SayCyberOnceMore

  • 18 Posts
  • 759 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle




  • No, I was referring to a separate DMZ host…

    Physically separate firewall connection, with different firewall policies between internet<–> DMZ than DMZ <–> internal network.

    Not a VLAN. VLAN Hopping makes it possible to jump between VLANs, so they should only be consided as an administration tool, not a security mechanism.

    But, I agree with you, putting a device on the internet isn’t something that anyone should do without understanding the technical issues.



  • Kinda overlapping other replies, but to answer your question: A = your external IPv4 address

    The rest could be empty AAAA = an external IPv6 address NS = a DNS server MX = Mail Server

    TXT is just text, but it can be used by, ie Lets Encrypt to prove you own that domain for your SSL certificate

    If you open TCP 80 / 443 on the open internet EVERYONE will probe you, but you want to run a Friendica server, so you kinda need that (disclaimer: I do not know how Friendica is setup)

    So, you’ll need something (firewall, Fail2Ban, etc) to protect your server whilst also allowing it to federate to other servers.

    I’d strongely suggest you put your server on a VPS with a provider that has some level of defense already setup for you.

    I wouldn’t run this in your home network with putting it into a DMZ of some kind.








  • As others have asked, desktop or laptop

    But also where is it? If it’s a “desktop” but on the floor in a deep carpet, tucked against the dark corner of the room under a desk, that’s not going to help… bring it out into the air…

    And for a laptop… lift it off the desk

    I created an MDF raised deck for my laptop, with a massive slot where the fan intake is underneath, that really helped it breathe.

    Looking to the future, if cooling is going to be a problem, I like to over spec’ the equipment and underutilise it - it’s better to run something twice as powerful at half the load… this knowledge came from the hifi world.


  • TL;DR: I support the change in Rule 3

    I think the only thing I’d start rolling my eyes at would be if the posts ended up being low effort photo posts of racks of equipment…

    Sure, a nice background story might help, but I want to read about something that’ll help me, or help someone understand something I know.

    I’m even half interested in cloud based offsite backups as that’s a (possibly) necessary safetynet for us.

    I think we’re grown up enough to signpost OT posts elsewhere rather than cry to the mod(s).

    (Oh, and thanks btw… I appreciate what you do)


  • I can see a lot of opinions & comments on the QR part and, with respect, I’d like to add that I’m reading this post on a device where I’d like to view the site on the same device, so a QR isn’t best for this platform.

    I’d go a little further and say that QRs and really only useful for a mediim where you want the user to use a 2nd device (printed media, BSODs, etc)

    Also putting the URL in the (for my reader) non-clickable alt-text doesn’t help either

    Again, with respect, you’re making it harder for your audience to reach you, not easier.