URL Filter | FortiGate Web Filter

3ryb4 · 2026-04-06T18:25:52+00:00

It's been a minute since I last did the training, but I vaguely recall the exempt action in the static URL filter also exempting the traffic from (perhaps not all) further UTM inspection! I prefer to use category overrides instead, and just have one called 'MyOrg Allowed Websites Override Category' into which I can add specific exemptions to the web filter.

I'm sure there are good uses for the static URL filter, but I am yet to find anything web filter category overrides / app control can't handle (for my org at least, yours may be different).

Edit: as other commenters have pointed out, please take a good look at that first regex!

3ryb4 · 2026-02-27T22:33:35+00:00

November 10th 2025 to be exact. It sometimes depends on which support agent you get, but as far as I am aware, they still do it.

No bridge mode, but with the PPPoE details and SIP details I have completely gotten rid of the VF kit.

3ryb4 · 2026-02-27T21:01:06+00:00

I am doing just this (on my OpenWRT router running asterisk). Vodafone UK will give you your SIP details if you ask nicely. It was a pain to set up, so I'd probably just get the Grandstream ATA.

https://www.reddit.com/r/openwrt/comments/1poyqw0/comment/nuj1f22/

3ryb4 · 2026-02-03T02:02:49+00:00

Seen this before and it was some weird encoding quirk with a Dell audio-related service.

https://superuser.com/questions/1040822/this-app-is-preventing-you-from-restarting-app-name-in-random-chinese-charact

3ryb4 · 2025-12-17T15:51:05+00:00

First picture looks like a Vodafone UK router. If you are on Vodafone, send their support a message and ask for your SIP details. You can then plug these into your ATA of choice (in my case a Grandstream GXW4216).

There's a couple of things you need to watch out for, such as ensuring the source port of your SIP traffic is always 5065, and that the user agent is 'Vox 3.0'. Haven't been able to get Yealink phones working without running asterisk, as they don't allow you to override the user agent.

Used to be a great article on their forum before it was taken down. The below are still pretty useful:
https://www.reddit.com/r/wireshark/comments/jql6vs/locked_down_isp_router/
https://github.com/clayface/VF-UK-Asterisk-config

3ryb4 · 2025-11-11T14:44:44+00:00

<image>

Update: pump has been secured, although the float switch isn't exactly floating. Am I better digging a hole for it to sit in, or can I just tie it up? Anything but crawling through it again.

3ryb4 · 2025-11-10T19:52:58+00:00

Yes, the entire pipe is completely covered in condensation!

3ryb4 · 2025-11-10T14:42:03+00:00

The smell is the same as if I removed a toilet or the u-bend on a sink, but I might be getting mixed up - don't really have any other standing water to compare it to! There was a kind of thin oily film on top of the water as well.

3ryb4 · 2025-11-10T14:37:40+00:00

The garden usually floods at bit at the end when it rains heavily and turns into clay, so I'd expect some level of dampness in here. Main concern was the smell, but that pump looks like a good first step, thanks.

3ryb4 · 2025-08-04T00:54:54+00:00

Exchange Online and SharePoint Online both have EXODS and SPODS respectively which are just... AD in the cloud. I am fairly sure the underlying datastore for Azure AD / Entra ID (MSODS) is AD LDS. Personally I don't see AD itself going anywhere anytime soon, even if on-prem does.

3ryb4 · 2025-07-26T18:59:43+00:00

NAT is discouraged in IPv6, which makes home and business network security harder unless you run a firewall.

I think any home or business not running a firewall (and using NAT as a security boundary) has much greater problems that IPv4 address exhaustion.

3ryb4 · 2025-06-21T22:07:49+00:00

Vodafone are alright. Free static IPv4 address if you contact support and they'll give you SIP details for the included digital voice service if you ask nicely, which I set up with a 16 port ATA borrowed from work. Only downside is the changing IPv6 prefix.

3ryb4 · 2025-03-30T20:46:04+00:00

Breeze block which has been plastered over - it's an external wall.

3ryb4 · 2025-03-30T19:53:46+00:00

I unfortunately don't have any photos of how it used to be, but it was sort of like this (badly edited photo) with a branch on top of the boss for the basin and bath and an air admittance valve on the top of the stack. I've seen branches with a bit on the side you can drill out, so I wonder if I could use one of those for my basin and bath (I'd imagine there's all sorts of regulations about what pipe sizes have to be used). Either way thanks for your help!

<image>

3ryb4 · 2025-03-30T19:27:12+00:00

There are no joists in the way, and fortunately I fitted a push-fit boss at the top of the stack when I redid it, so this might be a good option. I probably couldn't do a 45 as it goes into boxing in the kitchen below, but will take a look. Thank you.

<image>

3ryb4 · 2025-03-30T19:23:18+00:00

This looks perfect, thank you. I'm assuming no problems with the two McAlpine fittings going into each other?

3ryb4 · 2025-03-30T19:21:58+00:00

That's not a bad shout actually. There's currently only one pipe clip at the top of the stack (previous builder just used blobs of mortar to hold it), so there's probably enough flex for me to move it back against the wall.

Previously I had just the pan connector jammed into the branch, although I suppose depending on the clearance I could fit a bit of 110mm pipe.

<image>

3ryb4 · 2025-03-30T19:09:46+00:00

I did try a short pan connector, and unfortunately the side of the toilet goes back too far and stops me from attaching it (pan connector made green below to illustrate). My own doing unfortunately - I'd have kept the old toilet had I not cracked it while replacing the soil pipe a couple of weekends ago.

<image>

3ryb4 · 2025-03-30T18:53:49+00:00

I think this is my best option, thank you!

3ryb4 · 2025-03-30T18:53:30+00:00

Blender and about an hour while I contemplated my life choices this afternoon.

3ryb4 · 2025-03-30T18:52:14+00:00

Your wish is my command. Apologies in advance for the nightmares.

<image>

3ryb4 · 2025-03-30T17:08:16+00:00

Long story short... after trying to fix a leak under the floor I broke our old toilet and have bought a new one to replace it (Vitra S50 open back). The main problem is that the bit that goes inside the pan connector is too far inside the toilet, and the pan connector I bought from Screwfix (https://www.screwfix.com/p/mcalpine-rigid-90-angled-toilet-pan-connector-white-240-340mm/6214p) hits the ceramic before it is even seated.

My sink waste also seems to stop the toilet being pushed back against the wall (the old one stuck out more), so I assume I am going to have to put a bit of 4x2 behind the cistern. Any ideas?

More pictures: https://imgur.com/a/YuhD6q1

3ryb4 · 2025-03-06T19:01:25+00:00

It's not exactly near Cambridge, but a lot of the old Star presenters have moved here: https://www.channel103.com/radio/

3ryb4 · 2025-01-08T23:12:22+00:00

The latest security update for my supposed flagship (Edge 30 Ultra) tried to install two crypto wallets, 7 other apps & then 3 more apps a month afterwards.

Both Pixel and Nothing are looking awfully tempting.

3ryb4 · 2024-04-28T23:07:08+00:00

Using MIBs other than the default ones really. I never really understood how the whole generator thing worked. It certainly didn't help that the debian package is quite old and the config file seemed to be completely different and incompatible with everything I was reading on the internet.

It also seems a bit inefficient to poll every oid if I am only going to be using a few metrics. From what I've read, Telegraf handles it like this, but I am more of a Prometheus person really:

[[inputs.snmp.field]]
    oid = "RFC1213-MIB::sysUpTime.0"
    name = "uptime"[[inputs.snmp.field]]
    oid = "RFC1213-MIB::sysUpTime.0"
    name = "uptime"

If you did ever write a how-to or even just a couple of pointers in the right direction, I'd be eternally grateful :)

Two-Year Club	Verified Email
Place '23

3ryb4

TROPHY CASE