• 1 Post
  • 24 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle
  • Yeah, every time there is a post on the topic, moderators say that the tools they have are insufficient.

    It’d be great to have some community focus on that going forward, whether through direct Lemmy changes or creating better bot mod tools. I’m not in a position to contribute right now but maybe in a few months.

    There is a subset of Lemmy that absolutely hates any idea of automod tools because it reminds them too much of issues they had with Reddit. But as Lemmy grows (and given it’s volunteer nature) it feels inescapable at some point.


  • It wasn’t always an option - around the time of the first big mass migration of Reddit users it wasn’t something you could do. I actually wrote a tool at that time that could automate the manual action of re-subscribing / re-blocking everything.

    But yeah, these days it’s a feature of Lemmy itself, which is great because it’s much more efficient than trying to do things client-side.




  • Maybe I am not thinking of the access control capability of VLANs correctly (I am thinking in terms of port based iptables: port X has only incoming+established and no outgoing for example).

    I think of it like this: grouping several physical switch ports together into a private network, effectively like each group of ports is it’s own isolated switch. I assume there are routers which allows you to assign vlans to different Wi-Fi access points as well, so it doesn’t need to be literally physical.

    Obviously the benefits of vlans over something actually physical is that you can have as many as you like, and there are ways to trunk the data if one client needs access to multiple vlans at once.

    In your setup, you may or may not benefit, organizationally. Obviously other commenters have pointed out some of the security benefits. If you were using vlans I think you’d have at a minimum a private and public vlan, separating out the items that don’t need Internet access from the Internet at all. Your server would probably need access to both vlans in that scenario. But certainly as you say, you can probably accomplish a lot of this without vlans, if you can aggressively setup your firewall rules. The benefit of vlans is you would only really need to setup firewall rules on whatever vlan(s) have Internet access.





  • Didn’t get a chance to look at how your app works under the hood, but for LASIM I look up the community by name to get the ID and then call thr subscribe API. The former did seem to trigger the Lemmy instance to “learn” about the community, but it takes awhile, and there is no way to know when it has learned it other than to retry looking it up a few times.