[-] thejoker8814@lemmy.world 8 points 7 months ago

I’m curious, you got anything light reading you can recommend to ease into the topic, please pm me. I’d appreciate, if it wasn’t another post which basically recites the content of another post, and so on - far too much out there these days)

[-] thejoker8814@lemmy.world 10 points 1 year ago

I cannot recommend any consumer router brand, at least not with stock firmware, because any of them don’t have guaranteed update policy. Further, some of the stock firmware contains insecure protocols, like telnet (yes, still), outdated ciphers (SSL, TLS 1.0), and some feature you want is always missing. Further they often lack innovative features like WireGuard in updates, mostly bug fixes and security patches.

That’s why I would urge you to consider using one of the router/ gateway distributions listed below.

Depending on your requirements, I can recommend the following router OS:

  • OpenSense (router without WiFi)
  • OpenWRT (router with WiFi)

If you have an old laptop or pc to spare, you could at least give those two a try.

Someone already mentioned it, OpenSense runs only on x86 / PC Hardware (and MiPS). OpenWRT can be flashed onto a lot of consumer routers as well as be installed on traditional x86 / PC hardware.

OpenWRT has a hardware table on their website for supported models. Some of them come cheap if you buy them used and are pretty decent.

If you like more flexibility, I can recommend building your own router. Used thin clients, Iike for example Fujitsu Futro S920. Thin clients are basically low-powered PCs, which are often cheap on the used market and provide a variety of hardware interfaces. Most use Intel NICs, some have secondary NIC, can hold SATA disks, provide interfaces for WiFi (pice, miniPCIe, m.2) or extension cards, have high efficient power supplies and are in majority are passive cooled. Or get some SBC/ Low-Powered board with the interfaces you need. It doesn’t need to be new hardware.

[-] thejoker8814@lemmy.world 4 points 1 year ago

Please don’t host a router on a Hypervisor VM. That does not benefit security. First of all a router is an integral part of the (home) network, therefore it should not be dependent on anything, like a hypervisor. You want to be able to replace or update your server/ hypervisor independently from each other, for example in 5 hrs your router might be still rocking all data, but you would want to upgrade your home server / hypervisor. Furthermore all those OpenWRT, PFsense, OpenSense kernel/ OS hardening is more effective on the hardware itself, especially all RAM/ Memory based security measures. Also if you truly want to be more secure, you use dedicated hardware for multiple reasons, performance is dedicated to only routing/ firewall processing (no other service/ VM can block or slow down packet processing), reducing the attack surface (less software, less attack surface), easier to update.

[-] thejoker8814@lemmy.world 3 points 1 year ago

Many given good advice on hardware, and there are plenty other threads with a lot of good recommendations.

Regarding OS, I would recommend to ease into it, and try some before committing. Just try a few services, how stable it is and if the configuration complexity meets your personal learning expectations. (Self hosting is only fun, as long as you can get everything up and running. If you need 36hrs of troubleshooting for every 2nd problem, that awe for elf hosting melts pretty fast.)

I started myself with OMV 0.x, and since then it’s gotten pretty decent. But I switched to plain Debian and CLI tool. After learning enough using OMV as my starting point. I also tried FreeNAS in the beginning, but that wasn’t for me.

And I recently discovered CasaOS, wich is pretty neat and has a lot of benefits, but I haven’t tested it yet.

[-] thejoker8814@lemmy.world 2 points 1 year ago

Even if it's a bit different. It's always nice to see what's out there. I will definitively look into it.

[-] thejoker8814@lemmy.world 2 points 1 year ago

Sure - but that would be another thing to self-host - because I have at least 5 machines which need to send, and I have a dynamic IP address - so it would involve updating the MX records via DNS API for at least 5 sub domains.

To be honest, I'm a KISS kind of guy - not everything technical possible or imaginable is worthwhile. Especially if it's such a crucial part like alert monitoring. I want it done simple, secure, without caveats and keeping the complexity on the lowest level possible.

24

Hi there,

what SMTP relay's / services do you use or can recommend for sending monitoring alerts.

I'm running a few services, but mostly all my custom scripts, and tasks are configured to sent an e-mail if something goes "off-script". Before I used my gmail account - but I'm in the middle of migrating away, and my requirements have evolved.

I've searched but I haven't found anything good. Services like Mailgun, Mailtrap etc. are nice - but their bundle's are a bit much for my taste.

The service/ relay should meet the following requirements.

  • bring your own domain (use your own domain/ or sub-domains as sender address)
  • must have DKIM (anything else is not a serious service!)
  • support SMTP via TLS
  • support multiple SMTP clients, with each different credentials/ secrets
  • Allow custom header/ envelope changes

At the moment I'm looking at Amazon SES, because I don't expect a lot of messages (I had 3 alerts in the last 1,5 yrs).

[-] thejoker8814@lemmy.world 2 points 1 year ago

Many people underestimate it, my goto for a fast an reliable file share service, which does just that, is production ready, has great client software and uses just few resources.

Seafile

[-] thejoker8814@lemmy.world 2 points 1 year ago

Thanks for letting me know.

Damn shame - why do humans have to ruin places, like a plague of locusts

[-] thejoker8814@lemmy.world 4 points 1 year ago* (last edited 1 year ago)

Yes, you can. See my post I made on lemmy.world - showing up in the feed of @fediverse@lemmy.world using my mastodon.social account (in the mastodon app). For that to work you have to have the community address and look for it via the search on the mastodon instance.

Screenshot is made in the mastodon instance.

[-] thejoker8814@lemmy.world 7 points 1 year ago

Totally agree! I just have been a registered reader on Reddit. Now, it’s the first time I’m participating - might be considerably because lemmy is trending. Nevertheless, I found communities and post I’m interested in within minutes - 👌🏼 whereas Reddit was mostly clutter.

[-] thejoker8814@lemmy.world 2 points 1 year ago

Surprised by Ludovico Einaudi, as well.

I discovered a band, that I never could manage to listen to or was even interested. A while ago I got totally hooked - TOOL 🔨

And the most amazing thing the YT algo recommend - Dom whiting’s Drum’n’Bass bike ride (streams) As a fanatic cyclist I love the combo and couldn’t stop listening after the first minutes. Of course, I’m looking forward to participate to one of those.

[-] thejoker8814@lemmy.world 10 points 1 year ago

I had only logitech for years, using Windows, Linux, BSD, Dos… without any issues. The older model (probably 15years+) is still working perfectly, mechanical & PS/2. And that has been drowned in Coffee, water, whiskey and what else. Put it in the washing machine (with some clothes to bolster), let it dry and use it like the first day! 👌🏼 Even my current one, for about 10 years in service works like a charm. I admit both are #lowtech devices

view more: next ›

thejoker8814

joined 1 year ago