• 0 Posts
  • 21 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle


  • I use Ansible. Just have to be careful with the playbooks, so you won’t end up with a bricked system.

    I run the playbooks once a week from one of the systems and takes care of them. In my case quite a number of them are always online (raspberry pi), so that’s convenient.

    That has worked pretty well.



  • fedev@lemmy.worldtoMemes@sopuli.xyzOr does and doesn't care?
    link
    fedilink
    arrow-up
    38
    arrow-down
    1
    ·
    9 months ago

    And this is something I particularly hate when MS tries to push some new UI change that nobody asked for. Outlook and Teams new UI for example:

    MS: do you want the new UI?

    Me: No

    MS: I’ll just add a new App with the same name to increase the chances of you accidentally opening the new UI. By the way, I’ll make it difficult for you to switch back to the old UI.

    And that’s how I end up with 2 Outlook and 2 Teams.

    On the positive side, that’s just the work laptop because all my personal devices run on Arch.





  • Vista, that’s what ruined it for me. I had XP Pro, and I loved that it had all the features (IIS, FTP Server, etc.). But when Vista came out, it had so many different versions, each one a gatekeeper for different features. That was just too much. XP was the last one I used for my personal use. I jumped into Linux, head first, and I’ve never looked back.







  • There was a way around it however but not something everyone will be able to do with their home router. I had to ssh to the router using ISP admin credentials leaked on the internet, then create a file in init.d that loads a custom iptables file with the firewall rules I needed for IPv6. NAT for IPv6 however was not supported by the kennel used for my router.



  • The router does have a firewall but it blocks everything inbound by default. Some routers (at least mine) do not offer the granularity to filter traffic for certain devices (no NAT either). It’s either allow all in or nothing.

    When you enable IPv6 and switch off the firewall (since you can’t host anything otherwise), every device becomes exposed to the internet.

    Then unless the devices have a firewall themselves, all is exposed. Not just the web services, ssh and the rest as well.