#udmpro — Public Fediverse posts

Jeg skal have kigget på noget alerting der går amok, hvis clusteret hos Hetzner I Tyskland ikke kan nå SAN'et i rackskabet I kælderen. Helt specifikt var det HAProxy på UDMPro'en der ikke var startet efter automatisk opdatering, da /run/haproxy ikke længere eksisterede. Det er sådan noget der skal få alarmklokkerne til at bimle.

Det bliver nok noget med #AlertManager og en HTTP-baseret blackbox probe.

.. Men først skal jeg lige have støbt betongulv I hønsehuset 😀

#udmpro #onbootd

Yesterday I spend a good part of the day removing obsolete Firewall rules, adding Object rules and creating new Firewall rules.

The goal was to clean up the 76 Firewall rules created by #UniFi because I migrated to the new Policy Engine.

I think my network still works? I’ll have to monitor the coming week.

#PolicyEngine #UDMPro

@timm
#Minilab: 3x HP Elitedesk G2 Mini (Core i5, 8GB RAM, 256GB SSD), Ubiquiti Flex Mini 2.5G, Rack: #DeskPi Rackmate T0. Netzwerk kommt von einer #UDMPro.

#Nextcloud: 1x Lenovo ThinkCentre Tiny m920q (Core i5, 16GB RAM, 256GB SSD). Darauf läuft #Proxmox, Nextcloud ist eine VM. Als Storage ist eine ältere Synology via NFS angebunden. Dort liegt auch die virt. HDD, auf der die Daten liegen.

TIL: bloss nicht die default Firewall Policy Logs an den SIEM-server weiterleiten

https://www.pelzel.de/2025/01/08/til-bloss-nicht-die-default-firewall-policy-logs-an-den-seam-server-weiterleiten/

#unifi #DreamMachine #UDMPro just rebooted without cause and when I reviewed the logs a new Wireguard VPN tunnel had been configured by the device. Anyone else in #infosec seeing #exploitation of these devices? #VoltTyphoon in my router or just a weird update...?

@thomholwerda Yeah, the device identification is often interestingly off on my #UDMPro.

#Ubiquiti #Unifi

TIL: My Dream Machine Pro has Internet Link loadbalancing enabled. Running on two links with a weighted balance of 90% on secondary interface which is 4G/LTE over Telekom in Germany #nerdp0rn #internet #workingfromhome #unifi #DreamMachinePro #udmpro #UDM-Pro

#Ubiquiti never ceases to amaze me with how simple yet powerful it can be. I needed to route specific traffic from a specific device on the local network over a VPN. In #Unifi Dream Machine Pro, the VPN and routing setup was done in 5 minutes and very intuitively. 👌

#udmpro #router

@strobelstefan I was also thinking about this option as well.

One of my use cases is to share also some files or folders with others. Additionally I have my parents where their phones (mainly photos) will be backed up as well. I don't think I can explain them how to use a VPN 😂

Since my home network is a bit more advanced I'm confident I can expose it without risking to much.

I have a #UDMPRO with #VLANs and #firewall rules set up. Think will create an own VLAN and put the server into taht

I'm currently thinking about how (or if at all) make my #Nextcloud available from the internet.

Watched a YT video today and that guy was recommending #Cloudflare #tunnels. However it seems this is not available anymore.

Does some of you #itsec and #security guys have any recommendations?

I have a #Unifi #UDMPRO where I could set up a dedicated #vlan and firewall rules but is this enough?

Ideally I would like to mask my IP somehow.

Any recommendations?

I had IPv6 working on #Starlink but I couldn’t on #AussieBroadband with my #UDMPro It took patience before the UDM started routing the packets out, which I don’t really understand. It wouldn’t last night but it was working this morning. LAN devices were getting addresses from the delegation but traceroute6 stopped at the UDM. (The UDM didn’t respond but the device had a route to it.) After I could connect to v6 sites this morning I enabled ICMP6 inbound on the firewall which got rid of the last gripe on test-ipv6.com Next challenge is to work out what best practice is for this. Getting good performance on #nbn fixed wireless. I think I can give up on Elon’s satellite and retain my Voda 4G backup. Inbound connections & fixed IP all for less than $100 per month.

Hat eigentlich schon jemand hier einmal die "Unifi Protect Backup" App von #TrueNAS mit einer #UDMPro ans Laufen bekommen?

Frage fuer einen Freund...

Hey @homeassistant,
how are you wonderful folks tracking outbound internet connectivity?

I have redundant ISPs and am finding that my primary fails too softly for an automated cutover of my #UDMPro (long pings, packet loss, not fully down).

I’m looking at just cutting power to the modem if I can detect downtime from HA.

I have the ping integration up and running now, is there a way to get packet loss measurements into #HomeAssistant / #MQTT ?

Ubiquiti Dream Machine Pro. Stories about the UDM Pro and setting up a UDM Pro behind pfSense (and why)
~~~
Tried to put these in some semblance of order after finally getting this working.
~~
by Teri Radichel | Jul 2023
#ubiqiti #udmpro #pfsense #security https://medium.com/cloud-security/ubiquiti-dream-machine-pro-b9a4f68c254d

The Main Reason I Cannot Recommend a Ubiquiti Dream Machine Pro | by Teri Radichel | Cloud Security | Jun, 2023 #ubiquiti #unifi #ui #dreammachine #udmpro #network #wifi #security https://medium.com/cloud-security/the-main-reason-i-cannot-recommend-a-ubiquiti-dream-machine-pro-e8d750e82c75

@y3mz @lattera

I really like #pfSense over the #UDMPRO but I admit I'm not a firewall expert and still have more to learn. I do have #tailscale setup on my pfSense VM and use it as VPN to get back into my network while I'm remote. It's pretty nice.

I hadn't considered a vps with a proxy that forwards to my home network via Tailscale. That's a good idea. I use #NGINX , #HAProxy, and #varnish a lot.

No, I haven't met @lattera - nice to meet you. I like #BSD but prefer #linux.