• 3 Posts
  • 25 Comments
Joined 1 年前
cake
Cake day: 2023年6月11日

help-circle


  • Maybe I am not thinking of the access control capability of VLANs correctly (I am thinking in terms of port based iptables: port X has only incoming+established and no outgoing for example).

    I think of it like this: grouping several physical switch ports together into a private network, effectively like each group of ports is it’s own isolated switch. I assume there are routers which allows you to assign vlans to different Wi-Fi access points as well, so it doesn’t need to be literally physical.

    Obviously the benefits of vlans over something actually physical is that you can have as many as you like, and there are ways to trunk the data if one client needs access to multiple vlans at once.

    In your setup, you may or may not benefit, organizationally. Obviously other commenters have pointed out some of the security benefits. If you were using vlans I think you’d have at a minimum a private and public vlan, separating out the items that don’t need Internet access from the Internet at all. Your server would probably need access to both vlans in that scenario. But certainly as you say, you can probably accomplish a lot of this without vlans, if you can aggressively setup your firewall rules. The benefit of vlans is you would only really need to setup firewall rules on whatever vlan(s) have Internet access.





  • To add on to this answer (which is correct):

    Your “of” can also just be a regular file if that’s easier to work with vs needing to create a new partition for the copy.

    I’ll also say you might want to use the block size parameter “bs=” on “dd” to speed things up, especially if you are using fast storage. Using “dd” with “bs=1G” will speed things up tremendously if you have at least >1GB of RAM.











  • Author here! I’ve been posting about it a good bit, and especially with the hack of .world and vlemmy’s disappearance, now others have started sharing it too. Besides myself testing it with lemmy.ml, lemmy.world, and lemm.ee, I’ve seen at least a handful of people that say they’ve run it without issues. I’m assuming the real number is much higher but there isn’t any tracking in the app, or even a download counter, so I really have no idea.

    Only known issue at the minute is whether it works on Mac OS X. It theoretically does, but the only person who attempted it ran into issues where OS X wanted to open it as a text file instead of running the program - and it’s the only platform I can’t test myself.

    Obviously if you do have any issues you can report them on GitHub.