A person with way too many hobbies, but I still continue to learn new things.

  • 23 Posts
  • 1.1K Comments
Joined 1 year ago
cake
Cake day: June 7th, 2023

help-circle
  • You’re right, it doesn’t make any sense. And it didn’t make any sense at the time either. After setting up the router with a laptop, I moved the connection to the firewall but it refused to connect. When I finally got ahold of tech support they said the connection locks into the first machine that logs in and they had to release it so I could connect the new machine. And just like that the firewall was given a routable IP address and connected to the internet. Stupidest thing I ever heard of, but that’s how they were set up. Now this was around 15+ years ago and I would certainly hope nobody is doing that crap today, but apparently that was their brilliant method of limiting how many devices could get online at once.


  • What are you talking about? You’re assuming that every residential router is going to have some kind of firewall enabled by default (they don’t). Sure, if OP has a router that provides a basic firewall type service then it will likely block all incoming unauthorized traffic. However OP is specifically talking about a linux-based firewall and hasn’t specified if they have a router-based firewall service in place as well so we can only provide info on the firewall they specified. And if you look at UFW, the default configuration is to allow outgoing traffic and block all but a very few defined incoming ports.

    You’re also making the assumption that OP is using NAT, when that is not always the case for all ISPs. Some are really annoying with their setup in that they give a routable IP to the first computer that connects and don’t allow any other connections (I had that setup once with Comcast). In this case, you wouldn’t even need to define port-forwarding to get directly to OP’s computer – and any services they might be running. This particular scenario is especially dangerous for home computers and I really hope no legitimate ISP is still following a practice like this, however I don’t take anything for granted.

    Regardless of what other equipment OP has, UFW is going to provide FAR better defaults and configurability when compared to a residential router that is simply set up to create the fewest support calls to their ISP.



  • Shdwdrgn@mander.xyztoLinux@lemmy.mlFirewalls: what SHOULD I block?
    link
    fedilink
    English
    arrow-up
    67
    arrow-down
    1
    ·
    21 hours ago

    You’ve got it backwards. A firewall blocks everything, then you open up the ports you want to use. A standard config would allow everything going out, and block everything coming in (unless you initiated that connection, then it is allowed).

    So the question you should be asking, is what services do you think you’re going to be running on your desktop that you plan to allow anyone on the internet to get to?



  • Shdwdrgn@mander.xyztoLinux@lemmy.mlA word about systemd
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    1
    ·
    edit-2
    2 days ago

    From my own experience it was more about being a solution in search of a problem. I see some comments about how the old init system was so horribly broken, and yet the reality was it worked perfectly fine for all but some very niche situations. The only advantage I have ever seen with systemd is that it’s very good at multitasking the startup/shutdown processes, but that certainly wasn’t the case when it first arrived. For example I had a raspberry pi that booted in 15 seconds, and when I loaded a new image with systemd it took close to two minutes to boot. And there were quite a lot of problems like that, which is why people were so aggravated when distro admins asked the community for their thoughts on switching to systemd and then changed the distros anyway. This also touches on the perception that the “community” accepted it and moved on – no, systemd was pushed on the community despite numerous problems and critical feedback.

    But we’re here now, systemd has improved, and we can only hope that some day all the broken bits get fixed. Personally I’m still annoyed that it took me almost a week to get static IPs set up on all the NICs for a new firewall because despite the whole “predictable names” thing they still kept moving around depending on if I did a soft or hard reset. Configuring the cards under udev took less than a minute and worked consistently but someone decided it was time to break that I guess.











  • So creating stronger border security to stop drug trafficking is a bad thing? There are still ways for people to cross legally, and what you quoted acknowledges the need to fix immigration policy for allowing citizenship. Whataboutism is when you are comparing two identical issues. What you are doing is ignoring the extreme approach of one party and trying to make it sound like the other party is doing the same thing… In the US, Trump wants to deport or straight up kill immigrants, Harris is acknowledging that we need to stop the drug traffic while helping supporting immigration. In Palestine … yeah Biden is sending bombs and he’s an ass for that but Harris has at least stated that things need to change. Meanwhile Trump’s only statement on the matter is that they need to bomb the Gaza strip and make the problem go away. Do you really thing allowing Trump to get into office will help anyone except rich white people? Stein might have a different approach but under our current voting system there is no possible way she will get elected, so your only honest choice in the matter is voting for someone who has a stated policy of death, or someone who has at least admitted that we can do better.