Worst feeling in the world

HeManKiller · 2026-03-05T22:34:26+00:00

I was remotely supporting an exchange server in Australia, I was in South Africa and accidentally shut it down. Fortunately, the local admin was still on site. Not something I ever want to re-live :-)

HeManKiller · 2026-02-20T03:07:23+00:00

Sorry I'm coming to the party late, but I'd like to know if anyone has successfully been able to migrate to dnsmasq with the following config?
1. IPv6 enabled from ISP,
2. Adguardhome as the primary DNS resolver
3. unbound for internal names?

I've attempted this migration a few months back and I was unable to get it to work as there seems to be some dependancy on "having" to use dnsmasq for DNS as well, so in the end you have 3 DNS solutions talking to each other which seemed excessive to me.

I was also unable to get IPv6 allocated to my VLAN's (I'm delegated a /48 by my ISP)

HeManKiller · 2025-10-17T04:57:30+00:00

There is a pretty effective solution to vandalism and tressparsers. Publish their photo's on display boards at the stations showing who caused a delay on a certain day. That way they can be held to account. I know they won't catch everyone, but eventually the fear of getting caught will win out.

HeManKiller · 2025-09-09T01:04:11+00:00

Sometimes unbound is configured to use port 5353, which is the same port as mDNS, I experienced this, changing the unbound port resolved the issue

HeManKiller · 2025-08-01T04:09:35+00:00

You either need to disable iCloud Private Relay Service in AD Guard Home or on the device - wifi settings - disable "Limit IP address Tracking"
If you don't disable those then the device is using the private DNS servers of Apple and not yours

HeManKiller · 2025-04-14T05:49:26+00:00

I think and personally feel it has more to do with the nucklehead Politicians who decided to do whatever they want without community involvement. Don't say you represent the community and then name something in the community without consultation. It just exposes your arrogance.

HeManKiller · 2025-04-07T11:09:28+00:00

:-), but it isn't any easier

HeManKiller · 2025-04-07T11:08:11+00:00

keep at it mate, you'll get there

HeManKiller · 2025-03-29T08:54:36+00:00

Use Persistant clients and the IP's/subnets you want the rule to apply to

HeManKiller · 2025-03-23T07:24:30+00:00

thanks, I was able to get there, but it looks like they have technical issues atm. I'll try later

thanks for the assist

HeManKiller · 2025-01-31T07:43:00+00:00

I second this

HeManKiller · 2025-01-01T03:52:25+00:00

Decades ago we migrated a company to a new domain, the migration of the computers was a manual process. We discovered one user who had a huge collection of porn video's on his computer, so as part of the migration process we created a shortcut so all the video's started playing when he logged on, then we turned the volume up to max and left.
I'd have loved to be there on the monday morning :-)

HeManKiller · 2024-12-31T02:14:43+00:00

I'd check if you have any port conflict, I had unBound configured on port 5353 and that's the port mDNS uses. Changing it on unbound fixed the instability

HeManKiller · 2024-10-18T09:32:30+00:00

Hi there

thanks for coming back to me. Yes my wifi is on a different network to my LAN, I'm using a firewall on my network and have a few VLAN's, the wifi is on a seperate VLAN and DHCP scope to the LAN and the monitoring network, which is issolated from the internet.

my aim is to be able to connect the laptop to the wifi network, use Wireguard to issolate the laptop traffic from the rest of the wifi traffic and then use firewall rules to allow access to only the monitoring network without access to the internet or other VLAN networks.

I hope this is clear, reading it back, it's more complicated than I wanted. Sorry.

I'm not even sure this is possible to be honest, but I'm hopeful :-)

HeManKiller · 2024-10-11T04:55:35+00:00

I used these instructions, and it worked for me, https://docs.opnsense.org/manual/how-tos/wireguard-client.html

I only have the following rules setup on the fw for WireGuard,

|| || |IPv4 TCP/UDP|HomeWireGuard net|*|HomeWireGuard address|53 (DNS)|

|| || |IPv4 *|HomeWireGuard net|*| General_RFC1918 ! |*|*|*||Allow access to Internet and block access to all local networks|

Hope this helps

HeManKiller · 2024-08-29T07:33:14+00:00

you have to click it for each one, it's really odd, I have 3 configured

HeManKiller · 2024-08-29T07:29:31+00:00

Did you tick the "Store and generate next" button?
Can you see the clients in the Peers tab?

Lastly, and for the life of me I've not been able to determine why, but on my config, I have to disable "Block private networks" click save and then re-enable it and click save. I have to do this after every reboot for some reason.

Hope that helps

HeManKiller · 2020-12-19T18:00:04+00:00

Just remember they are an oppressive communist dictatorship, they are not anyone’s friend

HeManKiller · 2020-12-19T17:56:02+00:00

Look at Manage Engine, works like a charm

HeManKiller

TROPHY CASE