networking

Has anybody heard if the upcoming 47-day maximum on TLS cert lifetime will apply to Enterprise wifi auth using private PKI (especally on IOS and Android)?

Background: I have a cellular ISP and therefore cannot configure the CGNAT. After burning through some dumb ideas (free reverse proxy, docker) I realized I could just use my paid VPN.

Hi all

I will be moving into a new house in a few weeks. It's an older house (built in the 60s) and hasn't had much updates in terms of wiring. I want to be able to run a hardwire cable to each bedroom to maximize my Internet performance. My wife works from home and I'm hybrid, so I want to ensure we're not just flying on WiFi.

A weird and disturbing thing is happening on my home network. I'd like some advice on how to diagnose it. My mastodon host (chaos.social) keeps blocking my IP address. I reached out to the admins and they told me it's because they are getting HTTP requests with user agent string claiming it's a Google bot. They shared a following log line with me.

I have an off-grid setup with a few devices on a local network that is not connected to the internet. I can tell my iPhone to use the non-internet wireless LAN to talk to those devices, OR I can tell it to use cellular data to talk to the Internet, but there’s no config on the iPhone side to let them be both live at the same time.

Would it be unwise to make my file server (SSH only) machine (also runs a Minecraft server, And From time to time runs RSTS/E under simh) a tailscale router node to allow my traveling notebood access to the network when I am away?

some Debian flavors have this built into the WiFi GUI, but I'd like to learn a more generic option in the CLI or config files

I'm looking to automate/script my pfsense wireguard tunnels so that each wireguard tunnel only goes up if there are one or more clients connected to the subnet associated with that tunnel and goes down once all clients have disconnected. I was wondering if there is already a plugin that accomplishes this or can be adapted, otherwise what is best practice for running scripts on the pfsense box?

In theory it is a open standard...

Hi all, looking for some guidance on getting wired networking upstairs to my pcs.

Hi,

I needed to connect two buildings and was having machines in to dig a 4' (1.2m) deep trench between them for a water line so I went to Amazon and bought a 250' (76m) pre-terminated copper Cat6 cable. As I was going to be burying it I wanted to be sure it worked, so I used it as a "fly lead" for my laptop for a week or two first and it worked fine. I know it initially connected at 1Gbps, but (stupidly) I can't be 100% certain it stayed at full speed the whole time.

I've been able to set up sending and listening to http requests locally using 127.0.0.1:8000. I want to try doing it using the internet now.

This should be easy, right ?

I've been using my carrier's router for a while now but I've been having some issues. Though speed tests show nice speed, the consistency of the signal is very bad. I work from home in an office with my SO and when we're both using the internet the signal can become really bad. Currently getting 20% signal strength and having a hard time keeping my teams call up.

So I just added a TP-Link switch (TL-SG3428X) and access point (EAP670) to my network, using OPNSense for routing, and was previously using a TP-Link SX-3008F switch as an aggregate (which I no longer need). I’m still within the return window for the new switch and access point, and have to admit the sale prices were my main reason with going for these items. I understand there have been recent articles mentioning TP-Link and security risks, so I’m thinking if I should consider returning these, and upping my budget to go for ubiquity? The AP would only be like $30 more for an equivalent, so that’s negligible, but a switch that meets my needs is about 1.6x more, however still only has 2 SFP+ ports, while I need 3 at absolute minimum.

I have a server with wireguard in a container with host networking. I want to assign an ipv6 subnet for each peer (eg: fd42:413d:a91f:dd37::/64) that the client (my laptop) can freely use all the addresses in that subnet and corresponding port ranges as a separate network interface. Meanwhile on the server, that exact same ip and port is routed to that specific client but through the tunnel.

It also connects to discord, supposed to be blocked since more than a week. No other device or browser I have connects to YouTube, they all get ERR_SOCKET_NOT_CONNECTED, and only a fresh Vivaldi profile on the same pc also connects to Discord, everything else get ERR_CONNECTION_RESET.

I have an ASUS N66U

Hi,

Greetings all!

Yesterday around noon, the internet at my company started acting up. No matter, slowdowns happen and there's roadwork going on outside: maybe they hit the fiber or something. So we waited.

Hi,

[I hope this belongs here - if not, lmk and I'll delete the post. I've been mainly lurking here so far]

I'm going to be overhauling my network over the next few months as I get ready for my new municipal fiber installation. I have a general idea of how to set things up, but I'm not an expert and would appreciate a few extra pairs of eyes in case I'm missing something obvious.

I'm currently working on setting up a proxy on my home computer to bypass my school's blockers, and want to see if I can make any improvements to security. To be clear, I haven't opened this to the internet yet, I'm asking BEFORE doing that.

cross-posted from: https://programming.dev/post/19441320

I'm moving into a new apt and the ISP is trying to rent a router at $20/mo, so I'd like to get my own router.

How can I use my VPNs port forwarding feature while also disabling global routing by adding “route-nopull” in the OpenVPN config? Using hide.me vpn

Didn't know where else to post this but figured I would just leave it here. Hopefully I can get some kind of job with this.

In Belgium, we are forced by law to use Cca data cables because of "lower fire risk" while I hear literally everywhere that CCA data cables have a much higher fire risk.

If you have an outdoor Ethernet port—in my case with a WiFi AP connected—how can you go about protecting your network from somebody jacking in?

I haven't really done home networking since Windows XP / gnome only Ubuntu days, so rusty is an understatement.

Hi, i have this weird issue where both my IVPN and my AirVPN connection works only if i do the following:

Hi all, I've got an issue in my company that it's now some months that is happening to many windows users.

I've been looking to implement DoH

I have recently upgraded my router from a nearly 7 year old consumer "gaming" router to a Mikrotik RB960PGS router.

One of my local ISP offers 10Gbps broadband for cheap. What is the cheapest router setup one can get with a 10Gpbs wan and lan port? WiFi and switching hardware is optional.

Given there's been a bit of talk about IPv6 around here recently, I gave it a really good shot at implementing this past week. I spent 3 days getting up to speed, reading loads and trying various different things. But I am now back to IPv4 only because I just can't get IPv6 to do what I want and no amount of searching has made me think what I want to do is even possible.

I mean on a technical level. Are the devices that make up the infrastructure of the internet hardwired with IPv4? Is the firmware on these devices impossible to upgrade remotely?

Am about to move houses and new place will have 1000/1000 speeds. Wondering if I should get a Wifi 6 router or not, is it worth the upgrade? Can Wifi 5 and 6 equipment be combined? Or will it then all be 'downgraded' to Wifi 5?

pfSense... Anyone have much experience with the new Kea DHCP server?

Edit: Whoops I just read that [email protected] is for enterprise networks? I hope my small homelab question doesn't break the rules? If so I will redirect my question.

When I go to iknowwhatyoudownload.com, a bunch of stuff shows up for my IP that’s definitely not being downloaded by anyone in my house (foreign language torrents). Aside from that my router (AT&T Arris BGW210) needs to be restarted about once a week, due to some kind of dhcp issue. The most recent event seemed bad - none of my devices had internet, they could all talk to each other, and my ONT activity light was flickering steadily. During this time I had no access to the router, even plugged in directly to LAN. Fixed by a restart but no idea what was going on.

Hi there,

Let's say I have a Linux VM. Default route is the gateway to the top of rack switch for public internet and a public IP is bound on one virtual nic.

I don't need help, it's just too implausible for me not to be curious.

Hey there, I've been on a networking journey that has, over a few years, taken me from simple unmanaged networking, to managed networking, to advanced VLAN management. It's all been self taught, but mostly successful. However, I've gotten myself into a bit of a pickle and I'm hitting a wall in troubleshooting. Apologies for the length of the post, however I want to provide as much detail as possible.

Hiya, I've got a desktop (connected to wifi), and a server (without a networking card), and I do not have access to Ethernet/or the router. However, I do have a networking switch - and was wondering if I could bridge the WiFi from my desktop(Nobara), to the Switch, and have my other devices such as Raspberry Pi and my main server connect to that. If thats possible please let me know how, or point me to some resources, I believe I have to touch iptables in this case, but have never tweaked those before.

Dear all, I have some questions for what I'm about to do with my HomeLab. I recently upgraded my connection to a 1000/1000 and the ISP sent me this shit ass router (Fastweb Nexxt) which is very locked down. I want to change it.

Hiya, quickly wondering if there is a big difference between speeds when using a vpn compared to using a proxy server solution? Anyone got any experience here or good articles to refer to?

I posted about OpenWISP a while back but I need to report that it is buggy and unpolished. The community behind it also is very small so not much happens.

Hello networking community

I have a very specific questions about Linux Traffic control and u32 filters in particular. However, I don't know where the right place is to ask such a question as it's fairly niche.

Hey all, I was wondering if anyone could help me work out how to do this? Basically, I have a stupid number of smart devices and my router has become increasingly unstable. I want to have all my IOT devices on one router and reserve the other for priority devices like phones and PCs.

I may soon be upgrading to 2.5Gbps internet, however all the routers that support said speed seem to be expensive. Is there any that cost less than $100?

Hi all!

I'm looking at a permanent install of a Windows machine that runs a few digital signs. I want to achieve remote access and file upload to the Windows box, as well as accessing the internal web server of the displays on the same LAN. This LAN will be attached to a corporate network, but I would prefer if it did not have access to the internet. I'll have to work with the IT department to get this happening, of course, but I'm hoping to go in prepped with potential solutions. Could anyone tell me if these ideas will work, or what I'm missing?

I'm trying to set up a Pi-hole on my in-laws' home network. I've got everything configured on the pi but ad-blocking wasn't working. So I did some digging into the logs and found that DNS requests were all coming from the router.

I've made eireguard tu nel out to VPS (to circumvent CGNAT). Dns server works, web server + Gitea, Jellyfin,.. works. All the stuff running on my thin Ubuntu client. What doesn't work is forwarding the RDP port to my windows machine. No firewall on the windows machine. Used to work before CGNAT got enabled by my ISP. I've tried also UDP port, but still no connection.