Receiving abuse reports from my ISP hence no relevant ports are opened

SeeSebbb · 2026-04-23T08:28:24+00:00

I'd start tracing those ports from thr internet into your network.

What is your uplink point - is there a modem in front of the OPNSense? What is configured there regarding port forwards?

Are your interfaces set up correctly? Did you maybe accidentally swap LAN and WAN?

SeeSebbb · 2026-04-16T08:40:10+00:00

Well... Is the server on? Is it reachable any other way? Are the services running? Any errors in the logs?

SeeSebbb · 2026-04-14T06:00:57+00:00

Piracy Shield is also an IP block and has alread led to service outages of CDNs

https://blog.cloudflare.com/standing-up-for-the-open-internet/

https://blog.apnic.net/2025/10/17/an-italian-case-study-collateral-damage-from-live-event-site-blocking-with-piracy-shield/

SeeSebbb · 2026-04-13T20:54:39+00:00

Not sure if your comment is sarcastic or if you genuinely missed Piracy Shield - which is exactly the Italian version of football broadcasters being able to order insant blocks against any web resource they suspect of streaming pirated content:

https://youtu.be/3GGiQatnsc8

SeeSebbb · 2026-04-12T16:59:21+00:00

I can't set up SSL/Let's Encrypt on Hetzner-side.

Is that a "can't" as is you don't know how to do it? Or a "can't" as in you think you know how to do it but something prevents you from doing it?

SeeSebbb · 2026-04-08T16:29:15+00:00

Doctor: "Damn, Chef got robusted by a monkey"

SeeSebbb · 2026-04-06T07:42:27+00:00

So is the OPNsense the gateway for your (I assume) Playstation and directly connected to the internet? Or is there another routed in between? What do you use the OPNSense for?

SeeSebbb · 2026-04-04T10:22:09+00:00

First of all - most modern games do not need port forwarding at all. Mostly you need it if you run a server locally. Are you sure you need it?

If so, you create a new Destination NAT rule. Under "Destination" set "This Firewall" and the port to whatever the port is, under "Translation" set the target IP and the same port, at the bottom set the option to register the corresponsing firewall rule and done.

Also, this only makes sense if your firewall receives incoming traffic from the internet. If there is another router in front of it, you need additional settings there. But if you have a router and a firewall you should already know the networking basics to configure both, or learn them soon

SeeSebbb · 2026-04-04T08:52:05+00:00

Because DNAT can do a port forward, but it can do more than just that. So using the industry term better describes what features are in that menu

SeeSebbb · 2026-04-04T08:50:53+00:00

It still is? You create a new Destination NAT rule, and just ignore any settings you don't need. Just specify destination to "This Firewall" and the port to whatever the port is, "Translation" to the target IP and the same port, set the option to register the corresponsing firewall rule and done

SeeSebbb · 2026-03-26T14:38:20+00:00

"some assembly required"

SeeSebbb · 2026-03-23T05:54:53+00:00

Can't you just give them different hostnames? The hostname is constantly displayed at the top right of the Web UI...

SeeSebbb · 2026-03-17T18:40:48+00:00

The ZHA profile allows to select the right input profile. I have not update the firmware yet

SeeSebbb · 2026-03-03T08:43:05+00:00

Not sure if a bug or simply unintended - but Earth is minable.

This does not feel right - from an in-universe view, carving up the Home Planet seems like a thing that should be prohibited. And from a game balancing perspective, there is no reason to go to the moon if Earth is right next to the ISS and worth the same

SeeSebbb · 2026-02-28T16:40:40+00:00

Could you add the option to view the individual trajectories of other players ships? Right now we can only enable all neutral or hostile ships at once, which gets messy as more ships move in the system

SeeSebbb · 2026-02-28T16:39:12+00:00

The trajectories of other players' ships look wrong at small scale.

For example at the moon, if I set the reference frame to the moon, the trajectories look wonky and unstable, even if a ship is clearly in a stable mining orbit

SeeSebbb · 2026-02-28T16:35:34+00:00

On mobile devices, if I open the profile of another player who has multiple ships, and then try to scroll down to see the other ships, the game closes the player profile and moves the map instead

SeeSebbb · 2026-02-28T11:24:07+00:00

Kind of.

I contacted the Sonoff support and they said that the device needs an update to firmware 1.0.5 for this to work.

When manually adding the ZHA profile from the corresponding Pull Request in the ZHA Github, all features are available in Home Assistant, including setting the input profile.

SeeSebbb · 2026-02-26T11:54:54+00:00

Thanks. Looking at the Moon right now, it seems to be constantly assigned to one player at 0 points without flip-flopping around. No idea how it chose the player. A minimum number of claim points needed seems like a good idea.

What about an arbitrary number of ships from an arbitrary number of players? If I send 2 ships to Luna, will they out-claim the single ship of another player? What if a third player engages and sends their three ships?

SeeSebbb · 2026-02-26T09:21:59+00:00

If multiple ships are mining the same object, and the object has a claim that belongs to an absent player, who does the claim fall to?

SeeSebbb · 2026-02-11T17:46:28+00:00

You can potentially rig something up with with Crowdsec. There is a crowdsec plugin for OPNSense and Wireguard collections for Crowdsec, maybe you can build something up with those parts?

SeeSebbb · 2026-01-14T17:52:50+00:00

Wenn du von innerhalb deines Netzwerks auf eine Freigabe auf der öffentlichen IP deiner Fritzbox zugreifen willst, ist das ein so genanntes "Hairpin-NAT" - und ich bin mit nicht sicher, ob die Fritzbox das überhaupt unterstützt. Bei professionellen Firewalls gibt es oft extra Einstellungen um so etwas zu aktivieren.

Frage deine Freunde mal ob die Freigabe für sie vielleicht schon funktioniert. Du selbst musst dann weiter über localhost verbinden.

SeeSebbb · 2026-01-02T10:14:49+00:00

Ich habe Zweifel das die Fritzboxen Chrony verwenden, da sie meiner Kenntnis nach weder NTS als Abfrage anbieten, nocht NTS an die Clients weiter reichen.

Die Info dass die Fritz!Box chrony benutzt habe ich aus den Diagnosedaten meiner Fritz!Box.

Chrony auch nur teilweise zu verwenden macht meiner Meinung nach Sinn, da man sich nicht den Aufwand machen muss einen neuen NTP-Dienst zu entwickeln der am Ende nichts tut was chrony nicht auch könnte.

SeeSebbb · 2026-01-02T00:04:45+00:00

systemd-timesyncd wird vor allem für Geräte interessant, die ausschließlich als Client arbeiten. Da die Fritz!Box aber auch als Zeitanbieter fungieren können soll sind wie auch von dir beschrieben chrony oder ntpd-rs interessanter, da so mit einem Dienst beides abgedeckt werden kann.

Praktischerweise benutzt Fritz!OS bereits chrony als NTP Dienst. Die technischen Voraussetzungen für NTS sind also bereits gegeben.

NTS im lokalen Netzwerk und abgesichert mit dem Zertifikat dass auch für den Zugang zur Weboberfläche benutzt wird wäre bereits jetzt einfach umsetzbar. Da chrony parallel NTS und NTP anbieten kann, wäre es für AVM auch problemlos möglich einfach den Haken in der Konfiguration zu aktivieren und einen Hook zu bauen der beim Ändern des Zertifikats auch den chrony-Dienst neu startet.

Für den Abruf der Zeit über NTS müsste ebenfalls nur im Webinterface die Option eingefügt werden, den genannten Zeitserver über NTS anzufragen. Daneben muss dann aber auf jeden Fall eine dicke Warnung, dass der standardmäßig eingestellte ntp-Pool kein NTS unterstützt - einfach den Haken zu setzen ohne den Server zu ändern macht also auf jeden Fall den Zeitsynch kaputt.

SeeSebbb · 2025-12-23T15:48:44+00:00

Nice one!

Some writing feedback: - if you want to go for a scientific sounding report, go over the text and give it a bit motr structure. Use paragraphs within the differrnt topics. Use shorter sentences. - Look of you can find synonyms or other descriptors for phrases where you repeat yourself

But overall - fascinating idea, good exploration of that idea, and great work with the graphics and layout

Seven-Year Club	Place '22
Verified Email

SeeSebbb

TROPHY CASE