In April I was diving in Cozumel. Being able to see things like this was truly amazing.

I would have stood up for myself way sooner, both by reporting the environment I was dealing with at home and by fighting back against the school bullies.

Was literally reading this right before seeing this.

https://www.tomshardware.com/video-games/pc-gaming/pc-gamer-turns-steam-games-into-cartridges-with-ingenious-2-5-inch-ssd-system-games-are-stored-on-128gb-drives-alongside-a-script-to-auto-start-the-title-once-plugged-in

Nope. Didn’t have any friends in school so why would i want to go back? Didn’t want to go to prom or much of anything else for that matter. My mother insisted I go… ended up going to be treated like crap about 5 minutes after arriving so left and spent the night playing pinochle in a bar. I was the best dressed guy there though.

Honestly didn’t care about the graduation and didn’t care to walk across a stage to say I graduated. I was already testing beyond a high school level when I was in middle school so it wasn’t really that much of an achievement in my mind. I didn’t want to go but again my mother insisted.

NIMBY, greed, and government stupidity.

I understand. If you buy a used server then add some drives later you can have a great NAS IMHO. I upgraded from an X8DT6-F with 384GB of RAM and a pair of Xeon X5690’s right before things went sideways. The MoBo has the SAS controller already flashed to IT mode so it’s ready for ZFS. But it’s not exactly light on power and with a 2U chassis and a handful of used 8TB SAS drives you are looking at around 1200.

My current server is a X10DRH-C with dual Xeon E5-2683 v3’s with 128GB of RAM in a 4U chassis with 11 X 8TB SAS drives in a RaidZ3 configuration. Just the MoBo, chassis, cpu’s and 64GB of ram is running about 1150. The drives used are 110 each and before you think you should just get those, SAS drives require a SAS controller and you only get those in enterprise equipment.

But if you can pick up a little here and a little there you can have a nice system. But right now isn’t a great time to get in the game.

Mahna Mahna.

Makes me my other half crack up when she’s got the giggles. Which reminds me i need to make a new ringtone and swap out the woodchuck song on her phone…

The Swedish Chef is another good one. There are stories about when they were filming and even the studio crew were trying not to make noise while laughing.

I’m not saying that.

What you need to do is decide now if the drive you will buy will be used for a RAID array. If it is a desktop drive won’t be in a RAID array on a NAS system. Many NAS’ will have random writes to the pool. Desktop drives aggressively park the heads, the load and unload of the heads wears them. In a NAS system they can actually wear out.

Over the last 15 years drives have become a bit more specialized. You already found out about surveillance drives not being a good fit for much other than surveillance/DVR. Desktop drives are fine for desktop loads and usage but outside of that or single drive usage they are not useful. NAS drives are meant for NAS usage in RAID arrays. Back when the WD green drives were available years ago you could convert them from a desktop drive to a NAS drive using a tool called wdidle (WD Idle) but that isn’t the case any more.

Using a NAS drive on its own will work in a pinch but if it has an error it won’t try to recover it like a Desktop drive would because it’s made with the idea that it will be in an array that will deal with the issue. Plus once you start loading it up you will have to wipe it to put it into an array unless you go for ZFS mirrors or RAID 1. If the NAS Appliances have some sort of special trickery that allows you to expand one disk at a time and add redundancy I’m completely unaware as I’ve never put much stock in them. I’ve been running FreeNAS/TrueNAS for over 10 years.

https://en.wikipedia.org/wiki/Standard_RAID_levels

If a NAS or Enterprise drive has an error it sends the information to the host to be logged so that the end user can have the information available.

So like an Unrecoverable Read Error (URE) pops up on a sector. A drive that is built for RAID use will just say, “Couldn’t read it” and moves on. A Consumer drive meant for a desktop will try and try and try and try to read that bad sector. In a NAS situation where another drive will be able to fill in the data the controller (hardware or software) will just deal with it by pulling the data from another drive and keep moving.

The drive may not be bad as a whole but it does mean that over time it is more likely that drive will have more errors.

NAS drives are not inherently more reliable, yes they can deal with a bit more vibration and such but it’s the firmware inside that is different. Enterprise drives are another step up again from NAS drives.

What are you using as a router? How are you you trying to setup a reverse proxy?

I will be honest, I would do it for free. Money is nice but helping people is more important to me than that. However my understanding is with OpnSense and using Caddy for reverse proxy with the ACME client for Let’s Encrypt certificates. Beyond that I am outside of my element.

It’s not uncommon that when a UEFI update is done that the settings will reset to default.

I would see if legacy CSM mode is enabled. If the UEFI screen isn’t visible you will need to insert another GPU or use the onboard video if available.

Not sure what will be next.

Left upper arm shoulder I want to have a set of hexagons and they will look like they are being pulled away with an underwater scene being uncovered.

I also want to expand my back tattoo which is Diablo themed. Angels up high, the dammed down low, with demons, the undead, etcetera, etcetera being killed by some of the different playable characters in the series.

I have a couple names to add on to my right upper arm and some different sea life to my left lower leg.

If you are sending things via email 99% of it is going to hit the spam folder. If I register a domain name I get no less than 6 emails selling my web site designs, logos, seo, hosting and other stuff I neither want nor need. Figure out of the rest you will get less than 10 percent interaction.

Build a website, create 20 mock logos, write some articles, then head to local businesses to give them a chance to take a look. When you get a few locals that you can get on board and have some links on your site that show you have real customers with real locations.

Use your SEO skills and people will make it to your site and inquire about your services.

Without all of that if I received an email randomly in my spam I wouldn’t even look. Some rando sending me an email for a service is no different than the ShinyHunters hacking group junk I get saying I’ve been hacked and send them 2000 in crypto, the German guy sending me a notice that I have money they are holding for me, or the junk saying thank you for your Microsoft 365 purchase that I didn’t make.

I know it sounds harsh but pulling punches isn’t going to help you here. Also randomly starting something then quitting because you are not successful then doing it again on something else and wondering what the problem is… well they say the perfect definition of insanity is doing the same thing over and over again expecting different results. It sounds like you are changing the wrong variables. If you really want this to work you need to put in more effort than watching a few videos, making minimal effort, sending random emails, then moving on when it didn’t work. When you can walk in to an established business in your preferred field and get a job doing what you are trying to randomly sell then you can start a real business and be successful.

It’s not just about the advanced functions. Many of the older more basic tools are single threaded which will potentially limit the performance. As you figure things out you will want to do more and you may find the current tools more of a limiting factor. But the choice is yours, I have 2 48port gigabit switches and WiFi SSID’s that connect to specific vLAN’s through tagging. I started with some dumb switches and added my 10Gbps backbone switch which I used as a dumb switch for years so I could connect my desktop and server over a faster connection.

In my equipment an untagged port is what a port is where the vLAN is stripped away. A tagged port has the vLAN tag passed to the device. If you can set multiple vlan tags on the same port that port becomes a trunked port. You may also be able to set a vlan as untagged on that port, if a device is plugged into that port it will by default be on the untagged vLAN. If the device is able to handle vLAN tagging it can live on the vLAN’s you set up as well.

It took me a bit to figure it all out and get it working. I spent about 20 hours configuring things before I started making the switch from a single net to multiple vLAN’s. I spent another 8 hours making the change and 5 or 6 more tweaking things.

I wanted lasik done but was told my vision was too good at that point.

Right now I have too much other stuff happening.

Yeah I was considering monovision for contacts actually. My late wife did that and she was happy with it. I don’t really have a dominant eye so it should allow me to see ok close and far without bifocal lenses.

No. I didn’t use any video’s to set mine up and wouldn’t even know where to find one that is up to date.

Dnsmasq isn’t being deprecated that I know of but when you begin doing more advanced functions some tools work better than others. The “New” rules are fully functional and I suspect the old ones will slowly be removed in later releases. They are revamping some stuff, ISC DHCP used to be the go to but that is being passed out by the creators. https://www.isc.org/kea/ and OPNsense is cleaning up things so it all works with the rest api and is higher performance.

Trunking is when a port can deal with all setup vLAN’s not sure about your switches as they are pretty basic looking. I’m using a pair of Dell PowerConnect 5548’s and a Quanta LB6M which are much more complex. But basically think of a vLAN as a branch of a tree and the Trunk is the base that connects to everything.

Ok, so first of all a TON of things have changed in OPNsense in the last couple updates so you may just want to pull everything you did. It looks like you are using the old firewall rules which while they are going to stick around they are trying to migrate people away from them.

You should be using KEA DHCP as that is the modern and latest and greatest DHCP server that is vLAN aware. Also UnboundDNS is a recursive DNS server and designed for modern networks, with the advantage of being able to use DNS Blocklists to block ads and other “junk.” Just remember that the blocklists live in RAM so if you don’t have much RAM available I wouldn’t recommend using them.

NOTE: If you are using Dnsmasq DNS&DHCP you will have to turn it off before you can enable KEA DHCP and UnboundDNS as it will tie up the ports needed and they will fail to start. You can copy everything over before making the change and if there is an issue you can switch back just by stopping the new ones and enabling the old one.

With that said one of the biggest things is that with a managed switch you will need to trunk the port that OPNsense is plugged in to for the LAN unless you are using multiple ports on your OpnSense install and then those ports will need to be properly tagged and you will need to trunk any ports that are linking switches together you will have to figure that out on your own but I suggest grabbing a copy of your switch’s manual (and if you use a chatbot upload that file to it for help.) Then you can use vLAN tagging for each port that you want to receive an IP address from a particular pool automatically. You can also trunk ports that you want to use for management but set the default the port will use for access so the device can get an ip via DHCP, this really only works well with Linux. If you are using windows you will need to just create firewall rules that allow your device to talk to the other vLAN’s instead.

When you create your firewall rules you have to understand that you can only preform one action per rule. If you want to allow your vLAN 1 network to talk to vLAN 10 that is one rule. To allow vLAN 10 to talk to the internet that is another rule. You can use floating rules to do the work on multiple vLAN’s but that should be limited. If you select more than one network interface a rule will becoming a floating rule and will process before other rules so if you create a rule to block something later on but have the same interface set on a floating rule the block will not work, it’s better to enable piece by piece than to blanket enable and then try to block. With 5 vLAN’s I have 5 floating rules and 34 regular rules plus 40 automatically generated rules (which handle things like allowing DHCP access and basic protections.)

Here is a firewall rule that allows my “Trusted” vLAN to access my “Camera” vLAN as an example. The Categories are not important but make finding what a rule deals with later on a lot easier, they are set under the firewalls - categories. You should also use good descriptions for this reason.

You will also have to explicitly allow access to services like DNS. This is how I am allowing my “Trusted” vLAN to access DNS services on my OPNsense.

This is how I allow my trusted network to access the internet. If you have multiple WAN’s you can choose a specific one or if you have failover configured you would likely select the “group” you created when you setup the failover.

If you need more help let me know. If you have been tinkering with a bunch of stuff you may want to start over, just backup your current configuration and reset everything to defaults. If you can’t figure it out you can reset to defaults and restore your configuration.

Give me a bit and I will be able to help you. I have a multi vlan setup with vLAN tagged switches and wifi ap’s.