Album

Mauna Loa is a national treasure. It’s one of the greatest things about America.

Wrt lan deny all for the fam, it’s mostly hard on gamers cuz games tend to use wide port ranges and outbound IPs are potentially home isp networks not the game servers. But yeah it takes some time and research to really lock it down.

Most stuff is running through web protocols though. So right off the bat you create allow rules for any LAN device to hit ports: 80, 8080, 443, 8443 which are your common http and https ports. That’s gonna get most ppl what they need.

I do ASN based allows for certain applications like Google, Facebook, etc.

For consoles they’re pretty locked down so just give them full allow to the Internet. I don’t do that actually but it’s probably the better way.

IOT devices get only the ports they need to the IPs they need.

when you said you are using unbound instead of using DoT forwarding, you mean instead of allowing clients to DoT forward, right?

No I mean my unbound resolves DNS for something like microsoft.com all by itself. It calls up the root name servers, finds the com nameservers, then asks the com nameservers for Microsoft. And for any subdomains it asks the MS name servers. This is instead of relying on external forwarding services like 8.8.8.8 or 1.1.1.1 or quad 9 or whatever. At least the former two are sure to be aggregating this data.

Additionally I do not allow devices on my network to reach out to external port 53, or 853 to circumvent lookups on my unbound by reaching out directly, which would then bypass the DNSBL. Anything for port 53 gets NAT’d to the unbound server. You can’t redirect TLS attempts so those get hard blocked.

Curious to your IDS solution

Securicata is what opnsense uses. Pretty easy to set up.

I have an n100 box that I put opnsense on for routing, firewall, DHCP, DNS and IDS. It uses unbound for DNS and so I’m leveraging the blocklist functionality in unbound. And then I use unbound to resolve instead of using DoT forwarding.

Dnsbl is only a small component of effective network security. Arguably the firewall is most important and so I have a default deny all for any device on my LAN trying to reach the Internet.

All applications need specific allows. Thus internally no device can use dns over tls because 853 is blocked by default. Then I use a DNSBL to catch known DoH by domain since the cert is provided by domain name.

Yeah Mads Mickelson. I know him as the casino Royale bond villain. Imo one of the best ever

It’ll also be wrong in every application you run in your browser. Even local sites.

It’s as simple as not getting OTPs via SMS or email.

Use a 2fa app where you manage the pre shared key and provide it once and then there’s is no transmission of keys from the provider. A hard key is effectively the same.

I get this every week on a SharePoint connection. Just powerbi things.

As a young adult I found out adults have no idea, as an older adult I found out it’s not about knowing what to do in advance but being able to figure it out.

Another buyer, Tovia Goldstein, had a similar opinion of the headset. “After 60 minutes, you can’t, you just have to throw it down. I wouldn’t recommend anyone buying it, unless you’re really rich and you don’t know what to do with your money.”

You need to get your head checked if you didn’t think this was true from day 0.

do you get HP for that

This email is talking to you as a user of other libraries not yours, not as a server owner.

“Alternatively, server owners can purchase a Plex Pass, which will grant you continued remote streaming of libraries that you have been given access to.”

As communicated previously, Plex pass users also get the benefit of the “Remote watch pass.”

Your water heater is set too hot or you don’t have a mixing valve after your water heater

“Left unity” IS the psy-op. The notion that leftism is some sort of singular concept that is harmonious with all forms of itself. What a great manipulation. There are good ways to do leftism and bad ways. Anyone who tells you different is intentionally trying to create divisiveness of the known differences in approaches to leftism to agitate leftists and gaslight them into thinking there is an ideal and that the ideal is only achievable if they all somehow agree. But as they never will as this doesn’t make sense, these contradictions positioned as truths are the manipulation used to destabilize any movements. For any success of movement leftists will need to agree to disagree or one will have to over power the other.

It’s been like this forever. You have a “license to play the game” same as the movies you buy are a license to play the content in a private setting

Kids ARE very resilient. That’s the problem. Therapists know this despite the joke.

As a kid you’re so resilient you’ll accept anything as “that’s the way it is” and so a child will shape their themselves around that world view. Then they grow up with a twisted view of how things are and it requires therapy to unlearn that.

It’s like scar tissue on a wound. You healed but you’re not quite the same. That wound is now less sensitive to feeling in it’s environment and can even be more susceptible to further wounding.

Depends on where you live. In central New Jersey a lot of storm water from the streets is a separate system that heads back into the rivers or whatever whatershed. Where as sewage from your home or business drain goes to sewage treatment processing.

ppl are silly

i know i use IF.

I’ve been using LW & Mull/IF before the outrage-TOU update and while they’re great for me I wouldn’t recommend them to everyone. I still keep FF as a backup and many ppl should continue to use FF for the time being as it was JUST A TOU update…for now.

and colours!