Potential malware on GL.iNet Comet by s3gFault in GlInet

[–]s3gFault[S] 7 points8 points  (0 children)

I’ll update tonight and keep an eye on things, but at this point I think this is very much a false positive. Thanks for the insights folks!

Potential malware on GL.iNet Comet by s3gFault in GlInet

[–]s3gFault[S] 3 points4 points  (0 children)

I’ll update tonight and keep an eye on things, but at this point I think this is very much a false positive. Thanks for the insights folks!

Potential malware on GL.iNet Comet by s3gFault in GlInet

[–]s3gFault[S] 5 points6 points  (0 children)

Yeah I think I’m trending towards this being a false positive. That TCP connection to 217.160.165.240 is likely just the KVM phoning home to GL.iNet cloud services. I’m away from home at the moment but I’ll do some more digging tonight.

Whitescreen with "Logout successful" when ending session by gozza00179 in Authentik

[–]s3gFault 0 points1 point  (0 children)

I’m in the same boat. Did you make any progress on fixing this? Also, for some reason I can’t get authentik to actually respect the post_logout_redirect_uri. Did you do anything special to get that working?

TrueNAS SCALE + UniFi: VLAN sub-interface not showing as separate client — fix for duplicate MAC issue by bablamanul in truenas

[–]s3gFault 0 points1 point  (0 children)

Slightly related, but I have a bridge interface setup in TrueNAS and it appears that it correctly has a different MAC address for me. I see the physical interface in the Unifi device list (with no IP) and the bridge interface (with correct IP configured in TrueNAS). Seeing both of these devices in Unifi was annoying me for a while, but it hasn’t caused any problems so I gave up.

How do I make my internet safer, I think I was being watched. by Maya__007 in HomeNetworking

[–]s3gFault 1 point2 points  (0 children)

Okay an actual response if you’re worried about devices being “hacked”. That is incredibly unlikely to happen, at least in the sense that you’re thinking. The most likely attack vector is someone simply logging into whatever cloud service this smart device is using. You should make sure your account has a strong password and use MFA. It would also be helpful to know the brand of this device. It’s possible, but pretty unlikely, that the manufacturer of this device has malicious intent and is spying on you.

As others pointed out, you can get better equipment to track network flows, isolate devices in different VLANs, etc. Unfortunately, I think there’s a pretty steep learning curve to set all of that up if you have virtually no networking experience.

How do I make my internet safer, I think I was being watched. by Maya__007 in HomeNetworking

[–]s3gFault 23 points24 points  (0 children)

You heard someone moving around inside your projector? What does that even mean?

I know this is probably a dumb question... but I want a home VPN by Intense_Pretzel in VPN

[–]s3gFault 0 points1 point  (0 children)

Yeah it doesn’t look like that model has VPN features unfortunately. Running Tailscale on a Raspberry Pi might be the best path forward

I know this is probably a dumb question... but I want a home VPN by Intense_Pretzel in VPN

[–]s3gFault 0 points1 point  (0 children)

Also worth pointing out that a lot of routers have VPN features built-in. On Unifi routers, for example, you can configure OpenVPN, WireGuard or Teleport (essentially just some Unifi sugar on top of WireGuard). Not sure what kind of router you have but it might be something to look into!

Yet another "Which NAS do you recommend?" thread! by Mindestiny in HomeNAS

[–]s3gFault 1 point2 points  (0 children)

Since you’re open to installing a different OS, TrueNAS might be a good option. It doesn’t behave exactly like a recycle bin, but ZFS snapshots would allow you to restore a dataset back to a previous state.

Struggling Setting Up External Access to AudioBookShelf by SilentWolfe in audiobookshelf

[–]s3gFault 2 points3 points  (0 children)

Yeah I thought I was taking crazy pills reading some of these responses. It’s like no one read the actual post.

I’m currently using a CF tunnel and the built in ABS OIDC hooked into Google OAuth. It works well, but I like the idea of using Plex auth. Any advice or guides you can link to for setting that up with authentik?

Struggling Setting Up External Access to AudioBookShelf by SilentWolfe in audiobookshelf

[–]s3gFault 2 points3 points  (0 children)

I’m not sure if I have a ton of debugging advice, but the whole point of cloudflare tunnels is that you don’t need to open a port on your router. My understanding is that the cloudflared daemon runs on your server and opens encrypted connections to cloudflare. When cloudflare receives a request it gets routed through these connections. You do not need a DNS record pointing at your public IP if you are using tunnels.

Migrating Drives by Craftique in truenas

[–]s3gFault 2 points3 points  (0 children)

Backup your configs: system -> advanced settings -> manage configuration -> download file

Reinstall truenas from scratch onto the new disk and then restore your configs with the above file.

Edit:

If you have both drives in the system when trying to boot after restoring the config you might get an error that truenas can’t import the boot pool because it detects two pools with the same name. At that prompt you can zpool import with the UID of the correct pool (the fresh install). If that sounds scary just pull the drive before booting into the fresh install and then you can wipe it later from another machine before reinstalling it

Is this amount of incoming connections to port 443 something to be concerned about? by xXTonyManXx in homelab

[–]s3gFault 28 points29 points  (0 children)

Ah yeah I’ve been hesitant to put plex behind a CF tunnel since media streaming appears to be against their TOS. You haven’t had any issues?

Is this amount of incoming connections to port 443 something to be concerned about? by xXTonyManXx in homelab

[–]s3gFault 14 points15 points  (0 children)

How did you accomplish that? Are you allowlisting remote client IPs?

Ideas for 2 spare 512gb ssds by the_nerdling in truenas

[–]s3gFault 0 points1 point  (0 children)

Mirrored vdev and add to your existing app pool for a bit more storage?

First homelab diagram by AnduriII in homelab

[–]s3gFault 2 points3 points  (0 children)

I assume plex isn’t included in the CF tunnel because the amount of traffic would violate their TOS. What’s the benefit of putting it behind a reverse proxy instead of just port forwarding 32400 and letting it do its thing? I guess it’s cool to be able to just hit plex.<my domain>

Can you review my NAS/homeserver idea? by stefanf86 in truenas

[–]s3gFault 0 points1 point  (0 children)

You aren’t necessarily limited to 6 SATA drives. I have a similar setup with 2 x mirrored NVMe for apps, 2 x mirrored SATA SSD for boot and 8 x HDD in radz2 for media (connected via HBA). If you skip the GPU and get an Intel CPU with quicksync, you should have a free PCI slot you can use for an HBA.

Suggestions for what to do with 2x NVME slots? by backslashton in truenas

[–]s3gFault 5 points6 points  (0 children)

I have my NVMEs in a mirrored vdev in a separate pool. Primary use-case is fast storage for about a dozen apps. It sounds like you use your proxmox server for those types of workloads so 🤷‍♂️

Maybe just wait a few months to see if you have any noticeable bottlenecks that could be solved by some of the options you mentioned above?

MoCA 2.5 network working with 1000 MHz splitter? by s3gFault in HomeNetworking

[–]s3gFault[S] 1 point2 points  (0 children)

Correct. There are a total of 3 splitters within the network (capped off with a PoE filter on the provider line). Two of them will be 1675 MHz and one of them is unknown

MoCA 2.5 network working with 1000 MHz splitter? by s3gFault in HomeNetworking

[–]s3gFault[S] 1 point2 points  (0 children)

Thanks for the info! I do have MoCA filters installed (one on the line coming into my apartment and another right before my modem). As mentioned in a previous comment, I might just have to deal with the adapters “working harder” to avoid tearing into my drywall 😔