[-] InnerScientist@lemmy.world 28 points 2 days ago

1024 Gibibytes

[-] InnerScientist@lemmy.world 2 points 4 days ago

Weren't they though? Like they were absolutely horrible but last I remember most everything else in WH was also somehow worse than them so they are the "good"-er guys.

[-] InnerScientist@lemmy.world 1 points 4 days ago

because all the other programs, protocol are working fine.

With the shown firewall configuration nothing but NTP should work? You're dropping outgoing packets by default.

[-] InnerScientist@lemmy.world 1 points 4 days ago* (last edited 4 days ago)

Update your nftables rulefile or use nft commands to update your firewall to the following:

# extract
chain OUT {
    type filter hook output priority 0; policy drop;
    udp dport 123 accept

    limit rate 3/second log prefix "Nftables Blocked: OUT: "
}

chain IN {
    type filter hook input priority 0; policy drop;
    ct state established, related accept

    limit rate 3/second log prefix "Nftables Blocked: IN: "
}

Blocked pakets will show up in the kernel log (dmesg/journalcl)

If you want more information on why it is blocked then enable nftrace for those packets

nft add rule inet/ip/ip6 tablename OUT udp dport 123 meta nftrace set 1
nft add rule inet/ip/ip6 tablename IN udp dport 123 meta nftrace set 1
nft monitor trace

Or

nft add rule inet/ip/ip6 tablename OUT meta nftrace set 1

Or maybe even

nft add rule inet/ip/ip6 tablename PREROUTING udp dport 123 meta nftrace set 1

Additionally you can use tcpdump -i to show network packets before they enter the firewall, there you should be able to tell what it's a trying to do.

[-] InnerScientist@lemmy.world 60 points 3 months ago
  • PhD students

  • happy

[-] InnerScientist@lemmy.world 53 points 4 months ago

Paying companies to be racist, what a world.

[-] InnerScientist@lemmy.world 51 points 5 months ago

No, the onion!

[-] InnerScientist@lemmy.world 48 points 8 months ago

Vibe coding is driving error development

9
submitted 9 months ago* (last edited 9 months ago) by InnerScientist@lemmy.world to c/selfhosted@lemmy.world

I'm looking for experiences and opinions on kubernetes storage.

I want to create a highly available homelab that spans 3 locations where the pods have a preferred locations but can move if necessary.

I've looked at linstore or seaweedfs/garage with juicefs but I'm not sure how well the performance of those options is across the internet and how well they last in long term operation. Is anyone else hosting k3s across the internet in their homelab?

Edit: fixed wording

[-] InnerScientist@lemmy.world 59 points 1 year ago

I'm just waiting for the EOL of window 10 to see which of the following will happen:

  1. Many PCs will stop getting updates, people don't care
  2. Many PCs will be replaced for windows 11
  3. Turns out people already have replaced their PCs due to other reasons
  4. Microsoft removes the hardware requirements
  5. People switch to another OS
  6. People just don't buy a home PC anymore
  7. ????
  8. Profit???
[-] InnerScientist@lemmy.world 56 points 2 years ago* (last edited 2 years ago)

You need a phone, tablet, or other device that’s been rooted.

Damit

[-] InnerScientist@lemmy.world 72 points 2 years ago* (last edited 2 years ago)

There’s a significant detail which is missing from this analysis. The law which puts copyright over privacy is a French law, not an EU law. The EU court found that the French law doesn’t contradict any EU law.

So the EU court did not determine that copyright is more important than privacy. It determined only that the French parliament is allowed to decide that question for France.

So while this does set a bad precedence, it is not as bad as the title would like you to believe.

view more: next ›

InnerScientist

joined 2 years ago