Recent content by Nicklebon

As I said there are a very few exceptions. I'll point that it get's worse before it gets better, essentially what you're saying, is also often used and generally untrue. I honestly prefer a government that is deadlocked and can accomplish little to nothing outside the necessary and net...

We're from the government and we're here to help. Most of you should know well enough that with very few exceptions everything a bureaucracy as big and convoluted as the US government gets involved with gets worse not better.

Generally speaking on most firewalling devices once a packet is dropped the firewall is done with it. There is no additional processing. You generally start by denying traffic to known malicious destinations and/or geographies then drop specific traffic ordered by volume highest to lowest. Once...

The same reason we have DoT and its bastard should be killed cousin DoH ... ISPs behaving badly. The assholes started with answering nxdomain with ads and went downhill from there. The entire community should have raised hell when that started but instead the unwashed masses thought it useful.

The whole HTTPS everywhere thing is getting worse. Encrypted client hello (ECH) is going to make web filtering a nightmare. The plus side is it will either force businesses to finally break down and do TLS inspection or push everyone to fully managed endpoints.

Please tell me your boxes were not bright green or depend on an add in accelerator card. :) Going to add that a VM still lives on my ESXi box named SR-XP-Test. The SR standing for secure remote.

to be clear BLS said hotspot not website. As far as a sketchy or more to point malicious website goes, visiting would be enough. How long you stay matters not. That is generally the side effect of websites detecting an address used by commercial VPNs. This would almost certainly not happen...

Thanks for the vids! Placed the order for ER and AP. Will do most of the preconfig here and do the install over Easter. After all, what are holidays with the family for if not tech support? :)

Have almost the exact same need ie replacing parent's ancient gear. Would prefer not to buy more Fortigear for them and these TP-Link devices may do the job. Nail up an ipsec tunnel and manage it all from here. Just to be clear the router and AP have built in ui and no sort of app or cloud...

To prevent spam and abuse, Google says that it will block the use of Rich Communication Services (RCS) on Android phones that have been rooted. By rooting your phone, you can get access to areas of the Android system where users are usually not allowed to go...

There is no "hard time." The minimum mtu in ipv6 is 1280 and in general is often the maximum. :) Assuming you're the one doing the encap, hard code your end to 1280 and you'll likely see no issues.

Don't own or use Mac. As far as what I do on the phone, more to point don't do, it's safe to say I am likely in the <1% group. Again, people that buy Apple buy it with their eyes open. Get the fuck over it and go cuddle your android device you love so much.

A sticky customer is the goal of everyone selling a product. How many android users use gmail? Is that an accident? That said, both can be, and in Apple's case is, true. Which was exactly my expectation when I bought in. I've had an android phone and I still own an android tablet though these...

Phones are special because they have access to our lives in ways most other computing devices do not. For example my laptop never been in a bathroom or locker room but my phone has. As I said earlier Apple has more to loose when it comes to their store. As has been shown already they do a better...

Well you're going to do cable runs no matter what so there is zero reason for two switches. Use the saved cash and get single switch with more port density. Locate the switch centrally and run your spoke runs to the where you need them. Once again I am stunned by just how shitty consumer gear...