• 0 Posts
  • 69 Comments
Joined 1 year ago
cake
Cake day: September 8th, 2023

help-circle









  • I already do use firewall rules, this is just an extra step I take to segment things which also serves to make it a bit easier for me to remember certain addresses. It is entirely unnecessary, but I like it this way.

    Let’s say I have a static IPv4: 72.235.228.162

    And IPv6 block: 2660:1100:45f0:c17:: /60

    What I do is set up a Virtual IP in OPNSense and give it the address 2660:1100:45f0:c171:72:235:228:162

    Then I set up the firewall rules for that IP.

    Then I NAT 1:1 that IP to the NGINX VM’s IP and now the Internet doesn’t need to know about it.





  • Yeah, I gave up because it wasn’t really necessary for me. I have a /29 plus I can open ports so I just decided to set up an SMTP relay on my VPS because my ISP blocks outbound on port 25. I can still do inbound on port 25 so no issues receiving emails. It actually might benefit you to have an SMTP relay on the VPS to properly route the outbound email if you don’t want to have two Wireguard tunnels running.




  • Before the test was mandatory, people only took the test if they thought they needed for entry to college. Now there are more people who don’t want to go to college yet still must take the test. It’s logical to assume that the people who would not go to college or feel that the test is a waste of their time will not perform as well as the people who view it as a barrier that they must cross for their desired life outcome. The simplicity of the test doesn’t really matter.