GET https://kbin.spritesserver.nl/index.php/u/@ulkesh@beehaw.org/active/2023-12-30::2023-12-30

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
0.89 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.05 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
Proxies\__CG__\App\Entity\Entry {#1551
  +user: Proxies\__CG__\App\Entity\User {#2364 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
  +slug: "Me-vs-my-ISP"
  +title: "Me vs my ISP"
  +url: null
  +body: """
    So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
    \n
    Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
    \n
    It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
    \n
    Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
    \n
    It’s frustrating.\n
    \n
    I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
    \n
    Edit: TIL ISPs in the US don’t have NATs\n
    \n
    Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
    \n
    Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
    \n
    Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 113
  +favouriteCount: 366
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712089943 {#1604
    date: 2024-04-02 22:32:23.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
  +badges: Doctrine\ORM\PersistentCollection {#1629 …}
  +children: [
    App\Entity\EntryComment {#1648
      +user: App\Entity\User {#263 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1551 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
      +image: null
      +parent: null
      +root: null
      +body: """
        I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
        \n
        Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1703961307 {#1709
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@theblueredditrefugee@lemmy.dbzer0.com"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1567 …}
      +nested: Doctrine\ORM\PersistentCollection {#1561 …}
      +votes: Doctrine\ORM\PersistentCollection {#1528 …}
      +reports: Doctrine\ORM\PersistentCollection {#1568 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
      -id: 265152
      -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://beehaw.org/comment/1919085"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703961307 {#1614
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +"title": 265152
    }
  ]
  -id: 25811
  -titleTs: "'isp':4 'vs':2"
  -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704005137
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/11336181"
  +editedAt: DateTimeImmutable @1709720708 {#1641
    date: 2024-03-06 11:25:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703918737 {#1687
    date: 2023-12-30 07:45:37.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
Proxies\__CG__\App\Entity\Entry {#1551
  +user: Proxies\__CG__\App\Entity\User {#2364 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
  +slug: "Me-vs-my-ISP"
  +title: "Me vs my ISP"
  +url: null
  +body: """
    So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
    \n
    Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
    \n
    It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
    \n
    Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
    \n
    It’s frustrating.\n
    \n
    I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
    \n
    Edit: TIL ISPs in the US don’t have NATs\n
    \n
    Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
    \n
    Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
    \n
    Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 113
  +favouriteCount: 366
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712089943 {#1604
    date: 2024-04-02 22:32:23.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
  +badges: Doctrine\ORM\PersistentCollection {#1629 …}
  +children: [
    App\Entity\EntryComment {#1648
      +user: App\Entity\User {#263 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1551 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
      +image: null
      +parent: null
      +root: null
      +body: """
        I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
        \n
        Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1703961307 {#1709
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@theblueredditrefugee@lemmy.dbzer0.com"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1567 …}
      +nested: Doctrine\ORM\PersistentCollection {#1561 …}
      +votes: Doctrine\ORM\PersistentCollection {#1528 …}
      +reports: Doctrine\ORM\PersistentCollection {#1568 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
      -id: 265152
      -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://beehaw.org/comment/1919085"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703961307 {#1614
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +"title": 265152
    }
  ]
  -id: 25811
  -titleTs: "'isp':4 'vs':2"
  -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704005137
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/11336181"
  +editedAt: DateTimeImmutable @1709720708 {#1641
    date: 2024-03-06 11:25:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703918737 {#1687
    date: 2023-12-30 07:45:37.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
Proxies\__CG__\App\Entity\Entry {#1551
  +user: Proxies\__CG__\App\Entity\User {#2364 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
  +slug: "Me-vs-my-ISP"
  +title: "Me vs my ISP"
  +url: null
  +body: """
    So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
    \n
    Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
    \n
    It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
    \n
    Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
    \n
    It’s frustrating.\n
    \n
    I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
    \n
    Edit: TIL ISPs in the US don’t have NATs\n
    \n
    Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
    \n
    Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
    \n
    Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 113
  +favouriteCount: 366
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712089943 {#1604
    date: 2024-04-02 22:32:23.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2422 …}
  +votes: Doctrine\ORM\PersistentCollection {#2458 …}
  +reports: Doctrine\ORM\PersistentCollection {#2460 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
  +badges: Doctrine\ORM\PersistentCollection {#1629 …}
  +children: [
    App\Entity\EntryComment {#1648
      +user: App\Entity\User {#263 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1551 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
      +image: null
      +parent: null
      +root: null
      +body: """
        I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
        \n
        Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
        """
      +lang: "en"
      +isAdult: false
      +favouriteCount: 1
      +score: 0
      +lastActive: DateTime @1703961307 {#1709
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@theblueredditrefugee@lemmy.dbzer0.com"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1567 …}
      +nested: Doctrine\ORM\PersistentCollection {#1561 …}
      +votes: Doctrine\ORM\PersistentCollection {#1528 …}
      +reports: Doctrine\ORM\PersistentCollection {#1568 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
      -id: 265152
      -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://beehaw.org/comment/1919085"
      +editedAt: null
      +createdAt: DateTimeImmutable @1703961307 {#1614
        date: 2023-12-30 19:35:07.0 +01:00
      }
      +"title": 265152
    }
  ]
  -id: 25811
  -titleTs: "'isp':4 'vs':2"
  -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704005137
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/11336181"
  +editedAt: DateTimeImmutable @1709720708 {#1641
    date: 2024-03-06 11:25:08.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703918737 {#1687
    date: 2023-12-30 07:45:37.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
6 DENIED moderate
App\Entity\EntryComment {#1648
  +user: App\Entity\User {#263 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1551
    +user: Proxies\__CG__\App\Entity\User {#2364 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
    +slug: "Me-vs-my-ISP"
    +title: "Me vs my ISP"
    +url: null
    +body: """
      So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
      \n
      Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
      \n
      It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
      \n
      Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
      \n
      It’s frustrating.\n
      \n
      I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
      \n
      Edit: TIL ISPs in the US don’t have NATs\n
      \n
      Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
      \n
      Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
      \n
      Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 113
    +favouriteCount: 366
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712089943 {#1604
      date: 2024-04-02 22:32:23.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2422 …}
    +votes: Doctrine\ORM\PersistentCollection {#2458 …}
    +reports: Doctrine\ORM\PersistentCollection {#2460 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
    +badges: Doctrine\ORM\PersistentCollection {#1629 …}
    +children: [
      App\Entity\EntryComment {#1648}
    ]
    -id: 25811
    -titleTs: "'isp':4 'vs':2"
    -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704005137
    +visibility: "visible             "
    +apId: "https://lemmy.dbzer0.com/post/11336181"
    +editedAt: DateTimeImmutable @1709720708 {#1641
      date: 2024-03-06 11:25:08.0 +01:00
    }
    +createdAt: DateTimeImmutable @1703918737 {#1687
      date: 2023-12-30 07:45:37.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
    \n
    Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703961307 {#1709
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@theblueredditrefugee@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1567 …}
  +nested: Doctrine\ORM\PersistentCollection {#1561 …}
  +votes: Doctrine\ORM\PersistentCollection {#1528 …}
  +reports: Doctrine\ORM\PersistentCollection {#1568 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
  -id: 265152
  -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://beehaw.org/comment/1919085"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703961307 {#1614
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +"title": 265152
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
7 DENIED edit
App\Entity\EntryComment {#1648
  +user: App\Entity\User {#263 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1551
    +user: Proxies\__CG__\App\Entity\User {#2364 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
    +slug: "Me-vs-my-ISP"
    +title: "Me vs my ISP"
    +url: null
    +body: """
      So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
      \n
      Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
      \n
      It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
      \n
      Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
      \n
      It’s frustrating.\n
      \n
      I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
      \n
      Edit: TIL ISPs in the US don’t have NATs\n
      \n
      Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
      \n
      Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
      \n
      Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 113
    +favouriteCount: 366
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712089943 {#1604
      date: 2024-04-02 22:32:23.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2422 …}
    +votes: Doctrine\ORM\PersistentCollection {#2458 …}
    +reports: Doctrine\ORM\PersistentCollection {#2460 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
    +badges: Doctrine\ORM\PersistentCollection {#1629 …}
    +children: [
      App\Entity\EntryComment {#1648}
    ]
    -id: 25811
    -titleTs: "'isp':4 'vs':2"
    -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704005137
    +visibility: "visible             "
    +apId: "https://lemmy.dbzer0.com/post/11336181"
    +editedAt: DateTimeImmutable @1709720708 {#1641
      date: 2024-03-06 11:25:08.0 +01:00
    }
    +createdAt: DateTimeImmutable @1703918737 {#1687
      date: 2023-12-30 07:45:37.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
    \n
    Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703961307 {#1709
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@theblueredditrefugee@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1567 …}
  +nested: Doctrine\ORM\PersistentCollection {#1561 …}
  +votes: Doctrine\ORM\PersistentCollection {#1528 …}
  +reports: Doctrine\ORM\PersistentCollection {#1568 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
  -id: 265152
  -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://beehaw.org/comment/1919085"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703961307 {#1614
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +"title": 265152
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
8 DENIED moderate
App\Entity\EntryComment {#1648
  +user: App\Entity\User {#263 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1551
    +user: Proxies\__CG__\App\Entity\User {#2364 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2447 …}
    +slug: "Me-vs-my-ISP"
    +title: "Me vs my ISP"
    +url: null
    +body: """
      So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.\n
      \n
      Now, your ISP provides your router, which runs *their* firmware, which (in my case) doesn’t even have the option to enable port forwarding.\n
      \n
      It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.\n
      \n
      Basically this all means that I *have* to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.\n
      \n
      It’s frustrating.\n
      \n
      I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.\n
      \n
      Edit: TIL ISPs in the US don’t have NATs\n
      \n
      Edit 2: OMG so much advice. My knowledge about computers is SO clearly outdated, I have a lot of things to read up on.\n
      \n
      Edit 3: There’s definitely a CGNAT involved since the WAN ip in the router config is not the same as the one I get when I use a website that echos my IP address. Far as I can tell my devices don’t get unique IPv6 addresses either. (funnily enough, if I check my IP address on my phone using roaming data, there’s no IPv6 address at all). It’s a router/modem combo, at least I think since there’s only one device in my apartment (maybe there’s a modem managing the whole complex or something?). And it doesn’t have a bridge mode, except for OTT. Might try plugging my own router into it, but it feels like a waste of time and money from what I’m seeing. Probably best to just host services over a VPN or smth.\n
      \n
      Edit 4: Devices do get unique IPv6 addresses, but it’s moot since I can’t do anything but ping them. I guess it wouldn’t be port forwarding but something else that I would have to do that my router doesn’t support
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 113
    +favouriteCount: 366
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1712089943 {#1604
      date: 2024-04-02 22:32:23.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2422 …}
    +votes: Doctrine\ORM\PersistentCollection {#2458 …}
    +reports: Doctrine\ORM\PersistentCollection {#2460 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1726 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1737 …}
    +badges: Doctrine\ORM\PersistentCollection {#1629 …}
    +children: [
      App\Entity\EntryComment {#1648}
    ]
    -id: 25811
    -titleTs: "'isp':4 'vs':2"
    -bodyTs: "'2':241 '3':265 '4':409 'address':298,311,320,331,415 'advic':245 'anyth':425 'apart':213,351 'basic':143 'best':398 'blacklist':107 'bridg':369 'buy':36 'case':72 'cgnat':270 'check':317 'choos':89 'clear':252 'close':17 'closed-off':16 'combo':338 'complex':360 'comput':249 'concern':29 'config':279 'connect':41 'control':50,177 'custom':99 'd':224 'data':326 'day':26 'definit':268 'depend':185 'devic':305,348,410 'devis':132 'dns':221 'doesn':73,365,449 'earli':25 'echo':295 'edit':230,240,264,408 'either':312 'els':439 'enabl':80 'enough':314 'even':75,94,131 'except':371 'expos':115 'failur':170 'far':299 'feel':384 'firmwar':68,100 'forward':8,53,82,126,436 'frustrat':173 'fuck':202 'funnili':313 'get':6,84,106,288,308,412 'gotten':22 'guess':430 'happi':227 'hole':141 'host':154,401 'instal':97 'internet':20,45,120 'introduc':166 'involv':271 'ip':275,297,319 'ipv6':92,310,330,414 'isp':61,87,110,232 'knowledg':247 'least':340 'like':136,175,183,206,385 'look':4 'lot':257 'm':395 'manag':357 'matter':215 'mayb':352 'mean':146 'might':374 'mode':370 'modem':356 'money':391 'moot':419 'much':244 'nat':90,123,134,138,239 'omg':242 'one':286,347 'option':78 'ott':373 'outdat':253 'outsid':211 'parti':165 'peopl':188 'phone':323 'ping':427 'plug':376 'point':168 'port':7,52,81,435 'port-forward':51 'posit':193 'probabl':397 'provid':62 'punch':142 'purchas':151 'read':261 'realiz':13 'realli':226 'record':222 'refus':124 'relay':157 'roam':325 'router':39,48,64,103,278,379,448 'router/modem':337 'run':66 'scheme':135 'see':396 'separ':155 'server':117 'servic':402 'set':9 'shit':205 'sinc':23,272,343,420 'smth':407 'someon':199 'someth':362,438 'special':133 'still':112 'stuff':179 'support':451 'symmetr':137 'tell':303 'thing':210,259 'think':342 'third':164 'thwart':140 'til':231 'time':389 'traffic':127,160 'tri':375 'trust':198 'uniqu':309,413 'unnecessari':163 'us':235 'use':31,291,324 'vpn':405 'wan':274 'wast':387 'way':129 'web':153 'websit':218,293 'what-have-you':55 'whole':359 'without':104 'wors':85 'would':35,49,442 'wouldn':432"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1704005137
    +visibility: "visible             "
    +apId: "https://lemmy.dbzer0.com/post/11336181"
    +editedAt: DateTimeImmutable @1709720708 {#1641
      date: 2024-03-06 11:25:08.0 +01:00
    }
    +createdAt: DateTimeImmutable @1703918737 {#1687
      date: 2023-12-30 07:45:37.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1550 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).\n
    \n
    Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1703961307 {#1709
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@theblueredditrefugee@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1567 …}
  +nested: Doctrine\ORM\PersistentCollection {#1561 …}
  +votes: Doctrine\ORM\PersistentCollection {#1528 …}
  +reports: Doctrine\ORM\PersistentCollection {#1568 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1566 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1589 …}
  -id: 265152
  -bodyTs: "'also':28 'avail':91 'bridg':58 'cabl':83 'case':69 'certain':19 'deal':45 'devic':25,66 'dmz':34 'doubl':47 'effect':52 'fiber':87 'forward':60 'ftth':77 'gateway':24,56 'gigabit':76 'instead':39 'internet':84 'isp':9,55 'know':4 'left':82 'made':90 'mean':7 'mode':59 'moment':86 'nat':16,21,48 'note':73 'person':71 'provid':30 'router':38,72 'servic':88 'simpli':49 'specif':65 'traffic':62 'typic':29 'us':12 'way':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://beehaw.org/comment/1919085"
  +editedAt: null
  +createdAt: DateTimeImmutable @1703961307 {#1614
    date: 2023-12-30 19:35:07.0 +01:00
  }
  +"title": 265152
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_ADMIN
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
10 DENIED ROLE_MODERATOR
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details