• 0 Posts
  • 15 Comments
Joined 8 months ago
cake
Cake day: January 9th, 2025

help-circle
  • I think I have the same protectli as you and it is awesome. Need it for my 2.5gb uplink. I use openwrt on it… Didn’t really like opnsense. I am more used to linux than bsd.

    I host lots of services and get bombarded by scrapers, scanners, and skids both at home and on my VPSs.

    I use ipset for the usual blocklists which I download regularly. I also have tarpits on 22/tcp (endlessh). I pipe the IPs from the endlessh logs into fail2ban which feeds the ipsets. I have ipset blocks and fail2ban on my home firewall and all VPSs and coordinate over mqtt. So any fail2ban trigger > mqtt > every ipset block. Touch my 22/tcp anywhere and you get banned instantly everywhere. The program I use for this is called vallumd and it runs on openwrt.

    I also put maltrail everywhere but I’m not totally sure how to interpret and respond to the results. Probably will implement a pipe from maltrail to my mqtt > blocklist setup.

    I don’t do any network-level adblocking… Might be a future project.






  • As a more advanced user, I have to say, the problems don’t stop. Computers will never be “solved”. They just keep making new puzzles forever. That’s whats fun.

    The more advanced you get, well you can solve the easy problems off the top of your head, but now you have new problems and there are zero search results for your error message. If you can’t figure it out from the docs or irc you just have to read source code.

    I try to document stuff as I find it, even if it means resurrecting an ancient thread. I often search for things and get one result, and it’s me answering my own question a few years ago.