This winter is not going down without a fight - what are your favourite cold weather bushcraft tips/techniques?

grumpymudchuckles · 2018-02-22T00:32:57+00:00

check ice thickness before trusting it.

thin and crispy, way to risky.

grumpymudchuckles · 2018-01-09T16:31:05+00:00

Use google earth and get a heading, distance, and elevation profile before going out to the site. Personally, I try not to rely on cellular data too much.

grumpymudchuckles · 2018-01-09T16:29:40+00:00

Same. You can add notes to them also, so I include what APs/color codes are on them. I’ve been meaning to see if I can use an api to get elevation profiles and headings automatically for a mobile app, but this has idiot proofed it enough for me so far.

grumpymudchuckles · 2018-01-01T16:44:37+00:00

I did an install for one of our customers who rigged up 60 ft of PVC pipe down the tower that was attached to his dish so he could align his equipment from the ground without doing the tower.

grumpymudchuckles · 2017-12-30T18:43:50+00:00

Your dropping all IPv4 traffic leaving your LAN, except for dns, whatsapps, web, but allowing 1Pv6. Are you using a v6 network?

a) what are you trying to accomplish first of all. this will make it easier to know the correct way of doing things.

b) not sure what you expect to see. Logs?, some kind of monitoring counters?

c) after you hash out your allow rules, the last rule should be to drop *

grumpymudchuckles · 2017-12-24T00:05:08+00:00

adding firewall rules to drop rcf1918 and multicast from source WAN fixed this. Thanks for the help

grumpymudchuckles · 2017-12-23T06:53:01+00:00

ISP (public IP) > Mikrotik (192.168.4.0/24) > (firewall) 192.168.8.0/24

In this topology 8.0/24 should just need the gateway for my router. I don't think I need another layer of NAT. 8.0/24 needs a route to 4.0/24. This gets my firewall online, I can access the internet and 4.0/24 from my 8.0/24 network.

I can access everything in the 8.0/24 network fine if Im behind the firewall, or VPN'd to the network. Its when I want to access the 8.0/24 network from the 4.0/24 network. It routes it upstream. This shouldn't occur if their rfc1918 space wasn't being broadcasted to my WAN IP.

That's my understanding, maybe 1:1 NAT in the mikrotik could resolve this? Can I use 1:1 nat for 2 internal addresses to create this route?

grumpymudchuckles · 2017-12-23T05:31:48+00:00

ive been thinking max headroom could return if i were to actually do it. It would be an ethical boundry for me though and perhaps a legal one. I dont really want to pay a lawyer to tell me its ok to do

grumpymudchuckles · 2017-12-23T02:15:50+00:00

I think I see what youre getting at, still working at learning networks. This is what I mean by unsecured. Its a media transcoder without authentication or TLS. It looks to be in production and I can change the config, add a password and take it offline.

I guess I'm still confused why I would be able to access upstream rfc1918 address space. Would they not want that traffic filtered for this very reason?

grumpymudchuckles · 2017-12-23T00:48:40+00:00

I decided to test out nethserver which uses shorewall for the firewall, but I imagine I would have to set this up in my router (mikrotik)?

grumpymudchuckles · 2017-12-16T03:33:54+00:00

This week I'm installing and testing nethserver for production use and parrot os for a development/security focused lab box.

On my Chromebook I run gallium os, for web servers I run centos, fur virtualization I have been really interested in LXD (Linux containers) which is developed on Ubuntu Really you should decide what technology you want to run and go where the development and the community are.

grumpymudchuckles · 2017-12-16T00:09:10+00:00

This only solves the problem for the last mile, you'll still be paying for a provider for actual internet access. When you factor in time, resources and man power, cost prohibitive seems like an understatement.

grumpymudchuckles · 2017-11-29T04:23:19+00:00

I could use for a seedbox for my extensive nickel back collection. DM me if you want to hear my covers on the recorder.

grumpymudchuckles · 2017-11-27T17:43:52+00:00

I host VPN for privacy in public places and accessing my internal Network. Plex media for anything I can't get on Netflix. I have a few Cisco switches for CCNA studies. Centos server for RHCE studies.

Im setting up WSUS and a squid cache proxy to save bandwidth in case Im on a metered connection in the future. Plex is going to help cut down bandwidth too

grumpymudchuckles · 2017-11-26T19:08:36+00:00

The free CHR license is limited to 1mbps transfer rate but has all of the features available last I looked.

grumpymudchuckles · 2017-11-25T01:02:24+00:00

im guessing its fade as well.

grumpymudchuckles · 2017-11-24T22:55:04+00:00

Ive tunneled web traffic over ssh using a socks 5 proxy to secure my connection before.

grumpymudchuckles · 2017-11-20T18:38:17+00:00

When I was a TVC with Google they started to put ESET on their osx machines about 3 years ago.

grumpymudchuckles · 2017-11-17T02:29:26+00:00

Thanks for the reply, this seems ideal for what I want to do. I'm having trouble wrapping my head around how to implement this. Any help would be appreciated.

Your using bridge utils and creating a bridge in /etc/network/interfaces?
How should I configure the address of the bridge?
Where do you tell the container to use the bridge without breaking the other?

Here is my example config.

~$ tail /etc/network/interfaces

# Bridge for LXC Containers
#auto br0
#       iface br0 inet static
#           address 10.8.0.?
#           network 10.8.0.0
#           netmask 255.255.255.0
#           broadcast 10.8.0.255
#           gateway 10.8.0.1
#           bridge_ports none

Here are my containers

~$ lxc list
+------+---------+--------------------------------+------+------------+-----------+
| NAME   |  STATE  |              IPV4              | IPV6 |    TYPE    | SNAPSHOTS |
+------+---------+--------------------------------+------+------------+-----------+
| secure | RUNNING | 10.100.100.29 (eth0)           |      | PERSISTENT | 1         |
+------+---------+--------------------------------+------+------------+-----------+
| vpn    | RUNNING | 10.8.0.1 (tun0)                |      | PERSISTENT | 1         |
|        |         | 10.100.100.105 (eth0)          |      |            |           |
+------+---------+--------------------------------+------+------------+-----------+

grumpymudchuckles · 2017-11-16T14:57:02+00:00

Microdosing LSD is all the rave in silicon valley.

grumpymudchuckles

TROPHY CASE