IsoKiero

joined 1 year ago
[–] IsoKiero@sopuli.xyz 3 points 11 months ago

That can be done, but as others mentioned, if you don't have permissions/other attributes for the files it's going to be a real PITA to get everything working. If I had to do that I'd just copy over the files, chown everything to root and then use package manager to reinstall everything, but even that will most likely need manual fixes and figuring out what to change and to what value will take quite a bit of time and complexity of it depends heavily on what you had running on the host, specially things under /var.

[–] IsoKiero@sopuli.xyz 1 points 1 year ago

I ran one for a while. In Finland legislation is a bit different, so I wasn't worried about breaking the law or getting sued, but my ISP got in touch pretty quickly. They were professionals and understood the situation when I explained why my traffic might look "a bit" suspicious and I attempted to clean up bad actors from the traffic with filtering and whatnot, but eventually ISP got enough complaints and they were pretty much forced to tell me that either I shut the exit node down or they'll cut my line.

As I said, they were very professional about it, and managed the whole experiment as good as I ever could have hoped, but my agreement with them has an option that if I'm letting malware and bad actors leave the network even after warnings they can shut the connection down. And that's understandable, I suppose they have similar agreements with other providers and they received all the abuse mail my exit node was causing, so I'm still a happy customer with them even if they eventually took the hard way.

I'm still pretty sure it would be possible to run filtered exit node, but it would require far more time and other resources that I'm willing to spend on a project like that and I'm not sure if a single person is enough for it anyways.

So, yes, do your homework and be careful. Legislation plays a significant part (depending on where you live), but your ISP most likely won't like it either.

[–] IsoKiero@sopuli.xyz 0 points 1 year ago

I've heard about it, but haven't tried it myself. If I've understoord correctly it requires that photos are stored on it's own storage format instead of flat files on a network share, so it doesn't really fit the bill. If I could run that as a front end for existing storage I would already tried it out, but for the reasons mentioned I really like to have the actual files available and Immich doesn't really fit the bill on that part. Interesting project anyways and it absolutely could to the trick I'm after, but I don't think I'll spend another terabyte of storage just for that (yes, there's quite a few photos, wife and me have been taking photos with dslr as a hobby over 15 years and we have kids and dogs).

[–] IsoKiero@sopuli.xyz 1 points 1 year ago

I did that for a while to try and learn about filtering malicious traffic from the network. Doing that long term would definetly change my life, but very much not in a good way. It's a endless whack-a-mole game and the winning prize is that your ISP doesn't give you a call weekly.

It took couple of weeks until the ISP first called and told me that I have malicious traffic coming from my IP. I explained the situation and their representative was very understanding and handled the thing as well as he ever could. I tried to adjust filters, blocklists and all the jazz which was pretty much a full time job already and I still couldn't make it work on a sufficient level. I got another couple of calls from ISP (again, handled spectaculary considering I was pushing several hundreds Mbps dirty traffic out in the wild) and eventually they just plainly said that they're forced to kill my connection if situation doesn't improve. I ran a node without exit for a while but as that's not a interesting thing to run I eventually shut it down to free resources for more interesting things.

If you have the time and knowledege to do that, I really encourage that, but for me it was too much to keep in the network while trying to maintain some sanity on my everyday life. I firmly believe that my goal of filtering malicious traffic out and keeping an exit node runnig is achievable goal, I just don't have enough knowledge nor time to gain enough of it to keep exit node running.

And of course there's legal issues as well and severity of them heavily depends on where you're living, so really do your homework before doing anything like that.

view more: ‹ prev next ›