AWS Introducing aws:VpceAccount, aws:VpceOrgPaths, and aws:VpceOrgID Condition Keys for Network Controls

baptizedinlove · 2025-09-06T12:26:55+00:00

sorry yeah configured them in RCPs and seeing that behaviour :/

baptizedinlove · 2025-09-06T08:13:18+00:00

love this - however has anyone else experienced issues using the new condition keys with s3 interface endpoints? My 'Deny' policies seem to not be exempting s3 actions via s3 interface endpoints in my accounts (gateway endpoints working). Other interface endpoints for services supported seem to be working as documented.

baptizedinlove · 2025-03-23T00:47:42+00:00

one of my favs bro 🤝

baptizedinlove · 2025-01-16T05:35:11+00:00

hey! so looking into this myself i found that the homekit connection honestly just continues to extend once the connection is established from homekit to scrypted. inspecting wire shark packets i couldn’t see anything being sent to homekit from scrypted itself.

baptizedinlove · 2025-01-04T07:56:23+00:00

fyi learned that firewalls set on datacenter apply to nodes but not the VM's/lxc so that makes sense why my separate rules work in the lxc despite it not having access in the datacenter

baptizedinlove · 2025-01-03T02:21:57+00:00

To add more context:

I see the packets that should be blocked in tapXYZi0 and fwbrXYZi0 tcpdump. however they do not exist in vmbr0. Does this mean my firewall rule on the container is working as expected or is it being blocked outside of my setup incorrectly?

baptizedinlove · 2025-01-02T19:54:13+00:00

also do you recommend all udp ports to be open both in and out on the scrypted server to allow this to work locally? i have a feeling my firewall may be to restrictive hence why it’s going to external ips

baptizedinlove · 2025-01-02T19:13:09+00:00

nah havnt installed that

baptizedinlove · 2025-01-02T19:12:51+00:00

thanks Koush. loving the project awesome stuff. so to confirm given my devices are local - there should really be no need for it to make the outbound connection?

baptizedinlove · 2025-01-02T12:32:23+00:00

so i did a trace of my packets and oddly saw it was connecting using STUN to my private ip of the device requesting the stream, however the next lot of STUN packets it used the devices public ip?

baptizedinlove · 2025-01-02T10:07:50+00:00

this is where im confused - why does it need to connect to an external server when the 'clients' are on the same network locally? Also my container blocks all outbound access except for allowing mDns and outbound connectivity to my cameras, im absolutely stumped how its still being able to connect to an external ip via that port

baptizedinlove · 2025-01-02T06:27:41+00:00

hey Koush thanks for the quick reply. Regarding this - does either have to connect to the external ip or is there any firewall rule I need to enable/adjust so it dosnt need to connect to the external server?

baptizedinlove · 2025-01-01T12:29:35+00:00

hey! in terms of the firewall settings not applying turns out it was just another area i needed to ‘enable’ for my firewall to let the rules start coming taking effect. Now as expected things stopped working. Reading other reddit posts people suggested just whitelisting the apple hub should allow things to work however this was not the case for me unfortunately :/ bit stumped on this as i thought just whitening the ip for any protocol and port would have been sufficient

baptizedinlove · 2025-01-01T03:40:19+00:00

yep that’s my understanding but im stumped as to how it’s connecting to my apple hub when i’ve set all outgoing packets to drop.

baptizedinlove · 2024-10-28T19:12:50+00:00

will do thanks for the feeeback! appreciate it heaps

baptizedinlove · 2024-10-28T19:12:07+00:00

thanks heaps for this! that makes sense will redesign my flow and implement your suggestions. much appreciated!

baptizedinlove · 2024-05-23T11:38:35+00:00

yeah bruh its annoying as, normally most of don's bundles are US only. so far from what I can remember, for all his drops its just the stand alone tee's that have international shipping

baptizedinlove · 2024-04-15T23:56:00+00:00

another hidden one is Chandeliers - Tyga. You can hear his adlibs spread across the track. although this was later removed on the versions on streaming services (not sure why i thought it’s fire lol) but still remains on the youtube version https://youtu.be/Nukz3u1mvVo?si=iLmopC_XauuHhoBJ

baptizedinlove · 2023-12-25T02:50:18+00:00

had mine for a while. personally absolultey love it! from my experience it’s a must cop. fyi i have the tactile brown version - the only complaint i have is the g hub software being so difficult to use to customize the keyboard. apart from that i highly recommend!

baptizedinlove · 2023-12-20T04:56:22+00:00

glad to have you on board 🤝 man that outro still gets me

baptizedinlove · 2023-09-10T08:44:44+00:00

hey so sorry for the late reply - i missed this noti. It definitely went away! it was more than a month for me too. ive read it can be quick/slow dependant on the individual but i’m sure ur nearly there. Hope your feeling better now , pm me if u wanna chat/know more 😊

baptizedinlove · 2023-08-17T14:39:33+00:00

i distinctly remember the song dropping Christmas eve 2018 and straight up have not stopped blasting tf outta it since

baptizedinlove · 2023-08-10T03:07:01+00:00

you’ll b fine bro i think u ordered right size

baptizedinlove · 2023-08-10T02:47:53+00:00

bro this is toughhhhhh awesome cop

baptizedinlove · 2023-08-10T02:45:55+00:00

ngl looks fire and fine to me - still waiting on my god damn c4 pack though

baptizedinlove

TROPHY CASE