grahamperrin This is a reddit problem, not a FreeBSD problem.
Don't confuse Ethernet cards with actual IP addresses. That's not how you 'get' an IP address, anyway.In Seattle are a few old Xeon servers for rent. Each of them comes with four IPv4 addresses.
It very much is capable of running IPv6 - just ask Netcraft.com.Is reddit not capable of running IPv6?
Firewall rules are not that dynamic... if you update a rule, you have to restart the entire firewall, which is not exactly practical.The point is to have the sessions run uninterrupted, with dynamic firewall rules.
Reddit is free to use, last I checked. And the vast majority of private users of Internet get their IP address assigned by the ISP's DHCP (what do you think the D stands for?) and get to Reddit no problem.Rather the other way round. Reddit needs stupid users to buy the crap they offer. Stupid users run on dynamic IP or CGN as assigned from their local providers. Static IP are used by professionals who know what they're doing - these are not imbeciles, therefore of no use for reddit.
If they ban AWS (and people swallow that) - well, AWS is too expensive for my taste.
Uhhh... VK is the Russian counterpart to LinkedIn... with primary audience being within Russia's borders.Yeah, but if you ban people from your dancefloor based on generalizations (like race or colour), you may get some problem.
I have my IPs for quite a while already, and they do not do suspicious behavior - but well, if people accept such, I don't care. The fault is mine, I shouldn't have been too lazy to learn Russian, otherwise I could now use VK which is more fun anyway.
yeah, and this is in the off-topic area. Admittedly, we did go off on a tangent about just plain connecting to Reddit and Discord from IP addresses that should originate in the EU.grahamperrin This is a reddit problem, not a FreeBSD problem.
I have no idea what ethernet cards they have. They have 4 IPv4 addresses included, additional ones can be rented for a monthly fee.Don't confuse Ethernet cards with actual IP addresses. That's not how you 'get' an IP address, anyway.
This is wrong. My ipfw configurations are fully capable of inflight reloading, without dropping dynamic sessions. Here is the code:Firewall rules are not that dynamic... if you update a rule, you have to restart the entire firewall, which is not exactly practical.
I don't care, I don't use AWS. I use a couple of other providers, and apparently these are all banned.And reddit having a problem with AWS - please re-read patmaddox post more carefully - he did explain why. Yeah, AWS does need to tighten their own terms of service to avoid IP bans from other places.
Yeah, which means there is a lot more skill underway.Uhhh... VK is the Russian counterpart to LinkedIn... with primary audience being within Russia's borders.
Probably they ban just everything that is not used by telcos for local end-users.And - Even if your own static IPs are not necessarily the source of suspicious behavior, it's not out of question for them to be part of a suspicious block of IP addresses. Reddit most likely bans by IP block, rather than individual IPs.
Yeah, then they want to know how many (hundreds or thousands of) users are concerned.In your own screenshot, if you think you've been blocked incorrectly, the page provides a link to file a ticket and plead your case.
Links, please.I have no idea what ethernet cards they have. They have 4 IPv4 addresses included, additional ones can be rented for a monthly fee.
And that is exactly how we get IP addresses.
There's your reason for the IP ban.I don't care, I don't use AWS. I use a couple of other providers, and apparently these are all banned.
Now that just doesn't make sense no matter how I twist it.which means there is a lot more skill underway.
Maybe re-phrasing your issue might help. No, they will not edit firewall rules for the whole IP block, but they might be willing to whitelist your specific IP if you know how to ask. I've seen that kind of thing happen in enterprise environments, where an override needs to be applicable to everyone, not just you alone.Yeah, then they want to know how many (hundreds or thousands of) users are concerned.
Sorry, trade secret.Links, please.
I don't see reason yet, but I got a hit with IPv6 now.There's your reason for the IP ban.
I suppose it doesn't need to.Now that just doesn't mke sense no matter how I twist it.
Why should I bother - or who would be paying me for such hassle?Maybe re-phrasing your issue might help. No, they will not edit firewall rules for the whole IP block, but they might be willing to whitelist your specific IP if you know how to ask. I've seen that kind of thing happen in enterprise environments, where an override needs to be applicable to everyone, not just you alone.
I'm seeking solutions.
Come on, I know what Seattle shops are like. I'm on US West Coast. And I can explain what they mean when they say they have servers with 4 IP addresses for rent.Sorry, trade secret.
If you want to connect to Reddit, then yes, you should bother. Knowing how to ask for something does make a difference in whether you get it or not. I guess it's a matter of how motivated you are to get to Reddit...Why should I bother - or who would be paying me for such hassle?
Internet was built primarily for US Army communications.But alright, let's explain things in a way so that maybe even reddit users could understand:
There is an idea named "capitalism", and it was developed by a sociologist named Karl Marx. It basically boils down to the fact that all productions means are owned by capitalists. Then, in order to pronounce yourself, you would need a media, like a newspaper or a radio broadcast station. But as these are means of production, only capitalists can create them. And consequentially, all public expression is controlled and ruled by the capitalists.
This is considered an unjust situation by the followers of Karl Marx, but their proposed solution basically consists of killing lots of people, and that did practically never work out well.
This is why we then built the Internet: to do away with this unjust situation once and for all. With the Internet you do no longer need to own a newspaper printing facility, or a radio broadcast station. In the Internet every node has an IP-address, and every IP-address is capable of utilizing all the facities of the network. There is no longer a discrimination between capitalists and labourers.
This did work out well during the later part of the last century. After that, however, people somehow decided to artificially recreate the discrimination between content providing organizations and passive consumers. Now these content providing organizations are in a position to dictate all the rules, while the passive consumers are expected to just listen to advertisements and buy all kinds of worthless crap.
Your request has been blocked due to a network policy.
Okay, I tell You, You tell me.Come on, I know what Seattle shops are like. I'm on US West Coast.
So what do they mean?And I can explain what they mean when they say they have servers with 4 IP addresses for rent.
Not much. There are just hits in the search engine, that appear somehow relevant, and it is annoying to get a stupid message instead. But then when I bother to find ways to read the actual article, most of the time it is not worth reading. So maybe the ban ist just the right thing to warn me that what would be behind is not worth it.If you want to connect to Reddit, then yes, you should bother. Knowing how to ask for something does make a difference in whether you get it or not. I guess it's a matter of how motivated you are to get to Reddit...
Yes, that is about half true. But it doesn't matter who actually paid for the resarch . What I did describe are inherent qualities of the network, as a technologiy and a social factor. And you can't say I did describe them wrongly.Internet was built primarily for US Army communications.
Thanks for providing the link... I tried looking around. It is a reseller that has branches in EU, is there anything special about Seattle in particular? As for specifically blocking off 4 IPv4 addresses - they have suspiciously little info about that beyond "Base IP Amount: 4". If it were important to me to have 4 Internet-legal IPv4 addresses on my one public-facing server, I'd confirm that with the sales team before signing up for anything. And this shop does not offer refunds if you fail to ask. Most people only need one Internet-legal IPv4 address for most scenarios. And in the event the scenario requires more than one server, there's always NAT.So what do they mean?
https://oneprovider.com/configure/dediconf/2374
Sounds like dns/bind916and dns/bind918 maintainers did not do a very good job on making the move/upgrade a workable solution. In most cases, admins stick with the UNIX software they have, and avoid upgrading - precisely because of risks like this. Especially when a billion dollar business is riding on BIND being functional. ?Something else: recently I upgraded my nameservers from BIND 9.16 to 9.18. And it all failed and the network fell apart. Why - because a few directories had been renamed and the zone files weren't found anymore. They were renamed from 'master' to 'primary' and from 'slave' to 'secondary'. An entirely pointless change with no functional advantage, only intended to break things.
… It's like reddit & discord attract another kind of public.
… super-corps … slave-drivers?
Your request has been blocked due to a network policy.
> You can read Reddit's Terms of Service here.
grahamperrin I don't understand your incessant promotion of reddit usage here. It's as if you are wanting to attract people there instead of here.
Well, in this thread, I'd hardly call that 'promotion'... Yeah, it did start out as an analysis of audience differences, but eventually became an issue of reachability. Reddit has been difficult for some to reach from EU, while there's very few complaints (if any) about Discord being difficult to reach from EU.grahamperrin I don't understand your incessant promotion of reddit usage here. It's as if you are wanting to attract people there instead of here.
I don't understand
… why do you pretend to know the current state of reddit?
What's special with these servers is that they come with 4, as you said, "ethernet cards". Or something along that line.Thanks for providing the link... I tried looking around. It is a reseller that has branches in EU, is there anything special about Seattle in particular?
Don't babble. I have machines rented from that shop, l know what I get and how to deal with. "Base IP amount" means the number of IPv4 addresses included by default, and one can usually add more of them when ordering, for about 3$ per address per month.As for specifically blocking off 4 IPv4 addresses - they have suspiciously little info about that beyond "Base IP Amount: 4". If it were important to me to have 4 Internet-legal IPv4 addresses on my one public-facing server, I'd confirm that with the sales team before signing up for anything. And this shop does not offer refunds if you fail to ask.
There are a lot of things that are problematic with NAT. Client side and even more server side.Most people only need one Internet-legal IPv4 address for most scenarios. And in the event the scenario requires more than one server, there's always NAT.
That's what I got told - that we must not say 'master' or 'slave' anymore because the african people might get offended.Even git has master repo and slave repo. Granted, the terminology is a bit dated, and there's more of "Primary/Secondary/Mirror", "Tier1/2", etc. to differentiate between levels of importance and functionality... I probably would not nitpick at the political/social implications of the vocabulary in this context, just learn a few more synonyms.Master–slave (technology) - Wikipedia
en.wikipedia.org
Exactly, but certainly no price is too high for political correctness.Sounds like dns/bind916and dns/bind918 maintainers did not do a very good job on making the move/upgrade a workable solution. In most cases, admins stick with the UNIX software they have, and avoid upgrading - precisely because of risks like this. Especially when a billion dollar business is riding on BIND being functional. ?
That's what I am saying.Nobody, collectively, cares about one person's IP block to Reddit. WTH, give it up.
A user is usually not a coder. How many seconds is Your attention span?As a user of both Reddit and Discord – their FreeBSD-related areas in particular – I never felt enslaved.
developers, not intended for ordinary end users.
A user is usually not a coder.
HurricaneElectric
I'll review with my Hurricane Electric tunnel when I get home.
(I used it very frequently in the past, for hours on end, I can't imagine that all of those periods involved zero use of Reddit.)
$ host www.reddit.com
www.reddit.com is an alias for reddit.map.fastly.net.
reddit.map.fastly.net has address 199.232.189.140
$ host reddit.com
reddit.com has address 151.101.193.140
reddit.com has address 151.101.65.140
reddit.com has address 151.101.1.140
reddit.com has address 151.101.129.140
reddit.com has IPv6 address 2a04:4e42:600::396
reddit.com has IPv6 address 2a04:4e42:200::396
reddit.com has IPv6 address 2a04:4e42::396
reddit.com has IPv6 address 2a04:4e42:400::396
reddit.com mail is handled by 1 aspmx.l.google.com.
reddit.com mail is handled by 5 alt2.aspmx.l.google.com.
reddit.com mail is handled by 10 aspmx2.googlemail.com.
reddit.com mail is handled by 10 aspmx3.googlemail.com.
reddit.com mail is handled by 5 alt1.aspmx.l.google.com.