Spyke

Replies

Comment on

Recommendations for Wi-Fi mesh router/AP that can be configured from a browser

I use TP-Link Omada EAP-650's with the OC200 controller (there is a new version of the controller that is supposed to be better) and OpnSense as a router. Grab a POE switch and run wired cables if at all possible, yes they can mesh... wired > wireless and they still need power. With POE they are easy to ceiling mount, I have 2 and can access my wifi from 1/2 a block from home with one mounted near the front door and one near the back. You can use an app or the web interface, you can also forgo the controller and run the software on an always on computer.

Devices that combine the wifi and router are underpowered, designed to be replaced in 2 years or so, and don't get updated enough to truly protect a network in the AI age which is where OpnSense is amazing. The Omada series allows you to literally drop in an extra AP or replace an old one, adopt and apply the setup, and be off and running. Combined with a managed switch and you can create separate vLAN's that will isolate devices until they touch the router and then you can decide what to do with it.

Comment on

Os Duckdns down? Update: it was DNS

No clue. Don't use it myself. I am able to access the website so I would assume the rest is up and working.

Your ISP may be blocking access (many ISP's do not allow hosting things on home connections so check your TOS.) Why they would block access to the website I have no clue but they could see allowing it as allowing people to host a service.

Disconnect your phone from wifi and see if you can access DuckDNS. You can also do some troubleshooting and testing https://www.golinuxcloud.com/how-to-check-if-isp-is-blocking-website/

Also depending on your router if you can setup DNS over TLS or DNS over HTTPS and use two different DNS providers not controlled by your ISP.

If you're using an ISP provided Modem/Router you should probably consider setting up a proper firewall router and get just a modem or put the modem/router in bridge mode so you don't double NAT.

Comment on

I'm upgrading from an old pc to a NAS with OMV. What about RAID?

Software RAID, yes. Hardware RAID, NOOOOOOOO!!!!!!!

Without knowing what the hardware is in the system I need to stress that before getting started.

Software RAID is controller independent, if the MoBo dies tonight you can get a replacement of whatever that is cheap or even grab a HBA (Host Bus Adapter) and hook the drives up. Hardware RAID requires an identical controller with the same version of firmware in most cases. In a home environment hardware RAID is a major pain, most corporations have spare hardware on hand if there is a failure so it's not as much of an issue. Also JBOD (Just a Bunch Of Disks) is not the same as a HBA so using a hardware RAID controller with that turned on for a software RAID is asking for issues. For software RAID in OMV you will be looking at something like BTRFS https://en.wikipedia.org/wiki/Btrfs or using a plugin to add ZFS https://en.wikipedia.org/wiki/ZFS

I come from a FreeNAS/TrueNAS background using ZFS and SAS2008/SAS3008 HBA's.

There are different version of RAID array's, you need to look them up and decide what works best for your data. What works for me or anyone else is irrelevant. No RAID is not a substitute for good backup policies, but it saves a potential TON of work doing a restore and the headaches associated with it. https://en.wikipedia.org/wiki/Standard_RAID_levels

RAID 1 or Mirrors is great for data integrity. You could put all 7 disks in a RAID 0 or mirror configuration and it would take 7 disk failures to lose your data.

RAID 0 or Stripes is great for speed and storage capacity, the data is split into chunks and with all 7 disks you would have maximum capacity of the total sum of all the disks, one disk fails and all your data is gone like a fart in the wind.

RAID 0+1 or Striped Mirrors combines the two above concepts. In some ways you get two disk failure and in others you don't. Take 4 decks of cards, set two side by side, those are your mirrors. Take the other two and put them above the other pair, those are the stripes. Lose two mirrors and the data is gone, lose a single mirror in each stripe and the data is safe. You can mirror and stripe to your hearts content, want 3 mirrors with two stripes it takes 6 drives.

RAID 5 or RaidZ 1 gives you one disk failure redundancy, how it functions depends on the raid controller or software utilized but basically data is split in to chunks and you have the ability to replace a single disk and fully recover. If a second disk fails your data is gone again. Some people consider this dead as the odds of a large drive having an issue during a rebuild is higher. https://www.servnetuk.com/insights/ure-is-raid-5-dead

RAID 6 or RaidZ 2 adds a second disk failure redundancy. If you want maximum space this is what you should probably use with failure redundancy. It's not super fast but unless you need the speed for anything in particular it's a good trade off. With 7 drives this is a good option.

RaidZ 3 Adds a third disk failure redundancy. This is what I use for most of my pools. When rebuilding you are stressing the disks to the maximum and that is when you will find a second issue pop up. In a RaidZ1 your data is gone, in a RaidZ2 you lost your last spare. In a RaidZ3 you still have one failure that will save your bacon.

I have multiple pools. I have the majority of my regular data on a RaidZ3. I have a couple striped mirrors for things like VM's, Docker containers, and things I want a little more speed on.

You can also do things like RAID 0+5 or 1+5. In ZFS this would be called RaidZ1 with two vDev's.

I use TrueNAS because of ZFS, BTRFS is still a work in progress in comparison.

I imagine about now you just about had your head explode, it's tough to make this decision because it puts you down a path. I started when BTRFS was an infant, I stick with ZFS/TrueNAS because I know how things work and it suits my needs. You need to decide what will work for you and you may find that OMV isn't the best path going forward. Take the time to really make a decision about what your needs are today and what they will be in the future 5 to 10 years plus down the road. Don't just say, well (random person on the internet) says this is best so it's what I will do. Every decision is about tradeoffs and compromises.

Once you make a decision one of the best things you can do is do a burn in on the drives. I do it with BadBlocks and run smart tests. I just got done with a batch of 8TB SAS drives and found 4 with issues that were replaced before I even put them in to production. If a drive survives a torture test early on it's less likely to have issues later on. I upgraded from a pool of 4TB drives and out of 11 drives I had 1 failure. When you get to the point where you are thinking about expanding your pool with new drives you will want to buy from a couple different sellers, at different times a week or two apart, or different manufacturer's.

One other thing I will add... Toshiba is verboten in my world. They don't replace, they give you a check and you have to buy at current prices and it's more of a PITA than I want to deal with. BackBlaze is also a great place for information about drive reliability. https://www.backblaze.com/cloud-storage/resources/hard-drive-test-data

Comment on

Self-Hosting a DNS Sinkhole is really important

Reply in thread

No problem.

Be sure to set a cron job for updating the DNS Blocklists, running scrubs, smart tests, and trim if you are using a ssd.

I am working on a way to do snapshots for the system as well for super simple restores that are automatically created. Before an update you WILL want to have a snapshot available. Once snapshots are automated I will probably start doing automatic updates. It basically creates a system similar to how an immutable OS works, if something goofs you can simply roll back to a previous working state and pause updates. I previously had a script I setup via a cron job but the system removed the job during an update.

Comment on

Self-Hosting a DNS Sinkhole is really important

Reply in thread

Try setting a tunable of:

net.link.ether.inet.max_age = 540

By default FreeBSD sets a 20 minute ARP maximum age while many ONT’s set a 9 minute maximum age. This will show up as performance issues initially then cause other issues.

Also Realtek NIC's are notorious for issues with FreeBSD, so if you are using one replacing it with an Intel one is highly recommended.

Comment on

How would you handle a corporate optometrist's office refusing to provide a prescription?

First off (if you are in the US) this isn't just up to state law it’s a violation of federal law.

Under the FTC's Eyeglass Rule (and Contact Lens Rule), eye care providers are legally mandated to release a copy of your prescription immediately upon completion of the exam, whether you ask for it or not, and before attempting to sell you eyewear. They cannot withhold it or force you to buy frames from them first.

If your prescription is still valid (under a year old), call or visit the office and politely but firmly let the front desk or office manager know that withholding a valid prescription violates the FTC Eyeglass Rule, and ask for a printed or emailed copy immediately. Mentioning the FTC usually gets corporate staff to fix the issue real fast without needing to drag the new OD into a formal state board complaint.

If the prescription is expired or nearly expired, save yourself the headache, go to an independent practice for a fresh exam, and leave a detailed review online explaining how the corporate office handles patient records.

Comment on

How do you go no contact with someone in the U.S. if they have your full name, DOB, and SSN?

Move, and the further away you can get, the better. Bigger cities have the advantage of letting you get lost in the crowd, smaller towns can be good because it's a lot harder for them to just show up and not stick out plus you can easily be on a first name basis with local officers.

​I broke contact with my family years ago, and my mother used to call the local sheriff and police departments claiming I was missing or in danger just to force contact. When you get to your new area, go straight to the local police or sheriff's office. Explain that you are safe, an adult, and actively fleeing an abusive family situation. Ask them to make a note on your name so that if your family files a missing person report or requests a "welfare check," the cops already know the deal and won't give out your location.

​If you need help getting away right now, go to a local shelter or domestic violence center. Tell them what is going on and that you need out. They can give you a safe place to stay, help you get your bearings, and can often help set up bus transportation if you have a safe contact in another state.

​Since your brother has your full name, DOB, and SSN, here are the exact steps you need to take to protect yourself from a paper trail:

​Grab your physical original docs before you leave. Get your actual Social Security card, Birth Certificate, Passport, and State ID. Replacing these without a permanent home address is a massive headache, and leaving them behind gives your family leverage over you.

​Lock down IRS.gov and SSA.gov now. Create your official online accounts on IRS.gov and SSA.gov using a brand-new, secure email address before your brother tries to create them under your name. While on the IRS site, sign up for an Identity Protection PIN (IP PIN). This prevents anyone from filing taxes under your SSN, which stops people from using tax records or W-2s to find your new employer.

​Freeze your credit reports. Freeze your credit with all three major bureaus (Experian, TransUnion, Equifax). Don't open store cards, and never give out your physical address for mail—use a P.O. Box or a UPS Store box instead. ​Switch to a completely new bank. Do not just open a new account at your current bank. Go to a brand-new financial institution that your family has zero history with or open up an account with an online only bank. Bank tellers fall for emotional social engineering from crying relatives all the time.

​Watch out for public record leaks. Voter registration rolls are public records in almost every state. Don't register to vote at your new physical address right away, or look into your state's Address Confidentiality Program (ACP) for domestic violence survivors, which lets you use a state substitute address on official records like the DMV. ​Ditch shared phone plans. Get off any shared family plan immediately. Get a cheap prepaid phone under your own name, and check your belongings and vehicle if you have one for things like Apple AirTags or hidden GPS trackers before you make your move.

​Stay completely off social media. Delete or abandon your current accounts. Don't post about your new location, new job, or daily routines anywhere online.

​Taking that first step out the door is terrifying, but physical distance gives you control back. You are not nearly as trapped as you feel right now.

Comment on

Does anyone here have a authentic Jamaican jerk rub recipe that has not been bastardized?

Find an Asian market. Go to their international isle. Look for grace brand or wildwood brand.

The issue is that it's nearly impossible to get scotch bonnet peppers and habanero are not the same.

Also authentic jerk is smoked over pimento wood (pimento is what they call the allspice berries) so even having everything else authentic doesn't guarantee it's going to taste the same.

If you insist on doing your own https://jamaicacafe.org/jerk-chicken/ is pretty much it. And use real fresh ginger, not the pre mushed paste in a tube (if you get a micro plane and freeze the ginger you can quickly grate what you need) and it must be scotch bonnet peppers.

My late wife was from Jamaica.

Also try the Saturday chicken soup https://originalflava.com/soups-and-stews/chicken-saturday-soup/ get some packets of pumpkin soup and use that powder instead of the chicken soup they suggest and use knorr bullion powder for the broth.

Comment on

what is wrong with c/linuxsucks?

Reply in thread

And this will be my last post on the subject. Look out for my post on c/linuxsucks.

https://lemmy.world/post/48179739

Listen up, folks. We all know Linux sucks. It’s a fact. But I did some digging, and the conspiracy goes way deeper than just some neckbeard's broken desktop environment.

​It turns out Linux has infected literally everything. And since Linux sucks, by transitive property, the entire modern world sucks and we need to stop using all of it immediately.

​If you are a true Linux hater, it is time to walk the walk. Here is the hit list of things we need to boycott starting today:

​1. The Internet

​Yep, turn off your router. The Internet runs on Linux. The vast majority of the world’s web servers, DNS servers, and cloud infrastructure (AWS, Google Cloud, Azure) are powered by Linux. Every time you open a webpage, you are validating Linus Torvalds. If you’re reading this post right now, you are part of the problem. Smash your modem. It sucks.

​2. Smartphones (Yes, even yours)

​Are you reading this on an Android? Congratulations, you are carrying a modified Linux kernel in your pocket. It sucks. Oh, you have an iPhone? Well, the massive server farms that Apple uses to sync your iCloud data, send your iMessages, and process your Apple Pay run on—you guessed it—Linux. Throw your phone in a lake.

​3. Entertainment and Streaming

​Netflix, Spotify, and YouTube: Their massive backend streaming infrastructure? All Linux. ​Smart TVs: Most of them run on Linux-based firmware. If you want to watch a movie, go outside and act it out with puppets. Digital entertainment is ruined.

​4. Space Exploration

​NASA sent the Ingenuity helicopter to Mars, and it was powered by a Linux distribution. Space sucks now. SpaceX rockets? Linux. We can’t even leave the planet to get away from it.

​5. High-Speed Rail and Air Travel

​Commercial aviation routing systems, air traffic control data feeds, and international bullet train networks rely heavily on Linux for uptime and reliability. If you want to travel, you better buy a horse. (Just make sure the horse hasn't been microchipped by a vet using a Linux database).

​6. The Entire Global Economy

​The New York Stock Exchange, the Tokyo Stock Exchange, and virtually all major banking backends run on Linux because they need "99.999% uptime." You know what else has 99.999% uptime? Garbage. Money sucks. Go back to the barter system.

  1. Windows and Microsoft (The Ultimate Betrayal)

​Oh, you thought you were safe because you only use Windows? Think again! This goes all the way to the top. The mechanism used to fix, patch, and secure every Windows machine on Earth—Windows Update—is powered by a Linux backend. Microsoft uses Linux servers and container networks to push out their own updates because apparently, Windows Server can’t even handle distributing its own code. So every time your PC forces a random reboot to install a security patch, a Linux server just handed Windows its lunch. Windows sucks so hard that it literally relies on Linux to fix itself, which means Windows is Linux by proxy. They both suck!

​Conclusion: The Ultimate Protest

​If we are going to be pure, we have to commit. I am calling for a total and complete shutdown of modern society until the entire global infrastructure is rewritten in pure, unadulterated Windows ME. ​This is my final post. I am smashing my PC, disconnecting my power grid (because utility companies use Linux to manage the smart grid), and moving into a cave.

​Who is with me?!

Awww, I got banned.

Comment on

I get junk mail from T-Mobile & Verizon offering services that when I call them they say my address is not available for service. Both offer those services to my neighbors. How do I deal with this ?

If you are tired of receiving the offers send them a cease and desist letter via registered mail.

https://legalclarity.org/how-to-legally-tell-someone-to-stop-contacting-you/

If they continue contacting after about 30 days it is harassment and you can file for a restraining order and sue them for damages.

When you go to send the letters be sure to keep a copy for yourself along with the receipts for the mailing and be sure to have a witness to the mailing. I would just ask the person at the post office to do this for proof that what you sent was the same as the copy you keep for yourself.

If you want the service then you need to find out why your neighbors have the service available and you don't. That means escalating the call to a support person.