Redirect 302 redirect from GET @entry_comment_create (822941)

GET https://kbin.spritesserver.nl/index.php/m/piracy@lemmy.dbzer0.com/t/20959/How-to-make-sure-transmission-is-using-my-vpn/comment/209639/favourites

Response
200 OK
IP
216.73.216.21
Profiled on
Token
828f4a

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 13.21 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.06 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "piracy@lemmy.dbzer0.com"
    +title: "piracy"
    +description: """
      ##### ⚓ Community devoted to in-depth debate on topics concerning digital piracy, ethical problems, and legal advancements.\n
      \n
      ---\n
      \n
      ### Rules • [Full Version](https://rentry.co/piracy-rules)\n
      \n
      **1**. Posts must be related to the discussion of digital piracy\n
      \n
      **2**. Don’t request invites, trade, sell, or self-promote\n
      \n
      **3**. Don’t request or link to specific pirated titles, including DMs\n
      \n
      **4**. Don’t submit low-quality posts, be entitled, or harass others\n
      \n
      **5**. Don’t post questions already answered. READ THE [WIKI](https://lemmy.dbzer0.com/post/10901)\n
      \n
      ---\n
      \n
      [![](https://a.imagem.app/oZoQ1v.png)](https://lemmy.dbzer0.com/post/10901)\n
      ---------------------------------------------------------------------------\n
      \n
      ### Loot, Pillage, & Plunder\n
      \n
      - [📜 Megathread](https://rentry.co/megathread)\n
      - [🪶 FAQ](https://rentry.co/piracy-faq)\n
      - [🪶 ISP Complaints](https://rentry.co/piracy-isp-complaints)\n
      - [🪶 Rules](https://rentry.co/piracy-rules)\n
      \n
      ---\n
      \n
      💰 Please help cover server costs.\n
      \n
      [![Ko-Fi](https://lemmy.dbzer0.com/pictrs/image/4a2f073a-3dd8-492a-942d-72bd929c9f1d.png)](https://ko-fi.com/dbzer0)[![Liberapay](https://lemmy.dbzer0.com/pictrs/image/eec4659d-39be-4fc9-bc9e-66a96285ea2c.png)](https://liberapay.com/db0/)\n
      \n
      ---
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 866
    +entryCommentCount: 20194
    +postCount: 7
    +postCommentCount: 149
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729581369 {#321
      date: 2024-10-22 09:16:09.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 51
    +apId: "piracy@lemmy.dbzer0.com"
    +apProfileId: "https://lemmy.dbzer0.com/c/piracy"
    +apPublicUrl: "https://lemmy.dbzer0.com/c/piracy"
    +apFollowersUrl: "https://lemmy.dbzer0.com/c/piracy/followers"
    +apInboxUrl: "https://lemmy.dbzer0.com/inbox"
    +apDomain: "lemmy.dbzer0.com"
    +apPreferredUsername: "piracy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1708748229 {#322
      date: 2024-02-24 05:17:09.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697197339 {#316
      date: 2023-10-13 13:42:19.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Use a firewall to block all outgoing packages through all interfaces but `lo` and `tun` (or `wg` for Wireguard). Like this for `iptables`:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">-A FORWARD -j REJECT --reject-with icmp-port-unreachable\n
    </span><span style="color:#323232;">-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o lo -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -d 1.2.3.4/32 -p udp -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with public IP of your VPN you try to connect\n
    </span><span style="color:#323232;">-A OUTPUT -p icmp -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o tun+ -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with wg+ for Wireguard\n
    </span><span style="color:#323232;">-A OUTPUT -j REJECT --reject-with icmp-port-unreachable\n
    </span>\n
    ```\n
    \n
    If you are paranoid you could mess with `INPUT` table as well but if `OUTPUT` is configured properly nobody well ever know your real IP address.\n
    \n
    Not sure how well this works with Docker and such, I use LXC containers.\n
    \n
    The funny thing is that I am actually seeding Linux ISOs (yes, real ones). The reason I am using a VPN to seed those is because the ISP is complaining about random peers hitting (non-existing obviously) addresses in private IPv4 ranges (like 172.16.1.1) and instead if simply dropping those packages at the switch … oh well. I guess some people have multiple peers connected to each other via private networks but external peers don’t know about these connections and simply try to reach them on their private addresses over public internet.\n
    \n
    Anyway yeah I could mess with routing table on my server and null-route those ranges but I have an active VPN contract already so why not using it?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1702022831 {#1605
    date: 2023-12-08 09:07:11.0 +01:00
  }
  +ip: null
  +tags: [
    0 => "323232"
    4 => "969896"
    5 => "replace"
  ]
  +mentions: [
    "@Rizoid@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1370 …}
  +nested: Doctrine\ORM\PersistentCollection {#1375 …}
  +votes: Doctrine\ORM\PersistentCollection {#2424 …}
  +reports: Doctrine\ORM\PersistentCollection {#1898 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1841 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2354 …}
  -id: 209639
  -bodyTs: "'/32':54 '1.2.3.4':53 '172.16.1.1':182 'accept':43,49,58,75,81 'activ':252 'actual':145 'address':123,176,227 'alreadi':255 'anyway':231 'block':5 'complain':167 'configur':114 'connect':69,202,217 'conntrack':38 'contain':137 'contract':254 'could':103,234 'ctstate':39 'd':52 'docker':131 'drop':187 'establish':41 'ever':118 'exist':174 'extern':210 'firewal':3 'forward':25 'funni':139 'guess':196 'hit':171 'icmp':32,73,95 'icmp-port-unreach':31,94 'input':106 'instead':184 'interfac':11 'internet':230 'ip':62,122 'iptabl':23 'ipv4':179 'iso':148 'isp':165 'j':26,42,48,57,74,80,89 'know':119,214 'like':20,181 'linux':147 'lo':13,47 'lxc':136 'm':37 'mess':104,235 'multipl':200 'network':208 'nobodi':116 'non':173 'non-exist':172 'null':244 'null-rout':243 'o':46,78 'obvious':175 'oh':193 'one':151 'outgo':7 'output':36,45,51,71,77,88,112 'p':55,72 'packag':8,189 'paranoid':101 'peer':170,201,211 'peopl':198 'port':33,96 'privat':178,207,226 'proper':115 'public':61,229 'random':169 'rang':180,247 'reach':222 'real':121,150 'reason':153 'reject':27,29,90,92 'reject-with':28,91 'relat':40 'replac':59,82 'rout':237,245 'seed':146,160 'server':241 'simpli':186,219 'sure':125 'switch':192 'tabl':107,238 'thing':140 'tri':67,220 'tun':15,79 'udp':56 'unreach':34,97 'use':1,135,156,259 'via':206 'vpn':65,158,253 'well':109,117,127,194 'wg':17,84 'wireguard':19,86 'work':129 'yeah':232 'yes':149"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lef.li/comment/365415"
  +editedAt: DateTimeImmutable @1703438403 {#1377
    date: 2023-12-24 18:20:03.0 +01:00
  }
  +createdAt: DateTimeImmutable @1702022831 {#1927
    date: 2023-12-08 09:07:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "piracy@lemmy.dbzer0.com"
    +title: "piracy"
    +description: """
      ##### ⚓ Community devoted to in-depth debate on topics concerning digital piracy, ethical problems, and legal advancements.\n
      \n
      ---\n
      \n
      ### Rules • [Full Version](https://rentry.co/piracy-rules)\n
      \n
      **1**. Posts must be related to the discussion of digital piracy\n
      \n
      **2**. Don’t request invites, trade, sell, or self-promote\n
      \n
      **3**. Don’t request or link to specific pirated titles, including DMs\n
      \n
      **4**. Don’t submit low-quality posts, be entitled, or harass others\n
      \n
      **5**. Don’t post questions already answered. READ THE [WIKI](https://lemmy.dbzer0.com/post/10901)\n
      \n
      ---\n
      \n
      [![](https://a.imagem.app/oZoQ1v.png)](https://lemmy.dbzer0.com/post/10901)\n
      ---------------------------------------------------------------------------\n
      \n
      ### Loot, Pillage, &amp; Plunder\n
      \n
      - [📜 Megathread](https://rentry.co/megathread)\n
      - [🪶 FAQ](https://rentry.co/piracy-faq)\n
      - [🪶 ISP Complaints](https://rentry.co/piracy-isp-complaints)\n
      - [🪶 Rules](https://rentry.co/piracy-rules)\n
      \n
      ---\n
      \n
      💰 Please help cover server costs.\n
      \n
      [![Ko-Fi](https://lemmy.dbzer0.com/pictrs/image/4a2f073a-3dd8-492a-942d-72bd929c9f1d.png)](https://ko-fi.com/dbzer0)[![Liberapay](https://lemmy.dbzer0.com/pictrs/image/eec4659d-39be-4fc9-bc9e-66a96285ea2c.png)](https://liberapay.com/db0/)\n
      \n
      ---
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 866
    +entryCommentCount: 20194
    +postCount: 7
    +postCommentCount: 149
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729581369 {#321
      date: 2024-10-22 09:16:09.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 51
    +apId: "piracy@lemmy.dbzer0.com"
    +apProfileId: "https://lemmy.dbzer0.com/c/piracy"
    +apPublicUrl: "https://lemmy.dbzer0.com/c/piracy"
    +apFollowersUrl: "https://lemmy.dbzer0.com/c/piracy/followers"
    +apInboxUrl: "https://lemmy.dbzer0.com/inbox"
    +apDomain: "lemmy.dbzer0.com"
    +apPreferredUsername: "piracy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1708748229 {#322
      date: 2024-02-24 05:17:09.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697197339 {#316
      date: 2023-10-13 13:42:19.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Use a firewall to block all outgoing packages through all interfaces but `lo` and `tun` (or `wg` for Wireguard). Like this for `iptables`:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">-A FORWARD -j REJECT --reject-with icmp-port-unreachable\n
    </span><span style="color:#323232;">-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o lo -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -d 1.2.3.4/32 -p udp -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with public IP of your VPN you try to connect\n
    </span><span style="color:#323232;">-A OUTPUT -p icmp -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o tun+ -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with wg+ for Wireguard\n
    </span><span style="color:#323232;">-A OUTPUT -j REJECT --reject-with icmp-port-unreachable\n
    </span>\n
    ```\n
    \n
    If you are paranoid you could mess with `INPUT` table as well but if `OUTPUT` is configured properly nobody well ever know your real IP address.\n
    \n
    Not sure how well this works with Docker and such, I use LXC containers.\n
    \n
    The funny thing is that I am actually seeding Linux ISOs (yes, real ones). The reason I am using a VPN to seed those is because the ISP is complaining about random peers hitting (non-existing obviously) addresses in private IPv4 ranges (like 172.16.1.1) and instead if simply dropping those packages at the switch … oh well. I guess some people have multiple peers connected to each other via private networks but external peers don’t know about these connections and simply try to reach them on their private addresses over public internet.\n
    \n
    Anyway yeah I could mess with routing table on my server and null-route those ranges but I have an active VPN contract already so why not using it?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1702022831 {#1605
    date: 2023-12-08 09:07:11.0 +01:00
  }
  +ip: null
  +tags: [
    0 => "323232"
    4 => "969896"
    5 => "replace"
  ]
  +mentions: [
    "@Rizoid@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1370 …}
  +nested: Doctrine\ORM\PersistentCollection {#1375 …}
  +votes: Doctrine\ORM\PersistentCollection {#2424 …}
  +reports: Doctrine\ORM\PersistentCollection {#1898 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1841 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2354 …}
  -id: 209639
  -bodyTs: "'/32':54 '1.2.3.4':53 '172.16.1.1':182 'accept':43,49,58,75,81 'activ':252 'actual':145 'address':123,176,227 'alreadi':255 'anyway':231 'block':5 'complain':167 'configur':114 'connect':69,202,217 'conntrack':38 'contain':137 'contract':254 'could':103,234 'ctstate':39 'd':52 'docker':131 'drop':187 'establish':41 'ever':118 'exist':174 'extern':210 'firewal':3 'forward':25 'funni':139 'guess':196 'hit':171 'icmp':32,73,95 'icmp-port-unreach':31,94 'input':106 'instead':184 'interfac':11 'internet':230 'ip':62,122 'iptabl':23 'ipv4':179 'iso':148 'isp':165 'j':26,42,48,57,74,80,89 'know':119,214 'like':20,181 'linux':147 'lo':13,47 'lxc':136 'm':37 'mess':104,235 'multipl':200 'network':208 'nobodi':116 'non':173 'non-exist':172 'null':244 'null-rout':243 'o':46,78 'obvious':175 'oh':193 'one':151 'outgo':7 'output':36,45,51,71,77,88,112 'p':55,72 'packag':8,189 'paranoid':101 'peer':170,201,211 'peopl':198 'port':33,96 'privat':178,207,226 'proper':115 'public':61,229 'random':169 'rang':180,247 'reach':222 'real':121,150 'reason':153 'reject':27,29,90,92 'reject-with':28,91 'relat':40 'replac':59,82 'rout':237,245 'seed':146,160 'server':241 'simpli':186,219 'sure':125 'switch':192 'tabl':107,238 'thing':140 'tri':67,220 'tun':15,79 'udp':56 'unreach':34,97 'use':1,135,156,259 'via':206 'vpn':65,158,253 'well':109,117,127,194 'wg':17,84 'wireguard':19,86 'work':129 'yeah':232 'yes':149"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lef.li/comment/365415"
  +editedAt: DateTimeImmutable @1703438403 {#1377
    date: 2023-12-24 18:20:03.0 +01:00
  }
  +createdAt: DateTimeImmutable @1702022831 {#1927
    date: 2023-12-08 09:07:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\EntryComment {#1365
  +user: Proxies\__CG__\App\Entity\User {#1378 …}
  +entry: App\Entity\Entry {#1810 …}
  +magazine: App\Entity\Magazine {#313
    +icon: Proxies\__CG__\App\Entity\Image {#294 …}
    +name: "piracy@lemmy.dbzer0.com"
    +title: "piracy"
    +description: """
      ##### ⚓ Community devoted to in-depth debate on topics concerning digital piracy, ethical problems, and legal advancements.\n
      \n
      ---\n
      \n
      ### Rules • [Full Version](https://rentry.co/piracy-rules)\n
      \n
      **1**. Posts must be related to the discussion of digital piracy\n
      \n
      **2**. Don’t request invites, trade, sell, or self-promote\n
      \n
      **3**. Don’t request or link to specific pirated titles, including DMs\n
      \n
      **4**. Don’t submit low-quality posts, be entitled, or harass others\n
      \n
      **5**. Don’t post questions already answered. READ THE [WIKI](https://lemmy.dbzer0.com/post/10901)\n
      \n
      ---\n
      \n
      [![](https://a.imagem.app/oZoQ1v.png)](https://lemmy.dbzer0.com/post/10901)\n
      ---------------------------------------------------------------------------\n
      \n
      ### Loot, Pillage, &amp; Plunder\n
      \n
      - [📜 Megathread](https://rentry.co/megathread)\n
      - [🪶 FAQ](https://rentry.co/piracy-faq)\n
      - [🪶 ISP Complaints](https://rentry.co/piracy-isp-complaints)\n
      - [🪶 Rules](https://rentry.co/piracy-rules)\n
      \n
      ---\n
      \n
      💰 Please help cover server costs.\n
      \n
      [![Ko-Fi](https://lemmy.dbzer0.com/pictrs/image/4a2f073a-3dd8-492a-942d-72bd929c9f1d.png)](https://ko-fi.com/dbzer0)[![Liberapay](https://lemmy.dbzer0.com/pictrs/image/eec4659d-39be-4fc9-bc9e-66a96285ea2c.png)](https://liberapay.com/db0/)\n
      \n
      ---
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 866
    +entryCommentCount: 20194
    +postCount: 7
    +postCommentCount: 149
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729581369 {#321
      date: 2024-10-22 09:16:09.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#285 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
    +entries: Doctrine\ORM\PersistentCollection {#228 …}
    +posts: Doctrine\ORM\PersistentCollection {#186 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
    +bans: Doctrine\ORM\PersistentCollection {#165 …}
    +reports: Doctrine\ORM\PersistentCollection {#151 …}
    +badges: Doctrine\ORM\PersistentCollection {#129 …}
    +logs: Doctrine\ORM\PersistentCollection {#119 …}
    +awards: Doctrine\ORM\PersistentCollection {#108 …}
    +categories: Doctrine\ORM\PersistentCollection {#95 …}
    -id: 51
    +apId: "piracy@lemmy.dbzer0.com"
    +apProfileId: "https://lemmy.dbzer0.com/c/piracy"
    +apPublicUrl: "https://lemmy.dbzer0.com/c/piracy"
    +apFollowersUrl: "https://lemmy.dbzer0.com/c/piracy/followers"
    +apInboxUrl: "https://lemmy.dbzer0.com/inbox"
    +apDomain: "lemmy.dbzer0.com"
    +apPreferredUsername: "piracy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1708748229 {#322
      date: 2024-02-24 05:17:09.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1697197339 {#316
      date: 2023-10-13 13:42:19.0 +02:00
    }
  }
  +image: null
  +parent: null
  +root: null
  +body: """
    Use a firewall to block all outgoing packages through all interfaces but `lo` and `tun` (or `wg` for Wireguard). Like this for `iptables`:\n
    \n
    ```\n
    \n
    <span style="color:#323232;">-A FORWARD -j REJECT --reject-with icmp-port-unreachable\n
    </span><span style="color:#323232;">-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o lo -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -d 1.2.3.4/32 -p udp -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with public IP of your VPN you try to connect\n
    </span><span style="color:#323232;">-A OUTPUT -p icmp -j ACCEPT\n
    </span><span style="color:#323232;">-A OUTPUT -o tun+ -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with wg+ for Wireguard\n
    </span><span style="color:#323232;">-A OUTPUT -j REJECT --reject-with icmp-port-unreachable\n
    </span>\n
    ```\n
    \n
    If you are paranoid you could mess with `INPUT` table as well but if `OUTPUT` is configured properly nobody well ever know your real IP address.\n
    \n
    Not sure how well this works with Docker and such, I use LXC containers.\n
    \n
    The funny thing is that I am actually seeding Linux ISOs (yes, real ones). The reason I am using a VPN to seed those is because the ISP is complaining about random peers hitting (non-existing obviously) addresses in private IPv4 ranges (like 172.16.1.1) and instead if simply dropping those packages at the switch … oh well. I guess some people have multiple peers connected to each other via private networks but external peers don’t know about these connections and simply try to reach them on their private addresses over public internet.\n
    \n
    Anyway yeah I could mess with routing table on my server and null-route those ranges but I have an active VPN contract already so why not using it?
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1702022831 {#1605
    date: 2023-12-08 09:07:11.0 +01:00
  }
  +ip: null
  +tags: [
    0 => "323232"
    4 => "969896"
    5 => "replace"
  ]
  +mentions: [
    "@Rizoid@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1370 …}
  +nested: Doctrine\ORM\PersistentCollection {#1375 …}
  +votes: Doctrine\ORM\PersistentCollection {#2424 …}
  +reports: Doctrine\ORM\PersistentCollection {#1898 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1841 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2354 …}
  -id: 209639
  -bodyTs: "'/32':54 '1.2.3.4':53 '172.16.1.1':182 'accept':43,49,58,75,81 'activ':252 'actual':145 'address':123,176,227 'alreadi':255 'anyway':231 'block':5 'complain':167 'configur':114 'connect':69,202,217 'conntrack':38 'contain':137 'contract':254 'could':103,234 'ctstate':39 'd':52 'docker':131 'drop':187 'establish':41 'ever':118 'exist':174 'extern':210 'firewal':3 'forward':25 'funni':139 'guess':196 'hit':171 'icmp':32,73,95 'icmp-port-unreach':31,94 'input':106 'instead':184 'interfac':11 'internet':230 'ip':62,122 'iptabl':23 'ipv4':179 'iso':148 'isp':165 'j':26,42,48,57,74,80,89 'know':119,214 'like':20,181 'linux':147 'lo':13,47 'lxc':136 'm':37 'mess':104,235 'multipl':200 'network':208 'nobodi':116 'non':173 'non-exist':172 'null':244 'null-rout':243 'o':46,78 'obvious':175 'oh':193 'one':151 'outgo':7 'output':36,45,51,71,77,88,112 'p':55,72 'packag':8,189 'paranoid':101 'peer':170,201,211 'peopl':198 'port':33,96 'privat':178,207,226 'proper':115 'public':61,229 'random':169 'rang':180,247 'reach':222 'real':121,150 'reason':153 'reject':27,29,90,92 'reject-with':28,91 'relat':40 'replac':59,82 'rout':237,245 'seed':146,160 'server':241 'simpli':186,219 'sure':125 'switch':192 'tabl':107,238 'thing':140 'tri':67,220 'tun':15,79 'udp':56 'unreach':34,97 'use':1,135,156,259 'via':206 'vpn':65,158,253 'well':109,117,127,194 'wg':17,84 'wireguard':19,86 'work':129 'yeah':232 'yes':149"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lef.li/comment/365415"
  +editedAt: DateTimeImmutable @1703438403 {#1377
    date: 2023-12-24 18:20:03.0 +01:00
  }
  +createdAt: DateTimeImmutable @1702022831 {#1927
    date: 2023-12-08 09:07:11.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#313
  +icon: Proxies\__CG__\App\Entity\Image {#294 …}
  +name: "piracy@lemmy.dbzer0.com"
  +title: "piracy"
  +description: """
    ##### ⚓ Community devoted to in-depth debate on topics concerning digital piracy, ethical problems, and legal advancements.\n
    \n
    ---\n
    \n
    ### Rules • [Full Version](https://rentry.co/piracy-rules)\n
    \n
    **1**. Posts must be related to the discussion of digital piracy\n
    \n
    **2**. Don’t request invites, trade, sell, or self-promote\n
    \n
    **3**. Don’t request or link to specific pirated titles, including DMs\n
    \n
    **4**. Don’t submit low-quality posts, be entitled, or harass others\n
    \n
    **5**. Don’t post questions already answered. READ THE [WIKI](https://lemmy.dbzer0.com/post/10901)\n
    \n
    ---\n
    \n
    [![](https://a.imagem.app/oZoQ1v.png)](https://lemmy.dbzer0.com/post/10901)\n
    ---------------------------------------------------------------------------\n
    \n
    ### Loot, Pillage, &amp; Plunder\n
    \n
    - [📜 Megathread](https://rentry.co/megathread)\n
    - [🪶 FAQ](https://rentry.co/piracy-faq)\n
    - [🪶 ISP Complaints](https://rentry.co/piracy-isp-complaints)\n
    - [🪶 Rules](https://rentry.co/piracy-rules)\n
    \n
    ---\n
    \n
    💰 Please help cover server costs.\n
    \n
    [![Ko-Fi](https://lemmy.dbzer0.com/pictrs/image/4a2f073a-3dd8-492a-942d-72bd929c9f1d.png)](https://ko-fi.com/dbzer0)[![Liberapay](https://lemmy.dbzer0.com/pictrs/image/eec4659d-39be-4fc9-bc9e-66a96285ea2c.png)](https://liberapay.com/db0/)\n
    \n
    ---
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 866
  +entryCommentCount: 20194
  +postCount: 7
  +postCommentCount: 149
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729581369 {#321
    date: 2024-10-22 09:16:09.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#285 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#281 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#270 …}
  +entries: Doctrine\ORM\PersistentCollection {#228 …}
  +posts: Doctrine\ORM\PersistentCollection {#186 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#248 …}
  +bans: Doctrine\ORM\PersistentCollection {#165 …}
  +reports: Doctrine\ORM\PersistentCollection {#151 …}
  +badges: Doctrine\ORM\PersistentCollection {#129 …}
  +logs: Doctrine\ORM\PersistentCollection {#119 …}
  +awards: Doctrine\ORM\PersistentCollection {#108 …}
  +categories: Doctrine\ORM\PersistentCollection {#95 …}
  -id: 51
  +apId: "piracy@lemmy.dbzer0.com"
  +apProfileId: "https://lemmy.dbzer0.com/c/piracy"
  +apPublicUrl: "https://lemmy.dbzer0.com/c/piracy"
  +apFollowersUrl: "https://lemmy.dbzer0.com/c/piracy/followers"
  +apInboxUrl: "https://lemmy.dbzer0.com/inbox"
  +apDomain: "lemmy.dbzer0.com"
  +apPreferredUsername: "piracy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1708748229 {#322
    date: 2024-02-24 05:17:09.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1697197339 {#316
    date: 2023-10-13 13:42:19.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details