home.social

#udmpro — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #udmpro, aggregated by home.social.

  1. Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

    Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

    .. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

    #udmpro #onbootd

  2. Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

    Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

    .. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

    #udmpro #onbootd

  3. Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

    Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

    .. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

    #udmpro #onbootd

  4. Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

    Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

    .. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

    #udmpro #onbootd

  5. Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

    Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

    .. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

    #udmpro #onbootd

  6. Yesterday I spend a good part of the day removing obsolete Firewall rules, adding Object rules and creating new Firewall rules.

    The goal was to clean up the 76 Firewall rules created by #UniFi because I migrated to the new Policy Engine.

    I think my network still works? I’ll have to monitor the coming week.

    #PolicyEngine #UDMPro

  7. Yesterday I spend a good part of the day removing obsolete Firewall rules, adding Object rules and creating new Firewall rules.

    The goal was to clean up the 76 Firewall rules created by #UniFi because I migrated to the new Policy Engine.

    I think my network still works? I’ll have to monitor the coming week.

    #PolicyEngine #UDMPro

  8. Yesterday I spend a good part of the day removing obsolete Firewall rules, adding Object rules and creating new Firewall rules.

    The goal was to clean up the 76 Firewall rules created by because I migrated to the new Policy Engine.

    I think my network still works? I’ll have to monitor the coming week.

  9. @timm
    #Minilab: 3x HP Elitedesk G2 Mini (Core i5, 8GB RAM, 256GB SSD), Ubiquiti Flex Mini 2.5G, Rack: #DeskPi Rackmate T0. Netzwerk kommt von einer #UDMPro.

    #Nextcloud: 1x Lenovo ThinkCentre Tiny m920q (Core i5, 16GB RAM, 256GB SSD). Darauf läuft #Proxmox, Nextcloud ist eine VM. Als Storage ist eine ältere Synology via NFS angebunden. Dort liegt auch die virt. HDD, auf der die Daten liegen.

  10. @timm
    #Minilab: 3x HP Elitedesk G2 Mini (Core i5, 8GB RAM, 256GB SSD), Ubiquiti Flex Mini 2.5G, Rack: #DeskPi Rackmate T0. Netzwerk kommt von einer #UDMPro.

    #Nextcloud: 1x Lenovo ThinkCentre Tiny m920q (Core i5, 16GB RAM, 256GB SSD). Darauf läuft #Proxmox, Nextcloud ist eine VM. Als Storage ist eine ältere Synology via NFS angebunden. Dort liegt auch die virt. HDD, auf der die Daten liegen.

  11. @timm
    #Minilab: 3x HP Elitedesk G2 Mini (Core i5, 8GB RAM, 256GB SSD), Ubiquiti Flex Mini 2.5G, Rack: #DeskPi Rackmate T0. Netzwerk kommt von einer #UDMPro.

    #Nextcloud: 1x Lenovo ThinkCentre Tiny m920q (Core i5, 16GB RAM, 256GB SSD). Darauf läuft #Proxmox, Nextcloud ist eine VM. Als Storage ist eine ältere Synology via NFS angebunden. Dort liegt auch die virt. HDD, auf der die Daten liegen.

  12. @tobi #Technitium sieht interessant aus. Muss ich mir mal anschauen. Allerdings bin ich mit #AdguardHome echt zufrieden. Funktioniert wie erwartet und die Conditional Forwarder auf meine #UDMpro funktionieren auch. Das ist die zweit-wichtigste Funktion 😅

  13. @tobi #Technitium sieht interessant aus. Muss ich mir mal anschauen. Allerdings bin ich mit #AdguardHome echt zufrieden. Funktioniert wie erwartet und die Conditional Forwarder auf meine #UDMpro funktionieren auch. Das ist die zweit-wichtigste Funktion 😅

  14. @tobi #Technitium sieht interessant aus. Muss ich mir mal anschauen. Allerdings bin ich mit #AdguardHome echt zufrieden. Funktioniert wie erwartet und die Conditional Forwarder auf meine #UDMpro funktionieren auch. Das ist die zweit-wichtigste Funktion 😅

  15. @tobi #Technitium sieht interessant aus. Muss ich mir mal anschauen. Allerdings bin ich mit #AdguardHome echt zufrieden. Funktioniert wie erwartet und die Conditional Forwarder auf meine #UDMpro funktionieren auch. Das ist die zweit-wichtigste Funktion 😅

  16. @tobi #Technitium sieht interessant aus. Muss ich mir mal anschauen. Allerdings bin ich mit #AdguardHome echt zufrieden. Funktioniert wie erwartet und die Conditional Forwarder auf meine #UDMpro funktionieren auch. Das ist die zweit-wichtigste Funktion 😅

  17. TIL: bloss nicht die default Firewall Policy Logs an den SIEM-server weiterleiten

    Ich experimentiere mit Graylog, einer Plattform zum zentralen Sammeln, Aufarbeiten, Auswerten von Protokollen. Eine Unifi Dream Machine Pro schickt ihre Log-Daten dorthin. Heute habe ich gelernt, dass es eine blöde Idee ist, die Protokoll Einträge der default Firewall policy an das SIEM-System zu schicken. […]

    pelzel.de/2025/01/08/til-bloss

  18. TIL: bloss nicht die default Firewall Policy Logs an den SIEM-server weiterleiten

    Ich experimentiere mit Graylog, einer Plattform zum zentralen Sammeln, Aufarbeiten, Auswerten von Protokollen. Eine Unifi Dream Machine Pro schickt ihre Log-Daten dorthin. Heute habe ich gelernt, dass es eine blöde Idee ist, die Protokoll Einträge der default Firewall policy an das SIEM-System zu schicken. […]

    pelzel.de/2025/01/08/til-bloss

  19. TIL: bloss nicht die default Firewall Policy Logs an den SIEM-server weiterleiten

    Ich experimentiere mit Graylog, einer Plattform zum zentralen Sammeln, Aufarbeiten, Auswerten von Protokollen. Eine Unifi Dream Machine Pro schickt ihre Log-Daten dorthin. Heute habe ich gelernt, dass es eine blöde Idee ist, die Protokoll Einträge der default Firewall policy an das SIEM-System zu schicken. […]

    pelzel.de/2025/01/08/til-bloss

  20. TIL: bloss nicht die default Firewall Policy Logs an den SIEM-server weiterleiten

    Ich experimentiere mit Graylog, einer Plattform zum zentralen Sammeln, Aufarbeiten, Auswerten von Protokollen. Eine Unifi Dream Machine Pro schickt ihre Log-Daten dorthin. Heute habe ich gelernt, dass es eine blöde Idee ist, die Protokoll Einträge der default Firewall policy an das SIEM-System zu schicken.

    […]

    pelzel.de/2025/01/08/til-bloss

  21. De speedtest vanaf mijn #UDMPro kwam uit op 934 Mbits, maar als ik vanaf mijn #iMac de test deed kwam die niet hoger dan ≈300 Mbits (ja via het bedraadnetwerk). Na even zoeken blijkt dat iCloud Private Relay de boosdoener was, aanschouw: een totale #omdathetkannietomdathetmoet snelheid van 922,58 Mbps 🤣

    speedtest.net/nl/result/171128

  22. De speedtest vanaf mijn #UDMPro kwam uit op 934 Mbits, maar als ik vanaf mijn #iMac de test deed kwam die niet hoger dan ≈300 Mbits (ja via het bedraadnetwerk). Na even zoeken blijkt dat iCloud Private Relay de boosdoener was, aanschouw: een totale #omdathetkannietomdathetmoet snelheid van 922,58 Mbps 🤣

    speedtest.net/nl/result/171128

  23. Vanaf deze ochtend is de #glasvezel-verbinding van @freedominternet actief 🥳

    Je mag raden wanneer ik de #UDMPro heb omgezet:

  24. Vanaf deze ochtend is de #glasvezel-verbinding van @freedominternet actief 🥳

    Je mag raden wanneer ik de #UDMPro heb omgezet:

  25. #unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

  26. #unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

  27. #unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

  28. #unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

  29. #unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

  30. @thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

    #Ubiquiti #Unifi

  31. @thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

    #Ubiquiti #Unifi

  32. @thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

    #Ubiquiti #Unifi

  33. @thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

    #Ubiquiti #Unifi

  34. @thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

    #Ubiquiti #Unifi

  35. TIL: My Dream Machine Pro has Internet Link loadbalancing enabled. Running on two links with a weighted balance of 90% on secondary interface which is 4G/LTE over Telekom in Germany #nerdp0rn #internet #workingfromhome #unifi #DreamMachinePro #udmpro #UDM-Pro

  36. TIL: My Dream Machine Pro has Internet Link loadbalancing enabled. Running on two links with a weighted balance of 90% on secondary interface which is 4G/LTE over Telekom in Germany #nerdp0rn #internet #workingfromhome #unifi #DreamMachinePro #udmpro #UDM-Pro

  37. TIL: My Dream Machine Pro has Internet Link loadbalancing enabled. Running on two links with a weighted balance of 90% on secondary interface which is 4G/LTE over Telekom in Germany #nerdp0rn #internet #workingfromhome #unifi #DreamMachinePro #udmpro #UDM-Pro

  38. TIL: My Dream Machine Pro has Internet Link loadbalancing enabled. Running on two links with a weighted balance of 90% on secondary interface which is 4G/LTE over Telekom in Germany #nerdp0rn #internet #workingfromhome #unifi #DreamMachinePro #udmpro #UDM-Pro

  39. #Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

    #udmpro #router

  40. #Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

    #udmpro #router

  41. #Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

    #udmpro #router

  42. #Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

    #udmpro #router

  43. #Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

    #udmpro #router

  44. @strobelstefan I was also thinking about this option as well.

    One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

    Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

    I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

  45. @strobelstefan I was also thinking about this option as well.

    One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

    Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

    I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

  46. @strobelstefan I was also thinking about this option as well.

    One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

    Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

    I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

  47. @strobelstefan I was also thinking about this option as well.

    One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

    Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

    I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

  48. @strobelstefan I was also thinking about this option as well.

    One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

    Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

    I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

  49. I'm currently thinking about how (or if at all) make my #Nextcloud available from the internet.

    Watched a YT video today and that guy was recommending #Cloudflare #tunnels. However it seems this is not available anymore.

    Does some of you #itsec and #security guys have any recommendations?

    I have a #Unifi #UDMPRO where I could set up a dedicated #vlan and firewall rules but is this enough?

    Ideally I would like to mask my IP somehow.

    Any recommendations?

  50. I'm currently thinking about how (or if at all) make my #Nextcloud available from the internet.

    Watched a YT video today and that guy was recommending #Cloudflare #tunnels. However it seems this is not available anymore.

    Does some of you #itsec and #security guys have any recommendations?

    I have a #Unifi #UDMPRO where I could set up a dedicated #vlan and firewall rules but is this enough?

    Ideally I would like to mask my IP somehow.

    Any recommendations?