• 0 Posts
  • 20 Comments
Joined 2 years ago
cake
Cake day: December 14th, 2023

help-circle

  • You are the perfect example of someone who is knowledgeable and gets offended when everyone else doesn’t know

    So you saw me use some acronyms and then projected your idea of an unhelpful knowledgeable person onto me. That shit is so annoying dude, knock it off. If you go around assuming bad faith of everyone just because they know shit, then you’re only causing yourself to have the experience of nobody wanting to help.

    Stop acting like it’s so easy to do

    You’re literally making this up. Again, I never claimed it was easy to do. You’re just so eager to hate on a certain community that you’ve decided anyone who appears to know anything is automatically an unhelpful asshole. And it’s making you an annoying asshole.


  • This place is such a bubble of people who think the entire world thinks just like them.

    Your attitude notwithstanding, you’re literally the one who came in hot acting like you’re enlightening us with the revelation that the cheaper open source alternatives are harder to set up. No shit. If you haven’t invented the idea that I’m saying it’s just as easy, then how do you figure that we live in a bubble when I literally agree with you? Spare us the condescension, please.

    Jesus, get offended a little?

    You’re literally doing the “triggered?” meme where you behave like a jerk and then act surprised when people don’t put up with it.


  • Well then maybe you should whine to DeathsEmbrace that they are wrong for only complaining about the price then.

    I never claimed it was easier and you shouldn’t assume that was my claim or had anything to do with what I was saying. You’re literally just making up things that you think I said so that you can get mad about it.

    If DeathsEmbrace had said that setting up your own is harder, I literally would have said yeah, it’s harder. But that’s not what they said. They said it was unaffordable. And you seem to agree with me that it’s not, since your point is that it’s about ease of use and not price - which is exactly my view.




  • BakedCatboy@lemmy.mltoPrivacy@lemmy.mlVPN Comparison
    link
    fedilink
    English
    arrow-up
    6
    ·
    20 days ago

    I had the same dilemma after mullvad stopped allowing you to create port forwards. I switched to Proton which works fine but I’m curious what other options are out there. It can be hard to find the details about port forwarding, especially if it only works when using their app and not with openvpn/wireguard which is easier for running containers.








  • If you search for pfsense alias script, you’ll find some examples on updating aliases from a script, so you’ll only need to write the part that gets the hostnames. Since it sounds like the hostnames are unpredictable, it might be hard as the only way to get them on the fly is to listen for what hostnames are being resolved by clients on the LAN, probably by hooking into unbound or whatever. If you can share what the service is it would make it easier to determine if there’s a shortcut, like the example I gave where all the subdomains are always in the same CIDR and if one of the hostnames is predictable (or if the subdomains are always in the same CIDR as the main domain for example, then you can have the script just look up the main domain’s cidr). Another possibly easier alternative would be to find an API that lets you search the certificate transparency logs for the main domain which would reveal all subdomains that have SSL certificates. You could then just load all those subdomains into the alias and let pfsense look up the IPs.

    I would investigate whether the IPs of each subdomain follow a pattern of a particular CIDR or unique ASN because reacting to DNS lookups in realtime will probably mean some lag between first request and the routing being updated, compared to a solution that’s able to proactively route all relevant CIDRs or all CIDRs assigned to an ASN.


  • I think the way people do it is by making a script that gets the hostnames and updates the alias, then just schedule it in pfsense. I’ve also seen ASN based routing using a script, but that’ll only work on large services that use their own AS. If the service is large enough, they might predictably use IPs from the same CIDR, so if you spend some time collecting the relevant IPs, you might find that even when the hostnames are new and random, they always go to the same pool of IPs, that’s the lazy way I did selective routing to GitHub since it was always the same subnet.






  • Immich has a setting that does automatic photo backup over WiFi, I use the android app as a Google photos replacement. You can choose however many folders on your phone as you want (I just do camera roll) and enable only backup over WiFi and it backs up all the photos in original quality. I self-host the server on my Synology with a reverse proxy (can’t forward ports at my current place due to cgnat) so I can access it from anywhere.

    I believe the app is cross platform so the iPhone version should be identical to the android one.