@ben@lef.li
@ben@lef.li avatar

ben

@ben@lef.li

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Gentoo goes Binary (packages) (www.gentoo.org)

To speed up working with slow hardware and for overall convenience, we’re now also offering binary packages for download and direct installation! For most architectures, this is limited to the core system and weekly updates - not so for amd64 and arm64 however. There we’ve got a stunning >20 GByte of packages on our mirrors,...

How to make sure transmission is using my vpn?

I have transmission running on my server in a docker container that is supposed to go through gluetun. If I run test with ipleak and other torrent ip testers it shows my vpn’s ip address. However transmission is running way faster download speeds than deluge or qbit were with the same configuration. It makes me wonder if all...

ben, (edited )
@ben@lef.li avatar

Use a firewall to block all outgoing packages through all interfaces but lo and tun (or wg for Wireguard). Like this for iptables:


<span style="color:#323232;">-A FORWARD -j REJECT --reject-with icmp-port-unreachable
</span><span style="color:#323232;">-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
</span><span style="color:#323232;">-A OUTPUT -o lo -j ACCEPT
</span><span style="color:#323232;">-A OUTPUT -d 1.2.3.4/32 -p udp -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with public IP of your VPN you try to connect
</span><span style="color:#323232;">-A OUTPUT -p icmp -j ACCEPT
</span><span style="color:#323232;">-A OUTPUT -o tun+ -j ACCEPT </span><span style="font-style:italic;color:#969896;">#replace with wg+ for Wireguard
</span><span style="color:#323232;">-A OUTPUT -j REJECT --reject-with icmp-port-unreachable
</span>

If you are paranoid you could mess with INPUT table as well but if OUTPUT is configured properly nobody well ever know your real IP address.

Not sure how well this works with Docker and such, I use LXC containers.

The funny thing is that I am actually seeding Linux ISOs (yes, real ones). The reason I am using a VPN to seed those is because the ISP is complaining about random peers hitting (non-existing obviously) addresses in private IPv4 ranges (like 172.16.1.1) and instead if simply dropping those packages at the switch … oh well. I guess some people have multiple peers connected to each other via private networks but external peers don’t know about these connections and simply try to reach them on their private addresses over public internet.

Anyway yeah I could mess with routing table on my server and null-route those ranges but I have an active VPN contract already so why not using it?

ben,
@ben@lef.li avatar

Indeed. Immich is the way to go. While stating heavy development I find it quite stable. Did not have major issues with it. However I don’t use their interface much. I just use it as 2nd backup location to automatically upload stuff from my phone to something else than the big G.

Obviously this need some sort of server but a VPS will do.

Be honest, do you still use reddit?

I used to check the front page at least once every day, and occassionally check specific subreddits. Now I don’t look at reddit unless theres some drama, like mods getting purged, then I’d go there and enjoy the drama. Occasionally there will be questions that only reddit has the answer to so I have to reluctantly use it. I...

ben,
@ben@lef.li avatar

Nope. Account und its contents deleted and never looked back.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #