• 0 Posts
  • 37 Comments
Joined 8 months ago
cake
Cake day: November 2nd, 2024

help-circle
  • On and off over the last 15 years or so.

    Only recently have I become much more comfortable & able to resolve things without resorting to search, stackoverflow etc.

    The turnover point was the day I finally learned vi & cron so I could fiddle with an old Buffalo NAS, that was long out of support, riddled with security holes, and offered only very limited tooling.

    Was a great learning experience, but it didn’t pan out the way I wanted. So it runs Debian now, supports modern protocols, and continues to serve. Amazing what you can keep in service when you try.






  • It’s better to name known safe options rather than leave it up to user search. The entities that work against extensions like uBO are already well aware of their existence, so hiding their names has no benefit.

    Case in point - uBlock and uBlock Origin are not the same, with the former being a bastardised version that does ‘acceptable ads’. There are plenty of other poor blocking options out there for the unsuspecting to stumble into besides that.

    Personal setup is Librewolf/uBO on the client and pfBlockerNG/Snort for network level blocking/additional security layer.

    And welcome to .zip :) Hope you enjoy the new home!





  • Sometimes even that’s not enough. I’ve had some questionable kit before that would just ignore the DNS settings fed to it if it thought they were no good, and fall back to something else preconfigured.

    pfSense is a wonderful tool for situations like that. Anything intended for local use only here just doesn’t get outside at all. Handy for stuff like a fire stick that only needs to be calling up a local media library.

    It can also mangle any DNS requests going out to a different server and redirect them to itself instead. You could do this without it with iptables/nftables on a generic Linux box, but pfSense makes it much friendlier.

    There are other packages that can do the same, but physically all you need is one piece of hardware as a bouncer that manages connections between inside/outside.