181–190 of 194 posts
Earlier quoted context omitted.
> a cheap fanless box with several network ports running linux Do you remember the name of the product?
I like protectli boxes. x86, low power, coreboot options, lots of network interfaces. The apus everyone recommends (myself included) are no longer available :(
Earlier quoted context omitted.
Imagine deciding to pull out of a country because you refuse to comply with protecting the personal data of actual children.
> Imagine deciding to pull out of a country because you refuse to comply with protecting the personal data of actual children. Haha. You mean like Meta, Google, Apple and Microsoft ? If EU really cared about children, those companies would not be doing business in the EU.
Earlier quoted context omitted.
> a cheap fanless box with several network ports running linux Do you remember the name of the product?
Not the poster you're responding to, but... I'm running OPNSense on a GMKtec G9 (a N150-based NUC with dual 2.5Gbps NICs), and a cheap managed switch. All-in, you can get it today for well under $300. Even that is rather overpowered for running my house. The toughest component to pin down was a mesh wifi system that supports tagging VLAN segments. That's almost exclusively enterprise territory, so it's hard to find s…
"Is this overkill for viewing the occasional Imgur image? Probably." From the last couple of weeks of researching some stuff, it makes perfect sense - I keep stumbling across blogs and documentation that uses Imgur, and it's really quite annoying that I can't see the screenshot or image that is being referenced. It hasn't /quite/ hit the point to put something in place, but this is super helpful for the final straw -…
Overkill right now, probably, but the Government seems hell-bent on locking down access to more and more things that we see as completely normal, so I'd say that it's forward planning.
Which means that we'll all have to run our own VPNs, possibly masquerading as HTTPS traffic, if that remains viable against government interference (eg. they might ask to re-encrypt all traffic by ISP-level certs, and block any traffic unreadable by them).
Internet as we know it is fading away.
Imgur is one of the more annoying UK geoblocks because they persist it with cookies, so if you want to view something you can’t just switch to VPN for a second without also changing browser sessions. Reddit is worse… you can’t even view someone’s profile if they’ve ever submitted a post labeled NSFW.
Why would they do that? (Not a rhetorical question, just curious). It would suffice to block UK IPs for compliance, if visitors use a VPN to circumvent that Imgur would get more traffic and more ad revenue. No reason to put extra work into blocking those users.
Imgur is one of the more annoying UK geoblocks because they persist it with cookies, so if you want to view something you can’t just switch to VPN for a second without also changing browser sessions. Reddit is worse… you can’t even view someone’s profile if they’ve ever submitted a post labeled NSFW.
Why would they do that? (Not a rhetorical question, just curious). It would suffice to block UK IPs for compliance, if visitors use a VPN to circumvent that Imgur would get more traffic and more ad revenue. No reason to put extra work into blocking those users.
Earlier quoted context omitted.
Not the poster you're responding to, but... I'm running OPNSense on a GMKtec G9 (a N150-based NUC with dual 2.5Gbps NICs), and a cheap managed switch. All-in, you can get it today for well under $300. Even that is rather overpowered for running my house. The toughest component to pin down was a mesh wifi system that supports tagging VLAN segments. That's almost exclusively enterprise territory, so it's hard to find s…
Is there a mesh wifi system that can run open source firmware? I imagine that might be the best bet for VLAN tagging too in the "affordable" sense too.
For what it's worth, what I settled on is EnGenius's FitXpress products. But I'm not necessarily recommending that, I'm a bit ambivalent to it. Within its normal operational envelope it works well, but its range is far lesser than the TP-Link device I replaced, and rebooting one of the WAPs in the mesh takes seemingly forever (like, 10 minutes!).
That's a lot of steps for something that would be a simple route rule or mangle + mark routing on mikrotik. The route rule would route out a VPN instead of the main route. If the domain name resolves to many IPs you can keep an address list up to date using a simple script.
> That's a lot of steps for something that would be a simple route rule or mangle + mark routing on mikrotik. I'm sorry but suggesting buying and setting up hardware as an easier and more accessible alternative to a purely software-based solution that will take at most a couple of hours to install is simply ridiculous.
Way to exaggerate to make a point much?
A mikrotik router can be purchased as low as $24.95 and it will not only provide you with an enterprise grade router, it will also provide you with the functionality I mentioned above.
The point of my comment was that it can be done at the router level, instead of requiring the user to run and maintain Pi-hole, Traefik, Gluetun, Nginx, and the server required to run these apps/containers.