@jrssnet That checker was great. the dmarc one, not so much. We'll see in a week if I get any reports. Thanks again for what you and the crew do to spread good, useful knowledge.
@jrssnet Thanks for the advice to lock down spf and dmarc records. I could verify spf, but I'm not sure if the dmarc tool is buggy, or if I did something wrong. Do you have a suggested tool to verify my record expresses what it should (ie, reject everything)? Thanks!
@jrssnet I like that idea. ionotify -> something like a redis on file touch. Put a TTL on the key, and use an event to fire back to delete the file.
The context is that I want an S3-like policy for file retention/purge. Logrotate isn't quite cutting it.
@jrssnet Have you ever seen a filesystem that can purge files after X days.. or efficiently tell me files older than X?
ionotify is an interesting start, but has downsides. Using 'find' consumes 2x iops. I think this might just be a "hard" thing to do...
@jrssnet Many thanks. Seemed like a lot of copying, so I took another route with golang's fsnotify package. I've got auto-deletion of files working. Need to integrate OPA/policy and some enumeration from before the process starts. https://t.co/mTVGL1Ne5q if interested
Hey @jrssnet, does #zfs have retention/purge policies for files (not snapshots)? or is there a better place to ask? I found an oracle doc, but more curious about the OSS version of zfs. Pref linux. Thanks!
@jrssnet@cataclysmza@opnsense Am I wrong for not wanting to conflate wifi and other network services? The "router" is already doing a lot with dhcp, dns stuff, firewalling, routing. Quite happy with discrete APs.. configuring wifi well is hard enough without the other bits.
Hey @jrssnet, do you have a decent home router (no wifi) that you like? Had my 2nd router (brand starts with a U) die in 5 years. I think you've suggested another brand on 2.5A? Many thanks!
@jrssnet@opnsense Ever put an LTE card in one of these? Looks like the Qotom could take a half mini PCIE LTE card. Might be nice to have some backup not on a different SSID
@jrssnet@opnsense That looks awesome. Looks like there are a couple of terraform providers to help in case I need to paperclip it, too. Is there any real difference/worry between opnsense and routerOS?
@jrssnet@opnsense Thanks. Definitely something I would have passed over.
Would love to play with opensense and take control, but will have to check the lab budget. Small multi-nic x86 box are more expensive than I would have expected at the moment..
Thanks again
Thanks, @particle. The service that comes with a Photon is great. The "OS"/"firmware" divide with OTA updates made what could have been a tedious project extremely easy. Finished the project while at a mechanic getting things fixed. Awesome.
@FrameworkPuter Today, one of my monitors started going into power save. I've had both hooked via usb-c on the left. They both work when one is on the right, and the other is on the left. Is that a failure mode you've seen? Seems unrelated to the cards (i swapped around)
A question for #infosec twitter: How do you practice and evaluate tools? Is part of the background/training understanding how to safely bring in payloads, isolate networks, etc?