shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

266
active users

#TCPIP

0 posts0 participants0 posts today

Yes, The Book of PF, 4th Edition Is Coming Soon nxdomain.no/~peter/yes_the_boo

Long rumored and eagerly anticipated by some, the fourth edition of The Book of PF is now available for preorder nostarch.com/book-of-pf-4th-ed #openbsd #pf #packetfilter #freebsd #networking #security #tcpip #ipv6 #ipv4 #bookofpf

... and of course somebody had to ask, "when can we expect a fifth edition", to which the answer was "let's get this one out the door first"

That said, watch this space for further announcements!

nxdomain.noYes, The Book of PF, 4th Edition Is Coming Soon

Do I have anyone within my reach who would be willing to help me debug a DNAT issue on OPNsense?

I can sincerely say that it's *probably* trivial, and I am *probably* just missing something obvious; but it's not obvious when you're not quite sure what you're looking for. Reading the documentation, browsing the forum and searching the web has not led me to find a solution.

Boosts appreciated.

#OPNsense#NAT#DNAT
Replied in thread

@dragonarchitect @DeltaWye @torproject But yeah, to offer even simpler analogies for and "#TechIlliterates":

Consider your Internet connection like driveways or drive-in with in-going (download) and outgoiung (upload) connections.

The wider (faster) the lane (bandwith) the bigger and heavier vehicles can drive in faster to reach the loading bay (device).

And data doesn't get mixed up because every data packet - like a real life package - has it's own shipping label that enshures your router and any device using the same internet connection knows this if from/to said device and even application.

All one can do is make things slow down due to parallel use - just like when multiple delivery companies arrive at the same house or even same person and they've to stand in line delivering their packages: The Amazon package won't fuse together with the eBay package or Newegg package... They all are comparmentalized to the point that like with an Apartment complex, the tennant on the top floor won't even know that someone rang the bell at the 2nd floor and now someone's getting a fridge delivered: They may only see the "slowdown" in that the delivery will likely occupy the elevator or staircase for a few mins if they happen to use them at the same time.

It's like a set of escalators with asymetric speeds being more escalators down (load) than up (load): Worst-case people stand in line to get on the stairs or wheelchair users wait in line for the elevator...

And TCP/IP even has automatic measures in place to enshure packages arrive at their desination intact and complete, and if in doubt will resend a package upon request.

That's why even *unstable and slow+ internet connections just feel slower, not broken unless they loose the majority of packages.

Which is my mobile networks tend to throttle customers not by negotiating a slower bandwith but merely dropping "excess packets" and avoid congestion down to literal traffic managment...

So yeah, #TCPIP is very rugged and stable and designed to handle said speed issues just fine - kinda like a small residential road will merely experience a slowdown when a big truck parks on the roadside to unload a ton of furniture for a move-in: It doesn't result in the bypassers having chairs loged into their widscreens or their passengers end up inside the boxtruck, and unlike the real-life analogy they can't even purposefully attempt that.

In fact, most CPEs aka. "Routers" offered by ISPs do even go so far as to prioritize traffic and prevent a single device from occupying all the bandwith, going as far as to actively reduce lower-priority traffic bandwith in favour of VoIP and IPTV streaming: Kinda like intelligent traffic lights or a traffic warden / traffic police officer will deliberately slow down if not stop traffic to let emergency vehicles with lights and sirens pass through...

And that all happens transparently in the background: Just like any postal / parcel delivery service will automatically prioritize express / overnight / airmail deliveries and expedite them over regular shipments.

Feel free to pick whatever feels the most appropriate analogy, because the Internet isn't like domestic water piping where one shared heater can result in someone flushing the toilet causing the sower to get hot, but instead only reduce the output of water at the showerhead.

Shiny MastodonCalyo Delphi (@dragonarchitect@rubber.social)@DeltaWye@mstdn.social You are definitely correct. The only possible impact is that her use of the internet might slow the iPad update down, or the iPad update might slow her internet use down. But this impact will likely be completely unnoticeable. Your mother's understanding of how "the internet" works likely comes from the days of dial-up, when one's use of the phone or "the internet" would hard-block the other use entirely. This is not the case with broadband internet. Even DSL didn't have this problem

I'm taking a class on TCP/IP and I can't stop wondering -- WHAT HAPPENED TO IPv5????? Was it killed in an accident to which IPv6 was the only witness, and nobody talks about it anymore, but IPv4 secretly believes its heir apparent murdered its only sibling? When will the textbook reveal the truth of this mystery?

... this is why liberal arts majors shouldn't retrain in tech.

#DEFCONTraining Las Vegas Spotlight: Join Chris Greer
Aug 14-15 for a 2-day hands-on training called "TCP/IP Deep Dive for Ethical Hackers - featuring Wireshark"

training.defcon.org for more info

From the abstract: "We will learn how the MSS works, receive windows, selective acknowledgements, retransmissions, and much, much more! We will examine how TCP scan, OS enumeration, exfiltration, and C2 traffic looks on the wire, and how TCP fields can help us to filter for it fast. This will be an action-packed, hands-on course for Wireshark beginners as well as seasoned pros who want to pick up some new tricks. There is something for all experience levels in this course, although it will be targeted to the early-intermediate cybersecurity professional."

Big DEF CON Training announcement! The first 3 trainers have been announced for the Las Vegas Trainings, right after #defcon31. They are:

Madhu Akula - A Practical Approach to Breaking & Pwning Kubernetes Clusters

Chris Greer -TCP/IP Deep Dive for Ethical Hackers

and

Abhinav Singh - Cloud Security Masterclass Defender's Guide to Securing AWS & Azure Infrastructure

Class abstracts, pricing and the opportunity to sign up are all waiting for you at

training.defcon.org/pages/def-

More trainers announced soon.

#defcon #defcontraining #kubernetes #las vegas #cloudsecurity #TCPIP