• 1 Post
  • 28 Comments
Joined 9 months ago
cake
Cake day: January 9th, 2025

help-circle

  • I disagree sort of. I find it hard to believe a new distro is easier to set up than mint or Ubuntu and when it comes time to troubleshoot, youll get less support than the upstreams. Both searching existing posts and making new posts there will be less answers. Unless you make a search fo the upstream, and then there’s a chance your distro tweaked something and it’s different.

    What also makes me sus is that if influencers are promoting lesser-known distros, it might be paid. Which is fine but could mean plans to monetize that distro in the future.






  • I think I have the same protectli as you and it is awesome. Need it for my 2.5gb uplink. I use openwrt on it… Didn’t really like opnsense. I am more used to linux than bsd.

    I host lots of services and get bombarded by scrapers, scanners, and skids both at home and on my VPSs.

    I use ipset for the usual blocklists which I download regularly. I also have tarpits on 22/tcp (endlessh). I pipe the IPs from the endlessh logs into fail2ban which feeds the ipsets. I have ipset blocks and fail2ban on my home firewall and all VPSs and coordinate over mqtt. So any fail2ban trigger > mqtt > every ipset block. Touch my 22/tcp anywhere and you get banned instantly everywhere. The program I use for this is called vallumd and it runs on openwrt.

    I also put maltrail everywhere but I’m not totally sure how to interpret and respond to the results. Probably will implement a pipe from maltrail to my mqtt > blocklist setup.

    I don’t do any network-level adblocking… Might be a future project.






  • As a more advanced user, I have to say, the problems don’t stop. Computers will never be “solved”. They just keep making new puzzles forever. That’s whats fun.

    The more advanced you get, well you can solve the easy problems off the top of your head, but now you have new problems and there are zero search results for your error message. If you can’t figure it out from the docs or irc you just have to read source code.

    I try to document stuff as I find it, even if it means resurrecting an ancient thread. I often search for things and get one result, and it’s me answering my own question a few years ago.