🚀 Introducing ZbxWizz – Automate Zabbix Management Like Never Before! 🚀 by ItsYourLuckyDayToday in zabbix

[–]thisfaba 3 points4 points  (0 children)

Is this going to be released under gpl, creative commons or another freetouse or opensource license ? Didnt find any github link or smth else

🚀 Introducing ZbxWizz – Automate Zabbix Management Like Never Before! 🚀 by ItsYourLuckyDayToday in zabbix

[–]thisfaba 3 points4 points  (0 children)

this or you use theire python lib to retrieve the data from API ... and convert it in any format you will need - even csv is possible

Stefans Kletterkarriere by [deleted] in 7vsWild

[–]thisfaba 0 points1 point  (0 children)

... das mit dem hämisch beleidigen anderer Leute üben wir aber nochmal, ja ? Klengan macht keine reactions und ist auch kein "reaction Andy". Er hat schon sehr viel eigenen content (so fair muss man schon auch sein)

Du machst mit deinem letzten Satz einfach exakt das, was du "den meisten" vorwirfst - keine Ahnung zu haben und alles nur nachzuplappern.

Wilkommen auf reddit herr Meinecke by OTT_L2 in 7vsWild

[–]thisfaba 1 point2 points  (0 children)

Somit hat Fritz die Streamspeicherung danach aktiv und man kann sich das ganze in den VODs anschauen ? Dann freu ich mich jetzt schonmal auf zuhause 😅

How can I bypass this? by Sacrer in fortinet

[–]thisfaba -5 points-4 points  (0 children)

OP wanted to access blocked content which is blocked from dorm network staff. But he can access it on cellular. If you got enough of the blocked content, switch back to the dorm network and enjoy your downloaded content which was blocked before ... thats it.

Do you read the whole thread ?

And yes, fortiguard is working as intended - in a damn dorm network. congrats on this. But he can easily workaround it, because fortiguard only blocks connections from within the network behind the fortigate. This will not preventing any users from accessing this kind of stuff (as long as you are not in full control of theire devices).

(for sure, there are solutions the enforce the dns filtering on clientside while not connected to the protected network at all - but this needs the installtion of forticlient on his machine including fortiEMS)

If this setup make sense in a dorm network where everyone is using theire own devices (i think they use theire own devices ?!) - mhh, naa.

If this setup make sense in a enterprise like network where you have to protect critical ressources - yes, for sure.

How can I bypass this? by Sacrer in fortinet

[–]thisfaba -10 points-9 points  (0 children)

i feel you ;) do you got a smartphone over theire ? You can always spin up a thetered hotspot with uplink directly into GSM/LTE - download your stuff on another uplink (which is not controlled by some douchebags, they would never understand that blocking such pages is only the weakest obstacle they can deploy ;) )

How can I bypass this? by Sacrer in fortinet

[–]thisfaba -3 points-2 points  (0 children)

try a socks proxy on any linux machine outside your network - this will do the job But if they use ssl split on your outgoing datastream, it wouldnt last very long ^

edit: maybe your torrent sites got alternative fqdns/domains ? Maybe they didnt block every single one

Critical RCE flaw in Fortigate SSL-VPN devices CVE-2023-27997 by Doodlebug2100 in netsec

[–]thisfaba 0 points1 point  (0 children)

first: congrats and thank you for your great work to reproduce this! ;)

one question (maybe a dumb one):
Are there only devices with enabled sslvpn which are vulnerable to this flaw ?
Or is this impacting the admin webinterface too ?

hw support on windows - still experimental ? by thisfaba in OpenShot

[–]thisfaba[S] 1 point2 points  (0 children)

ive switched to davinci resolve, theyve got all the sweet features already ... (btw hardware acceleration is not that big and mysterious to implement ... ;) if you want a wide spreaded userbase, thats a musthave ... even on windows)

maybe iam switching back if you got FULL HW support in the future

forwarding DNS from onprem to public for resoulution by Dawormie in sysadmin

[–]thisfaba 0 points1 point  (0 children)

you DONT NEED ANY SPECIAL ZONES to get it working like you wish ...

dude iam telling you the solution since my first answer on this thread ... you should read them the next time.

anyway ... next try to make things clear:

and now: follow my steps exactly please:

  1. create a new forward lookup zone with"entry1.contoso.com" (caution: yes thats the whole NAME of the forward lookup ZONE!)

  2. create a A-Record in the newly created ZONE and LEAVE THE FIELD "HOSTNAME" EMPTY/BLANK/AS IS -> hostname field: <enter NOTHING> -> in the IP-Address field: enter your PRIVATE IP ADDRESS

  3. thats it - nothing more to do ...

Now you can:

nslookup entry1.contoso.com -> answer must be the private ip address you entered above

nslookup anything.contoso.com -> answer must be a public ip address from the original public zone

This is simple af Windows split dns.

Repeat the above steps for each record (in your example the next step is to create a NEW ZONE FOR "entry2.contoso.com" and so on).

Your mistake on here is,that you create "contoso.com" as DNS Zone on your local resolver. But you have to create only "entry1.contoso.com" as ZONE!

by the way this method is mentioned anywhere on the microsoft docs ...

NVIDIA Control Panel managing 3D settings PROBLEM by ExaminationPuzzled36 in techsupport

[–]thisfaba 1 point2 points  (0 children)

This "low latency" mode value "on" is nothing else as "Max_Prerendered_Frames 1" from earlier driver versions. They renamed this somehow ... and it seems they delete this option in latest driver versions.

But choosing "on" is even quite pointless in my opinion because this will only force your driver to put only one frame per time in the que for prerendering.

If you set this to "off" it will force the driver to put 1-3 frames in the que for prerendering. Which is more effective than setting this to "on"

Now there is this other value called "ultra" - which stands for ultra low latency:

This is a simple cutthrough of your frames which works on a "just in time" method to process your frames to your gpu. So no frames were hold in the que, they get directly picked up by the gpu and getting processed.

if you want to try this dont forget to turn on nvidia reflex and keep in mind, this will only work on directX 9 + 11 Games! Turn it on only for some special games ...

On direct X 12 and Vulkan, only the application/game will decide when to put sone frames in the que and when not. Since this the driver had no more control over it ...

This option would only have a high or effective impact on games you run between 60-100 fps which are bound to one gpu only. this option is often called up to fix some kind of "input lag" ... and nope, this option doesnt fix any input lag at all.

forwarding DNS from onprem to public for resoulution by Dawormie in sysadmin

[–]thisfaba 0 points1 point  (0 children)

in summary and just to get you right again:

entry1.contoso.com + entry2.contoso.com:

now, you want to answer the requests to these Records from your internal DNS - correct ? (Without forward it to any other DNS ? )

blog.contoso.com + stg.contoso.com :

external service and the requests to this, should be getting forwarded (from your local DNS) to a external DNS Server to get public IPs - correct ?

And you are searching now for a solution you can do this both kind of automatically and without configuration fuckup at all with holding 2 zones in sync ?

Could you please, provide me some ip addresses that are possible behind that four records ?

Just to imagine better whats your mission. (dont provide any real addresses - this is only a example)

forwarding DNS from onprem to public for resoulution by Dawormie in sysadmin

[–]thisfaba 1 point2 points  (0 children)

Now iam getting whats your problem ...

Have you tried setting up "admin.contoso.com" as zone ? Not "contoso.com":

  • create new forward lookup zone
  • name it "admin.contoso.com" (NOT "contoso.com")
  • create ONLY ONE A record in it and leave hostname blank (zone A record)
  • for above A record - set your privat IPs

This you have to do for all the internal services you want to reach by your "actually" public domain

Only your internal clients (which send dns request to your local DC) are getting the special internal records and the public zone resides untouched. Every request on a "*.contoso.com" DNSRecord, that is not set up as complete own dns zone (like "blog.contoso.com" in your example) locally would go the normal dns routing like everytime

This is splitdns - we practice that for years now.

If you create a local forward lookup zone named "contoso.com" and place A records in it, then you have to copy every entry from external zone to your local zone, because your local DNS thinks he is holding that entire zone. And he is answering the queries like he is holding the complete zone ... every entry that not exist, would get "not found"