@eyedeekay
&eche|on
&zzz
+RN
+StormyCloud
+T3s|4
+acetone
+cumlord
+dr|z3d
+eche|off
+mareki2p
+not_bob
+orignal
+postman
+qend-irc2p
+snex
Arch2
BravoOreo
BubbRubb
Chrono
Dann
Guest99
Irc2PGuest2010
Irc2PGuest20149
Irc2PGuest30832
Irc2PGuest49068
Irc2PGuest63942
Irc2PGuest74254
Irc2PGuest86777
Irc2PGuest88361
Irc2PGuest95708
Onn4l7h
Onn4|7h
Over
Sisyphus
Sleepy
SlippyJoe
T3s|4_
Teeed
Yotsu
aargh2
ac9f
anontor
b3t4f4c3___
dr4wd3
duanin2
duck
eyedeekay_bnc
gellegery
leopold
makoto
matean
n1
nilbog
poriori
profetikla
r00tobo
rapidash
shiver_
solidx66
thetia
u5657
uop23ip
w8rabbit
wodencafe2
x74a6
dr|z3d
zzz: re ygg, just deny all inbound traffic on ygg's tun i/face except for the i2p port.
zzz
still looking for somebody to make it easy for me
dr|z3d
(and then see what breaks) :)
zzz
and already tested
dr|z3d
that's about as easy as it gets. presumably you're comfortable using ufw?
zzz
not familiar
dr|z3d
how do you configure your firewall rules? iptables?
zzz
I dont. I have a router
dr|z3d
openwrt. gotta love _their_ firewall *cough*
zzz
this discussion is pointless. if you're not a ygg user, I'll await somebody who is
dr|z3d
that's a bit dismissive. I've used ygg, have it installed in various places, and understand how to lock it down. but you carry on.
zzz
I'm just looking for a tested solution, not guesses or RTFMs
dr|z3d
you want to deny all traffic aside from the i2p port, so that's exactly what you'd do. if you want to use your router to do that, shouldn't be hard. or you can use a firewall in ubuntu which may give you extra piece of mind. easiest method is ufw + gufw. gufw is a front end to ufw which works with iptables. couldn't be much simpler than that.
zzz
"I've never done it but it shouldn't be that hard" is the worst kind of non-answer when I'm looking for a tested solution
dr|z3d
no, you misunderstand. I'm saying it shouldn't be that hard for someone not familiar with ufw to configure it via gufw. trivial, in fact.
zzz
if I'm asking how to make a sandwich, sure. For a security-critical thing, I'm looking for somebody who's done it before
dr|z3d
this may also help you get up to speed: maketecheasier.com/install-yggdrasil-network
eyedeekay
I'll try out the instructions from the ArchWiki this weekend and share whatever script I come up with, they look like a good place to start
eyedeekay
The gist is "Start by dropping everything on the tun interface corresponding to the yggdrasil connection, then accept on the services I want"