Hey there, I’ve been on a networking journey that has, over a few years, taken me from simple unmanaged networking, to managed networking, to advanced VLAN management. It’s all been self taught, but mostly successful. However, I’ve gotten myself into a bit of a pickle and I’m hitting a wall in troubleshooting. Apologies...
First off, if your firewall can ping 8.8.8.8 it can access the WAN, as 8.8.8.8 (hopefully, or you have bigger issues) is on the WAN. It not being able to do updates etc is probably a DNS issue in that case, probably caused by your firewall not being able to access your DNS server due to improper configuration on either the firewall, the switches or the DNS server itself.
Is your DNS server allowing clients coming from subnets other than its own? Can your Wireguard clients also ping 8.8.8.8? If so, they probably share the DNS issue with your firewall.
I would recommend trying to debug this iteratively, as this sort of problem has a lot of potential error sources that is hard to know of no matter how many screenshots you provide, like the configuration of your switches and DNS server. Try this:
Computer A cant reach computer B. What is the IP of A? What is the subnet of A? If it is different from the subnet of B, what route should it take to reach B? What is the next step on that route? Can we successfully reach this next step? Does the next hop on the route know where to go to reach the subnet for B? If so, what is the next step? Repeat until we’ve reached B, ideally ensuring each step on the way is acting as it should either trough something like wireguard or the built in tools of your firewall/switch/gateway/etc.
Assuming the problem hasnt been found, repeat from B to A, as responses might not reach us resulting in a broken connection even if we can reach B.
If the routing makes sense, is there a firewall on the way that doesnt allow us to reach B from A? Can we instead reach A from B? If not, we’ve found the problem.
I would strongly reccomend drawing your network layout (or at least the route you are trying to debug) in a flowchart tool (diagrams.net being a good option), as it is extremely hard to keep track of everything otherwise.
If the firewall cant reach the LAN, either because of a firewall rule or bad routing, it will not be able to access the DNS server even if it works well for the rest of the LAN. I’m assuming that the rest of the LAN talks to the DNS server directly and not through the firewall.
It sounds like you would benefit from reading a bit about how routing and gateways work, as it seems like you’re mostly trying stuff without really knowing what it does. Please save yourself some sanity and make some proper planning on your different subnets, their vlans and how they should route their traffic, ideally in a diagram of some sort.
Without knowing your exact setup I’m getting a feeling that your current configuration is both overly permissive and overly restrictive, meaning you cant access the things you want but any potential attackers can probably get around just fine.
I would seriously consider tearing it down and starting over with a more cohesive plan, but I know that might not be possible for you time-wise. On the other hand, having a well planned network that you understand would almost certainly save you time in the long run, especially if you want to keep doing more advanced and unorthodox stuff to it.
Okay, I think I know (at least one of) the problem(s).
It is sending the ping from the WLAN interface because that is your default route, and you either don’t have a route specified for your 10.2.x.x network or you’re overwriting it with a different route (I’m guessing the first option).
E.g. you need to tell your firewall “if you want to reach an ip-address in 10.2.x.x you need to go through here”, with “here” probably being either your managed switch if it works as a gateway (10.6.1.254?) or an interface on your router if it works as a switch (10.6.1.41?).
Could it be that the processor sends data from the camera/microphone to the Qualcomm/Mediatek servers, bypassing the system? Is it possible to find out about this by checking the traffic leaving the device? Are there any studies that have done this? If this happens, then even GrapheneOS becomes mostly meaningless.
Yes, its possible to check. Data has to be sent through some connection, and we are able to monitor all traffic going through connections we control. Its not happening on wifi and not on 4G/etc. So unless there is some other connection that is not a real issue.
If you don’t mind, could you explain why one would want to buy these kinds of microtransactions, especially if you don’t even enjoy the game? I just cant understand it, but obviously people enjoy it or the business model wouldn’t work.
My only remaining issue is that wayland has slightly more input latency when playing games, enough that it’s noticeable (or a very convincing placebo effect).
This makes it so that I have to use X11 and that I have to disable compositioning when playing games as my displays have different refresh rates. All in all, not a big problem but looking forward to be on wayland for good soon.
“I am one of these people, and I am only getting worse over time, which is why I have converted my smart home to Home Assistant, the home automation solution for true freaks.”...
If you're running Home Assistant on an SBC other storage constrained device, you can now use available storage elsewhere on your network. Game changer, at least for me. Lots of other updates in this release, too.
Requesting a sanity check...help untangle my home network as I expand into more advanced networking?
Hey there, I’ve been on a networking journey that has, over a few years, taken me from simple unmanaged networking, to managed networking, to advanced VLAN management. It’s all been self taught, but mostly successful. However, I’ve gotten myself into a bit of a pickle and I’m hitting a wall in troubleshooting. Apologies...
I love you guys
I started using Linux when I was 12....
Removed due to bickering rule (lemmy.world)
Based KDE 🗿 (lemmy.ml)
Android Hardware Surveillance (upload.wikimedia.org)
Could it be that the processor sends data from the camera/microphone to the Qualcomm/Mediatek servers, bypassing the system? Is it possible to find out about this by checking the traffic leaving the device? Are there any studies that have done this? If this happens, then even GrapheneOS becomes mostly meaningless.
Diablo 4 Twitch viewership continues to drop as Diablo 3 overtakes it (www.charlieintel.com)
StarLite: A Tablet Computer Made for Linux (us.starlabs.systems)
Not many linux tablets look appealing to me, but this one got my attention. Not just its hardware, but also the open firmware....
Anon may have depression (lemmy.world)
This is the $300 Android phone to beat in 2023 - and it even has a stylus (www.zdnet.com)
we all have a comfort chair, tell me I'm wrong (lemmy.world)
GitHub - pyamsoft/tetherfi: TetherFi - Internet sharing without Root (github.com)
looks like 2023 is finally the year! (linuxiac.com)
The Verge: How to start a smart home using Home Assistant (www.theverge.com)
“I am one of these people, and I am only getting worse over time, which is why I have converted my smart home to Home Assistant, the home automation solution for true freaks.”...
Home Assistant 2023.6 now supports network attached storage (www.home-assistant.io)
If you're running Home Assistant on an SBC other storage constrained device, you can now use available storage elsewhere on your network. Game changer, at least for me. Lots of other updates in this release, too.