Happened to me once. Had a little Pi at my parent's house and that was a nice excuse to visit them.

even worse. I regularly have to get up out of my chair and go down 2 stairs.

Also this took a while to find, but : https://sourceforge.net/p/shorewall/svn/HEAD/tree/branches/4.2/Samples/one-interface/shorewall.conf

ADMINISABSENTMINDED=Yes

Is an actual setting in the config for the (now apparently unmaintained) Shorewall Firewall software/tool for linux.

If I remember correctly, it always checks on firewall rule changes if there is an active connection on port 22, and adds a special rule at the end to maintain that connection.

They don't build them like they used to anymore.

Before you make a change, do this in a screen-session:

sleep 300 && iptables-restore old_fw_rules.bak

Almost the same thing happened to me. I accidentally fucked up the internet connection in my home while in Japan, and I had to video call my mom to have her fix it. It was a pain for both of us, but thankfully it went rather smoothly. Thank you mom!

What's really fun is hearing "oh shit" from the UPS maintenance tech followed by darkness and silence.

Doing this is a right of passage.

Classic.

Love Hetzner. If something like that were to happen to me they can hook up a remote console accessible through their web interface.

Console

Most secure box is the one that does nothing.

Since that happens to the best of us, I envision writing a wrapper script around {n,}pfctl that asks for confirmation upon detecting that you're logged in via ssh through a specific port AND detecting that the new rules would block that port.

I'll always be grateful for the firewalls like OpenWRT that will automatically revert any changes if you don't log back in after a few minutes (at least on the web interface). I'm not proud of how many times that's saved me.

This is the NetAdmin's problem. And he's got 3 ways to get into the datacenter, so he goddamn well better have an answer that doesn't involve airfare. Worst case, he's gotta use remote hands, but that would be embarrassing, and I'd not let him forget it. Nobody forgives me when I screw up a server cluster, so he gets no latitude when he takes a datacenter offline.

That the slrpnk.net admins in the picture?

I try to remember to always open two SSH connections when altering iptables or the ssh config - just in case

this sounds like something chip from sales would do

Does it actually happen to people? All servers I worked with both had a back door (or two), and someone at the data centre (during work hours at least) you could contact in an emergency.

This is precisely the problem that deploy-rs solves!

i feel that. Hetzner support has a special place in my heart

Rescue mode with networking, mount drive, make changes and reboot.

That is why I always put any:any for ssh on all my firewalls!

Nice drive to clear your head.

good reason to take a day out, will tell it to my boss.

No connection, no hackers.

Lol.

Just tailscale it and this will never happen again.

(Set the whole interface of tailscale0 as a trusted network)