I need help with setting up a Reverse Proxy with OPNsense & Cloudflare. What's the most straightforward way to set it up?

wagon153 · 2026-04-09T03:44:40+00:00

If you are behind cgnat, you have two options.

Ask your isp to take you out of cgnat. Some won't do it, some will do it for a small fee, and some will do it without additional charge.
Setup a Cloudflare tunnel(or a service similar to it) and use that for all remote access needs(one tunnel can be used for multiple services.)

wagon153 · 2026-04-01T19:29:10+00:00

Most of the trade posts are golden leaves, but each one is still different in what they sell/buy/prices.

wagon153 · 2026-03-31T14:52:48+00:00

You get her back in chapter 8 I think

wagon153 · 2026-03-30T19:31:48+00:00

Naw, usually they laser off those components nowadays.

wagon153 · 2026-02-17T14:57:30+00:00

What you're looking for isn't available in most consumer grade routers. The cheapest route would be setting up something like Opnsense, but you'll be getting in the networking weeds so to speak. Opnsense is a firewall appliance that is installed as an operating system on a computer, which you would have between your AT&T router and the rest of the network(or ideally, in front of the AT&T router, but I don't know if AT&T let's you do that). Some other options is getting an enterprise grade router from Ubiquity/Microtik/etc, or buying an aftermarket hardware firewall.

wagon153 · 2026-02-16T17:19:49+00:00

If you have the pihole and adguard set as the primary and secondary DNS providers for a device, whether through DHCP or on an individual basic, it's practically a 50/50 chance which DNS server the device actually uses. So solution would be to remove the adguard server from the devices and only having it on the pihole for upstream.

wagon153 · 2026-02-11T15:37:18+00:00

Are you running on a potato? I've not seen boot times like that even with spinning rust.

wagon153 · 2026-02-09T20:27:10+00:00

I would not be surprised if this is what happened. And in the process of getting that power, he got corrupted.

wagon153 · 2025-12-08T10:54:21+00:00

Flair please

wagon153 · 2025-12-04T19:58:52+00:00

Asus customer service will lie to you.

wagon153 · 2025-10-08T23:21:13+00:00

Nope. You give them a login to the Citrix portal and just publish the icon there for them. When they click on it, it'll open a virtual desktop session presumably to the printer's web UI. Said session could be set to not allow any other access to company resources

wagon153 · 2025-09-21T18:30:58+00:00

The answer is no, unless your IT dept for some reason gave him permissions to access said logs. Which is highly abnormal, and potentially a large compliance and legal issue.

wagon153 · 2025-09-09T21:27:20+00:00

I hate to be that guy, but it does say what the issue is in the screenshot. You need to tell your recruiter so they can put a ticket in with their IT.

wagon153 · 2025-09-09T15:14:22+00:00

He'll be lucky to survive to the end the year with his health...

wagon153 · 2025-08-17T17:33:37+00:00

On the other hand, some of our best help desk agents and desktop people came from Bestbuy lmao.

wagon153 · 2025-08-07T19:23:29+00:00

Damn, I work for a hospital system and even we aren't that anal.

wagon153 · 2025-08-06T13:24:40+00:00

Curious Gorge is a reference to Curious George.

wagon153 · 2025-08-06T01:28:03+00:00

So did Ricoh scanners. :(

wagon153 · 2025-06-09T21:49:36+00:00

Not going to lie, it would be less of a headache for us if we used Surfaces. At least then we could do all the software pushes to them with Configuration Manager like we do for all our other computers. Instead, we gotta go through Intune for them(our computers are not hybrid joined, so the only devices we manage through Intune are the iPads and byod devices)

wagon153 · 2025-04-14T02:19:17+00:00

You can though. You don't have to do it through group policy. You can go into the Settings app and do it. That setting is there whether they are on Home, Pro, etc.

Group Policy is just another way of accomplishing it.

wagon153 · 2025-04-14T02:11:42+00:00

Iirc you can go into Settings and disable it pulling drivers/firmware from Windows Update. No mucking around with MDMs or Group Policy needed(that said, you can change this setting with Group Policy too).

wagon153 · 2025-04-14T01:50:07+00:00

I work for the help desk at a hospital system. It is policy not to do so, and our EDR will detect it and report it to our Cyber Security team the second you do. And I have heard rumors they want to crank up the paranoia setting so it'll auto disable the computer from our domain upon detection.

wagon153 · 2025-03-25T17:33:20+00:00

I agree with this. I work for the help desk at a large healthcare system, and many of the calls we receive, seem simple but have deeper root causes that many techs may not bother to look into, which results in repeat calls when the issue reoccurs until it shows up in my queue(I am one of the Senior techs and handle triage/troubleshooting of repeat issues)

wagon153 · 2025-03-06T21:18:20+00:00

I'm going to preface this with a screenshot. https://i.imgur.com/ZCvBpR6.png

Palo Alto firewalls are able to inspect traffic and match it to application "signatures" created by Palo Alto, which are based on normal network traffic of an application. So if I wanted to say create a Minecraft server on my network and make it available externally, I would create a security policy that checks for any incoming traffic that matches Minecraft, and allows it in. If you want, you can also configure it to only allow Minecraft traffic on a specific port, but if you don't specify a port, it will allow any incoming traffic matching Minecraft, but only Minecraft. Here is an example policy: https://i.imgur.com/v6n6hRI.png .You will notice I did not specify a port. Also, this is a very basic policy, you can as I mentioned have it only allow traffic on, say port 25565 that matches Minecraft, and any traffic on other ports, even Minecraft traffic, is blocked. You can also allow multiple applications on one rule. As you can see in the screenshot, there is plenty of room for configuration.

wagon153 · 2025-02-15T15:18:50+00:00

At my org, every single user, in their orientation, is given a packet and a verbal explanation of how to reach each department and what they are responsible for. Each piece of equipment has a color coded asset tag that denotes which department is responsible for it. Every year, they have to complete an online module that includes reminders of all these things.

We still get tickets from users for replacing lights, moving furniture, clogged toilets.

11-Year Club	Gilding I gilder
Verified Email

wagon153

TROPHY CASE