![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png)
Be sure not to create an open resolver, something commonly used in DDoS attacks. https://serverfault.com/questions/573465/what-is-an-open-dns-resolver-and-how-can-i-protect-my-server-from-being-misused#573471
Be sure not to create an open resolver, something commonly used in DDoS attacks. https://serverfault.com/questions/573465/what-is-an-open-dns-resolver-and-how-can-i-protect-my-server-from-being-misused#573471
This makes perfect sense. Thank you!
That makes some amount of sense. I’m not sure exactly how each article is stitched together to create the full file. Do you happen to know if it’s just put together sequentially or if there’s XORing or more complex algorithm going on there? If it’s only the former, they would still be hosting copyrighted content, just a bit less of it.
EDIT:
https://sabnzbd.org/wiki/extra/nzb-spec
This implies that they are just individually decoded and stitched together.
Pretty good tool. I took the quiz out of curiosity, and the top result was my current distro
I think the point is that now he doesn’t have to take the time to go around the house prying the batteries out and replacing them every year. A small chore to be sure, but one that I’d be happy to do any with.
Just wanted to let you know I somewhat found a solution and edited my post to reflect that.
I’ll check it out. Thanks!
Didn’t work, unfortunately. Same exact issues
Rootless podman. The plan is to eventually move WG into a container once I get it working, but it’s running on bare metal at the moment.
Nope. I can’t ssh in either.
I do see the request. I’m running it inside a container so all the clients show up as the container’s hostname.
Just one on the pihole box and using the local address of it for all LAN DNS.
It is in the DMZ. I also use the box for Jellyfin so I want it remotely accessible.
I just tried disabling it for a short while with the same result. It still gets blocked in the 10.14.0.* network.
Yes. And I set Pi-hole to respond to any interface. Plus, I can see the response being sent in Wireshark. It only gets blocked inside the wireguard interface.
No. I mean that my router doesn’t forward requests for port 53 to my server. My server’s firewall does allow access to port 53, and all my LAN devices are able to use it freely.
I am. Server IP is 192.168.1.xxx. DNS server is running on that machine. It already allows access from all interfaces. I just don’t have port 53 natted from my router to avoid creating an open resolver.
Look into Pi-hole. It’s an easy-to-setup DNS server which can run on a Raspberry Pi (or a Linux desktop/server if you have one.) You can then set your devices’ DNS servers to the local address where the Pi-hole is running. Since it would be running on your local network, any requests to it shouldn’t go through your ISP in the first place. I’d still recommend getting your own router anyways because this kind of ISP fuckery is more common than you’d expect. Plus, your exact configurations follow you anywhere you move. If you do end up getting one, set the local DNS server in the DHCP settings of your router to avoid having to set it on each device.
R.I.P.D. 2
Hear me out. I watched the first R.I.P.D. on a flight, expecting it to be enjoyably bad, but it wasn’t. Instead, it was just enjoyable. The whimsical lore of combining ancient prophecy with modern people and boring bureaucracy was pretty funny. Was it an absolutely fantastic movie? No, but it was good.
The sequel, however, explored none of the above any further. Instead, it tried to replace all that with a much more dramatic tone. So when I watched this one on the flight back, it wasn’t even enjoyably bad. It was just simple and dull.
Here’s the paper they linked to from the README: https://berty.tech/docs/protocol/
You’re second point is a good one, but you absolutely can log the IP which requested robots.txt. That’s just a standard part of any http server ever, no JavaScript needed.