My goals for this firewall were mostly to provide better robot blocking and perhaps some more powerful DDoS protection than my Raspberry Pi 3 web server is capable of delivering. I still have to do some testing before I will know if my new firewall actually provides either of those, but at least I now have the additional ability to run multiple physical web servers on my LAN. Exploring that should be fun, and fun is a very important component of running a home web server.

Not my article. Just sharing.

all 56 comments

sorted by: hot top controversial new old
[–] 33 points 1 year ago (14 children)

This page isn't loading for me.

  • source
  • hideshow 14 child comments
  • [–] 80 points 1 year ago (13 children)
  • [–] 21 points 1 year ago (12 children)

    I'm getting a 404 error, using Cloudflare DNS, who ironically has the best commercial clanker protection in the world, otherwise half the world's internet wouldn't use them

  • source
  • parent
  • hideshow 12 child comments
  • [–] 17 points 1 year ago (8 children)
  • [–] 1 point 1 year ago* (last edited 1 year ago) (7 children)

    Not a bot. Both of you can go fuck yourselves with an ENTIRE can of bear mace.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 5 points 1 year ago (5 children)

    Using a VPN that you forgot is on?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 0 points 1 year ago (4 children)
  • [–] 5 points 1 year ago (3 children)

    Because the VPN might be the reason you’re being blocked from the page.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 1 year ago* (2 children)

    Why would a post on a .org domain blog site about blocking AI bots be relevant to my VPN?

  • source
  • parent
  • hideshow 2 child comments
  • [–] -2 points 1 year ago (2 children)

    Cloudflare is a protection racket. They cover so many websites because it’s easier to pay the mafia.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 91 points 1 year ago (14 children)

    All this effort to block clankers? Absolutely worth it fuck clankers.

  • source
  • hideshow 14 child comments
  • [–] 49 points 1 year ago (13 children)

    I absolutely love the term clankers. It's the perfect blend of dystopian cyberpunk and the very real threat of AI.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 11 points 1 year ago (12 children)

    It seems goofy to me — I wish we had collectively picked a term with more oomph.

    I’m struggling to come up with an alternative though.

  • source
  • parent
  • hideshow 12 child comments
  • [–] 9 points 1 year ago (4 children)
  • [–] 3 points 1 year ago (3 children)
  • [–] 4 points 1 year ago (3 children)

    I'm still trying to make 'sloppers' happen. Perfectly describes the lack of thought that goes into what they produce.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 1 year ago (2 children)

    Stealing a slur from Star Wars and engaging in traditional name calling to show we disapprove of uncreative slop.

    We can't even think of an original term. We can't think of a novel way to shit on AI. We just copy what everyone else is doing to make fun of the plagiarism machine.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 1 year ago

    Why does everyone think the term came from Star Wars? I know it was used in steampunk before then, and google suggests it goes back to a 1958 article about robots. Sorry, not trying to be pedantic, just feels like a lot of people give Star Wars unjust credit for things they didn't actually create.

  • source
  • parent
  • [+] 15 points 1 year ago (2 children)
  • [–] 12 points 1 year ago* (1 child)

    Opnsense > pfsense

    The fact that I have to go through a fucking purchase page, even though pfsense is free (for now), is sketch as hell. First step in their inevitable enshittification.

    Opnsense is funded by European non-profits, and is has a better UI

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    Not to mention they tried running a disinformation campaign against OPNsense for a few years, which was resolved in court.

    Also they implemented a WireGuard module that after a review upstream on FreeBSD was found to be completely hocus.

  • source
  • parent
  • [–] 28 points 1 year ago (9 children)

    Should we just move everything to tor and start the Internet over again?

  • source
  • hideshow 9 child comments
  • [–] 7 points 1 year ago (5 children)

    Wait till you hear about betanet

  • source
  • parent
  • hideshow 5 child comments
  • [–] 8 points 1 year ago (3 children)
  • [–] 22 points 1 year ago*

    403 error. Congrats, you built a broken system of false-positives.

  • source
  • [–] 8 points 1 year ago

    And then you have to fill a block list with something like https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

  • source
  • [–] 12 points 1 year ago (9 children)

    Well it cant be that good becauase it thinks im a bot.

    Anubis works pretty well for me so far in blocking clankers.

  • source
  • hideshow 9 child comments
  • [–] 9 points 1 year ago (6 children)

    It seems Anubis’github issues shows many false positives with smartphone browsers. Depending on OP’s target audience it’s worth to hunt for FP

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 1 year ago (5 children)

    I just wish i could read it, it seems to block based on my IP which isn't really a good way to identify bots.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 1 year ago (3 children)
  • [–] 7 points 1 year ago* (2 children)

    Thanks but i meant the site in the original post https://cheapskatesguide.org/articles/debian-netinstall-waf.html

    It says

    403 Error Your IP address has been blocked. This MAY be because you have made yourself look like a robot by using an unknown VPN or Tor exit node.

  • source
  • parent
  • hideshow 2 child comments
  • [–] -3 points 1 year ago*

    Aka "how to harm marginalized folks" and prevent them from accessing your content too

  • source