• 0 Posts
  • 50 Comments
Joined 1 year ago
cake
Cake day: June 28th, 2023

help-circle
  • Yah that term isn’t an official term. I just meant it in the sense of a IPv6 prefix. Without knowing more about how your router firewall works / in set up I can’t be too specific.

    But in general the way things work with ip addresses is that your ISP provides you with a block of IPv6 address. This block is the prefix/first part of any given ipv6 address on your network. Each host uses that prefix and generates a suffix that it adds in to it in order to generate a full globally reputable IPv6 address.

    By default most hosts use the IPv6 privacy extension to random suffixes and cycle through them. This is good for privacy but bad for hosting a public service. You need to turn off the privacy extension and the second half of the IPv6 address will stay static.

    Next up you need to write a firewall rule to allow traffic to that globally routable IPv6 address. In an IPv6 system the router does not intercept or rewrite the packets like it does with IPv4. So all a router does is act as a firewall saying “Yup outside hosts can or can’t make inbound connections to certain hosts/ports”

    The trick with a consumer IPv6 address space is that just like IPv4 addresses given to your router, the IPv6 prefix can change randomly.

    It would be annoying to have to update the firewall rule every time this happened. That’s why the idea of masking matters. You tell the firewall “ignore the prefix of this firewall rule. Just allow or deny based on the static suffix.”

    The way to write such rules is different on different firewalls. Most consumer devices don’t have a way to configure such things. Even professional networking equipment mostly makes you use the cli to manage such things.

    I hope this helps.


  • I’m glad you got it working with IPv4. For the record though the way to do such a thing in the future is to think in IPv6. In IPv6 there is no nat or port forwarding. Even if you have host exposure. You need to set an appropriate rule in your router firewall.

    On the host itself you need to use public IPv6 addresses. Then on the router firewall you set a firewall rule with an appropriate delegation mask allowing traffic to the specified port.

    It’s different than IPv4 but once you learn IPv6 it’s easy.





  • If you actually read the article it seems pretty factual. It lists Bush’s claims and then has a response. Seems to merit the rating.

    The reporting of the Bush administration’s position and the response seems fair.

    **IRAQ:**
    
    STATUS: Since 1998, the Iraqi government has barred U.N. weapons inspectors from examining sites where some suspect that nuclear, chemical or biological weapons are made and stored. The United Nations has said it will lift sanctions against the Middle Eastern country -- in place since Iraq's invasion of Kuwait and the ensuing Gulf War in 1991 -- only if inspectors can verify that Iraq has dismantled all its weapons of mass destruction. In an editorial this month in a state-run newspaper, Iraq again denied it has or is developing such weapons.
    
    RESPONSE TO BUSH'S SPEECH: "This statement of President Bush is stupid and a statement that does not befit the leader of the biggest state in the world," Iraqi Vice President Taha Yassin Ramadan said Wednesday.
    

  • I’m sorry. I can see how someone with very thick fingers might struggle.

    My father has a similar issue. I watched him write a message on his phone and I think I found the issue with him. He cared very much about the accuracy of each letter. Doing so made him slow and caused a lot of unhappiness.

    My advice to him was to stop caring and just trust autocorrect. It will autocorrect away mistakes and enables people to write quickly. But if you try to get everything letter perfect as you go there is no point to it. It’s a different mindset.

    As for programming yah I understand the discomfort here too. I slow down a bit when at the command line on my phone too. Particularly with the flags and such. I recommend the fish shell though. It has an amazing autocomplete set of features above and beyond even zsh. It’s not just looking at histories. It looks at man files and gives autocomplete recommendations. Just Ctrl-F to complete.

    As for programming, I have to ask, do you program on your phone? I would use my laptop here.


  • My “raw” error rate is quite high. My actual output error rate is quite low. I can’t speak for swipe keyboards though. I just use the standard tap keyboard. For me the in context predictive autocorrect works wonders.

    With my old keyboard phone things were slower because I had to press down on physical buttons. With a touch keyboard I just lightly touch type without the need for effort or rechecking. It all just works out.

    As for me I could never go back to a slide out setup. It was very klutzy and thick. Like 2cm thick. Crazy.

    I’m happy with touch keyboards because they are faster for me and enable things like folding phones. But to each their own.

    Thanks for showing me how passionate you are here. :)

    Edit: the ellipsis leads me to believe that you might have been into tech while the n900 was around. You write with the passion of a n900 user. Did you have one?







  • It took Russia and the USA some time to realize they could not win in Afghanistan or Vietnam.

    The natives of Afghanistan and Vietnamese eventually overcame the imperialist invaders.

    The natives of Ukraine should do the same. The USSR and the DPRK nobly supported the Vietnamese when they were invaded. The west should do the same for Ukraine.

    We should not blame the sufferings of war on native peoples defending their homeland from imperialists.

    We should blame the sufferings of war solely on the imperialist invaders. In this case, that means Russia.





  • There is a lot here but I think the most important thing is that docker containers should always be disposable. Don’t put any data into the container ever.

    All of your data and configuration should be done in volumes. Local disk to inside the container is all you really need.

    By doing this you make updating any given docker container easy as just pulling the newest tagged version of the container. If you are using docker and not podman you can use tools like watchtower to do this automatically.

    As for what distro, it depends on your goals. Do you want to learn and improve your skills? Stick with Fedora or Rocky or Debian or openSUSE. I recommend learning the command line as you go, but if you want a nice UI openSUSE has Yast which is a very robust tool.

    If you want to just have a home NAS but don’t want to learn that’s a different question. In this case if you’re getting a proprietary NAS anyway you could just get one that supports docker (like synology) and kill 2 birds with 1 stone.