soebbing · HackerTrans

soebbing

no profile record

comments

I actually thought about that for a minute when I set up my home network a while ago, but that seems to be a pretty hard (or at least inconvenient) problem.

Often I need to access a device from my local network (think: use my phone to control Wi-Fi LED Strips, Sonos speakers, etc.), which makes it impossible (I guess?) to separate these devices into their own network completely (if they aren't controlled by an online service in general). Or is it possible to allow access from my trusted network INTO the restricted network, but not the other way around?

Total network noob here, in case you haven't figured that out yet. :)

soebbing

3 年前discuss

Yeah, it seems to be the common consensus to just block everything going in and just make exceptions, where you really want to offer a service to the internet.

Makes total sense, thinking about it. I guess, all those years of just sitting behind a NAT makes one forget all these networking basics if you're not using them regularly.

Moving closed-source IoT devices into a special vlan, with some even more rigid rules (something like: only allow http/https traffic into the internal network) might be an additional level of security.

Thank all of you for your replies!

soebbing

3 年前discuss

I am quite happy that all those shady IoT devices cannot be reached from the internet directly when I am using IPv4 and NAT - what would be the best way forward to keep it that way in a IPv6-only future?

The best idea I can come up with (at least right now) is: put all less trustworthy (read: Closed source) devices into a special legacy IPv4 network and only use IPv6 on my workstation and little Raspis?

soebbing

4 年前discuss

You're right, updating to less v608 fixed the issue! Thanks a lot! Maybe you can add a check in clx and show a message, in case the version of less is too old?

For the record: less v581.2 is the one being shipped by macOS 12.6 Monterey, I simply updated with "brew install less"

soebbing

4 年前discuss

I really like this client, but I get this error every time I open a link or comments:

  There is no lesskey-src=/var/folders/sv/<filename> option ("less --help" for help)
  Press RETURN to continue

Less version information:

  less --version
  less 581.2 (POSIX regular expressions)
  Copyright (C) 1984-2021  Mark Nudelman

(Edit: formatting)