Replying to Avatar HoloKat

I don't really need a mini PC but I really want one now that i saw the Umbrel one. But, I kind of what it to double as a NAS. I know Synology makes NAS specifically, but I can't shake the memory of how many remote attempts I saw trying to access a Synology NAS I set up once... I think it's a honeypot for Russian and Chinese hackers (this is where majority of traffic came from)
de
nobody 1y ago

I block Russia and China at the network level and don't see this. Also my Syno is not public.

But mini PCs are dope. I love my NUC. Great little HTPC.

Reply to this note

Please Login to reply.

Discussion

Avatar
HoloKat 1y ago

How do you block specifically Russian / china traffic? what tools do you use? by network level you mean at the router?

What are you using your NUC for? Care to share specs?

72
nobody 1y ago

Heya Karnage, you could use a Cloudflare tunnel, and set up geo-ip restrictions, SSO, and 2FA for free… without opening a single port to the web.

Or you could use Tailscale.

Avatar
HoloKat 1y ago

Good to know, thank you 🙏

de
nobody 1y ago

Tailscale is userspace wireguard btw if you do any large transfers in/out of your network (I stream video) you may have issues saturating your bandwidth if you have a 2.5G connection.

de
nobody 1y ago

It's layer 3 IP blocking. My Unifi router makes it easy to select countries I want to block traffic from. (Funny thing btw, if you block Iran Primal stops working)

I'm using my NUC as a HTPC for Plex & Navidrome. It's a NUC 11 i7. It can transcode lower bitrate 4K okay. Anything over about 20Mbps and it starts to choke.

72
nobody 1y ago

Ubiquity gear is so friggin awesome.

de
nobody 1y ago

Very cool but they got me a little nervous with their recent "users seeing other users client devices in their dashboard" bug.

Luckily my shit is locked down tight but still..

72
nobody 1y ago

Haven’t seen that at work yet but thx for the heads up. We’re using network, connect, and soon access.

I’d love to use their phone system, but they don’t have a good wireless and we need our receptionist to be able to do transfers while in the shop.

de
nobody 1y ago

My understanding is it was only folks that had remote management enabled and the bug was fixed.

My management VLAN is unreachable from any other VLAN and has no route out to the Internet. If I got implicated in that it would mean they're doing some real shady shit in the background. (These days I wouldn't put it passed any company.)

72
nobody 1y ago

Yeah I use remote management because I’m not on site full time. The app notifies me any time a device goes offline or the WAN dies.

Sounds like they need to do some auditing and hardening. Luckily there’s not any PII or trade secrets on that network. (Mostly airgapped)

Avatar
HoloKat 1y ago

first time hearing of this brand somehow.. looks pretty cool. couldn't help but notice no 10gb port?

72
nobody 1y ago

The Dream Machine Pro and the Pro switches have the 10G SFPs, but I think they cap Ethernet at 2.5 right now.

Avatar
HoloKat 1y ago

oh wow cool. I dont think my crappy router will do that, but I should check again. I used to run Plex on my desktop PC but don't use it as much anymore. The NUCs look fairly affordable at the low-mid range but can be souped up quite a bit.