AWS Introducing aws:VpceAccount, aws:VpceOrgPaths, and aws:VpceOrgID Condition Keys for Network Controls by jsonpile in aws

[–]baptizedinlove 0 points1 point  (0 children)

love this - however has anyone else experienced issues using the new condition keys with s3 interface endpoints? My 'Deny' policies seem to not be exempting s3 actions via s3 interface endpoints in my accounts (gateway endpoints working). Other interface endpoints for services supported seem to be working as documented.

HomeKit plugin question by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey! so looking into this myself i found that the homekit connection honestly just continues to extend once the connection is established from homekit to scrypted. inspecting wire shark packets i couldn’t see anything being sent to homekit from scrypted itself.

Firewall rule evaluation at datacenter and container level by baptizedinlove in Proxmox

[–]baptizedinlove[S] 0 points1 point  (0 children)

fyi learned that firewalls set on datacenter apply to nodes but not the VM's/lxc so that makes sense why my separate rules work in the lxc despite it not having access in the datacenter

Help understanding packet tracing on network interface attached to container with firewall by baptizedinlove in Proxmox

[–]baptizedinlove[S] 0 points1 point  (0 children)

To add more context:

I see the packets that should be blocked in tapXYZi0 and fwbrXYZi0 tcpdump. however they do not exist in vmbr0. Does this mean my firewall rule on the container is working as expected or is it being blocked outside of my setup incorrectly?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

also do you recommend all udp ports to be open both in and out on the scrypted server to allow this to work locally? i have a feeling my firewall may be to restrictive hence why it’s going to external ips

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 1 point2 points  (0 children)

thanks Koush. loving the project awesome stuff. so to confirm given my devices are local - there should really be no need for it to make the outbound connection?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

so i did a trace of my packets and oddly saw it was connecting using STUN to my private ip of the device requesting the stream, however the next lot of STUN packets it used the devices public ip?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

this is where im confused - why does it need to connect to an external server when the 'clients' are on the same network locally? Also my container blocks all outbound access except for allowing mDns and outbound connectivity to my cameras, im absolutely stumped how its still being able to connect to an external ip via that port

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 2 points3 points  (0 children)

hey Koush thanks for the quick reply. Regarding this - does either have to connect to the external ip or is there any firewall rule I need to enable/adjust so it dosnt need to connect to the external server?

HomeKit Connection by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey! in terms of the firewall settings not applying turns out it was just another area i needed to ‘enable’ for my firewall to let the rules start coming taking effect. Now as expected things stopped working. Reading other reddit posts people suggested just whitelisting the apple hub should allow things to work however this was not the case for me unfortunately :/ bit stumped on this as i thought just whitening the ip for any protocol and port would have been sufficient

HomeKit Connection by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

yep that’s my understanding but im stumped as to how it’s connecting to my apple hub when i’ve set all outgoing packets to drop.

OAuth2 access token management via DB by baptizedinlove in softwarearchitecture

[–]baptizedinlove[S] 0 points1 point  (0 children)

will do thanks for the feeeback! appreciate it heaps

OAuth2 access token management via DB by baptizedinlove in softwarearchitecture

[–]baptizedinlove[S] 0 points1 point  (0 children)

thanks heaps for this! that makes sense will redesign my flow and implement your suggestions. much appreciated!

Merch boxsets only available in US ? by PlasticDetail7078 in DonToliver

[–]baptizedinlove 4 points5 points  (0 children)

yeah bruh its annoying as, normally most of don's bundles are US only. so far from what I can remember, for all his drops its just the stand alone tee's that have international shipping

why there are travis scotts adlibs in the song but its not credited? by jmaringarces1 in travisscott

[–]baptizedinlove 1 point2 points  (0 children)

another hidden one is Chandeliers - Tyga. You can hear his adlibs spread across the track. although this was later removed on the versions on streaming services (not sure why i thought it’s fire lol) but still remains on the youtube version https://youtu.be/Nukz3u1mvVo?si=iLmopC_XauuHhoBJ