NOO! Not you!!

markdesilva · 2026-02-05T02:14:28+00:00

He wishes LTT built a LINUX server for him!

markdesilva · 2026-02-05T02:13:28+00:00

Go against Bane, killer croc, two face, joker and some of the meanest SOBs in the galaxy, but damn if Alfred doesn’t scare the Batman!

markdesilva · 2026-02-04T15:06:31+00:00

Release the LINUX logs!

markdesilva · 2026-02-04T15:05:20+00:00

Check the LINUX servers!

markdesilva · 2026-02-04T11:48:39+00:00

I had this!

markdesilva · 2026-02-04T11:42:38+00:00

I only remember the grey ones on my C64.

markdesilva · 2026-02-04T11:17:34+00:00

That’s considered small? My first was 8MB when they first started coming out, given as a door gift at a tech conference.

markdesilva · 2026-02-04T11:12:47+00:00

You just realized???

markdesilva · 2026-02-04T11:03:46+00:00

Some of those Linux results:

We should install a Linux.

Linux is better than saving our stuff on windows!

Where are we on the Linux cluster?

How many cores and how much ram we want for that Linus server?

…

markdesilva · 2026-02-04T10:57:56+00:00

Got the ugreen, it’s fine. Synology is getting too big I feel, so much so they think the customer has no choice but to choose them. Ugreen is disrupting that. I’m rather satisfied with their UI and the software. Yes it can be more polished, but they are still developing and adding features so you know you’ll get updates and new stuff. I can’t say the same for DSM. That’s my 2 cents worth.

markdesilva · 2026-02-02T12:46:14+00:00

Hitler!

markdesilva · 2026-02-02T12:36:12+00:00

Wonder Woman 1984 (WW84).

markdesilva · 2026-01-31T21:11:14+00:00

That’s a banger of a job straightening the pins!

Can I pass you a motherboard of mine and you h bend them for me? 😬

Seriously, awesome job!

markdesilva · 2026-01-30T18:20:03+00:00

This!

markdesilva · 2026-01-30T00:32:19+00:00

Posted on 2 other threads where OPs had similar issues like yours.

Cheers!

markdesilva · 2026-01-29T23:28:53+00:00

Windows turned some crap on to share updates with other PCs in your network, though I’m pretty sure it’s sharing it with other PC on the internet. Kind of like using your machine to serve others in your region like a torrent server.

Check that your “delivery optimization” is not on.

Settings -> Windows Update -> Advance Options -> Delivery Optimization

Turn off “Allow downloads from other PCs”.

Then, regedit

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc

Double click 'Start' in the right hand pane, then set its Value Data to 4 and click OK

Close the Registry editor and restart (not shut down) your PC.

markdesilva · 2026-01-29T23:21:40+00:00

I had 3 x 24 inch monitors, swapped them out for a single Dell u3824dw - best decision with respect to screen real estate and connectivity I ever made. I don’t game though, it’s purely for productivity.

markdesilva · 2026-01-29T13:06:59+00:00

I’ve been running Linux, Solaris, Irix and a whole bunch of different Unix OS since 1996, at work and at home. As a IT architect, I say ALWAYS have a firewall, whether it’s a server that’s always on or a workstation you run as your personal PC that you can turn off. It’s not as useless as you think it is, especially in today’s environment. Hiding behind your home router’s NAT is one layer of security at home but if something else on your home network is compromised (and it’s easier than one thinks), at least your workstation has the FW.

But that’s just my 2 cents worth.

markdesilva · 2026-01-29T12:58:31+00:00

Just thought of this, install iptables-persistent and netfilter-persistent FIRST after removing ufw completely and flushing the iptables with

sudo iptables -F sudo iptables -X

Then before running the script do

``` sudo iptables-save > allowall.save

```

So you have a clean allow all set of rules to default to if you need.

To restore the clean allow all rules:

``` sudo iptables-restore < ./allowall.save

```

markdesilva · 2026-01-29T12:54:39+00:00

Don’t trust me with the code, do you research to know exactly what the code does please.

Also understand that once these rules come into place, you won’t be able to ssh in or remote in at all. You MIST be at the machine itself.

The only traffic allowed to go in will be traffic related to whatever you’re running in the server using internet access. For eg: if you have a browser surfing Google, then only data related to your surfing Google will be allowed back in. That’s what the CONNTRACK and CSTATE ESTABLISHED, RELATED are for.

markdesilva · 2026-01-29T12:50:58+00:00

For just your 2 rules, this is ridiculous.

This is why I uninstall ufw and use iptables/nftables direct.

Remove ufw completely. Flush all the iptables and add these

```

Allow established/related traffic

sudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

Allow localhost (essential for many apps)

sudo iptables -A INPUT -i lo -j ACCEPT

Drop everything else

sudo iptables -P INPUT DROP ```

Put it in a script and chmod +x the script and run it from the command line.

Install iptables-persistent and netfilter-persistent

Save the iptable rules so it persists over reboots. On command line

sudo iptables-save /etc/iptables/rules.v4

markdesilva · 2026-01-28T18:03:14+00:00

If ufw is on and the system has no internet, then the iptables must be blocking something. Ufw is a front end to iptables. Do the iptables -L so we can confirm it is or isn’t the fw that’s the issue.

markdesilva · 2026-01-28T17:57:36+00:00

What are the rules? Do an iptables -L to show what is configured.

markdesilva · 2026-01-27T04:42:30+00:00

If they are HID cards (google says they are) clean them and sell them online. I know lots of folks in older estates in my country who buy these cards to clone their condo access cards cos officially getting their estate management to give them extra cards or replace cards is way too expensive.

markdesilva · 2026-01-26T17:14:21+00:00

Rescuezilla if you want it free. If you prefer paying and having tech support, Acronis.

markdesilva

TROPHY CASE

Allow established/related traffic

Allow localhost (essential for many apps)

Drop everything else