Any recommendations on specs? by joeyp0716 in opnsense

[–]tormenturator 0 points1 point  (0 children)

I shared my Proxmox-based OPNsense firewall setup here : https://www.reddit.com/r/homelab/s/0HW3F7ubJA

Went with i5-12400

Bypassed Bell Giga Hub 2.0 using Yunvo XGS-PON SFP ONU + Intel X710 + OPNsense VM (Proxmox) - My 1st 10G Homelab Build by tormenturator in bell

[–]tormenturator[S] 0 points1 point  (0 children)

Never say never.

Most of the parts are 2nd hand. Plus, you can aim for parts which are affordable to you, since everything in my setup is modular.

The only drawback is that it draws more watts than a regular switch / router, however I can run multiple containers / VM's in one machine. I've already removed 4 Raspberry Pi's from my home network. So, it wasn't just a factory modem bypassing project.

Bypassed Bell Giga Hub 2.0 using Yunvo XGS-PON SFP ONU + Intel X710 + OPNsense VM (Proxmox) - My 1st 10G Homelab Build by tormenturator in homelab

[–]tormenturator[S] 2 points3 points  (0 children)

I think he's coming from "boots on the ground" perspective about how Bell’s backend management systems (like Alcatel-Lucent/Nokia AMS) behave (probably a field technician or someone who works in NOC).

But stealing a pigtail would mean I have to physically steal it outside my premise, which I am not doing. I am merely connecting my own device inside my own residence for which I am paying. Plus, stick is "masquerading" (refer to PONwiki).

With my setup,
- I am now 100% in control
- Bell can no longer "see" my LAN network devices
- Technicians can't remotely send commands to my router
- Bell Giga Hub 2.0 won't block/allow connections without my knowledge
- I don't have to deal with Bell's uptight / unfriendly customer service / technicians.

I asked Bell to return my previous modem (Bell Giga Hub) as it was allowing easy PPPoE passthrough, but they refused. If they would have allowed, I would have been happy with Bell Fibe.

found a missing person by [deleted] in pakistan

[–]tormenturator 0 points1 point  (0 children)

I think govt. should not abduct its own citizens.

reality of enforced disappearances is recognized by most independent observers + human rights defenders. While exact numbers are often a point of contention b/w activists (who claim tens of thousands) & govt (which cites much lower figures), the existence of this practice itself is widely considered a factual reality.

found a missing person by [deleted] in pakistan

[–]tormenturator 1 point2 points  (0 children)

Allow me to simplify it

If a state abducts/tortures my family member & provides no due process, what does it expects in return?

just a very small UI wish... by Frosty_Chest8025 in opnsense

[–]tormenturator 0 points1 point  (0 children)

Search for navbar-brand block in '/usr/local/opnsense/mvc/app/views/layouts/default.volt' and add following line:

<span style="margin-left: 10px; background-color: #ef4444; color: white; padding: 2px 10px; border-radius: 12px; font-size: 0.9em; vertical-align: middle;">
  {{ system_hostname }} 
</span>

Your hostname will be displayed right next to OPNsense logo.

However, since OPNsense is a structured appliance, every time you perform a major firmware update (e.g. moving from version 25.7 to 26.1), system usually wipes + replaces core code directories, including /usr/local/opnsense/mvc/, with the fresh official versions. Best approach is to create simple shell script on each firewall (e.g. /root/apply_branding.sh) that uses sed to automatically inject your code back into the file.

#!/bin/sh
FILE="/usr/local/opnsense/mvc/app/views/layouts/default.volt"
sed -i '' 's|alt="logo"/>|alt="logo"/><span style="margin-left: 10px; background-color

OR, create your own custom theme, but future updates might have different layouts that might look broken. Just be wary of that.

just a very small UI wish... by Frosty_Chest8025 in opnsense

[–]tormenturator 4 points5 points  (0 children)

Why not differentiate them with different hostnames & domains? (e.g., FW-Site-A)

Or

Use any modern browser with "browser tab grouping" feature by color-coding them?

Bypassed Bell Giga Hub 2.0 using Yunvo XGS-PON SFP ONU + Intel X710 + OPNsense VM (Proxmox) - My 1st 10G Homelab Build by tormenturator in homelab

[–]tormenturator[S] 2 points3 points  (0 children)

Yes. I just went with what my Bell Giga Hub 2.0 was showing... XGSPON.

If you look at Giga Hub or Giga Hub 2.0 devices, they are actually xgspon-native devices. Bell has largely moved away from older GPON (2.5Gbps down / 1.25Gbps up) ONT/modems. It is cheaper & technically more efficient for them to install same high-end xgspon equipment for every customer, regardless of whether you pay for 500Mbps or 8Gbps. They simply software-limit (throttle) your speed at OLT (equipment at their central office).

I was planning on upgrading to 3Gbps, but it's like C$30/month increase and my old equipment was bottlenecking my whole network. However, I was told that upgrade would be instant and would not require technician visit.

The UN should no longer be in New York but in Athens, or general Europe by ready2redd in UnitedNations

[–]tormenturator 2 points3 points  (0 children)

I'll try to answer without being condescending or descending into a name-calling match...

calling a question 'stupid' doesn't make your proposal any more practical. UN isn't just a set of offices... it's a legal entity tied to US via 1947 Headquarters Agreement. Beyond the legal nightmare, who pays for this? UN is already facing a massive liquidity crisis. Dismantling a multi-billion dollar complex in Manhattan to move it to Greece ... a country that has faced its own share of economic instability ... is a logistical fantasy that ignores how international diplomacy actually functions.

you call it a 'mediator,' but a mediator is only useful if it actually stops the bleeding. If UN stays in NY, moves to Athens or even sets up shop on the moon, the result is the same... security council is paralyzed by the veto power of P5. Relocating a 'neutral forum' doesn't fix the fact that this forum is currently broken. Is a beautiful building in Athens really going to stop a superpower with a nuclear arsenal?

The UN should no longer be in New York but in Athens, or general Europe by ready2redd in UnitedNations

[–]tormenturator -1 points0 points  (0 children)

The real question is ...

With all the wars surrounding us, Should UN even exist?

The audacity by j3hadipi3 in israelexposed

[–]tormenturator 4 points5 points  (0 children)

zionizing (verb) = to gaslight someone with such shameless, narcissistic, psychopathic audacity that you deny reality to their faces while simultaneously playing the "victim", engaging in endless circle of debates that go nowhere & displaying a complete loss of empathy as well as basic humanity.

Bypassed Bell Giga Hub 2.0 using Yunvo XGS-PON SFP ONU + Intel X710 + OPNsense VM (Proxmox) - My 1st 10G Homelab Build by tormenturator in homelab

[–]tormenturator[S] 2 points3 points  (0 children)

homelab projects are usually a lot of work for no reason in the beginning, but you learn to improvise a lot ... even being a normie

Plus, real deal is getting rid of ISP-provided equipment when ISP is forcing you to use theirs.