for their move to snap and being Ubuntu in general)