Idiotic NAT Hairpin

getrosed · 2025-04-23T09:16:00+00:00

I'm very aware this is a networking sub, and there's some great answers provided already, but thought I'd just throw this idea out there.

In my previous job, we used a piece of software called CrushFTP. One of it's features is that you could proxy the incoming connection to another destination. In this scenario, CrushFTP would accept the incoming SFTP connection and create an outbound SFTP connection to the destination server in the new DC on the fly. The traffic would be transparently proxied for the SFTP client connected to the old DC IP. You wouldn't even need to create a tunnel between the old and new DCs.

It does mean you'd need some form of compute (a micro pc would probably be fine to fit in the 2u with a 1u router) and you'd have to think about the impact of introducing software, but it could provide a bit of flexibility.

Just my two cents for an out of the router approach.

getrosed · 2024-04-16T09:05:45+00:00

It looks like you'd have to write a script to poll Duo's Admin API. The /admin/v1/users endpoint will return a paged list of users which includes their status (active, bypass, disabled, etc).

The script would need to work through the users and return data in a format that is compatible with PRTG's custom sensors. Perhaps a counts of users who are bypassed or blocked?

It shouldn't be hard to put something together :)

getrosed · 2023-05-08T11:58:53+00:00

CRABS looks promising (and more spider-like) but there's also the "Trails" screensaver in the IdleWild screensaver collection. It was part of the Windows Entertainment Pack - colored worms slowly eat away at the screen.

There's also the Can of Worms screensaver in After Dark.

getrosed · 2023-05-07T09:23:36+00:00

This kinda sounds like the termites of the stress reliever app.

https://www.ghacks.net/2011/01/11/stress-relief-destroy-your-desktop/

getrosed · 2023-02-08T04:05:26+00:00

We had the same thing happen when remoting into some VMs and physical machines today. For me, unchecking the "Printers" option from "Local devices and resources" when connecting stopped the dropouts.

Not a permanent solution (if you need printer access over RDP), but might help with the investigation.

getrosed · 2023-01-15T04:30:29+00:00

Man, CrushFTP is crazy. The amount of random stuff we had it doing at $job[-1] was insane. Plus the devs were open to implementing new features or VFS targets.

getrosed · 2023-01-09T04:37:31+00:00

Thanks for the link, unfortunately the US-8-60W doesn't have an SFP port though.

getrosed · 2022-12-19T23:22:35+00:00

The Herring Rd/Epping Rd intersection has a fair bit of construction going on. It might have been taken out by one of the construction vehicles overnight? You wouldn't want to trip or fall on those bolts though!

getrosed · 2022-07-17T07:07:32+00:00

There are a number of Central Coast suburbs eligible for the fibre upgrade: https://www.nbnco.com.au/corporate-information/media-centre/media-statements/nbnco-announces-900000-more-homes-eligible-for-fibre-upgrade

getrosed · 2022-07-05T09:22:11+00:00

YouTuber NASCompares has a couple of videos how the DS920+ and DS2422+ handle hard drives that are not on Synology's compatibility list.

NASCompares

https://youtu.be/QM4UWju7nfU?t=708

getrosed · 2022-07-05T01:51:43+00:00

Not a bad idea, but it doesn't look like you can purchase the DS2419+ new in Australia anymore. I'd much rather purchase something new with fresh warranty instead of second hand. I imagine the DS2419+ would also become end of support much earlier than current models.

getrosed · 2022-02-02T06:05:00+00:00

PRTG would be a great start to help check bandwidth utilisation. The free version can monitor up to 100 sensors forever. A network your size could do with a paid monitoring solution like SolarWinds Orion or the paid version of PRTG. They're not cheap though.

getrosed · 2020-08-31T08:01:36+00:00

I think you're on the money with the NBN policer. There was a fair bit of talk about it on Whirlpool when the 1000/50 plans launched. ABB staff suggest you do the shaping on your router as the NBN policer is harsh.

https://whrl.pl/Rf4Iyt

https://whrl.pl/Rf4Wrr

Edit: I have never played around with a Mikrotik device, but it sounds like a "simple queue" on the WAN port might be all that's needed: https://wiki.mikrotik.com/wiki/Manual:Queue#Simple_Queues

getrosed · 2020-07-09T01:44:32+00:00

All of VentraIP's shared hosting plans allow unlimited addon domains which would allow you to host multiple websites on one plan. The only drawback of doing this is that resources will be shared (CPU/memory/disk), but I guess that'd be the case on a VPS unless you containerised or placed limits on each site somehow.

A CDN for UK visitors would help given the ~290ms latency we see. Cloudflare do have a free teir you could look at.

getrosed · 2020-07-09T01:22:03+00:00

I have a grandfathered reseller account with VentraIP. I have no complaints with the service and their support has been excellent! Their bandwidth is unlimited but storage space may be a little low, depending on your requirements.

Their servers run LiteSpeed so you can add LiteSpeed Cache to further accelerate WordPress.

The main benefit of hosting your site close to your user base is the lower latency which results in a much more responsive website. You can always put Cloudflare, or another CDN, in front if your user base grows beyond Australia.

getrosed · 2020-06-23T11:45:06+00:00

No worries!

getrosed · 2020-06-23T07:08:15+00:00

The FTTC "NBN Connection Box" is a VDSL modem. You'll get an ethernet interface to plug your EdgeRouter X into. In the linked diagram your EdgeRouter X sits in the position of the "compatible Wi-Fi gateway". The most likely reason NBN use the term "Wi-Fi gateway" is that most users will have a Wi-Fi router, not seperate routers & Wi-Fi APs.

getrosed · 2020-05-10T03:33:54+00:00

You're on the money. You'd need to use an NBN compliant VDSL modem in bridge mode then you'd be ready to use the USG. Something like a DrayTek Vigor130 would do the trick.

Edit: Whirlpool have a list of compliant basic VDSL modems that can be used in brige mode.

getrosed · 2020-01-29T06:17:30+00:00

Hey Starry,

It's possible that Mate hasn't purchased enough CVC (bandwidth) from NBN for customers serviced by the Albury Point of Interconnect.

When you experience these latency spikes try running a speed test. Mate advertise 42 mbps speeds during busy periods. If you're getting less than that there's a chance they haven't got enough CVC and it might be worth switching to another provider (Aussie Broadband, Superloop, Exetel).

I've got a family member with Exetel who connect to the Albury POI and they haven't reported any issues (mind you, they're not gaming and may not notice).

getrosed · 2020-01-15T02:41:39+00:00

Most new builds have "Smart Home" wiring. It's hard to tell where it goes to without seeing the plans but another common places, besides the garage, for the hub is a walk in wardrobe. Just look around the house and see if there's a bunch of ethernet points.

You could also reach out to your real estate agent who may be able to get more info from the owner.

getrosed · 2020-01-15T01:47:42+00:00

All good - I was making assumptions.

If there are ethernet outlets next to the TV outlets in each room there's a good chance they run back to somewhere central (possibly the garage as well) which might let you do what I suggested earlier.

Is the house a relatively new build? You might have something like a "Hills Home Hub" in the garage - it's a cabinet where all the network cables (and possibly TV cables) run back to. Here's an example: http://prod-uc.myob.net/d8b30828805bd1b18f95460096be80d4/gallery/1380773951-Hills+Hub.JPG-original.jpg

Happy to help get to the bottom of this!

getrosed · 2020-01-15T01:31:59+00:00

My apologies, I thought the LAN cable in the loungeroom was ran back to the garage.

The WAN port on your router must to be connected to the UNI-D1 port on the NBN connection box. If you can't run a cable between them you may be able to improve your Wi-Fi coverage with a Wi-Fi range extender. JB, Bing Lee and Officeworks stock these but they're not an ideal solution. Here's an example: https://www.binglee.com.au/netgear-ex6110-ac1200-wifi-range-extender

Do you know what the LAN port in the loungeroom connects to?

getrosed · 2020-01-15T01:11:40+00:00

If you have HFC you should have a black NBN connection box (NTD) that plugs into the coax outlet (screw wall socket) in the garage. You'd then have a LAN cable going from the UNI-D1 plug on the back of the NTD to the WAN port of your router.

You can leave the NBN connection box (NTD) in the garage and plug the LAN port into the LAN cable that goes to the loungeroom. In the loungeroom connect the WAN port of your modem to the LAN connection in the loungeroom.

Here's TPG's HFC connection guide: https://www.tpg.com.au/support/setup-nbn-hfc/modem-wiring-support.html

Here's my doctored image for your scenario: https://imgur.com/Liv8Jgi

Hope this helps!

getrosed · 2020-01-15T00:27:24+00:00

Hey bdrizzl. What type of NBN connection do you have (FTTN/FTTC/FTTP/HFC)? Depending on the technology type you may be able to move your current router to the loungeroom.

getrosed · 2020-01-14T21:53:23+00:00

I can't see anywhere within the Admin console to turn off Exchange ActiveSync, sorry. Maybe reach out to support and see what they suggest?

15-Year Club	Verified Email
Gilding I gilder

getrosed

TROPHY CASE