My goals for this firewall were mostly to provide better robot blocking and perhaps some more powerful DDoS protection than my Raspberry Pi 3 web server is capable of delivering. I still have to do some testing before I will know if my new firewall actually provides either of those, but at least I now have the additional ability to run multiple physical web servers on my LAN. Exploring that should be fun, and fun is a very important component of running a home web server.

Not my article. Just sharing.

top 50 comments

sorted by: hot top controversial new old
[–] 94 points 1 year ago (14 children)

All this effort to block clankers? Absolutely worth it fuck clankers.

  • source
  • hideshow 14 child comments
  • [–] 53 points 1 year ago (13 children)

    I absolutely love the term clankers. It's the perfect blend of dystopian cyberpunk and the very real threat of AI.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 11 points 1 year ago (12 children)

    It seems goofy to me — I wish we had collectively picked a term with more oomph.

    I’m struggling to come up with an alternative though.

  • source
  • parent
  • hideshow 12 child comments
  • [–] 9 points 1 year ago (4 children)
  • [–] 4 points 1 year ago (3 children)

    I'm still trying to make 'sloppers' happen. Perfectly describes the lack of thought that goes into what they produce.

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (3 replies)
  • [–] 32 points 1 year ago (9 children)

    Should we just move everything to tor and start the Internet over again?

  • source
  • hideshow 9 child comments
  • [–] 7 points 1 year ago (5 children)

    Wait till you hear about betanet

  • source
  • parent
  • hideshow 5 child comments
  • [–] 8 points 1 year ago (3 children)
  • [–] 32 points 1 year ago (14 children)

    This page isn't loading for me.

  • source
  • hideshow 14 child comments
  • [–] 82 points 1 year ago (13 children)
  • [–] 21 points 1 year ago (12 children)

    I'm getting a 404 error, using Cloudflare DNS, who ironically has the best commercial clanker protection in the world, otherwise half the world's internet wouldn't use them

  • source
  • parent
  • hideshow 12 child comments
  • [–] 17 points 1 year ago (8 children)
  • [–] 1 point 1 year ago* (last edited 1 year ago) (7 children)

    Not a bot. Both of you can go fuck yourselves with an ENTIRE can of bear mace.

  • source
  • parent
  • hideshow 7 child comments
  • load more comments (3 replies)
  • [–] 22 points 1 year ago*

    403 error. Congrats, you built a broken system of false-positives.

  • source
  • [+] 15 points 1 year ago (2 children)
  • [–] 12 points 1 year ago* (1 child)

    Opnsense > pfsense

    The fact that I have to go through a fucking purchase page, even though pfsense is free (for now), is sketch as hell. First step in their inevitable enshittification.

    Opnsense is funded by European non-profits, and is has a better UI

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    Not to mention they tried running a disinformation campaign against OPNsense for a few years, which was resolved in court.

    Also they implemented a WireGuard module that after a review upstream on FreeBSD was found to be completely hocus.

  • source
  • parent
  • [–] 12 points 1 year ago (9 children)

    Well it cant be that good becauase it thinks im a bot.

    Anubis works pretty well for me so far in blocking clankers.

  • source
  • hideshow 9 child comments
  • [–] 9 points 1 year ago (6 children)

    It seems Anubis’github issues shows many false positives with smartphone browsers. Depending on OP’s target audience it’s worth to hunt for FP

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 1 year ago (5 children)

    I just wish i could read it, it seems to block based on my IP which isn't really a good way to identify bots.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 1 year ago (3 children)
  • [–] 7 points 1 year ago* (2 children)

    Thanks but i meant the site in the original post https://cheapskatesguide.org/articles/debian-netinstall-waf.html

    It says

    403 Error Your IP address has been blocked. This MAY be because you have made yourself look like a robot by using an unknown VPN or Tor exit node.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 1 year ago

    And then you have to fill a block list with something like https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

  • source
  • load more comments
    view more: next ›