Some dingbat that occasionally builds neat stuff without breaking others. The person running this public-but-not-promoted instance because reasons.

  • 0 Posts
  • 273 Comments
Joined 6 months ago
cake
Cake day: September 26th, 2024

help-circle

  • Was the prior drive set in some kind of raid set or just individuals, and what are the old drive capacity vs new?

    I guess it depends a lot on what your doing with the server. If it’s pure data store I would just boot off a USB and give yourself all the data space since it’s quite likely all running in ram anyhow.

    If you run apps out of it and need the M2 for swap and rapid cache storage the fastest would likely be make a 2 drive zpool, copy a single to it, and repeat as needed until you have it all copied over, then add the 3rd to the zpool



  • Have you looked at your own? At this moment it shows me a total of 14 comments, 0 posts, and from a quick glance all but 3 of them are obsessing over this user who frankly is FAR from the worst of the users on Lemmy with regard to any kind of slant in their posts.

    Take a moment to go wander through the landscape on the tankie triad and report back when you get a taste of what real propaganda spam posting is.



  • What you might call a stateful NAT is really a 1-1 NAT, anything going out picks up an IP and anything retuned to that IP is routed back to the single address behind the NAT. Most home users a many to one source nat so their internal devices pick up a routable IP and multiple connections to a given dest are tracked by a source port map to route return traffic to the appropriate internal host.

    Basically yes to what you said, but a port forward technically is a route map inbound to a mapped IP. You could have an ACL or firewall rule to control access to the NAT but in itself the forward isn’t a true firewall allow.

    Same basic result but if you trace a packet into a router without a port forward it’ll be dropped before egress rather than being truly blocked. I think where some of the contention lies is that routing between private nets you have something like:

    0.0.0.0/0 > 192.168.1.1 10.0.0.0/8 > 192.168.2.1

    The more specific route would send everything for 10.x to the .2 route and it would be relayed as the routing tables dictate from that device. So a NAT in that case isn’t a filter.

    From a routable address to non-route 1918 address as most would have from outside in though you can’t make that jump without a map (forward) into the local subnet.

    So maybe more appropriate to say a NAT ‘can’ act as a firewall, but only by virtue of losing the route rather than blocking it.


  • NAT in the sense used when people talk about at home is a source nat, or as we like to call it in the office space a hide address, everyone going to the adjacent net appears to be the same source IP and the system maintains a table of connections to correlate return traffic to.

    The other direction though, if you where on that upstream net and tried to target traffic towards the SNAT address above the router has no idea where to send it to unless there’s a map to designate where incoming connections need to be sent on the other side of the NAT so it ends up being dropped. I suppose in theory it could try and send it to everyone in the local side net, but if you get multiple responses everything is going to get hosed up.

    So from the perspective of session state initiation it can act as a firewall since without route maps it only will work from one side.





  • That last part sounds like grand idea, and likely not too hard to do on the client side. Perhaps just a way to sort things by tagging a comm with some flag and all the ones with a specific flag show up in a custom feed. That way even if the names are not quite the same you could create these merged comms to read from.

    The hard part there would be posting, you would want some kind of easy way to send a new post to a specific one, but I can’t say having a ‘post to all’ would be a good idea, that sounds like a spam poster’s best friend.



  • I could see two significant problems here.

    1: people getting lazy and just chucking everything into the generic bucket and the admins/global mods having a mess to deal with.

    2: I’m the event of an ability to move content to another community other than the instance ‘global’ how do you deal with cross-instance moves? For example if the most prominent version of a comm is on one instance but a post gets put on another, the logical place would be to be on the more prominent community, but just dumping posts on another instance isn’t going to be well received I would guess.